VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291321 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-70628 | suse_vex | SUSE CVE CVE-2026-70628 | known affected: 417 | 2026-08-07T16:58:58+00:00 | Vulnerability · Source |
| CVE-2026-70629 | suse_vex | SUSE CVE CVE-2026-70629 | known affected: 417 | 2026-08-07T16:58:56+00:00 | Vulnerability · Source |
| CVE-2026-70630 | suse_vex | SUSE CVE CVE-2026-70630 | known affected: 417 | 2026-08-07T16:58:55+00:00 | Vulnerability · Source |
| CVE-2026-70631 | suse_vex | SUSE CVE CVE-2026-70631 | known affected: 417 | 2026-08-07T16:58:54+00:00 | Vulnerability · Source |
| CVE-2026-70632 | suse_vex | SUSE CVE CVE-2026-70632 | known affected: 110 known not affected: 307 | 2026-08-07T16:58:52+00:00 | Vulnerability · Source |
| CVE-2026-70633 | suse_vex | SUSE CVE CVE-2026-70633 | No product status | 2026-08-07T16:58:51+00:00 | Vulnerability · Source |
| CVE-2026-70634 | suse_vex | SUSE CVE CVE-2026-70634 | No product status | 2026-08-07T16:58:50+00:00 | Vulnerability · Source |
| CVE-2026-70635 | suse_vex | SUSE CVE CVE-2026-70635 | No product status | 2026-08-07T16:58:48+00:00 | Vulnerability · Source |
| CVE-2026-70638 | suse_vex | SUSE CVE CVE-2026-70638 | No product status | 2026-08-07T16:58:47+00:00 | Vulnerability · Source |
| CVE-2026-70639 | suse_vex | SUSE CVE CVE-2026-70639 | No product status | 2026-08-07T16:58:45+00:00 | Vulnerability · Source |
| CVE-2026-70640 | suse_vex | SUSE CVE CVE-2026-70640 | No product status | 2026-08-07T16:58:44+00:00 | Vulnerability · Source |
| CVE-2026-71436 | suse_vex | SUSE CVE CVE-2026-71436 | No product status | 2026-08-07T16:58:41+00:00 | Vulnerability · Source |
| CVE-2026-71438 | suse_vex | SUSE CVE CVE-2026-71438 | No product status | 2026-08-07T16:58:38+00:00 | Vulnerability · Source |
| CVE-2026-71439 | suse_vex | SUSE CVE CVE-2026-71439 | No product status | 2026-08-07T16:58:36+00:00 | Vulnerability · Source |
| CVE-2026-71497 | suse_vex | SUSE CVE CVE-2026-71497 | known affected: 30 | 2026-08-07T16:58:34+00:00 | Vulnerability · Source |
| CVE-2026-16118 | redhat_vex | xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c | known affected: 30 | 2026-08-07T16:21:15+00:00 | Vulnerability · Source |
| CVE-2022-3146 | redhat_vex | tripleo-ansible: /etc/openstack/clouds.yaml discoverable | fixed: 4 known not affected: 17 | 2026-08-07T16:03:33+00:00 | Vulnerability · Source |
| CVE-2021-3654 | redhat_vex | openstack-nova: novnc allows open redirection | fixed: 26 known affected: 35 | 2026-08-07T15:56:48+00:00 | Vulnerability · Source |
| CVE-2022-23452 | redhat_vex | openstack-barbican: Barbican allows anyone with an admin role to add their secrets to a different project's containers | fixed: 14 known affected: 7 | 2026-08-07T15:56:46+00:00 | Vulnerability · Source |
| CVE-2021-4180 | redhat_vex | openstack-tripleo-heat-templates: data leak of internal URL through keystone_authtoken | fixed: 4 known affected: 3 | 2026-08-07T15:56:43+00:00 | Vulnerability · Source |
| CVE-2022-23451 | redhat_vex | openstack-barbican: Barbican allows authenticated users to add/modify/delete arbitrary metadata on any secret | fixed: 9 known affected: 7 known not affected: 5 | 2026-08-07T15:56:16+00:00 | Vulnerability · Source |
| CVE-2024-40767 | redhat_vex | openstack-nova: Regression VMDK/qcow arbitrary file access | fixed: 43 known not affected: 1 | 2026-08-07T15:54:01+00:00 | Vulnerability · Source |
| CVE-2026-46448 | redhat_vex | openstack-nova: OpenStack Nova: Resource allocation issue due to unstripped hint data in server creation API | known affected: 43 | 2026-08-07T15:48:41+00:00 | Vulnerability · Source |
| CVE-2022-1655 | redhat_vex | OpenStack: Horizon session cookies are not flagged HttpOnly | fixed: 1 known not affected: 2 | 2026-08-07T15:14:20+00:00 | Vulnerability · Source |
| CVE-2014-8177 | redhat_vex | swiftonfile: gluster-swift metadata constraints are not correctly enforced | fixed: 150 | 2026-08-07T15:14:15+00:00 | Vulnerability · Source |
| CVE-2024-1141 | redhat_vex | glance-store: Glance Store access key logged in DEBUG log level | fixed: 2 known affected: 5 | 2026-08-07T15:14:09+00:00 | Vulnerability · Source |
| CVE-2026-18206 | redhat_vex | keycloak-services: keycloak-services: Client policy source-host wildcard domain matching bypass | known affected: 3 known not affected: 3 | 2026-08-07T15:04:19+00:00 | Vulnerability · Source |
| CVE-2026-64600 | microsoft_vex | xfs: resample the data fork mapping after cycling ILOCK | fixed: 1 known affected: 1 | 2026-08-07T14:49:10+00:00 | Vulnerability · Source |
| CVE-2026-59677 | microsoft_vex | Process Kill Attack Vector in killall() in seunshare | known not affected: 2 | 2026-08-07T14:49:00+00:00 | Vulnerability · Source |
| CVE-2026-59676 | microsoft_vex | Local File Deletion Attack Vector in rm_rf() in seunshare | known not affected: 2 | 2026-08-07T14:48:49+00:00 | Vulnerability · Source |
| CVE-2026-18209 | redhat_vex | keycloak-services: keycloak-services: OIDC redirect_uri fragment bypass in HTTP parameter pollution check | known affected: 3 known not affected: 3 | 2026-08-07T14:43:50+00:00 | Vulnerability · Source |
| CVE-2026-18211 | redhat_vex | keycloak-services: keycloak-services: secure-client-uris policy bypass via localhost-prefixed domains | known affected: 3 known not affected: 3 | 2026-08-07T14:43:41+00:00 | Vulnerability · Source |
| CVE-2026-61477 | redhat_vex | libvirt: libvirt: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection | known affected: 138 | 2026-08-07T14:24:10+00:00 | Vulnerability · Source |
| CVE-2019-3830 | redhat_vex | openstack-ceilometer: ceilometer-agent prints sensitive data from config files through log files | fixed: 27 known not affected: 27 | 2026-08-07T14:15:29+00:00 | Vulnerability · Source |
| CVE-2019-17134 | redhat_vex | openstack-octavia: amphora-agent not requiring client certificate | fixed: 35 | 2026-08-07T14:14:50+00:00 | Vulnerability · Source |
| CVE-2017-2621 | redhat_vex | openstack-heat: /var/log/heat/ is world readable | fixed: 14 known not affected: 15 | 2026-08-07T14:14:46+00:00 | Vulnerability · Source |
| CVE-2019-3895 | redhat_vex | openstack-tripleo-common: Allows running new amphorae based on arbitrary images | fixed: 11 known not affected: 5 | 2026-08-07T14:14:38+00:00 | Vulnerability · Source |
| CVE-2017-2653 | redhat_vex | CloudForms: UI security issue on Openstack actions | fixed: 8 | 2026-08-07T14:14:35+00:00 | Vulnerability · Source |
| CVE-2019-10138 | redhat_vex | python-novajoin: novajoin API lacks access control | fixed: 126 known not affected: 1 | 2026-08-07T14:14:35+00:00 | Vulnerability · Source |
| CVE-2020-27781 | redhat_vex | ceph: User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila | fixed: 704 known affected: 41 known not affected: 107 | 2026-08-07T14:14:00+00:00 | Vulnerability · Source |
| CVE-2026-48145 | redhat_vex | apache-thrift: Apache Thrift: Information disclosure due to improper certificate validation | known affected: 1 | 2026-08-07T13:59:06+00:00 | Vulnerability · Source |
| CVE-2026-64028 | redhat_vex | kernel: tracing: Avoid NULL return from hist_field_name() on truncation | known affected: 232 known not affected: 42 | 2026-08-07T13:54:35+00:00 | Vulnerability · Source |
| CVE-2026-64022 | redhat_vex | kernel: gpio: aggregator: remove the software node when deactivating the aggregator | known not affected: 274 | 2026-08-07T13:54:34+00:00 | Vulnerability · Source |
| CVE-2026-63982 | redhat_vex | kernel: net/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop | known affected: 14 known not affected: 261 | 2026-08-07T13:50:31+00:00 | Vulnerability · Source |
| CVE-2026-63967 | redhat_vex | kernel: iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer | known not affected: 274 | 2026-08-07T13:50:24+00:00 | Vulnerability · Source |
| CVE-2026-63965 | redhat_vex | kernel: iio: pressure: bmp280: fix stack leak in bmp580 trigger handler | known not affected: 274 | 2026-08-07T13:50:22+00:00 | Vulnerability · Source |
| CVE-2026-63960 | redhat_vex | kernel: usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() | known not affected: 274 | 2026-08-07T13:50:20+00:00 | Vulnerability · Source |
| CVE-2026-63959 | redhat_vex | kernel: usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT | known not affected: 274 | 2026-08-07T13:50:18+00:00 | Vulnerability · Source |
| CVE-2026-63936 | redhat_vex | kernel: iio: adc: mt6359: fix unchecked return value in mt6358_read_imp | known not affected: 274 | 2026-08-07T13:50:16+00:00 | Vulnerability · Source |
| CVE-2026-63934 | redhat_vex | kernel: iio: gyro: itg3200: fix i2c read into the wrong stack location | known not affected: 274 | 2026-08-07T13:50:13+00:00 | Vulnerability · Source |