VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291321 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-59935 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF with unterminated inline image | known affected: 11 | 2026-08-07T12:08:05+00:00 | Vulnerability · Source |
| CVE-2026-44283 | redhat_vex | etcd: etcd: Authenticated user can bypass RBAC for unauthorized data access | known affected: 7 | 2026-08-07T11:40:30+00:00 | Vulnerability · Source |
| CVE-2026-12261 | redhat_vex | nltk: NLTK: Resource poisoning via improper package archive extraction | known affected: 14 | 2026-08-07T11:40:25+00:00 | Vulnerability · Source |
| CVE-2026-63839 | redhat_vex | kernel: platform/x86: lenovo-wmi-helpers: Fix memory leak in lwmi_dev_evaluate_int() | known not affected: 274 | 2026-08-07T11:20:51+00:00 | Vulnerability · Source |
| CVE-2026-63821 | redhat_vex | kernel: wifi: rtw88: usb: fix memory leaks on USB write failures | known affected: 184 known not affected: 90 | 2026-08-07T11:20:50+00:00 | Vulnerability · Source |
| CVE-2026-64060 | redhat_vex | kernel: netfs: Fix leak of request in netfs_write_begin() error handling | known affected: 184 known not affected: 90 | 2026-08-07T11:20:48+00:00 | Vulnerability · Source |
| CVE-2026-40683 | redhat_vex | OpenStack Keystone: OpenStack Keystone: Unauthorized access due to incorrect LDAP user status handling | fixed: 3 known affected: 1 known not affected: 8 | 2026-08-07T11:20:46+00:00 | Vulnerability · Source |
| CVE-2026-63838 | redhat_vex | kernel: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] | known affected: 76 known not affected: 198 | 2026-08-07T11:19:37+00:00 | Vulnerability · Source |
| CVE-2026-63837 | redhat_vex | kernel: net: ena: PHC: Check return code before setting timestamp output | known affected: 184 known not affected: 90 | 2026-08-07T11:19:35+00:00 | Vulnerability · Source |
| CVE-2026-64087 | redhat_vex | kernel: hwmon: (pmbus/adm1266) reject implausible blackbox record_count | known not affected: 274 | 2026-08-07T10:59:34+00:00 | Vulnerability · Source |
| CVE-2026-64083 | redhat_vex | kernel: hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors | known not affected: 274 | 2026-08-07T10:58:09+00:00 | Vulnerability · Source |
| CVE-2026-64154 | redhat_vex | kernel: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() | known not affected: 274 | 2026-08-07T10:45:14+00:00 | Vulnerability · Source |
| CVE-2026-71313 | redhat_vex | github.com/rclone/rclone: rclone: Path Traversal allows arbitrary file write | known affected: 1 | 2026-08-07T10:44:52+00:00 | Vulnerability · Source |
| CVE-2026-59203 | redhat_vex | Pillow: Pillow: Denial of Service via crafted EPS file | known affected: 63 known not affected: 6 under investigation: 22 | 2026-08-07T10:44:42+00:00 | Vulnerability · Source |
| CVE-2026-49458 | redhat_vex | dompurify: DOMPurify: Cross-site scripting due to improper sanitization of DOM nodes | known affected: 40 known not affected: 1 under investigation: 7 | 2026-08-07T10:44:39+00:00 | Vulnerability · Source |
| CVE-2026-64038 | redhat_vex | kernel: hwmon: (lm90) Stop work before releasing hwmon device | known affected: 90 known not affected: 184 | 2026-08-07T10:39:35+00:00 | Vulnerability · Source |
| CVE-2026-64043 | redhat_vex | kernel: ovpn: fix race between deleting interface and adding new peer | known not affected: 275 | 2026-08-07T10:33:33+00:00 | Vulnerability · Source |
| CVE-2026-64101 | redhat_vex | kernel: fwctl: pds: Validate RPC input size before parsing | known not affected: 274 | 2026-08-07T10:32:50+00:00 | Vulnerability · Source |
| CVE-2026-64094 | redhat_vex | kernel: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface | known not affected: 274 | 2026-08-07T10:32:50+00:00 | Vulnerability · Source |
| CVE-2026-64090 | redhat_vex | kernel: batman-adv: tt: avoid empty VLAN responses | known not affected: 274 | 2026-08-07T10:32:43+00:00 | Vulnerability · Source |
| CVE-2026-64072 | redhat_vex | kernel: nvme: fix bio leak on mapping failure | known affected: 76 known not affected: 198 | 2026-08-07T10:32:43+00:00 | Vulnerability · Source |
| CVE-2026-64070 | redhat_vex | kernel: powerpc/hv-gpci: fix preempt count leak in sysfs show paths | known affected: 232 known not affected: 42 | 2026-08-07T10:32:40+00:00 | Vulnerability · Source |
| CVE-2026-64085 | redhat_vex | kernel: hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer | known not affected: 275 | 2026-08-07T10:32:36+00:00 | Vulnerability · Source |
| CVE-2024-7885 | redhat_vex | undertow: Improper State Management in Proxy Protocol parsing causes information leakage | fixed: 145 known affected: 9 known not affected: 3 | 2026-08-07T09:58:58+00:00 | Vulnerability · Source |
| CVE-2026-43827 | redhat_vex | apache-shiro: Apache Shiro: Session fixation vulnerability due to improper session invalidation upon login | known affected: 1 known not affected: 1 | 2026-08-07T09:49:29+00:00 | Vulnerability · Source |
| CVE-2026-68480 | redhat_vex | kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability | known affected: 260 known not affected: 14 | 2026-08-07T09:44:05+00:00 | Vulnerability · Source |
| CVE-2026-54499 | redhat_vex | stanza: Stanza: Remote Code Execution via unsafe deserialization in model loaders | known affected: 2 known not affected: 5 | 2026-08-07T09:32:06+00:00 | Vulnerability · Source |
| CVE-2026-71497 | redhat_vex | org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names | known affected: 97 | 2026-08-07T09:19:53+00:00 | Vulnerability · Source |
| CVE-2026-31221 | redhat_vex | pytorch-lightning: PyTorch-Lightning: Arbitrary code execution via insecure deserialization of checkpoint files | known affected: 11 | 2026-08-07T09:04:04+00:00 | Vulnerability · Source |
| CVE-2021-34866 | redhat_vex | kernel: eBPF verification flaw | fixed: 129 known affected: 182 known not affected: 15 | 2026-08-07T07:50:53+00:00 | Vulnerability · Source |
| CVE-2021-3778 | redhat_vex | vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c | fixed: 66 known affected: 12 known not affected: 7 | 2026-08-07T07:50:53+00:00 | Vulnerability · Source |
| CVE-2021-41103 | redhat_vex | containerd: insufficiently restricted permissions on container root and plugin directories | fixed: 3 known affected: 2 known not affected: 3 | 2026-08-07T07:44:51+00:00 | Vulnerability · Source |
| CVE-2021-22569 | redhat_vex | protobuf-java: potential DoS in the parsing procedure for binary data | fixed: 7 known affected: 20 known not affected: 2 | 2026-08-07T07:40:47+00:00 | Vulnerability · Source |
| CVE-2021-32723 | redhat_vex | npm-prismjs: a malicious (long) string will take a long time to highlight may result in ReDoS | known affected: 11 known not affected: 1 | 2026-08-07T07:40:41+00:00 | Vulnerability · Source |
| CVE-2022-0392 | redhat_vex | vim: Heap-based buffer overflow in getexmodeline() in ex_getln.c | fixed: 66 known not affected: 18 | 2026-08-07T07:36:55+00:00 | Vulnerability · Source |
| CVE-2022-21708 | redhat_vex | graphql-go: Denial of service via stack overflow panics | fixed: 12 known affected: 1 known not affected: 808 | 2026-08-07T07:36:34+00:00 | Vulnerability · Source |
| CVE-2022-29162 | redhat_vex | runc: incorrect handling of inheritable capabilities | fixed: 562 known affected: 7 known not affected: 803 | 2026-08-07T07:31:24+00:00 | Vulnerability · Source |
| CVE-2021-23648 | redhat_vex | sanitize-url: XSS due to improper sanitization in sanitizeUrl function | fixed: 22 known affected: 5 known not affected: 608 | 2026-08-07T07:31:08+00:00 | Vulnerability · Source |
| CVE-2022-21658 | redhat_vex | rust: Race condition in remove_dir_all leading to removal of files outside of the directory being removed | fixed: 73 known affected: 5 known not affected: 18 | 2026-08-07T07:31:04+00:00 | Vulnerability · Source |
| CVE-2026-71430 | redhat_vex | re2: node-re2: Denial of Service due to excessive string length in replacements | known not affected: 1 | 2026-08-07T07:31:02+00:00 | Vulnerability · Source |
| CVE-2022-3248 | redhat_vex | kubernetes: OpenShift API admission checks does not enforce "custom-host" permissions | known affected: 24 known not affected: 2 | 2026-08-07T07:26:57+00:00 | Vulnerability · Source |
| CVE-2022-0393 | redhat_vex | vim: out-of-bounds read in delete_buff_tail() in getchar.c | known not affected: 24 | 2026-08-07T07:26:45+00:00 | Vulnerability · Source |
| CVE-2022-23308 | redhat_vex | libxml2: Use-after-free of ID and IDREF attributes | fixed: 180 known affected: 10 known not affected: 4 | 2026-08-07T07:26:42+00:00 | Vulnerability · Source |
| CVE-2022-22942 | redhat_vex | kernel: failing usercopy allows for use-after-free exploitation | fixed: 1260 known affected: 14 known not affected: 117 | 2026-08-07T07:25:37+00:00 | Vulnerability · Source |
| CVE-2022-2385 | redhat_vex | aws-iam-authenticator: AccessKeyID validation bypass | known affected: 1 | 2026-08-07T07:25:04+00:00 | Vulnerability · Source |
| CVE-2022-25758 | redhat_vex | scss-tokenizer: Regular expression denial of service in scss-tokenizer | known affected: 40 known not affected: 6 | 2026-08-07T07:14:46+00:00 | Vulnerability · Source |
| CVE-2022-35929 | redhat_vex | cosign: `cosign verify-attestation --type` can report a false positive if any attestation exists | known affected: 6 | 2026-08-07T07:14:43+00:00 | Vulnerability · Source |
| CVE-2022-29901 | redhat_vex | hw: cpu: Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions | fixed: 736 known affected: 14 | 2026-08-07T07:14:30+00:00 | Vulnerability · Source |
| CVE-2024-46292 | redhat_vex | mod_security: denial of service via name paramter | known not affected: 9 | 2026-08-07T06:18:22+00:00 | Vulnerability · Source |
| CVE-2026-11793 | redhat_vex | 389-ds-base: 389-ds-base: stack buffer overflow in checkPrefix() algorithm ID parsing | known affected: 33 | 2026-08-07T04:58:44+00:00 | Vulnerability · Source |