VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291681 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-43758 | redhat_vex | microcode_ctl: Improper input validation in UEFI firmware | fixed: 32 known not affected: 1 | 2026-08-06T14:29:19+00:00 | Vulnerability · Source |
| CVE-2023-34440 | redhat_vex | microcode_ctl: Improper input validation in UEFI firmware | fixed: 32 known not affected: 1 | 2026-08-06T14:28:46+00:00 | Vulnerability · Source |
| CVE-2024-28127 | redhat_vex | microcode_ctl: Improper input validation in UEFI firmware | fixed: 32 known not affected: 1 | 2026-08-06T14:28:26+00:00 | Vulnerability · Source |
| CVE-2024-29214 | redhat_vex | microcode_ctl: Improper input validation in UEFI firmware CseVariableStorageSmm | fixed: 32 known not affected: 1 | 2026-08-06T14:28:22+00:00 | Vulnerability · Source |
| CVE-2025-1492 | redhat_vex | wireshark: Uncontrolled Recursion in Wireshark | fixed: 37 known not affected: 16 | 2026-08-06T14:25:11+00:00 | Vulnerability · Source |
| CVE-2026-18487 | redhat_vex | epiphany: address bar / host spoofing via userinfo in ephy_uri_get_decoded_host() | known not affected: 1 | 2026-08-06T14:20:57+00:00 | Vulnerability · Source |
| CVE-2025-24070 | redhat_vex | dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method | fixed: 549 known affected: 22 known not affected: 29 | 2026-08-06T14:14:21+00:00 | Vulnerability · Source |
| CVE-2024-52804 | redhat_vex | python-tornado: Tornado has HTTP cookie parsing DoS vulnerability | fixed: 154 known affected: 3 known not affected: 5 | 2026-08-06T14:14:02+00:00 | Vulnerability · Source |
| CVE-2025-2312 | redhat_vex | cifs-utils: kernel: cifs-utils: cifs.upcall makes an upcall to the wrong namespace in containerized environments | known affected: 290 | 2026-08-06T14:09:32+00:00 | Vulnerability · Source |
| CVE-2024-7592 | redhat_vex | cpython: python: Uncontrolled CPU resource consumption when in http.cookies module | fixed: 179 known affected: 219 | 2026-08-06T14:05:59+00:00 | Vulnerability · Source |
| CVE-2021-43809 | redhat_vex | rubygem-bundler: unexpected code execution in Gemfiles | fixed: 144 known affected: 50 known not affected: 47 | 2026-08-06T14:05:56+00:00 | Vulnerability · Source |
| CVE-2025-30472 | redhat_vex | corosync: Stack buffer overflow from 'orf_token_endian_convert' | fixed: 163 known affected: 13 | 2026-08-06T14:05:12+00:00 | Vulnerability · Source |
| CVE-2026-12844 | redhat_vex | perl-List-SomeUtils-XS: List::SomeUtils::XS: Heap buffer overflow in pairwise() function leading to arbitrary code execution | known not affected: 1 | 2026-08-06T14:03:25+00:00 | Vulnerability · Source |
| CVE-2023-44442 | redhat_vex | gimp: PSD buffer overflow RCE | fixed: 816 known affected: 6 | 2026-08-06T14:01:05+00:00 | Vulnerability · Source |
| CVE-2023-44441 | redhat_vex | gimp: dds buffer overflow RCE | fixed: 180 known not affected: 29 | 2026-08-06T14:00:27+00:00 | Vulnerability · Source |
| CVE-2023-44444 | redhat_vex | gimp: psp off-by-one RCE | fixed: 816 known affected: 6 | 2026-08-06T14:00:05+00:00 | Vulnerability · Source |
| CVE-2023-44443 | redhat_vex | gimp: psp integer overflow RCE | fixed: 277 known not affected: 29 | 2026-08-06T13:59:52+00:00 | Vulnerability · Source |
| CVE-2025-61021 | redhat_vex | virtuoso-opensource: Openlink Virtuoso-opensource: Denial of Service via crafted SQL statements | known not affected: 3 | 2026-08-06T13:59:10+00:00 | Vulnerability · Source |
| CVE-2025-61029 | redhat_vex | virtuoso-opensource: Virtuoso-opensource: Denial of Service via crafted SQL statements | known not affected: 3 | 2026-08-06T13:58:20+00:00 | Vulnerability · Source |
| CVE-2025-3931 | redhat_vex | yggdrasil: Local privilege escalation in yggdrasil | fixed: 33 known not affected: 6 | 2026-08-06T13:54:35+00:00 | Vulnerability · Source |
| CVE-2026-67588 | redhat_vex | org.apache.qpid/protonj2: Apache Qpid ProtonJ2: Denial of Service via unbounded symbol value caching | known affected: 1 | 2026-08-06T13:53:56+00:00 | Vulnerability · Source |
| CVE-2026-18785 | redhat_vex | open62541: open62541: Use-after-free vulnerability via local manipulation | known not affected: 1 | 2026-08-06T13:38:52+00:00 | Vulnerability · Source |
| CVE-2025-32803 | redhat_vex | kea: Insecure file permissions can result in confidential information leakage | fixed: 78 | 2026-08-06T13:34:31+00:00 | Vulnerability · Source |
| CVE-2025-4123 | redhat_vex | grafana: Cross-site Scripting (XSS) in Grafana via Custom Frontend Plugins and Open Redirect | fixed: 131 | 2026-08-06T13:34:13+00:00 | Vulnerability · Source |
| CVE-2025-46802 | redhat_vex | screen: TTY Hijacking while Attaching to a Multiuser Session | known affected: 3 | 2026-08-06T13:33:46+00:00 | Vulnerability · Source |
| CVE-2025-24495 | redhat_vex | microcode_ctl: From CVEorg collector | fixed: 30 known affected: 2 known not affected: 1 | 2026-08-06T13:28:43+00:00 | Vulnerability · Source |
| CVE-2025-32801 | redhat_vex | kea: Loading a malicious hook library can lead to local privilege escalation | fixed: 78 | 2026-08-06T13:24:15+00:00 | Vulnerability · Source |
| CVE-2025-23166 | redhat_vex | nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js | fixed: 217 | 2026-08-06T13:19:04+00:00 | Vulnerability · Source |
| CVE-2025-3877 | redhat_vex | thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links | fixed: 118 known affected: 5 | 2026-08-06T13:19:01+00:00 | Vulnerability · Source |
| CVE-2024-5629 | redhat_vex | python-pymongo: Out-of-bounds read in bson module | fixed: 82 known affected: 16 known not affected: 4 | 2026-08-06T13:09:53+00:00 | Vulnerability · Source |
| CVE-2025-32802 | redhat_vex | kea: Insecure handling of file paths allows multiple local attacks | fixed: 78 | 2026-08-06T13:09:50+00:00 | Vulnerability · Source |
| CVE-2025-49133 | redhat_vex | libtpms: Libtpms Out-of-Bounds Read Vulnerability | fixed: 2927 known affected: 6 | 2026-08-06T13:09:44+00:00 | Vulnerability · Source |
| CVE-2025-49091 | redhat_vex | konsole: Konsole Remote Code Execution Vulnerability | fixed: 14 | 2026-08-06T13:09:31+00:00 | Vulnerability · Source |
| CVE-2025-5473 | redhat_vex | gimp: GIMP ICO File Parsing Integer Overflow | fixed: 533 known affected: 6 | 2026-08-06T13:08:56+00:00 | Vulnerability · Source |
| CVE-2023-6816 | redhat_vex | xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer | fixed: 702 known affected: 9 | 2026-08-06T12:55:06+00:00 | Vulnerability · Source |
| CVE-2024-21886 | redhat_vex | xorg-x11-server: heap buffer overflow in DisableDevice | fixed: 702 known affected: 9 | 2026-08-06T12:55:02+00:00 | Vulnerability · Source |
| CVE-2024-0229 | redhat_vex | xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access | fixed: 702 known affected: 9 | 2026-08-06T12:54:57+00:00 | Vulnerability · Source |
| CVE-2024-21885 | redhat_vex | xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent | fixed: 702 known affected: 9 | 2026-08-06T12:54:33+00:00 | Vulnerability · Source |
| CVE-2024-31083 | redhat_vex | xorg-x11-server: Use-after-free in ProcRenderAddGlyphs | fixed: 758 known affected: 9 known not affected: 5 | 2026-08-06T12:54:16+00:00 | Vulnerability · Source |
| CVE-2023-6478 | redhat_vex | xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty | fixed: 720 known affected: 9 | 2026-08-06T12:53:25+00:00 | Vulnerability · Source |
| CVE-2025-27613 | redhat_vex | gitk: Git file creation flaw | fixed: 150 known affected: 32 | 2026-08-06T12:51:40+00:00 | Vulnerability · Source |
| CVE-2025-48367 | redhat_vex | redis: Redis Unauthenticated Denial of Service | fixed: 213 known affected: 6 known not affected: 42 | 2026-08-06T12:51:25+00:00 | Vulnerability · Source |
| CVE-2026-59930 | redhat_vex | mistune: Mistune: Same-page navigation redirection due to predictable heading IDs | known affected: 23 known not affected: 1 under investigation: 1 | 2026-08-06T12:51:14+00:00 | Vulnerability · Source |
| CVE-2025-49809 | redhat_vex | mtr: From CVEorg collector | known affected: 4 known not affected: 6 | 2026-08-06T12:44:39+00:00 | Vulnerability · Source |
| CVE-2026-58203 | redhat_vex | pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size | known affected: 45 known not affected: 7 | 2026-08-06T12:41:49+00:00 | Vulnerability · Source |
| CVE-2026-11527 | redhat_vex | Config-Inifiles: Config::IniFiles: OS command injection and file overwrite via untrusted file argument | known not affected: 1 | 2026-08-06T12:41:46+00:00 | Vulnerability · Source |
| CVE-2026-15788 | redhat_vex | github.com/moby/buildkit: BuildKit: Information Disclosure via Improper Handling of NTFS Directory Junctions | fixed: 10 | 2026-08-06T12:41:35+00:00 | Vulnerability · Source |
| CVE-2026-64573 | redhat_vex | kernel: Bluetooth: qca: fix NVM tag length underflow in TLV parser | known not affected: 274 | 2026-08-06T12:41:26+00:00 | Vulnerability · Source |
| CVE-2026-67296 | redhat_vex | FreeRDP: FreeRDP: Denial of Service due to RDPEI message processing | known affected: 26 known not affected: 5 | 2026-08-06T12:41:21+00:00 | Vulnerability · Source |
| CVE-2026-67303 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via unsupported serial device control request | known affected: 31 | 2026-08-06T12:41:16+00:00 | Vulnerability · Source |