VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291933 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-59732 | redhat_vex | rclone: Rclone: File overwrite via path traversal during archive extraction | known affected: 1 | 2026-07-30T14:01:04+00:00 | Vulnerability · Source |
| CVE-2026-21932 | redhat_vex | openjdk: Enhance Handling of URIs (Oracle CPU 2026-01) | fixed: 5 known affected: 39 known not affected: 250 | 2026-07-30T13:50:28+00:00 | Vulnerability · Source |
| CVE-2026-21945 | redhat_vex | openjdk: Enhance Certificate Checking (Oracle CPU 2026-01) | fixed: 3198 known affected: 45 | 2026-07-30T13:50:21+00:00 | Vulnerability · Source |
| CVE-2023-40267 | redhat_vex | GitPython: Insecure non-multi options in clone and clone_from is not blocked | fixed: 22 known affected: 10 known not affected: 2042 | 2026-07-30T13:47:48+00:00 | Vulnerability · Source |
| CVE-2023-27561 | redhat_vex | runc: volume mount race condition (regression of CVE-2019-19921) | fixed: 556 known affected: 36 known not affected: 1666 | 2026-07-30T13:46:14+00:00 | Vulnerability · Source |
| CVE-2013-0270 | redhat_vex | keystone: OpenStack Keystone: Denial of Service via large HTTP request with long tenant name | fixed: 4 known affected: 10 | 2026-07-30T13:39:19+00:00 | Vulnerability · Source |
| CVE-2026-62995 | redhat_vex | joserfc: joserfc: JWT Malleability via Non-Standard Padding | fixed: 3 known affected: 7 known not affected: 1 | 2026-07-30T11:50:17+00:00 | Vulnerability · Source |
| CVE-2026-64785 | redhat_vex | swift-nio-http2: SwiftNIO HTTP/2: HTTP Request Smuggling and Response Splitting via Incomplete Header Validation | known not affected: 1 | 2026-07-30T11:46:02+00:00 | Vulnerability · Source |
| CVE-2026-18369 | redhat_vex | dogtag-pki: pki-core: redhat-pki: pki: ACME HTTP-01 validation SSRF via IP literal identifiers and unvalidated redirects | known affected: 89 | 2026-07-30T11:06:18+00:00 | Vulnerability · Source |
| CVE-2026-64193 | redhat_vex | Net::DNS: Net::DNS: Arbitrary code execution via EDNS EXTENDED ERROR handling | known not affected: 7 | 2026-07-30T11:01:02+00:00 | Vulnerability · Source |
| CVE-2026-42440 | redhat_vex | org.apache.opennlp/opennlp-tools: Apache OpenNLP: Denial of Service via unbounded array allocation in crafted model files | known affected: 2 known not affected: 2 under investigation: 3 | 2026-07-30T10:21:35+00:00 | Vulnerability · Source |
| CVE-2026-64685 | redhat_vex | ImageMagick: ImageMagick: Information Disclosure via Crafted Image File | known affected: 14 | 2026-07-30T10:17:48+00:00 | Vulnerability · Source |
| CVE-2025-13881 | redhat_vex | org.keycloak.services.resources.admin: Keycloak: Limited administrator can retrieve sensitive user attributes via Admin API | fixed: 10 | 2026-07-30T10:14:01+00:00 | Vulnerability · Source |
| CVE-2025-21701 | redhat_vex | kernel: net: avoid race between device unregistration and ethnl ops | known affected: 232 known not affected: 42 | 2026-07-30T10:14:00+00:00 | Vulnerability · Source |
| CVE-2025-21663 | redhat_vex | kernel: net: stmmac: dwmac-tegra: Read iommu stream id from device tree | fixed: 305 known affected: 22 known not affected: 166 | 2026-07-30T10:13:55+00:00 | Vulnerability · Source |
| CVE-2025-21638 | redhat_vex | kernel: sctp: sysctl: auth_enable: avoid using current->nsproxy | known affected: 274 | 2026-07-30T10:13:53+00:00 | Vulnerability · Source |
| CVE-2025-21637 | redhat_vex | kernel: sctp: sysctl: udp_port: avoid using current->nsproxy | known affected: 274 | 2026-07-30T10:13:50+00:00 | Vulnerability · Source |
| CVE-2025-21719 | redhat_vex | kernel: ipmr: do not call mr_mfc_uses_dev() for unres entries | known affected: 232 known not affected: 42 | 2026-07-30T10:13:48+00:00 | Vulnerability · Source |
| CVE-2025-21661 | redhat_vex | kernel: gpio: virtuser: fix missing lookup table cleanups | known not affected: 274 | 2026-07-30T10:13:45+00:00 | Vulnerability · Source |
| CVE-2025-21640 | redhat_vex | kernel: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy | known affected: 274 | 2026-07-30T10:13:42+00:00 | Vulnerability · Source |
| CVE-2025-21712 | redhat_vex | kernel: md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime | known affected: 274 | 2026-07-30T10:13:38+00:00 | Vulnerability · Source |
| CVE-2025-21804 | redhat_vex | kernel: PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() | known not affected: 274 | 2026-07-30T10:13:35+00:00 | Vulnerability · Source |
| CVE-2025-21851 | redhat_vex | kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel | fixed: 612 known affected: 22 known not affected: 90 | 2026-07-30T10:13:32+00:00 | Vulnerability · Source |
| CVE-2025-21832 | redhat_vex | kernel: block: don't revert iter for -EIOCBQUEUED | known affected: 184 known not affected: 90 | 2026-07-30T10:13:30+00:00 | Vulnerability · Source |
| CVE-2025-21810 | redhat_vex | kernel: driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() | known affected: 226 known not affected: 48 | 2026-07-30T10:13:28+00:00 | Vulnerability · Source |
| CVE-2025-21829 | redhat_vex | kernel: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" | fixed: 303 known affected: 98 known not affected: 90 | 2026-07-30T10:13:25+00:00 | Vulnerability · Source |
| CVE-2025-21766 | redhat_vex | kernel: ipv4: use RCU protection in __ip_rt_update_pmtu() | known affected: 274 | 2026-07-30T10:13:22+00:00 | Vulnerability · Source |
| CVE-2025-21827 | redhat_vex | kernel: Bluetooth: btusb: mediatek: Add locks for usb_driver_claim_interface() | known affected: 226 known not affected: 48 | 2026-07-30T10:13:20+00:00 | Vulnerability · Source |
| CVE-2025-21842 | redhat_vex | kernel: amdkfd: properly free gang_ctx_bo when failed to init user queue | known not affected: 274 | 2026-07-30T10:13:18+00:00 | Vulnerability · Source |
| CVE-2025-21830 | redhat_vex | kernel: landlock: Handle weird files | known affected: 184 known not affected: 90 | 2026-07-30T10:13:15+00:00 | Vulnerability · Source |
| CVE-2025-21825 | redhat_vex | kernel: bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT | known affected: 212 known not affected: 62 | 2026-07-30T10:13:12+00:00 | Vulnerability · Source |
| CVE-2025-21882 | redhat_vex | kernel: net/mlx5: Fix vport QoS cleanup on error | known not affected: 274 | 2026-07-30T10:13:11+00:00 | Vulnerability · Source |
| CVE-2025-21876 | redhat_vex | kernel: iommu/vt-d: Fix suspicious RCU usage | known affected: 184 known not affected: 90 | 2026-07-30T10:13:07+00:00 | Vulnerability · Source |
| CVE-2025-21889 | redhat_vex | kernel: perf/core: Add RCU read lock protection to perf_iterate_ctx() | known affected: 226 known not affected: 48 | 2026-07-30T10:13:06+00:00 | Vulnerability · Source |
| CVE-2025-21875 | redhat_vex | kernel: mptcp: always handle address removal under msk socket lock | known affected: 232 known not affected: 42 | 2026-07-30T10:13:04+00:00 | Vulnerability · Source |
| CVE-2025-21901 | redhat_vex | kernel: RDMA/bnxt_re: Add sanity checks on rdev validity | known affected: 212 known not affected: 62 | 2026-07-30T10:13:01+00:00 | Vulnerability · Source |
| CVE-2025-21924 | redhat_vex | kernel: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error | known affected: 184 known not affected: 90 | 2026-07-30T10:12:57+00:00 | Vulnerability · Source |
| CVE-2025-21884 | redhat_vex | kernel: net: better track kernel sockets lifetime | known affected: 226 known not affected: 48 | 2026-07-30T10:12:56+00:00 | Vulnerability · Source |
| CVE-2025-21890 | redhat_vex | kernel: idpf: fix checksums set in idpf_rx_rsc() | known affected: 232 known not affected: 42 | 2026-07-30T10:12:52+00:00 | Vulnerability · Source |
| CVE-2025-21906 | redhat_vex | kernel: wifi: iwlwifi: mvm: clean up ROC on failure | known affected: 212 known not affected: 62 | 2026-07-30T10:12:49+00:00 | Vulnerability · Source |
| CVE-2025-21954 | redhat_vex | kernel: netmem: prevent TX of unreadable skbs | fixed: 309 known not affected: 198 | 2026-07-30T10:12:48+00:00 | Vulnerability · Source |
| CVE-2025-21932 | redhat_vex | kernel: mm: abort vma_modify() on merge out of memory failure | known affected: 76 known not affected: 198 | 2026-07-30T10:12:43+00:00 | Vulnerability · Source |
| CVE-2025-21868 | redhat_vex | kernel: net: allow small head cache usage with large MAX_SKB_FRAGS values | known affected: 118 known not affected: 156 | 2026-07-30T10:12:42+00:00 | Vulnerability · Source |
| CVE-2025-21976 | redhat_vex | kernel: fbdev: hyperv_fb: Allow graceful removal of framebuffer | fixed: 309 known affected: 198 | 2026-07-30T10:12:38+00:00 | Vulnerability · Source |
| CVE-2025-22034 | redhat_vex | kernel: mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs | known affected: 76 known not affected: 198 | 2026-07-30T10:12:35+00:00 | Vulnerability · Source |
| CVE-2025-22012 | redhat_vex | kernel: Revert "arm64: dts: qcom: sdm845: Affirm IDR0.CCTW on apps_smmu" | known not affected: 274 | 2026-07-30T10:12:32+00:00 | Vulnerability · Source |
| CVE-2025-21958 | redhat_vex | kernel: Revert "openvswitch: switch to per-action label counting in conntrack" | known affected: 76 known not affected: 198 | 2026-07-30T10:12:29+00:00 | Vulnerability · Source |
| CVE-2025-21970 | redhat_vex | kernel: net/mlx5: Bridge, fix the crash caused by LAG state check | known affected: 274 | 2026-07-30T10:12:27+00:00 | Vulnerability · Source |
| CVE-2025-37756 | redhat_vex | kernel: net: tls: explicitly disallow disconnect | known affected: 232 known not affected: 42 | 2026-07-30T10:12:25+00:00 | Vulnerability · Source |
| CVE-2025-22117 | redhat_vex | kernel: ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() | known affected: 184 known not affected: 90 | 2026-07-30T10:12:22+00:00 | Vulnerability · Source |