VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
282995 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-53861 | redhat_vex | pyjwt: Issuer field partial matches allowed in pyjwt | known not affected: 134 | 2026-07-21T08:02:32+00:00 | Vulnerability · Source |
| CVE-2025-5889 | redhat_vex | brace-expansion: juliangruber brace-expansion index.js expand redos | fixed: 497 known affected: 143 known not affected: 94 | 2026-07-21T08:02:27+00:00 | Vulnerability · Source |
| CVE-2026-63821 | redhat_vex | kernel: wifi: rtw88: usb: fix memory leaks on USB write failures | known not affected: 1 | 2026-07-21T08:02:24+00:00 | Vulnerability · Source |
| CVE-2024-51744 | redhat_vex | golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt | fixed: 272 known affected: 293 known not affected: 321 | 2026-07-21T08:02:24+00:00 | Vulnerability · Source |
| CVE-2026-63818 | redhat_vex | kernel: f2fs: validate orphan inode entry count | known not affected: 1 | 2026-07-21T08:02:15+00:00 | Vulnerability · Source |
| CVE-2026-64182 | redhat_vex | kernel: drivers/base/memory: fix memory block reference leak in poison accounting | known affected: 198 known not affected: 76 | 2026-07-21T08:02:09+00:00 | Vulnerability · Source |
| CVE-2026-53374 | redhat_vex | kernel: drm/amdgpu: zero-initialize GART table on allocation | known not affected: 274 | 2026-07-21T08:02:07+00:00 | Vulnerability · Source |
| CVE-2026-63815 | redhat_vex | kernel: f2fs: bound i_inline_xattr_size for non-inline-xattr inodes | known not affected: 274 | 2026-07-21T08:02:06+00:00 | Vulnerability · Source |
| CVE-2026-22795 | redhat_vex | openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-21T08:02:04+00:00 | Vulnerability · Source |
| CVE-2025-69420 | redhat_vex | openssl: OpenSSL: Denial of Service via malformed TimeStamp Response | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-21T08:02:02+00:00 | Vulnerability · Source |
| CVE-2025-68160 | redhat_vex | openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-21T08:02:01+00:00 | Vulnerability · Source |
| CVE-2025-69418 | redhat_vex | openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-21T08:01:59+00:00 | Vulnerability · Source |
| CVE-2022-30629 | redhat_vex | golang: crypto/tls: session tickets lack random ticket_age_add | fixed: 1376 known affected: 273 known not affected: 363 | 2026-07-21T08:01:56+00:00 | Vulnerability · Source |
| CVE-2025-11143 | redhat_vex | org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing | fixed: 2 known affected: 33 known not affected: 2 | 2026-07-21T08:01:56+00:00 | Vulnerability · Source |
| CVE-2026-64092 | redhat_vex | kernel: batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown | known not affected: 274 | 2026-07-21T08:01:56+00:00 | Vulnerability · Source |
| CVE-2025-69421 | redhat_vex | openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-21T08:01:48+00:00 | Vulnerability · Source |
| CVE-2025-15469 | redhat_vex | openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-21T08:01:46+00:00 | Vulnerability · Source |
| CVE-2025-66199 | redhat_vex | openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression | fixed: 107 known affected: 1 known not affected: 62 | 2026-07-21T08:01:46+00:00 | Vulnerability · Source |
| CVE-2025-22866 | redhat_vex | crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec | fixed: 247 known affected: 409 known not affected: 513 | 2026-07-21T08:01:41+00:00 | Vulnerability · Source |
| CVE-2025-15468 | redhat_vex | openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-21T08:01:39+00:00 | Vulnerability · Source |
| CVE-2026-22796 | redhat_vex | openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification | fixed: 107 known affected: 58 known not affected: 5 | 2026-07-21T08:01:38+00:00 | Vulnerability · Source |
| CVE-2026-64105 | redhat_vex | kernel: KVM: arm64: vgic: Free private_irqs when init fails after allocation | known affected: 232 known not affected: 42 | 2026-07-21T08:01:37+00:00 | Vulnerability · Source |
| CVE-2026-63819 | redhat_vex | kernel: f2fs: fix to do sanity check on f2fs_get_node_folio_ra() | known affected: 184 known not affected: 90 | 2026-07-21T08:01:32+00:00 | Vulnerability · Source |
| CVE-2026-63820 | redhat_vex | kernel: f2fs: fix missing read bio submission on large folio error | known not affected: 274 | 2026-07-21T08:01:31+00:00 | Vulnerability · Source |
| CVE-2026-64176 | redhat_vex | kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices | known affected: 260 known not affected: 15 | 2026-07-21T08:01:29+00:00 | Vulnerability · Source |
| CVE-2026-63817 | redhat_vex | kernel: f2fs: validate compress cache inode only when enabled | known not affected: 274 | 2026-07-21T08:01:27+00:00 | Vulnerability · Source |
| CVE-2026-63816 | redhat_vex | kernel: f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode | known affected: 184 known not affected: 90 | 2026-07-21T08:01:24+00:00 | Vulnerability · Source |
| CVE-2026-63814 | redhat_vex | kernel: f2fs: validate ACL entry sizes in f2fs_acl_from_disk() | known not affected: 274 | 2026-07-21T08:01:21+00:00 | Vulnerability · Source |
| CVE-2026-32287 | redhat_vex | github.com/antchfx/xpath: github.com/antchfx/xpath: Denial of Service due to infinite loop via boolean XPath expressions | fixed: 4 known affected: 23 known not affected: 11 | 2026-07-21T08:01:20+00:00 | Vulnerability · Source |
| CVE-2025-53643 | redhat_vex | aiohttp: AIOHTTP HTTP Request/Response Smuggling | fixed: 36 known affected: 17 known not affected: 859 | 2026-07-21T08:01:19+00:00 | Vulnerability · Source |
| CVE-2024-39329 | redhat_vex | python-django: Username enumeration through timing difference for users with unusable passwords | fixed: 14 known affected: 19 known not affected: 3729 | 2026-07-21T08:01:16+00:00 | Vulnerability · Source |
| CVE-2026-64162 | redhat_vex | kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() | known affected: 184 known not affected: 90 | 2026-07-21T08:01:15+00:00 | Vulnerability · Source |
| CVE-2026-48935 | redhat_vex | nodejs: Node.js: Unauthorized file metadata modification | fixed: 255 known affected: 14 | 2026-07-21T08:01:14+00:00 | Vulnerability · Source |
| CVE-2026-0861 | redhat_vex | glibc: Integer overflow in memalign leads to heap corruption | fixed: 1026 known affected: 1 known not affected: 1243 | 2026-07-21T08:01:10+00:00 | Vulnerability · Source |
| CVE-2026-64145 | redhat_vex | kernel: wifi: wilc1000: fix dma_buffer leak on bus acquire failure | known not affected: 275 | 2026-07-21T08:01:09+00:00 | Vulnerability · Source |
| CVE-2026-64074 | redhat_vex | kernel: fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap | known not affected: 274 | 2026-07-21T07:52:33+00:00 | Vulnerability · Source |
| CVE-2026-64138 | redhat_vex | kernel: ksmbd: validate SID in parent security descriptor during ACL inheritance | known not affected: 275 | 2026-07-21T07:52:28+00:00 | Vulnerability · Source |
| CVE-2026-64146 | redhat_vex | kernel: erofs: fix metabuf leak in inode xattr initialization | known affected: 184 known not affected: 90 | 2026-07-21T07:52:25+00:00 | Vulnerability · Source |
| CVE-2026-64075 | redhat_vex | kernel: fprobe: Fix unregister_fprobe() to wait for RCU grace period | known affected: 232 known not affected: 43 | 2026-07-21T07:52:24+00:00 | Vulnerability · Source |
| CVE-2026-64035 | redhat_vex | kernel: igc: set tx buffer type for SMD frames | known affected: 184 known not affected: 90 | 2026-07-21T07:24:32+00:00 | Vulnerability · Source |
| CVE-2026-63832 | redhat_vex | kernel: wifi: mt76: add wcid publish check in mt76_sta_add | known affected: 232 known not affected: 42 | 2026-07-21T07:24:06+00:00 | Vulnerability · Source |
| CVE-2026-64117 | redhat_vex | kernel: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb | known affected: 246 known not affected: 29 | 2026-07-21T07:20:53+00:00 | Vulnerability · Source |
| CVE-2026-64076 | redhat_vex | kernel: netfilter: bridge: eb_tables: close module init race | known affected: 198 known not affected: 76 | 2026-07-21T07:20:49+00:00 | Vulnerability · Source |
| CVE-2026-64059 | redhat_vex | kernel: netfs: Fix folio->private handling in netfs_perform_write() | known affected: 76 known not affected: 199 | 2026-07-21T07:20:45+00:00 | Vulnerability · Source |
| CVE-2026-64053 | redhat_vex | kernel: block: don't overwrite bip_vcnt in bio_integrity_copy_user() | known affected: 184 known not affected: 90 | 2026-07-21T07:04:35+00:00 | Vulnerability · Source |
| CVE-2026-39879 | redhat_vex | syslog-ng: syslog-ng: SQL Injection vulnerability leading to denial of service and data manipulation | known not affected: 1 | 2026-07-21T07:04:08+00:00 | Vulnerability · Source |
| CVE-2026-46117 | redhat_vex | kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() | fixed: 762 known affected: 22 known not affected: 42 | 2026-07-21T06:59:58+00:00 | Vulnerability · Source |
| CVE-2026-64040 | redhat_vex | kernel: cachefiles: Fix error return when vfs_mkdir() fails | known affected: 14 known not affected: 260 | 2026-07-21T06:44:10+00:00 | Vulnerability · Source |
| CVE-2026-6475 | redhat_vex | postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind | fixed: 3387 known affected: 12 known not affected: 41 | 2026-07-21T06:43:30+00:00 | Vulnerability · Source |
| CVE-2026-6478 | redhat_vex | postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison | fixed: 3387 known affected: 25 known not affected: 28 | 2026-07-21T06:43:11+00:00 | Vulnerability · Source |