VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
283001 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-52798 | redhat_vex | path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x | fixed: 33 known affected: 60 known not affected: 1161 | 2026-07-21T05:21:47+00:00 | Vulnerability · Source |
| CVE-2026-64111 | redhat_vex | kernel: lsm: hold cred_guard_mutex for lsm_set_self_attr() | known affected: 184 known not affected: 91 | 2026-07-21T05:20:43+00:00 | Vulnerability · Source |
| CVE-2026-64190 | redhat_vex | kernel: net: team: fix NULL pointer dereference in team_xmit during mode change | known affected: 108 known not affected: 167 | 2026-07-21T05:20:33+00:00 | Vulnerability · Source |
| CVE-2026-64135 | redhat_vex | kernel: hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX | known not affected: 275 | 2026-07-21T05:15:42+00:00 | Vulnerability · Source |
| CVE-2026-64149 | redhat_vex | kernel: dma-mapping: move dma_map_resource() sanity check into debug code | known affected: 76 known not affected: 198 | 2026-07-21T05:15:38+00:00 | Vulnerability · Source |
| CVE-2026-39373 | redhat_vex | JWCrypto: python-cryptography: python: JWCrypto: Memory exhaustion via crafted compressed JWE tokens | fixed: 14 known affected: 10 known not affected: 944 | 2026-07-21T05:15:34+00:00 | Vulnerability · Source |
| CVE-2026-64184 | redhat_vex | kernel: mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() | known affected: 184 known not affected: 90 | 2026-07-21T05:15:29+00:00 | Vulnerability · Source |
| CVE-2025-58754 | redhat_vex | axios: Axios DoS via lack of data size check | fixed: 361 known affected: 42 known not affected: 1162 | 2026-07-21T04:54:14+00:00 | Vulnerability · Source |
| CVE-2025-7783 | redhat_vex | form-data: Unsafe random function in form-data | fixed: 196 known affected: 71 known not affected: 1005 | 2026-07-21T04:53:55+00:00 | Vulnerability · Source |
| CVE-2026-48779 | redhat_vex | ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments | fixed: 336 known affected: 50 known not affected: 348 under investigation: 30 | 2026-07-21T04:53:34+00:00 | Vulnerability · Source |
| CVE-2026-42338 | redhat_vex | ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input | fixed: 328 known affected: 20 known not affected: 230 | 2026-07-21T04:52:14+00:00 | Vulnerability · Source |
| CVE-2026-42264 | redhat_vex | axios: Axios: Prototype pollution allows information disclosure and request manipulation | fixed: 48 known affected: 43 known not affected: 246 | 2026-07-21T04:52:06+00:00 | Vulnerability · Source |
| CVE-2026-23745 | redhat_vex | node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives | fixed: 53 known affected: 24 known not affected: 664 | 2026-07-21T04:50:30+00:00 | Vulnerability · Source |
| CVE-2025-62718 | redhat_vex | axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization | fixed: 158 known affected: 61 known not affected: 1688 | 2026-07-21T04:49:05+00:00 | Vulnerability · Source |
| CVE-2026-55603 | redhat_vex | http-proxy-middleware: http-proxy-middleware: Data integrity compromise via CR/LF injection | fixed: 1 known affected: 2 known not affected: 73 | 2026-07-21T04:44:06+00:00 | Vulnerability · Source |
| CVE-2026-64189 | redhat_vex | kernel: netfilter: ipset: fix race between dump and ip_set_list resize | known affected: 246 known not affected: 29 | 2026-07-21T04:43:52+00:00 | Vulnerability · Source |
| CVE-2025-57847 | redhat_vex | ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions | fixed: 8 known affected: 9 known not affected: 123 | 2026-07-21T04:41:52+00:00 | Vulnerability · Source |
| CVE-2026-33036 | redhat_vex | fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass | fixed: 609 known affected: 8 known not affected: 189 | 2026-07-21T04:39:56+00:00 | Vulnerability · Source |
| CVE-2026-27942 | redhat_vex | fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service | fixed: 332 known affected: 5 known not affected: 143 | 2026-07-21T04:39:54+00:00 | Vulnerability · Source |
| CVE-2026-27904 | redhat_vex | minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions | fixed: 627 known affected: 74 known not affected: 1146 | 2026-07-21T04:39:41+00:00 | Vulnerability · Source |
| CVE-2026-25128 | redhat_vex | fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug | fixed: 242 known affected: 13 known not affected: 124 | 2026-07-21T04:39:37+00:00 | Vulnerability · Source |
| CVE-2026-26278 | redhat_vex | fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion | fixed: 244 known affected: 7 known not affected: 127 | 2026-07-21T04:31:00+00:00 | Vulnerability · Source |
| CVE-2026-25896 | redhat_vex | fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling | fixed: 244 known affected: 7 known not affected: 127 | 2026-07-21T04:30:52+00:00 | Vulnerability · Source |
| CVE-2025-69873 | redhat_vex | ajv: ReDoS via $data reference | fixed: 327 known affected: 38 known not affected: 4716 | 2026-07-21T04:30:38+00:00 | Vulnerability · Source |
| CVE-2026-64102 | redhat_vex | kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math | known affected: 156 known not affected: 119 | 2026-07-21T04:29:53+00:00 | Vulnerability · Source |
| CVE-2026-42211 | redhat_vex | react-router: React Router: Remote Code Execution via prototype pollution in Framework Mode | fixed: 5 known affected: 15 known not affected: 83 under investigation: 60 | 2026-07-21T04:23:09+00:00 | Vulnerability · Source |
| CVE-2026-12382 | redhat_vex | aap-gateway: missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing | fixed: 9 known not affected: 653 | 2026-07-21T04:16:22+00:00 | Vulnerability · Source |
| CVE-2025-5278 | redhat_vex | coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification | fixed: 75 known affected: 8 known not affected: 11 | 2026-07-21T04:07:20+00:00 | Vulnerability · Source |
| CVE-2025-8194 | redhat_vex | cpython: Cpython infinite loop when parsing a tarfile | fixed: 1939 known affected: 38 known not affected: 17 | 2026-07-21T04:06:34+00:00 | Vulnerability · Source |
| CVE-2026-42503 | redhat_vex | golang: golang.org/x/tools/gopls: gopls: Arbitrary code execution due to insecure network binding | fixed: 8 known not affected: 1 | 2026-07-21T04:00:42+00:00 | Vulnerability · Source |
| CVE-2026-41642 | redhat_vex | github.com/osrg/gobgp: golang: GoBGP: Denial of Service via malformed BGP UPDATE message | known not affected: 1 | 2026-07-21T03:50:22+00:00 | Vulnerability · Source |
| CVE-2026-42285 | redhat_vex | github.com/osrg/gobgp: golang: GoBGP: Denial of Service due to specially crafted BGP UPDATE message | known not affected: 1 | 2026-07-21T03:31:05+00:00 | Vulnerability · Source |
| CVE-2025-68664 | redhat_vex | langchain-core: LangChain: Arbitrary code execution via serialization injection | fixed: 18 known not affected: 254 | 2026-07-21T03:21:03+00:00 | Vulnerability · Source |
| CVE-2024-45338 | redhat_vex | golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html | fixed: 2392 known affected: 157 known not affected: 16030 | 2026-07-21T03:17:24+00:00 | Vulnerability · Source |
| CVE-2026-9804 | redhat_vex | kubevirt: kubevirt: VMExport directory symlink escape enables exporter pod file read | fixed: 14 known affected: 1 known not affected: 174 | 2026-07-21T03:08:37+00:00 | Vulnerability · Source |
| CVE-2026-58016 | redhat_vex | glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" | fixed: 225 known affected: 27 known not affected: 1 | 2026-07-21T02:34:07+00:00 | Vulnerability · Source |
| CVE-2025-5318 | redhat_vex | libssh: out-of-bounds read in sftp_handle() | fixed: 442 known not affected: 1 | 2026-07-21T02:06:14+00:00 | Vulnerability · Source |
| CVE-2026-44312 | redhat_vex | css_parser: css_parser: Man-in-the-Middle attack due to improper HTTPS certificate validation | known affected: 5 | 2026-07-21T02:01:54+00:00 | Vulnerability · Source |
| CVE-2026-29111 | redhat_vex | systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data | fixed: 697 known affected: 90 known not affected: 15 under investigation: 1 | 2026-07-21T01:49:24+00:00 | Vulnerability · Source |
| CVE-2026-63831 | microsoft_vex | mac802154: llsec: add skb_cow_data() before in-place crypto | known affected: 1 | 2026-07-21T01:44:33+00:00 | Vulnerability · Source |
| CVE-2026-63796 | microsoft_vex | ocfs2: reject oversized group bitmap descriptors | known affected: 1 | 2026-07-21T01:44:23+00:00 | Vulnerability · Source |
| CVE-2026-63800 | microsoft_vex | pNFS: Fix use-after-free in pnfs_update_layout() | known affected: 1 | 2026-07-21T01:44:14+00:00 | Vulnerability · Source |
| CVE-2026-63824 | microsoft_vex | KEYS: fix overflow in keyctl_pkey_params_get_2() | known affected: 1 | 2026-07-21T01:44:03+00:00 | Vulnerability · Source |
| CVE-2026-3842 | microsoft_vex | Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write | fixed: 1 known affected: 1 | 2026-07-21T01:42:10+00:00 | Vulnerability · Source |
| CVE-2026-38755 | microsoft_vex | A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. | fixed: 1 known affected: 1 | 2026-07-21T01:42:02+00:00 | Vulnerability · Source |
| CVE-2026-38754 | microsoft_vex | A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. | fixed: 1 known affected: 1 | 2026-07-21T01:41:54+00:00 | Vulnerability · Source |
| CVE-2026-62299 | microsoft_vex | CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record | fixed: 1 known affected: 1 | 2026-07-21T01:41:42+00:00 | Vulnerability · Source |
| CVE-2026-60081 | microsoft_vex | DBI::ProfileData versions before 1.651 for Perl do not limit the path index | fixed: 1 known affected: 1 | 2026-07-21T01:41:32+00:00 | Vulnerability · Source |
| CVE-2026-15392 | microsoft_vex | DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location | fixed: 1 known affected: 1 | 2026-07-21T01:41:24+00:00 | Vulnerability · Source |
| CVE-2026-60082 | microsoft_vex | DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row | fixed: 1 known affected: 1 | 2026-07-21T01:41:17+00:00 | Vulnerability · Source |