VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
283045 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64078 | microsoft_vex | netfilter: x_tables: add and use xtables_unregister_table_exit | known affected: 1 | 2026-07-21T01:02:56+00:00 | Vulnerability · Source |
| CVE-2026-64097 | microsoft_vex | drm/amd/display: Validate GPIO pin LUT table size before iterating | known affected: 1 | 2026-07-21T01:02:50+00:00 | Vulnerability · Source |
| CVE-2024-56171 | redhat_vex | libxml2: Use-After-Free in libxml2 | fixed: 617 known affected: 5 known not affected: 3737 | 2026-07-21T01:02:47+00:00 | Vulnerability · Source |
| CVE-2026-63954 | microsoft_vex | hpfs: fix a crash if hpfs_map_dnode_bitmap fails | known affected: 1 | 2026-07-21T01:02:44+00:00 | Vulnerability · Source |
| CVE-2026-64117 | microsoft_vex | wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb | known affected: 1 | 2026-07-21T01:02:37+00:00 | Vulnerability · Source |
| CVE-2026-63958 | microsoft_vex | usb: typec: ucsi: validate connector number in ucsi_connector_change() | known affected: 1 | 2026-07-21T01:02:31+00:00 | Vulnerability · Source |
| CVE-2026-63962 | microsoft_vex | usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() | known affected: 1 | 2026-07-21T01:02:25+00:00 | Vulnerability · Source |
| CVE-2026-64015 | microsoft_vex | security/keys: fix missed RCU read section on lookup | known affected: 1 | 2026-07-21T01:02:19+00:00 | Vulnerability · Source |
| CVE-2026-64070 | microsoft_vex | powerpc/hv-gpci: fix preempt count leak in sysfs show paths | known affected: 1 | 2026-07-21T01:02:13+00:00 | Vulnerability · Source |
| CVE-2026-63959 | microsoft_vex | usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT | known affected: 1 | 2026-07-21T01:02:06+00:00 | Vulnerability · Source |
| CVE-2026-64138 | microsoft_vex | ksmbd: validate SID in parent security descriptor during ACL inheritance | known affected: 1 | 2026-07-21T01:02:00+00:00 | Vulnerability · Source |
| CVE-2026-64160 | microsoft_vex | netfs: Fix potential for tearing in ->remote_i_size and ->zero_point | known affected: 1 | 2026-07-21T01:01:54+00:00 | Vulnerability · Source |
| CVE-2026-64001 | microsoft_vex | ALSA: pcm: oss: Fix setup list UAF on proc write error | known affected: 1 | 2026-07-21T01:01:48+00:00 | Vulnerability · Source |
| CVE-2026-64133 | microsoft_vex | ALSA: asihpi: Fix potential OOB array access at reading cache | known affected: 1 | 2026-07-21T01:01:42+00:00 | Vulnerability · Source |
| CVE-2026-64079 | microsoft_vex | netfilter: x_tables: allocate hook ops while under mutex | known affected: 1 | 2026-07-21T01:01:35+00:00 | Vulnerability · Source |
| CVE-2026-64036 | microsoft_vex | cgroup/rstat: validate cpu before css_rstat_cpu() access | known affected: 1 | 2026-07-21T01:01:29+00:00 | Vulnerability · Source |
| CVE-2026-64038 | microsoft_vex | hwmon: (lm90) Stop work before releasing hwmon device | known affected: 1 | 2026-07-21T01:01:22+00:00 | Vulnerability · Source |
| CVE-2026-4878 | redhat_vex | libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() | fixed: 363 known affected: 7 known not affected: 3 under investigation: 1 | 2026-07-21T00:49:53+00:00 | Vulnerability · Source |
| CVE-2025-7195 | redhat_vex | operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd | fixed: 587 known affected: 19 known not affected: 1820 | 2026-07-21T00:37:09+00:00 | Vulnerability · Source |
| CVE-2025-26791 | redhat_vex | dompurify: Mutation XSS in DOMPurify Due to Improper Template Literal Handling | fixed: 285 known affected: 36 known not affected: 418 | 2026-07-21T00:33:03+00:00 | Vulnerability · Source |
| CVE-2025-47273 | redhat_vex | setuptools: Path Traversal Vulnerability in setuptools PackageIndex | fixed: 1664 known affected: 71 known not affected: 159 under investigation: 2 | 2026-07-21T00:31:59+00:00 | Vulnerability · Source |
| CVE-2025-7338 | redhat_vex | multer: Multer Denial of Service | fixed: 2 known affected: 1 known not affected: 5 | 2026-07-21T00:31:27+00:00 | Vulnerability · Source |
| CVE-2026-14476 | redhat_vex | sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass | fixed: 995 known affected: 101 | 2026-07-21T00:29:06+00:00 | Vulnerability · Source |
| CVE-2024-21536 | redhat_vex | http-proxy-middleware: Denial of Service | fixed: 253 known affected: 62 known not affected: 956 | 2026-07-21T00:27:17+00:00 | Vulnerability · Source |
| CVE-2025-55199 | redhat_vex | helm.sh/helm/v3: Helm Chart JSON Schema Denial of Service | fixed: 8 known affected: 97 known not affected: 1318 | 2026-07-21T00:16:26+00:00 | Vulnerability · Source |
| CVE-2025-55198 | redhat_vex | helm.sh/helm/v3: Helm YAML Parsing Panic Vulnerability | fixed: 8 known affected: 97 known not affected: 1318 | 2026-07-21T00:16:11+00:00 | Vulnerability · Source |
| CVE-2025-68156 | redhat_vex | github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation | fixed: 180 known affected: 2 known not affected: 730 | 2026-07-21T00:08:13+00:00 | Vulnerability · Source |
| CVE-2025-59343 | redhat_vex | tar-fs: tar-fs symlink validation bypass | fixed: 60 known affected: 12 known not affected: 475 | 2026-07-21T00:06:35+00:00 | Vulnerability · Source |
| CVE-2025-5914 | redhat_vex | libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c | fixed: 679 known affected: 3 known not affected: 14 | 2026-07-21T00:05:28+00:00 | Vulnerability · Source |
| CVE-2026-4926 | redhat_vex | path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions | fixed: 44 known affected: 30 known not affected: 955 | 2026-07-21T00:04:07+00:00 | Vulnerability · Source |
| CVE-2025-7425 | redhat_vex | libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr | fixed: 633 known affected: 4 known not affected: 12 | 2026-07-21T00:03:42+00:00 | Vulnerability · Source |
| CVE-2025-24928 | redhat_vex | libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 | fixed: 617 known affected: 5 known not affected: 3715 | 2026-07-21T00:03:12+00:00 | Vulnerability · Source |
| CVE-2025-29786 | redhat_vex | github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input | fixed: 71 known affected: 13 known not affected: 49 | 2026-07-21T00:02:18+00:00 | Vulnerability · Source |
| CVE-2025-58068 | redhat_vex | python-eventlet: Eventlet HTTP request smuggling | fixed: 38 known affected: 5 known not affected: 5642 | 2026-07-20T23:57:01+00:00 | Vulnerability · Source |
| CVE-2026-42044 | redhat_vex | axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget | fixed: 141 known affected: 48 known not affected: 1634 | 2026-07-20T23:27:37+00:00 | Vulnerability · Source |
| CVE-2025-53547 | redhat_vex | helm.sh/helm/v3: Helm Chart Code Execution | fixed: 95 known affected: 37 known not affected: 2005 | 2026-07-20T23:24:20+00:00 | Vulnerability · Source |
| CVE-2025-9287 | redhat_vex | cipher-base: Cipher-base hash manipulation | fixed: 62 known affected: 25 known not affected: 1128 | 2026-07-20T23:23:01+00:00 | Vulnerability · Source |
| CVE-2025-9288 | redhat_vex | sha.js: Missing type checks leading to hash rewind and passing on crafted data | fixed: 71 known affected: 15 known not affected: 1305 | 2026-07-20T23:21:07+00:00 | Vulnerability · Source |
| CVE-2024-12905 | redhat_vex | tar-fs: link following and path traversal via maliciously crafted tar file | fixed: 48 known affected: 56 known not affected: 56 | 2026-07-20T22:59:46+00:00 | Vulnerability · Source |
| CVE-2025-48387 | redhat_vex | tar-fs: tar-fs has issue where extract can write outside the specified dir with a specific tarball | fixed: 7 known affected: 6 known not affected: 64 | 2026-07-20T22:59:41+00:00 | Vulnerability · Source |
| CVE-2025-29775 | redhat_vex | xml-crypto: xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment | fixed: 3 known affected: 1 known not affected: 6 | 2026-07-20T22:59:22+00:00 | Vulnerability · Source |
| CVE-2026-14474 | redhat_vex | sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation | fixed: 995 known affected: 101 | 2026-07-20T22:58:48+00:00 | Vulnerability · Source |
| CVE-2024-45339 | redhat_vex | github.com/golang/glog: Vulnerability when creating log files in github.com/golang/glog | fixed: 386 known affected: 30 known not affected: 14340 | 2026-07-20T22:52:03+00:00 | Vulnerability · Source |
| CVE-2024-28180 | redhat_vex | jose-go: improper handling of highly compressed data | fixed: 1835 known affected: 95 known not affected: 14547 | 2026-07-20T22:02:19+00:00 | Vulnerability · Source |
| CVE-2026-15308 | redhat_vex | python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations | fixed: 466 known affected: 33 known not affected: 34 | 2026-07-20T21:24:37+00:00 | Vulnerability · Source |
| CVE-2026-6321 | redhat_vex | fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies | fixed: 290 known affected: 30 known not affected: 963 | 2026-07-20T21:23:46+00:00 | Vulnerability · Source |
| CVE-2026-37460 | redhat_vex | frr: FRRouting: Denial of Service via crafted BGP UPDATE message | fixed: 14 known affected: 10 | 2026-07-20T21:05:25+00:00 | Vulnerability · Source |
| CVE-2020-11023 | redhat_vex | jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods | fixed: 5510 known affected: 169 known not affected: 1018 | 2026-07-20T20:37:24+00:00 | Vulnerability · Source |
| CVE-2026-58055 | redhat_vex | nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests | fixed: 6 known affected: 67 | 2026-07-20T20:03:39+00:00 | Vulnerability · Source |
| CVE-2026-43745 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-20T19:47:34+00:00 | Vulnerability · Source |