VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
283069 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64149 | redhat_vex | kernel: dma-mapping: move dma_map_resource() sanity check into debug code | known affected: 76 known not affected: 198 | 2026-07-21T05:15:38+00:00 | Vulnerability · Source |
| CVE-2026-39373 | redhat_vex | JWCrypto: python-cryptography: python: JWCrypto: Memory exhaustion via crafted compressed JWE tokens | fixed: 14 known affected: 10 known not affected: 944 | 2026-07-21T05:15:34+00:00 | Vulnerability · Source |
| CVE-2026-64184 | redhat_vex | kernel: mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() | known affected: 184 known not affected: 90 | 2026-07-21T05:15:29+00:00 | Vulnerability · Source |
| CVE-2025-58754 | redhat_vex | axios: Axios DoS via lack of data size check | fixed: 361 known affected: 42 known not affected: 1162 | 2026-07-21T04:54:14+00:00 | Vulnerability · Source |
| CVE-2025-7783 | redhat_vex | form-data: Unsafe random function in form-data | fixed: 196 known affected: 71 known not affected: 1005 | 2026-07-21T04:53:55+00:00 | Vulnerability · Source |
| CVE-2026-48779 | redhat_vex | ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments | fixed: 336 known affected: 50 known not affected: 348 under investigation: 30 | 2026-07-21T04:53:34+00:00 | Vulnerability · Source |
| CVE-2026-42264 | redhat_vex | axios: Axios: Prototype pollution allows information disclosure and request manipulation | fixed: 48 known affected: 43 known not affected: 246 | 2026-07-21T04:52:06+00:00 | Vulnerability · Source |
| CVE-2026-23745 | redhat_vex | node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives | fixed: 53 known affected: 24 known not affected: 664 | 2026-07-21T04:50:30+00:00 | Vulnerability · Source |
| CVE-2025-62718 | redhat_vex | axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization | fixed: 158 known affected: 61 known not affected: 1688 | 2026-07-21T04:49:05+00:00 | Vulnerability · Source |
| CVE-2026-55603 | redhat_vex | http-proxy-middleware: http-proxy-middleware: Data integrity compromise via CR/LF injection | fixed: 1 known affected: 2 known not affected: 73 | 2026-07-21T04:44:06+00:00 | Vulnerability · Source |
| CVE-2026-64189 | redhat_vex | kernel: netfilter: ipset: fix race between dump and ip_set_list resize | known affected: 246 known not affected: 29 | 2026-07-21T04:43:52+00:00 | Vulnerability · Source |
| CVE-2025-57847 | redhat_vex | ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions | fixed: 8 known affected: 9 known not affected: 123 | 2026-07-21T04:41:52+00:00 | Vulnerability · Source |
| CVE-2026-33036 | redhat_vex | fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass | fixed: 609 known affected: 8 known not affected: 189 | 2026-07-21T04:39:56+00:00 | Vulnerability · Source |
| CVE-2026-27942 | redhat_vex | fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service | fixed: 332 known affected: 5 known not affected: 143 | 2026-07-21T04:39:54+00:00 | Vulnerability · Source |
| CVE-2026-27904 | redhat_vex | minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions | fixed: 627 known affected: 74 known not affected: 1146 | 2026-07-21T04:39:41+00:00 | Vulnerability · Source |
| CVE-2026-25128 | redhat_vex | fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug | fixed: 242 known affected: 13 known not affected: 124 | 2026-07-21T04:39:37+00:00 | Vulnerability · Source |
| CVE-2026-26278 | redhat_vex | fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion | fixed: 244 known affected: 7 known not affected: 127 | 2026-07-21T04:31:00+00:00 | Vulnerability · Source |
| CVE-2026-25896 | redhat_vex | fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling | fixed: 244 known affected: 7 known not affected: 127 | 2026-07-21T04:30:52+00:00 | Vulnerability · Source |
| CVE-2025-69873 | redhat_vex | ajv: ReDoS via $data reference | fixed: 327 known affected: 38 known not affected: 4716 | 2026-07-21T04:30:38+00:00 | Vulnerability · Source |
| CVE-2026-64102 | redhat_vex | kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math | known affected: 156 known not affected: 119 | 2026-07-21T04:29:53+00:00 | Vulnerability · Source |
| CVE-2026-12382 | redhat_vex | aap-gateway: missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing | fixed: 9 known not affected: 653 | 2026-07-21T04:16:22+00:00 | Vulnerability · Source |
| CVE-2025-8194 | redhat_vex | cpython: Cpython infinite loop when parsing a tarfile | fixed: 1939 known affected: 38 known not affected: 17 | 2026-07-21T04:06:34+00:00 | Vulnerability · Source |
| CVE-2026-42503 | redhat_vex | golang: golang.org/x/tools/gopls: gopls: Arbitrary code execution due to insecure network binding | fixed: 8 known not affected: 1 | 2026-07-21T04:00:42+00:00 | Vulnerability · Source |
| CVE-2026-41642 | redhat_vex | github.com/osrg/gobgp: golang: GoBGP: Denial of Service via malformed BGP UPDATE message | known not affected: 1 | 2026-07-21T03:50:22+00:00 | Vulnerability · Source |
| CVE-2026-42285 | redhat_vex | github.com/osrg/gobgp: golang: GoBGP: Denial of Service due to specially crafted BGP UPDATE message | known not affected: 1 | 2026-07-21T03:31:05+00:00 | Vulnerability · Source |
| CVE-2025-68664 | redhat_vex | langchain-core: LangChain: Arbitrary code execution via serialization injection | fixed: 18 known not affected: 254 | 2026-07-21T03:21:03+00:00 | Vulnerability · Source |
| CVE-2024-45338 | redhat_vex | golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html | fixed: 2392 known affected: 157 known not affected: 16030 | 2026-07-21T03:17:24+00:00 | Vulnerability · Source |
| CVE-2026-9804 | redhat_vex | kubevirt: kubevirt: VMExport directory symlink escape enables exporter pod file read | fixed: 14 known affected: 1 known not affected: 174 | 2026-07-21T03:08:37+00:00 | Vulnerability · Source |
| CVE-2025-5318 | redhat_vex | libssh: out-of-bounds read in sftp_handle() | fixed: 442 known not affected: 1 | 2026-07-21T02:06:14+00:00 | Vulnerability · Source |
| CVE-2026-44312 | redhat_vex | css_parser: css_parser: Man-in-the-Middle attack due to improper HTTPS certificate validation | known affected: 5 | 2026-07-21T02:01:54+00:00 | Vulnerability · Source |
| CVE-2026-29111 | redhat_vex | systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data | fixed: 697 known affected: 90 known not affected: 15 under investigation: 1 | 2026-07-21T01:49:24+00:00 | Vulnerability · Source |
| CVE-2026-63831 | microsoft_vex | mac802154: llsec: add skb_cow_data() before in-place crypto | known affected: 1 | 2026-07-21T01:44:33+00:00 | Vulnerability · Source |
| CVE-2026-63796 | microsoft_vex | ocfs2: reject oversized group bitmap descriptors | known affected: 1 | 2026-07-21T01:44:23+00:00 | Vulnerability · Source |
| CVE-2026-63800 | microsoft_vex | pNFS: Fix use-after-free in pnfs_update_layout() | known affected: 1 | 2026-07-21T01:44:14+00:00 | Vulnerability · Source |
| CVE-2026-63824 | microsoft_vex | KEYS: fix overflow in keyctl_pkey_params_get_2() | known affected: 1 | 2026-07-21T01:44:03+00:00 | Vulnerability · Source |
| CVE-2026-3842 | microsoft_vex | Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write | fixed: 1 known affected: 1 | 2026-07-21T01:42:10+00:00 | Vulnerability · Source |
| CVE-2026-38755 | microsoft_vex | A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. | fixed: 1 known affected: 1 | 2026-07-21T01:42:02+00:00 | Vulnerability · Source |
| CVE-2026-38754 | microsoft_vex | A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. | fixed: 1 known affected: 1 | 2026-07-21T01:41:54+00:00 | Vulnerability · Source |
| CVE-2026-62299 | microsoft_vex | CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record | fixed: 1 known affected: 1 | 2026-07-21T01:41:42+00:00 | Vulnerability · Source |
| CVE-2026-60081 | microsoft_vex | DBI::ProfileData versions before 1.651 for Perl do not limit the path index | fixed: 1 known affected: 1 | 2026-07-21T01:41:32+00:00 | Vulnerability · Source |
| CVE-2026-15392 | microsoft_vex | DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location | fixed: 1 known affected: 1 | 2026-07-21T01:41:24+00:00 | Vulnerability · Source |
| CVE-2026-60082 | microsoft_vex | DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row | fixed: 1 known affected: 1 | 2026-07-21T01:41:17+00:00 | Vulnerability · Source |
| CVE-2026-15043 | microsoft_vex | DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text | fixed: 1 known affected: 1 | 2026-07-21T01:41:10+00:00 | Vulnerability · Source |
| CVE-2026-57433 | microsoft_vex | Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record | fixed: 1 known affected: 1 | 2026-07-21T01:41:02+00:00 | Vulnerability · Source |
| CVE-2026-48863 | microsoft_vex | Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service | fixed: 1 known affected: 1 | 2026-07-21T01:40:55+00:00 | Vulnerability · Source |
| CVE-2026-63827 | microsoft_vex | apparmor: fix use-after-free in rawdata dedup loop | known affected: 1 | 2026-07-21T01:39:47+00:00 | Vulnerability · Source |
| CVE-2026-63828 | microsoft_vex | apparmor: mediate the implicit connect of TCP fast open sendmsg | known affected: 1 | 2026-07-21T01:39:26+00:00 | Vulnerability · Source |
| CVE-2026-63801 | microsoft_vex | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | known affected: 1 | 2026-07-21T01:39:19+00:00 | Vulnerability · Source |
| CVE-2025-32415 | redhat_vex | libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables | fixed: 568 known affected: 5 known not affected: 18 | 2026-07-21T01:27:03+00:00 | Vulnerability · Source |
| CVE-2025-8058 | redhat_vex | glibc: Double free in glibc | fixed: 3064 known affected: 23 known not affected: 18 | 2026-07-21T01:26:51+00:00 | Vulnerability · Source |