VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
283112 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-55163 | redhat_vex | netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability | fixed: 476 known affected: 32 known not affected: 2765 | 2026-07-20T09:50:08+00:00 | Vulnerability · Source |
| CVE-2026-53994 | redhat_vex | proftpd: ProFTPD mod_sftp: Remote Denial of Service via heap-based buffer overflow | known not affected: 1 | 2026-07-20T09:25:48+00:00 | Vulnerability · Source |
| CVE-2026-64156 | redhat_vex | kernel: netfs, afs: Fix write skipping in dir/link writepages | known affected: 76 known not affected: 198 | 2026-07-20T09:18:04+00:00 | Vulnerability · Source |
| CVE-2026-42533 | redhat_vex | nginx: NGINX: Arbitrary code execution via crafted HTTP requests | known affected: 56 known not affected: 1 | 2026-07-20T08:58:02+00:00 | Vulnerability · Source |
| CVE-2026-43499 | redhat_vex | kernel: rtmutex: Use waiter::task instead of current in remove_waiter() | fixed: 2188 known affected: 22 | 2026-07-20T08:37:08+00:00 | Vulnerability · Source |
| CVE-2026-33846 | redhat_vex | gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly | fixed: 813 known affected: 1 known not affected: 67 under investigation: 1 | 2026-07-20T08:36:35+00:00 | Vulnerability · Source |
| CVE-2026-33845 | redhat_vex | gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment | fixed: 813 known affected: 1 known not affected: 67 under investigation: 1 | 2026-07-20T08:36:31+00:00 | Vulnerability · Source |
| CVE-2026-64127 | redhat_vex | kernel: Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer | known affected: 184 known not affected: 91 | 2026-07-20T08:22:48+00:00 | Vulnerability · Source |
| CVE-2026-24842 | redhat_vex | node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check | fixed: 57 known affected: 25 known not affected: 243 | 2026-07-20T07:42:55+00:00 | Vulnerability · Source |
| CVE-2025-5115 | redhat_vex | jetty: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to "MadeYouReset" DoS attack through HTTP/2 control frames | fixed: 36 known affected: 8 known not affected: 16 | 2026-07-20T07:36:41+00:00 | Vulnerability · Source |
| CVE-2026-5795 | redhat_vex | org.eclipse.jetty.ee10/jetty-ee10: early return from the JASPIAuthenticator class without clearing ThreadLocal variables | fixed: 4 known affected: 1 known not affected: 36 | 2026-07-20T07:32:26+00:00 | Vulnerability · Source |
| CVE-2026-33487 | redhat_vex | github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue | fixed: 32 known not affected: 523 | 2026-07-20T07:22:47+00:00 | Vulnerability · Source |
| CVE-2026-33247 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Information disclosure of credentials via monitoring port and command-line arguments | fixed: 12 known not affected: 52 | 2026-07-20T07:22:46+00:00 | Vulnerability · Source |
| CVE-2026-33219 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Denial of Service via unbounded memory use in WebSockets | fixed: 12 known not affected: 52 | 2026-07-20T07:22:43+00:00 | Vulnerability · Source |
| CVE-2026-33217 | redhat_vex | nats-server: github.com/nats-io/nats-server: NATS-Server: Access control bypass via unapplied ACLs in MQTT namespace | fixed: 12 known not affected: 52 | 2026-07-20T07:22:41+00:00 | Vulnerability · Source |
| CVE-2026-33218 | redhat_vex | nats-server: github.com/nats-io/nats-server: NATS-Server: Denial of Service via malformed message pre-authentication on leafnode port | fixed: 12 known not affected: 52 | 2026-07-20T07:22:40+00:00 | Vulnerability · Source |
| CVE-2026-33216 | redhat_vex | nats-server: github.com/nats-io/nats-server: NATS-Server: Information disclosure of MQTT passwords through monitoring endpoints | fixed: 12 known not affected: 52 | 2026-07-20T07:22:33+00:00 | Vulnerability · Source |
| CVE-2026-29785 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Denial of Service via leafnode compression | fixed: 12 known not affected: 52 | 2026-07-20T07:22:28+00:00 | Vulnerability · Source |
| CVE-2026-27889 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Denial of Service via malformed WebSockets frame | fixed: 12 known not affected: 52 | 2026-07-20T07:22:24+00:00 | Vulnerability · Source |
| CVE-2025-68429 | redhat_vex | Storybook: Storybook: Information disclosure via unexpected bundling of environment variables | fixed: 12 known affected: 2 known not affected: 65 | 2026-07-20T07:22:00+00:00 | Vulnerability · Source |
| CVE-2026-33211 | redhat_vex | Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver | fixed: 32 known affected: 27 known not affected: 457 | 2026-07-20T07:19:30+00:00 | Vulnerability · Source |
| CVE-2025-22874 | redhat_vex | crypto/x509: Usage of ExtKeyUsageAny disables policy validation in crypto/x509 | fixed: 880 known affected: 57 known not affected: 219 | 2026-07-20T07:19:18+00:00 | Vulnerability · Source |
| CVE-2026-40192 | redhat_vex | Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing | fixed: 150 known affected: 25 known not affected: 1573 | 2026-07-20T07:01:30+00:00 | Vulnerability · Source |
| CVE-2026-2377 | redhat_vex | mirror-registry: quay: quay: Server-Side Request Forgery via log export functionality | fixed: 21 known affected: 2 known not affected: 123 | 2026-07-20T07:00:50+00:00 | Vulnerability · Source |
| CVE-2022-0536 | redhat_vex | follow-redirects: Exposure of Sensitive Information via Authorization Header leak | fixed: 502 known affected: 84 known not affected: 201 under investigation: 1 | 2026-07-20T06:39:43+00:00 | Vulnerability · Source |
| CVE-2022-0155 | redhat_vex | follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor | fixed: 496 known affected: 10 known not affected: 106 | 2026-07-20T06:39:38+00:00 | Vulnerability · Source |
| CVE-2026-47423 | redhat_vex | dompurify: DOMPurify: Cross-site scripting vulnerability allows information disclosure | fixed: 4 known affected: 2 known not affected: 48 | 2026-07-20T05:31:04+00:00 | Vulnerability · Source |
| CVE-2024-45775 | redhat_vex | grub2: commands/extcmd: Missing check for failed allocation | fixed: 40 known affected: 42 known not affected: 16 | 2026-07-20T05:25:49+00:00 | Vulnerability · Source |
| CVE-2014-4607 | redhat_vex | lzo: lzo1x_decompress_safe() integer overflow | fixed: 132 known affected: 31 known not affected: 1 under investigation: 20 | 2026-07-20T05:16:05+00:00 | Vulnerability · Source |
| CVE-2025-2786 | redhat_vex | tempo-operator: ServiceAccount Token Exposure Leading to Token and Subject Access Reviews in OpenShift Tempo Operator | fixed: 8 known affected: 5 known not affected: 42 | 2026-07-20T05:06:09+00:00 | Vulnerability · Source |
| CVE-2025-2842 | redhat_vex | tempo-operator: Tempo Operator Token Exposition lead to read sensitive data | fixed: 8 known affected: 5 known not affected: 42 | 2026-07-20T05:06:01+00:00 | Vulnerability · Source |
| CVE-2025-64718 | redhat_vex | js-yaml: js-yaml prototype pollution in merge | fixed: 8 known affected: 230 known not affected: 48 | 2026-07-20T04:23:55+00:00 | Vulnerability · Source |
| CVE-2024-34397 | redhat_vex | glib2: Signal subscription vulnerabilities | fixed: 504 known affected: 17 known not affected: 11 | 2026-07-20T04:01:31+00:00 | Vulnerability · Source |
| CVE-2025-4673 | redhat_vex | net/http: Sensitive headers not cleared on cross-origin redirect in net/http | fixed: 121 known affected: 394 known not affected: 2 | 2026-07-20T03:56:22+00:00 | Vulnerability · Source |
| CVE-2026-50012 | redhat_vex | squid: memory corruption in cache_digest reply handling | known affected: 22 | 2026-07-20T03:33:17+00:00 | Vulnerability · Source |
| CVE-2026-22028 | redhat_vex | preact: Preact: Arbitrary script execution via JSON serialization protection bypass | fixed: 1 known affected: 7 known not affected: 700 | 2026-07-20T03:03:04+00:00 | Vulnerability · Source |
| CVE-2025-2240 | redhat_vex | smallrye-fault-tolerance: SmallRye Fault Tolerance | fixed: 3 known affected: 5 known not affected: 4 | 2026-07-20T02:15:07+00:00 | Vulnerability · Source |
| CVE-2026-40293 | redhat_vex | OpenFGA: github.com/openfga/openfga: OpenFGA: Information disclosure of preshared API key via playground endpoint | fixed: 12 known affected: 2 known not affected: 369 | 2026-07-20T01:56:22+00:00 | Vulnerability · Source |
| CVE-2026-62389 | microsoft_vex | ws < 8.21.1 Default maxFragments Allows Memory Exhaustion DoS | known affected: 1 | 2026-07-20T01:40:45+00:00 | Vulnerability · Source |
| CVE-2026-45784 | microsoft_vex | rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers | known affected: 6 | 2026-07-20T01:40:39+00:00 | Vulnerability · Source |
| CVE-2004-2541 | suse_vex | SUSE CVE CVE-2004-2541 | known not affected: 24 recommended: 7 | 2026-07-19T18:51:03+00:00 | Vulnerability · Source |
| CVE-2004-2771 | suse_vex | SUSE CVE CVE-2004-2771 | known affected: 394 known not affected: 5 recommended: 87 | 2026-07-19T18:51:02+00:00 | Vulnerability · Source |
| CVE-2005-2349 | suse_vex | SUSE CVE CVE-2005-2349 | known not affected: 31 | 2026-07-19T18:51:01+00:00 | Vulnerability · Source |
| CVE-2005-2475 | suse_vex | SUSE CVE CVE-2005-2475 | recommended: 10 | 2026-07-19T18:50:59+00:00 | Vulnerability · Source |
| CVE-2005-3193 | suse_vex | SUSE CVE CVE-2005-3193 | known not affected: 40 recommended: 28 | 2026-07-19T18:50:58+00:00 | Vulnerability · Source |
| CVE-2005-4900 | suse_vex | SUSE CVE CVE-2005-4900 | known affected: 103 known not affected: 131 recommended: 937 | 2026-07-19T18:50:57+00:00 | Vulnerability · Source |
| CVE-2006-0225 | suse_vex | SUSE CVE CVE-2006-0225 | recommended: 43 | 2026-07-19T18:50:56+00:00 | Vulnerability · Source |
| CVE-2006-1614 | suse_vex | SUSE CVE CVE-2006-1614 | recommended: 19 | 2026-07-19T18:50:54+00:00 | Vulnerability · Source |
| CVE-2006-1940 | suse_vex | SUSE CVE CVE-2006-1940 | recommended: 12 | 2026-07-19T18:50:53+00:00 | Vulnerability · Source |
| CVE-2006-3738 | suse_vex | SUSE CVE CVE-2006-3738 | known not affected: 378 recommended: 64 | 2026-07-19T18:50:52+00:00 | Vulnerability · Source |