VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304165 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-69896 | microsoft_vex | Windows Error Reporting Elevation of Privilege Vulnerability | fixed: 8 known affected: 8 | 2026-10-13T07:00:00+00:00 | Vulnerability · Source |
| CVE-2026-91777 | redhat_vex | com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion | known affected: 1 known not affected: 1 under investigation: 164 | 2026-10-02T10:33:07+00:00 | Vulnerability · Source |
| CVE-2026-56860 | redhat_vex | net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution | fixed: 7332 known affected: 276 known not affected: 3544 | 2026-10-02T10:32:57+00:00 | Vulnerability · Source |
| CVE-2026-56858 | redhat_vex | html/template: golang: Go html/template: Cross-Site Scripting via pathological input | fixed: 6772 known affected: 215 known not affected: 3263 | 2026-10-02T10:32:41+00:00 | Vulnerability · Source |
| CVE-2026-39829 | redhat_vex | golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters | fixed: 1225 known affected: 101 known not affected: 10494 | 2026-10-02T10:32:24+00:00 | Vulnerability · Source |
| CVE-2026-33818 | redhat_vex | encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal | fixed: 7254 known affected: 200 known not affected: 2931 | 2026-10-02T10:32:20+00:00 | Vulnerability · Source |
| CVE-2026-27136 | redhat_vex | golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass | fixed: 1345 known affected: 178 known not affected: 13996 | 2026-10-02T10:30:54+00:00 | Vulnerability · Source |
| CVE-2026-56852 | redhat_vex | golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input | fixed: 766 known affected: 97 known not affected: 8659 under investigation: 237 | 2026-10-02T10:30:53+00:00 | Vulnerability · Source |
| CVE-2026-25681 | redhat_vex | golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting | fixed: 1332 known affected: 240 known not affected: 8613 | 2026-10-02T10:30:34+00:00 | Vulnerability · Source |
| CVE-2026-102825 | redhat_vex | russh: russh: Authentication attempt limit bypass via unenforced maximum authentication attempts | fixed: 7 | 2026-10-02T10:23:48+00:00 | Vulnerability · Source |
| CVE-2026-56449 | redhat_vex | httpd: httpd: Denial of Service via crafted HTTP response bodies in mod_proxy_html | fixed: 23 known affected: 53 | 2026-10-02T10:23:47+00:00 | Vulnerability · Source |
| CVE-2026-48005 | redhat_vex | httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digest | fixed: 23 known affected: 53 | 2026-10-02T10:23:45+00:00 | Vulnerability · Source |
| CVE-2026-42356 | redhat_vex | httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirects | fixed: 23 known affected: 24 known not affected: 29 | 2026-10-02T10:23:43+00:00 | Vulnerability · Source |
| CVE-2026-47360 | redhat_vex | httpd: httpd: Information disclosure via session cookie leakage during internal redirects | fixed: 23 known affected: 53 | 2026-10-02T10:23:43+00:00 | Vulnerability · Source |
| CVE-2026-40467 | redhat_vex | gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c | fixed: 71 known affected: 4 | 2026-10-02T10:22:38+00:00 | Vulnerability · Source |
| CVE-2026-40468 | redhat_vex | gawk: gawk: Memory corruption via integer overflow | fixed: 71 known affected: 4 | 2026-10-02T10:22:35+00:00 | Vulnerability · Source |
| CVE-2026-56859 | redhat_vex | encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue | fixed: 6850 known affected: 248 known not affected: 3466 | 2026-10-02T10:20:47+00:00 | Vulnerability · Source |
| CVE-2026-102821 | redhat_vex | russh: russh: Denial of Service via unbounded memory exhaustion during stalled key renegotiation | fixed: 7 | 2026-10-02T10:17:33+00:00 | Vulnerability · Source |
| CVE-2026-95512 | redhat_vex | freetype: FreeType: Denial of Service via repeated subroutine allocations in CID font loader | known affected: 272 | 2026-10-02T10:17:27+00:00 | Vulnerability · Source |
| CVE-2025-61728 | redhat_vex | golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip | fixed: 7014 known affected: 113 known not affected: 4133 | 2026-10-02T10:10:13+00:00 | Vulnerability · Source |
| CVE-2026-103484 | redhat_vex | pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build | known affected: 4 | 2026-10-02T10:10:09+00:00 | Vulnerability · Source |
| CVE-2026-102823 | redhat_vex | russh: russh: State corruption via unverified SSH channel identifiers | fixed: 7 | 2026-10-02T10:10:03+00:00 | Vulnerability · Source |
| CVE-2026-94635 | redhat_vex | thrift: thrift: Denial of Service via improper length parameter handling in Lua bindings | known affected: 13 | 2026-10-02T10:09:59+00:00 | Vulnerability · Source |
| CVE-2026-12143 | redhat_vex | form-data: form-data: Form field override via CRLF injection | fixed: 495 known affected: 37 known not affected: 8569 | 2026-10-02T10:09:27+00:00 | Vulnerability · Source |
| CVE-2025-14928 | redhat_vex | transformers: code execution when converting a malicious HuBERT model checkpoint | fixed: 40 known affected: 29 known not affected: 636 | 2026-10-02T10:09:23+00:00 | Vulnerability · Source |
| CVE-2025-58183 | redhat_vex | golang: archive/tar: Unbounded allocation when parsing GNU sparse map | fixed: 9024 known affected: 130 known not affected: 8349 | 2026-10-02T10:09:21+00:00 | Vulnerability · Source |
| CVE-2023-54404 | redhat_vex | zod: zod: Denial of service via unbounded array validation | known affected: 116 known not affected: 2 | 2026-10-02T10:09:21+00:00 | Vulnerability · Source |
| CVE-2026-81871 | redhat_vex | go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration | fixed: 53 known affected: 70 known not affected: 3 | 2026-10-02T10:09:15+00:00 | Vulnerability · Source |
| CVE-2026-93546 | redhat_vex | httpd: httpd: Denial of Service via integer overflow in mod_dav_fs | fixed: 23 known affected: 53 | 2026-10-02T10:09:11+00:00 | Vulnerability · Source |
| CVE-2026-79768 | redhat_vex | httpd: httpd: Information disclosure in mod_userdir via single-dot path equivalence | fixed: 23 known affected: 53 | 2026-10-02T10:09:05+00:00 | Vulnerability · Source |
| CVE-2026-63045 | redhat_vex | httpd: httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response | fixed: 23 known affected: 53 | 2026-10-02T10:09:03+00:00 | Vulnerability · Source |
| CVE-2026-73637 | redhat_vex | httpd: httpd: Authentication state corruption via concurrent Digest authentication requests | fixed: 23 known affected: 53 | 2026-10-02T10:09:03+00:00 | Vulnerability · Source |
| CVE-2026-58415 | redhat_vex | httpd: httpd: Information disclosure via direct request to the WebDAV state directory | fixed: 23 known affected: 53 | 2026-10-02T10:08:58+00:00 | Vulnerability · Source |
| CVE-2026-42528 | redhat_vex | httpd: httpd: Denial of Service via mod_dav shared lock memory calculation error | fixed: 23 known affected: 53 | 2026-10-02T10:08:57+00:00 | Vulnerability · Source |
| CVE-2026-73636 | redhat_vex | httpd: httpd: Authentication bypass via credential replay in mod_auth_digest | fixed: 23 known affected: 53 | 2026-10-02T10:06:18+00:00 | Vulnerability · Source |
| CVE-2026-63718 | redhat_vex | httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi | fixed: 23 known affected: 53 | 2026-10-02T10:06:12+00:00 | Vulnerability · Source |
| CVE-2026-63686 | redhat_vex | httpd: httpd: Denial of Service via charset conversion failure in mod_xml2enc | fixed: 23 known affected: 53 | 2026-10-02T10:06:07+00:00 | Vulnerability · Source |
| CVE-2026-63292 | redhat_vex | httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias | fixed: 23 known affected: 53 | 2026-10-02T10:05:59+00:00 | Vulnerability · Source |
| CVE-2026-56153 | redhat_vex | httpd: httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite | fixed: 23 known affected: 53 | 2026-10-02T10:05:22+00:00 | Vulnerability · Source |
| CVE-2026-46729 | redhat_vex | httpd: httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference | fixed: 23 known affected: 53 | 2026-10-02T10:05:19+00:00 | Vulnerability · Source |
| CVE-2026-33814 | redhat_vex | net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame | fixed: 2322 known affected: 383 known not affected: 27853 under investigation: 496 | 2026-10-02T10:05:06+00:00 | Vulnerability · Source |
| CVE-2025-61729 | redhat_vex | crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate | fixed: 8116 known affected: 434 known not affected: 5144 | 2026-10-02T10:04:27+00:00 | Vulnerability · Source |
| CVE-2025-66506 | redhat_vex | github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token | fixed: 329 known affected: 42 known not affected: 1297 | 2026-10-02T10:01:50+00:00 | Vulnerability · Source |
| CVE-2025-66471 | redhat_vex | urllib3: urllib3 Streaming API improperly handles highly compressed data | fixed: 1965 known affected: 126 known not affected: 3875 | 2026-10-02T10:01:36+00:00 | Vulnerability · Source |
| CVE-2025-66418 | redhat_vex | urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion | fixed: 1992 known affected: 379 known not affected: 2959 | 2026-10-02T10:01:23+00:00 | Vulnerability · Source |
| CVE-2025-64756 | redhat_vex | glob: glob: Command Injection Vulnerability via Malicious Filenames | fixed: 171 known affected: 115 known not affected: 1099 | 2026-10-02T10:01:13+00:00 | Vulnerability · Source |
| CVE-2025-61726 | redhat_vex | golang: net/url: Memory exhaustion in query parameter parsing in net/url | fixed: 11000 known affected: 445 known not affected: 17461 | 2026-10-02T10:00:34+00:00 | Vulnerability · Source |
| CVE-2025-52881 | redhat_vex | runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects | fixed: 2419 known affected: 40 known not affected: 4478 | 2026-10-02T10:00:21+00:00 | Vulnerability · Source |
| CVE-2025-30204 | redhat_vex | golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing | fixed: 3866 known affected: 68 known not affected: 13220 | 2026-10-02T10:00:10+00:00 | Vulnerability · Source |
| CVE-2025-22869 | redhat_vex | golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh | fixed: 2839 known affected: 57 known not affected: 6263 under investigation: 1 | 2026-10-02T10:00:01+00:00 | Vulnerability · Source |