VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
283538 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-41606 | redhat_vex | Apache Thrift: Apache Thrift: Denial of Service via uncontrolled recursion | fixed: 36 known affected: 13 known not affected: 439 | 2026-07-25T21:44:47+00:00 | Vulnerability · Source |
| CVE-2026-40293 | redhat_vex | OpenFGA: github.com/openfga/openfga: OpenFGA: Information disclosure of preshared API key via playground endpoint | fixed: 12 known affected: 2 known not affected: 369 | 2026-07-25T21:41:49+00:00 | Vulnerability · Source |
| CVE-2025-41118 | redhat_vex | pyroscope: sensitive COS SecretKey exposed in plaintext via configuration API due to missing type protection | fixed: 4 known affected: 2 known not affected: 25 | 2026-07-25T21:41:41+00:00 | Vulnerability · Source |
| CVE-2025-21613 | redhat_vex | go-git: argument injection via the URL field | fixed: 362 known affected: 15 known not affected: 1076 | 2026-07-25T21:40:21+00:00 | Vulnerability · Source |
| CVE-2025-15467 | redhat_vex | openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing | fixed: 307 known not affected: 218 | 2026-07-25T21:18:41+00:00 | Vulnerability · Source |
| CVE-2026-45447 | redhat_vex | openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() | fixed: 271 known affected: 12 known not affected: 52 under investigation: 4 | 2026-07-25T21:08:15+00:00 | Vulnerability · Source |
| CVE-2026-48069 | redhat_vex | grpc-js: @grpc/grpc-js: Client or server crash via malformed compressed message | known affected: 5 | 2026-07-25T20:51:23+00:00 | Vulnerability · Source |
| CVE-2026-26278 | redhat_vex | fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion | fixed: 244 known affected: 7 known not affected: 127 | 2026-07-25T20:18:49+00:00 | Vulnerability · Source |
| CVE-2026-25896 | redhat_vex | fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling | fixed: 244 known affected: 7 known not affected: 127 | 2026-07-25T20:18:39+00:00 | Vulnerability · Source |
| CVE-2025-14927 | redhat_vex | transformers: code execution when converting a malicious SEW-D model checkpoint | fixed: 42 known affected: 27 known not affected: 635 | 2026-07-25T20:01:27+00:00 | Vulnerability · Source |
| CVE-2025-59425 | redhat_vex | vllm: Timing Attack in vLLM API Token Verification Leading to Authentication Bypass | fixed: 29 known affected: 18 known not affected: 418 | 2026-07-25T19:54:08+00:00 | Vulnerability · Source |
| CVE-2025-14930 | redhat_vex | transformers: code execution when processing a malicious GLM4 model file | fixed: 46 known affected: 27 known not affected: 630 | 2026-07-25T19:54:02+00:00 | Vulnerability · Source |
| CVE-2026-27143 | redhat_vex | golang: cmd/compile: possible memory corruption after bound check elimination | fixed: 3329 known affected: 5 known not affected: 226 | 2026-07-25T19:06:57+00:00 | Vulnerability · Source |
| CVE-2025-2843 | redhat_vex | observability-operator: Observability Operator privilege escalation | fixed: 4 known not affected: 77 | 2026-07-25T19:06:23+00:00 | Vulnerability · Source |
| CVE-2025-71303 | suse_vex | SUSE CVE CVE-2025-71303 | known not affected: 293 | 2026-07-25T18:29:45+00:00 | Vulnerability · Source |
| CVE-2026-7163 | redhat_vex | assisted-service: assisted-service: Authenticated users can gain administrative access to OpenShift clusters via credential disclosure | fixed: 24 known not affected: 64 | 2026-07-25T18:24:35+00:00 | Vulnerability · Source |
| CVE-2026-33814 | redhat_vex | net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame | fixed: 235 known affected: 97 known not affected: 375 under investigation: 16 | 2026-07-25T18:20:01+00:00 | Vulnerability · Source |
| CVE-2026-48779 | redhat_vex | ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments | fixed: 336 known affected: 50 known not affected: 348 under investigation: 30 | 2026-07-25T18:19:06+00:00 | Vulnerability · Source |
| CVE-2026-42338 | redhat_vex | ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input | fixed: 328 known affected: 19 known not affected: 231 | 2026-07-25T18:17:48+00:00 | Vulnerability · Source |
| CVE-2018-14344 | suse_vex | SUSE CVE CVE-2018-14344 | known affected: 118 recommended: 1022 | 2026-07-25T18:14:54+00:00 | Vulnerability · Source |
| CVE-2018-14349 | suse_vex | SUSE CVE CVE-2018-14349 | known affected: 29 recommended: 200 | 2026-07-25T18:14:52+00:00 | Vulnerability · Source |
| CVE-2018-14354 | suse_vex | SUSE CVE CVE-2018-14354 | known affected: 29 recommended: 201 | 2026-07-25T18:14:51+00:00 | Vulnerability · Source |
| CVE-2018-14357 | suse_vex | SUSE CVE CVE-2018-14357 | known affected: 29 recommended: 201 | 2026-07-25T18:14:50+00:00 | Vulnerability · Source |
| CVE-2018-14359 | suse_vex | SUSE CVE CVE-2018-14359 | known affected: 29 recommended: 200 | 2026-07-25T18:14:49+00:00 | Vulnerability · Source |
| CVE-2018-14360 | suse_vex | SUSE CVE CVE-2018-14360 | known affected: 28 recommended: 194 | 2026-07-25T18:14:47+00:00 | Vulnerability · Source |
| CVE-2018-14361 | suse_vex | SUSE CVE CVE-2018-14361 | known affected: 28 recommended: 194 | 2026-07-25T18:14:46+00:00 | Vulnerability · Source |
| CVE-2018-14369 | suse_vex | SUSE CVE CVE-2018-14369 | known affected: 118 recommended: 1022 | 2026-07-25T18:14:44+00:00 | Vulnerability · Source |
| CVE-2018-14370 | suse_vex | SUSE CVE CVE-2018-14370 | known affected: 118 recommended: 1022 | 2026-07-25T18:14:43+00:00 | Vulnerability · Source |
| CVE-2018-14400 | suse_vex | SUSE CVE CVE-2018-14400 | known affected: 21 | 2026-07-25T18:14:41+00:00 | Vulnerability · Source |
| CVE-2018-14404 | suse_vex | SUSE CVE CVE-2018-14404 | known affected: 417 known not affected: 80 recommended: 709 | 2026-07-25T18:14:40+00:00 | Vulnerability · Source |
| CVE-2018-14435 | suse_vex | SUSE CVE CVE-2018-14435 | recommended: 753 | 2026-07-25T18:14:38+00:00 | Vulnerability · Source |
| CVE-2018-14436 | suse_vex | SUSE CVE CVE-2018-14436 | known not affected: 14 recommended: 739 | 2026-07-25T18:14:37+00:00 | Vulnerability · Source |
| CVE-2018-14461 | suse_vex | SUSE CVE CVE-2018-14461 | known affected: 333 recommended: 145 | 2026-07-25T18:14:36+00:00 | Vulnerability · Source |
| CVE-2018-14462 | suse_vex | SUSE CVE CVE-2018-14462 | known affected: 333 recommended: 145 | 2026-07-25T18:14:34+00:00 | Vulnerability · Source |
| CVE-2018-14464 | suse_vex | SUSE CVE CVE-2018-14464 | known affected: 333 recommended: 145 | 2026-07-25T18:14:33+00:00 | Vulnerability · Source |
| CVE-2018-14498 | suse_vex | SUSE CVE CVE-2018-14498 | known affected: 420 recommended: 514 | 2026-07-25T18:14:31+00:00 | Vulnerability · Source |
| CVE-2018-14609 | suse_vex | SUSE CVE CVE-2018-14609 | known affected: 7 known not affected: 417 | 2026-07-25T18:14:30+00:00 | Vulnerability · Source |
| CVE-2018-14611 | suse_vex | SUSE CVE CVE-2018-14611 | known affected: 7 known not affected: 415 | 2026-07-25T18:14:28+00:00 | Vulnerability · Source |
| CVE-2018-14612 | suse_vex | SUSE CVE CVE-2018-14612 | known affected: 7 known not affected: 379 | 2026-07-25T18:14:27+00:00 | Vulnerability · Source |
| CVE-2018-14613 | suse_vex | SUSE CVE CVE-2018-14613 | known affected: 7 known not affected: 415 recommended: 472 | 2026-07-25T18:14:26+00:00 | Vulnerability · Source |
| CVE-2018-14617 | suse_vex | SUSE CVE CVE-2018-14617 | known not affected: 193 recommended: 738 | 2026-07-25T18:14:24+00:00 | Vulnerability · Source |
| CVE-2018-14619 | suse_vex | SUSE CVE CVE-2018-14619 | known not affected: 193 | 2026-07-25T18:14:23+00:00 | Vulnerability · Source |
| CVE-2018-14621 | suse_vex | SUSE CVE CVE-2018-14621 | known not affected: 52 recommended: 8 | 2026-07-25T18:14:21+00:00 | Vulnerability · Source |
| CVE-2018-14625 | suse_vex | SUSE CVE CVE-2018-14625 | known affected: 52 known not affected: 365 recommended: 430 | 2026-07-25T18:14:20+00:00 | Vulnerability · Source |
| CVE-2018-14634 | suse_vex | SUSE CVE CVE-2018-14634 | known affected: 6 known not affected: 256 recommended: 239 | 2026-07-25T18:14:18+00:00 | Vulnerability · Source |
| CVE-2018-14678 | suse_vex | SUSE CVE CVE-2018-14678 | known not affected: 259 recommended: 84 | 2026-07-25T18:14:17+00:00 | Vulnerability · Source |
| CVE-2018-14681 | suse_vex | SUSE CVE CVE-2018-14681 | known affected: 41 recommended: 415 | 2026-07-25T18:14:16+00:00 | Vulnerability · Source |
| CVE-2018-14682 | suse_vex | SUSE CVE CVE-2018-14682 | known affected: 41 recommended: 415 | 2026-07-25T18:14:14+00:00 | Vulnerability · Source |
| CVE-2018-14734 | suse_vex | SUSE CVE CVE-2018-14734 | known affected: 74 known not affected: 184 recommended: 445 | 2026-07-25T18:14:13+00:00 | Vulnerability · Source |
| CVE-2018-14779 | suse_vex | SUSE CVE CVE-2018-14779 | known not affected: 103 recommended: 323 | 2026-07-25T18:14:12+00:00 | Vulnerability · Source |