VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
283841 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-39909 | suse_vex | SUSE CVE CVE-2025-39909 | first fixed: 2 known not affected: 410 recommended: 154 | 2026-07-26T00:02:53+00:00 | Vulnerability · Source |
| CVE-2025-40126 | suse_vex | SUSE CVE CVE-2025-40126 | known not affected: 437 | 2026-07-26T00:02:49+00:00 | Vulnerability · Source |
| CVE-2025-43529 | suse_vex | SUSE CVE CVE-2025-43529 | known affected: 133 recommended: 624 | 2026-07-26T00:02:46+00:00 | Vulnerability · Source |
| CVE-2025-68216 | suse_vex | SUSE CVE CVE-2025-68216 | known not affected: 418 | 2026-07-26T00:02:41+00:00 | Vulnerability · Source |
| CVE-2025-68338 | suse_vex | SUSE CVE CVE-2025-68338 | known not affected: 453 | 2026-07-26T00:02:39+00:00 | Vulnerability · Source |
| CVE-2026-15370 | suse_vex | SUSE CVE CVE-2026-15370 | first fixed: 8 known affected: 20 known not affected: 136 | 2026-07-26T00:02:30+00:00 | Vulnerability · Source |
| CVE-2026-59843 | suse_vex | SUSE CVE CVE-2026-59843 | first fixed: 44 known affected: 144 known not affected: 12 | 2026-07-26T00:02:08+00:00 | Vulnerability · Source |
| CVE-2026-59844 | suse_vex | SUSE CVE CVE-2026-59844 | first fixed: 44 known affected: 144 known not affected: 12 | 2026-07-26T00:02:06+00:00 | Vulnerability · Source |
| CVE-2026-59845 | suse_vex | SUSE CVE CVE-2026-59845 | first fixed: 44 known affected: 144 known not affected: 12 | 2026-07-26T00:02:05+00:00 | Vulnerability · Source |
| CVE-2026-59846 | suse_vex | SUSE CVE CVE-2026-59846 | first fixed: 44 known affected: 144 known not affected: 12 | 2026-07-26T00:02:04+00:00 | Vulnerability · Source |
| CVE-2026-59847 | suse_vex | SUSE CVE CVE-2026-59847 | first fixed: 44 known affected: 144 known not affected: 12 | 2026-07-26T00:02:03+00:00 | Vulnerability · Source |
| CVE-2026-59848 | suse_vex | SUSE CVE CVE-2026-59848 | first fixed: 44 known affected: 144 known not affected: 12 | 2026-07-26T00:02:01+00:00 | Vulnerability · Source |
| CVE-2026-59849 | suse_vex | SUSE CVE CVE-2026-59849 | first fixed: 8 known affected: 20 known not affected: 136 | 2026-07-26T00:02:00+00:00 | Vulnerability · Source |
| CVE-2026-59850 | suse_vex | SUSE CVE CVE-2026-59850 | first fixed: 44 known affected: 144 known not affected: 12 | 2026-07-26T00:01:59+00:00 | Vulnerability · Source |
| CVE-2026-63934 | suse_vex | SUSE CVE CVE-2026-63934 | No product status | 2026-07-26T00:01:57+00:00 | Vulnerability · Source |
| CVE-2026-64166 | suse_vex | SUSE CVE CVE-2026-64166 | No product status | 2026-07-26T00:01:55+00:00 | Vulnerability · Source |
| CVE-2025-69419 | redhat_vex | openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing | fixed: 553 known affected: 5 known not affected: 220 | 2026-07-25T23:55:16+00:00 | Vulnerability · Source |
| CVE-2025-11187 | redhat_vex | openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file | fixed: 124 known affected: 25 known not affected: 62 | 2026-07-25T23:55:12+00:00 | Vulnerability · Source |
| CVE-2026-42764 | redhat_vex | openssl: NULL pointer dereference in QUIC server initial packet handling | fixed: 104 known affected: 24 known not affected: 29 | 2026-07-25T23:50:16+00:00 | Vulnerability · Source |
| CVE-2026-34183 | redhat_vex | openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler | fixed: 104 known affected: 1 known not affected: 52 | 2026-07-25T23:50:12+00:00 | Vulnerability · Source |
| CVE-2026-34182 | redhat_vex | openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages | fixed: 104 known affected: 1 known not affected: 52 | 2026-07-25T23:50:06+00:00 | Vulnerability · Source |
| CVE-2026-0915 | redhat_vex | glibc: glibc: Information disclosure via zero-valued network query | fixed: 2047 known affected: 22 known not affected: 1008 | 2026-07-25T23:49:38+00:00 | Vulnerability · Source |
| CVE-2025-66564 | redhat_vex | github.com/sigstore/timestamp-authority: Sigstore Timestamp Authority: Denial of Service via excessive OID or Content-Type header parsing | fixed: 41 known affected: 18 known not affected: 358 | 2026-07-25T23:01:59+00:00 | Vulnerability · Source |
| CVE-2025-48956 | redhat_vex | vllm: HTTP header size limit not enforced allows Denial of Service from Unauthenticated requests | fixed: 33 known affected: 54 known not affected: 420 | 2026-07-25T22:24:11+00:00 | Vulnerability · Source |
| CVE-2026-27893 | redhat_vex | vllm: vLLM: Remote code execution due to hardcoded trust_remote_code setting | fixed: 25 known affected: 6 known not affected: 881 | 2026-07-25T21:49:35+00:00 | Vulnerability · Source |
| CVE-2026-42880 | redhat_vex | argoproj/argo-cd: Argo CD: Information disclosure of Kubernetes Secret data via Server-Side Apply dry-run mechanism | fixed: 20 known affected: 1 known not affected: 112 | 2026-07-25T21:45:12+00:00 | Vulnerability · Source |
| CVE-2026-41606 | redhat_vex | Apache Thrift: Apache Thrift: Denial of Service via uncontrolled recursion | fixed: 36 known affected: 13 known not affected: 439 | 2026-07-25T21:44:47+00:00 | Vulnerability · Source |
| CVE-2026-40293 | redhat_vex | OpenFGA: github.com/openfga/openfga: OpenFGA: Information disclosure of preshared API key via playground endpoint | fixed: 12 known affected: 2 known not affected: 369 | 2026-07-25T21:41:49+00:00 | Vulnerability · Source |
| CVE-2025-41118 | redhat_vex | pyroscope: sensitive COS SecretKey exposed in plaintext via configuration API due to missing type protection | fixed: 4 known affected: 2 known not affected: 25 | 2026-07-25T21:41:41+00:00 | Vulnerability · Source |
| CVE-2025-21613 | redhat_vex | go-git: argument injection via the URL field | fixed: 362 known affected: 15 known not affected: 1076 | 2026-07-25T21:40:21+00:00 | Vulnerability · Source |
| CVE-2026-45447 | redhat_vex | openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() | fixed: 271 known affected: 12 known not affected: 52 under investigation: 4 | 2026-07-25T21:08:15+00:00 | Vulnerability · Source |
| CVE-2026-48069 | redhat_vex | grpc-js: @grpc/grpc-js: Client or server crash via malformed compressed message | known affected: 5 | 2026-07-25T20:51:23+00:00 | Vulnerability · Source |
| CVE-2026-26278 | redhat_vex | fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion | fixed: 244 known affected: 7 known not affected: 127 | 2026-07-25T20:18:49+00:00 | Vulnerability · Source |
| CVE-2026-25896 | redhat_vex | fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling | fixed: 244 known affected: 7 known not affected: 127 | 2026-07-25T20:18:39+00:00 | Vulnerability · Source |
| CVE-2025-14927 | redhat_vex | transformers: code execution when converting a malicious SEW-D model checkpoint | fixed: 42 known affected: 27 known not affected: 635 | 2026-07-25T20:01:27+00:00 | Vulnerability · Source |
| CVE-2025-59425 | redhat_vex | vllm: Timing Attack in vLLM API Token Verification Leading to Authentication Bypass | fixed: 29 known affected: 18 known not affected: 418 | 2026-07-25T19:54:08+00:00 | Vulnerability · Source |
| CVE-2025-14930 | redhat_vex | transformers: code execution when processing a malicious GLM4 model file | fixed: 46 known affected: 27 known not affected: 630 | 2026-07-25T19:54:02+00:00 | Vulnerability · Source |
| CVE-2026-27143 | redhat_vex | golang: cmd/compile: possible memory corruption after bound check elimination | fixed: 3329 known affected: 5 known not affected: 226 | 2026-07-25T19:06:57+00:00 | Vulnerability · Source |
| CVE-2025-2843 | redhat_vex | observability-operator: Observability Operator privilege escalation | fixed: 4 known not affected: 77 | 2026-07-25T19:06:23+00:00 | Vulnerability · Source |
| CVE-2025-71303 | suse_vex | SUSE CVE CVE-2025-71303 | known not affected: 293 | 2026-07-25T18:29:45+00:00 | Vulnerability · Source |
| CVE-2026-33814 | redhat_vex | net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame | fixed: 235 known affected: 97 known not affected: 375 under investigation: 16 | 2026-07-25T18:20:01+00:00 | Vulnerability · Source |
| CVE-2026-48779 | redhat_vex | ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments | fixed: 336 known affected: 50 known not affected: 348 under investigation: 30 | 2026-07-25T18:19:06+00:00 | Vulnerability · Source |
| CVE-2026-42338 | redhat_vex | ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input | fixed: 328 known affected: 19 known not affected: 231 | 2026-07-25T18:17:48+00:00 | Vulnerability · Source |
| CVE-2018-14344 | suse_vex | SUSE CVE CVE-2018-14344 | known affected: 118 recommended: 1022 | 2026-07-25T18:14:54+00:00 | Vulnerability · Source |
| CVE-2018-14349 | suse_vex | SUSE CVE CVE-2018-14349 | known affected: 29 recommended: 200 | 2026-07-25T18:14:52+00:00 | Vulnerability · Source |
| CVE-2018-14354 | suse_vex | SUSE CVE CVE-2018-14354 | known affected: 29 recommended: 201 | 2026-07-25T18:14:51+00:00 | Vulnerability · Source |
| CVE-2018-14357 | suse_vex | SUSE CVE CVE-2018-14357 | known affected: 29 recommended: 201 | 2026-07-25T18:14:50+00:00 | Vulnerability · Source |
| CVE-2018-14359 | suse_vex | SUSE CVE CVE-2018-14359 | known affected: 29 recommended: 200 | 2026-07-25T18:14:49+00:00 | Vulnerability · Source |
| CVE-2018-14360 | suse_vex | SUSE CVE CVE-2018-14360 | known affected: 28 recommended: 194 | 2026-07-25T18:14:47+00:00 | Vulnerability · Source |
| CVE-2018-14361 | suse_vex | SUSE CVE CVE-2018-14361 | known affected: 28 recommended: 194 | 2026-07-25T18:14:46+00:00 | Vulnerability · Source |