VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294556 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-37555 | microsoft_vex | An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065. | fixed: 1 known affected: 2 | 2026-07-09T14:38:36+00:00 | Vulnerability · Source |
| CVE-2026-43303 | redhat_vex | kernel: mm/page_alloc: clear page->private in free_pages_prepare() | fixed: 1658 known affected: 36 known not affected: 76 | 2026-07-09T13:55:08+00:00 | Vulnerability · Source |
| CVE-2026-32289 | redhat_vex | html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals | fixed: 29 known affected: 354 | 2026-07-09T13:42:21+00:00 | Vulnerability · Source |
| CVE-2026-44332 | redhat_vex | github.com/gofiber/fiber: GoFiber: Remote Username Enumeration via BasicAuth Middleware Short-Circuit Evaluation | known not affected: 1 | 2026-07-09T13:35:03+00:00 | Vulnerability · Source |
| CVE-2025-3110 | redhat_vex | OpenVPN Access Server: OpenVPN Access Server: HTTP request smuggling via bare line-feed sequences in HTTP headers | known not affected: 1 | 2026-07-09T12:55:22+00:00 | Vulnerability · Source |
| CVE-2026-54591 | redhat_vex | asyncssh: AsyncSSH: Arbitrary file write via path traversal in SCP client | known not affected: 1 | 2026-07-09T12:45:11+00:00 | Vulnerability · Source |
| CVE-2026-59928 | redhat_vex | mistune: Mistune: Denial of Service via crafted Markdown document with reference-link definitions | known affected: 25 | 2026-07-09T11:55:15+00:00 | Vulnerability · Source |
| CVE-2026-54267 | redhat_vex | @angular/core: Angular Client Hydration DOM Clobbering & Response-Cache Poisoning | known not affected: 81 | 2026-07-09T11:11:08+00:00 | Vulnerability · Source |
| CVE-2026-53262 | redhat_vex | kernel: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() | known affected: 274 | 2026-07-09T10:45:28+00:00 | Vulnerability · Source |
| CVE-2026-11827 | redhat_vex | gitlab-ee: GitLab EE: Information disclosure via improper authorization controls | known affected: 4 | 2026-07-09T09:35:35+00:00 | Vulnerability · Source |
| CVE-2026-54906 | redhat_vex | concurrent-ruby: rubygem-concurrent-ruby: concurrent-ruby: Synchronization flaw in ReadWriteLock allows unauthorized lock release and denial of service | known not affected: 20 | 2026-07-09T09:22:36+00:00 | Vulnerability · Source |
| CVE-2026-54753 | redhat_vex | Nx: Nx: `nx graph` dev server permissive CORS policy | known affected: 7 | 2026-07-09T09:22:21+00:00 | Vulnerability · Source |
| CVE-2026-45692 | redhat_vex | github.com/caddyserver/caddy/v2: Caddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization | known not affected: 1 | 2026-07-09T09:22:01+00:00 | Vulnerability · Source |
| CVE-2026-31554 | redhat_vex | kernel: futex: Require sys_futex_requeue() to have identical flags | known affected: 184 known not affected: 90 | 2026-07-09T07:53:29+00:00 | Vulnerability · Source |
| CVE-2026-54590 | redhat_vex | AsyncSSH: AsyncSSH: Unauthorized file modification via authorized-keys directory escape | known not affected: 1 | 2026-07-09T07:17:03+00:00 | Vulnerability · Source |
| CVE-2026-15174 | redhat_vex | wireshark: Wireshark: Denial of Service via Catapult DCT2000 protocol dissector crash | known affected: 20 | 2026-07-09T06:59:08+00:00 | Vulnerability · Source |
| CVE-2026-15171 | redhat_vex | wireshark: Wireshark: Denial of service via SSH protocol dissector crash | known affected: 20 | 2026-07-09T06:36:12+00:00 | Vulnerability · Source |
| CVE-2026-15173 | redhat_vex | Wireshark: Wireshark: Denial of Service via pcapng file parser crash | known affected: 20 | 2026-07-09T06:36:11+00:00 | Vulnerability · Source |
| CVE-2026-15170 | redhat_vex | wireshark: Wireshark: Denial of service via Z39.50 protocol dissector crash | known affected: 4 | 2026-07-09T03:59:33+00:00 | Vulnerability · Source |
| CVE-2007-4566 | suse_vex | SUSE CVE CVE-2007-4566 | known not affected: 188 | 2026-07-09T03:50:00+00:00 | Vulnerability · Source |
| CVE-2017-2591 | suse_vex | SUSE CVE CVE-2017-2591 | known not affected: 188 | 2026-07-09T03:47:23+00:00 | Vulnerability · Source |
| CVE-2019-17018 | suse_vex | SUSE CVE CVE-2019-17018 | known affected: 21 | 2026-07-09T03:45:34+00:00 | Vulnerability · Source |
| CVE-2019-17023 | suse_vex | SUSE CVE CVE-2019-17023 | known affected: 21 recommended: 34 | 2026-07-09T03:45:32+00:00 | Vulnerability · Source |
| CVE-2020-6810 | suse_vex | SUSE CVE CVE-2020-6810 | recommended: 9 | 2026-07-09T03:45:11+00:00 | Vulnerability · Source |
| CVE-2020-7753 | suse_vex | SUSE CVE CVE-2020-7753 | recommended: 278 | 2026-07-09T03:45:08+00:00 | Vulnerability · Source |
| CVE-2023-6200 | redhat_vex | kernel: ICMPv6 Router Advertisement packets, aka Linux TCP/IP Remote Code Execution Vulnerability | known not affected: 222 | 2026-07-09T03:44:32+00:00 | Vulnerability · Source |
| CVE-2021-23970 | suse_vex | SUSE CVE CVE-2021-23970 | recommended: 9 | 2026-07-09T03:44:19+00:00 | Vulnerability · Source |
| CVE-2025-1744 | suse_vex | SUSE CVE CVE-2025-1744 | recommended: 17 | 2026-07-09T03:36:56+00:00 | Vulnerability · Source |
| CVE-2026-4893 | suse_vex | SUSE CVE CVE-2026-4893 | known affected: 8 recommended: 42 | 2026-07-09T03:11:34+00:00 | Vulnerability · Source |
| CVE-2026-7017 | suse_vex | SUSE CVE CVE-2026-7017 | recommended: 1 | 2026-07-09T03:11:10+00:00 | Vulnerability · Source |
| CVE-2026-8388 | suse_vex | SUSE CVE CVE-2026-8388 | recommended: 120 | 2026-07-09T03:11:07+00:00 | Vulnerability · Source |
| CVE-2026-8391 | suse_vex | SUSE CVE CVE-2026-8391 | recommended: 120 | 2026-07-09T03:11:04+00:00 | Vulnerability · Source |
| CVE-2026-8401 | suse_vex | SUSE CVE CVE-2026-8401 | recommended: 120 | 2026-07-09T03:11:02+00:00 | Vulnerability · Source |
| CVE-2026-8450 | suse_vex | SUSE CVE CVE-2026-8450 | known affected: 405 recommended: 29 | 2026-07-09T03:10:59+00:00 | Vulnerability · Source |
| CVE-2026-9648 | suse_vex | SUSE CVE CVE-2026-9648 | recommended: 38 | 2026-07-09T03:10:49+00:00 | Vulnerability · Source |
| CVE-2026-13573 | suse_vex | SUSE CVE CVE-2026-13573 | No product status | 2026-07-09T03:09:52+00:00 | Vulnerability · Source |
| CVE-2026-13574 | suse_vex | SUSE CVE CVE-2026-13574 | No product status | 2026-07-09T03:09:50+00:00 | Vulnerability · Source |
| CVE-2026-14940 | suse_vex | SUSE CVE CVE-2026-14940 | No product status | 2026-07-09T03:09:32+00:00 | Vulnerability · Source |
| CVE-2026-14969 | suse_vex | SUSE CVE CVE-2026-14969 | No product status | 2026-07-09T03:09:30+00:00 | Vulnerability · Source |
| CVE-2026-24260 | suse_vex | SUSE CVE CVE-2026-24260 | known affected: 116 | 2026-07-09T03:06:21+00:00 | Vulnerability · Source |
| CVE-2026-29049 | suse_vex | SUSE CVE CVE-2026-29049 | No product status | 2026-07-09T03:05:40+00:00 | Vulnerability · Source |
| CVE-2026-40171 | suse_vex | SUSE CVE CVE-2026-40171 | recommended: 10 | 2026-07-09T03:00:49+00:00 | Vulnerability · Source |
| CVE-2026-40190 | suse_vex | SUSE CVE CVE-2026-40190 | No product status | 2026-07-09T03:00:47+00:00 | Vulnerability · Source |
| CVE-2026-42503 | suse_vex | SUSE CVE CVE-2026-42503 | No product status | 2026-07-09T03:00:02+00:00 | Vulnerability · Source |
| CVE-2026-44512 | suse_vex | SUSE CVE CVE-2026-44512 | No product status | 2026-07-09T02:57:27+00:00 | Vulnerability · Source |
| CVE-2026-46098 | suse_vex | SUSE CVE CVE-2026-46098 | known affected: 179 recommended: 4 | 2026-07-09T02:56:12+00:00 | Vulnerability · Source |
| CVE-2026-46104 | suse_vex | SUSE CVE CVE-2026-46104 | known affected: 175 known not affected: 116 recommended: 4 | 2026-07-09T02:56:09+00:00 | Vulnerability · Source |
| CVE-2026-46302 | suse_vex | SUSE CVE CVE-2026-46302 | known affected: 144 known not affected: 65 recommended: 4 | 2026-07-09T02:55:22+00:00 | Vulnerability · Source |
| CVE-2026-46601 | suse_vex | SUSE CVE CVE-2026-46601 | No product status | 2026-07-09T02:55:07+00:00 | Vulnerability · Source |
| CVE-2026-49342 | suse_vex | SUSE CVE CVE-2026-49342 | No product status | 2026-07-09T02:54:59+00:00 | Vulnerability · Source |