VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296099 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-41080 | redhat_vex | libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML | fixed: 3 known affected: 21 | 2026-07-14T14:07:47+00:00 | Vulnerability · Source |
| CVE-2026-23273 | redhat_vex | kernel: macvlan: observe an RCU grace period in macvlan_common_newlink() error path | known affected: 14 known not affected: 260 | 2026-07-14T14:07:45+00:00 | Vulnerability · Source |
| CVE-2026-43057 | redhat_vex | kernel: net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback | known affected: 14 known not affected: 260 | 2026-07-14T14:07:40+00:00 | Vulnerability · Source |
| CVE-2024-24855 | redhat_vex | kernel: Race condition in lpfc_unregister_fcf_rescan() in scsi/lpfc/lpfc_hbadisc.c | known affected: 198 | 2026-07-14T13:25:30+00:00 | Vulnerability · Source |
| CVE-2023-6780 | redhat_vex | glibc: integer overflow in __vsyslog_internal() | known not affected: 452 | 2026-07-14T13:25:26+00:00 | Vulnerability · Source |
| CVE-2023-4527 | redhat_vex | glibc: Stack read overflow in getaddrinfo in no-aaaa mode | fixed: 2031 known not affected: 21 | 2026-07-14T13:23:13+00:00 | Vulnerability · Source |
| CVE-2023-4806 | redhat_vex | glibc: potential use-after-free in getaddrinfo() | fixed: 3046 known affected: 21 | 2026-07-14T13:23:03+00:00 | Vulnerability · Source |
| CVE-2024-12243 | redhat_vex | gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS | fixed: 304 known affected: 19 | 2026-07-14T13:22:54+00:00 | Vulnerability · Source |
| CVE-2026-59674 | redhat_vex | suricata: Suricata: Privilege escalation via symbolic link following | known not affected: 1 | 2026-07-14T13:17:29+00:00 | Vulnerability · Source |
| CVE-2023-6779 | redhat_vex | glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() | known not affected: 452 | 2026-07-14T13:13:24+00:00 | Vulnerability · Source |
| CVE-2023-6246 | redhat_vex | glibc: heap-based buffer overflow in __vsyslog_internal() | known not affected: 452 | 2026-07-14T13:12:54+00:00 | Vulnerability · Source |
| CVE-2026-40372 | redhat_vex | ASP.NET Core: ASP.NET: ASP.NET Core: Privilege escalation via improper cryptographic signature verification | known not affected: 47 | 2026-07-14T13:07:30+00:00 | Vulnerability · Source |
| CVE-2026-58470 | redhat_vex | wget: GNU Wget: Integer overflow in Content-Range header parsing causes download desynchronization | known affected: 9 | 2026-07-14T11:58:12+00:00 | Vulnerability · Source |
| CVE-2026-43304 | redhat_vex | kernel: libceph: define and enforce CEPH_MAX_KEY_LEN | known affected: 260 known not affected: 14 | 2026-07-14T11:37:43+00:00 | Vulnerability · Source |
| CVE-2026-12478 | redhat_vex | libsoup: Incomplete fix for CVE-2026-0716: Out-of-bounds read in libsoup WebSocket frame processing (unmasked path) | known affected: 4 | 2026-07-14T10:06:12+00:00 | Vulnerability · Source |
| CVE-2025-55005 | redhat_vex | imagemagick: ImageMagick: heap-buffer overflow | known affected: 14 | 2026-07-14T05:37:06+00:00 | Vulnerability · Source |
| CVE-2025-53101 | redhat_vex | ImageMagick: ImageMagick Stack Buffer Overflow | known affected: 14 | 2026-07-14T05:37:02+00:00 | Vulnerability · Source |
| CVE-2025-53019 | redhat_vex | ImageMagick: ImageMagick Memory Leak | known affected: 14 | 2026-07-14T05:37:02+00:00 | Vulnerability · Source |
| CVE-2025-55298 | redhat_vex | ImageMagick: ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution | known affected: 7 known not affected: 7 | 2026-07-14T05:36:58+00:00 | Vulnerability · Source |
| CVE-2025-55004 | redhat_vex | imagemagick: ImageMagick: heap-buffer overflow | known affected: 7 known not affected: 7 | 2026-07-14T05:36:57+00:00 | Vulnerability · Source |
| CVE-2025-53015 | redhat_vex | ImageMagick: ImageMagick unbounded loop | known affected: 14 | 2026-07-14T05:36:53+00:00 | Vulnerability · Source |
| CVE-2025-55160 | redhat_vex | imagemagick: ImageMagick: Undefined Behavior | known affected: 14 | 2026-07-14T05:36:52+00:00 | Vulnerability · Source |
| CVE-2025-55154 | redhat_vex | imagemagick: ImageMagick: integer overflows in MNG magnification | fixed: 51 known affected: 7 | 2026-07-14T05:36:25+00:00 | Vulnerability · Source |
| CVE-2026-12480 | microsoft_vex | Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras | fixed: 1 known affected: 1 | 2026-07-14T01:38:59+00:00 | Vulnerability · Source |
| CVE-2026-55689 | redhat_vex | openfga: OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset | known affected: 9 | 2026-07-14T01:35:32+00:00 | Vulnerability · Source |
| CVE-2026-55170 | redhat_vex | github.com/openfga/openfga: OpenFGA: Incorrect authorization decisions due to case-insensitive comparisons in MySQL datastore | known affected: 9 | 2026-07-14T01:35:32+00:00 | Vulnerability · Source |
| CVE-2026-57158 | redhat_vex | FreeRDP: FreeRDP: Information disclosure via truncated RDPGFX planar payload | known affected: 31 | 2026-07-13T23:25:46+00:00 | Vulnerability · Source |
| CVE-2026-57157 | redhat_vex | FreeRDP: FreeRDP: Out-of-bounds read leads to information disclosure and denial of service | known affected: 31 | 2026-07-13T23:25:45+00:00 | Vulnerability · Source |
| CVE-2026-56372 | redhat_vex | ImageMagick: ImageMagick: Information Disclosure and Denial of Service | known affected: 14 | 2026-07-13T22:25:36+00:00 | Vulnerability · Source |
| CVE-2026-61465 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted image due to missing memory allocation check | known affected: 14 | 2026-07-13T22:25:35+00:00 | Vulnerability · Source |
| CVE-2026-61858 | redhat_vex | ImageMagick: ImageMagick: Policy bypass allows unauthorized file writing via APNG encoder | known affected: 14 | 2026-07-13T22:15:55+00:00 | Vulnerability · Source |
| CVE-2026-61857 | redhat_vex | ImageMagick: ImageMagick: Application crashes via malicious XMP profiles | known affected: 14 | 2026-07-13T22:15:54+00:00 | Vulnerability · Source |
| CVE-2026-61861 | redhat_vex | ImageMagick: ImageMagick: Use-after-free vulnerability leading to denial of service or code execution | known affected: 14 | 2026-07-13T22:15:48+00:00 | Vulnerability · Source |
| CVE-2026-61870 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via specially crafted VIFF images | known affected: 14 | 2026-07-13T22:15:46+00:00 | Vulnerability · Source |
| CVE-2026-44024 | redhat_vex | fluentd: Fluentd: Remote Code Execution via arbitrary file write due to insufficient tag validation | known not affected: 1 | 2026-07-13T16:20:42+00:00 | Vulnerability · Source |
| CVE-2026-56366 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via memory leak in APP1JPEG image processing | known affected: 14 | 2026-07-13T15:27:12+00:00 | Vulnerability · Source |
| CVE-2026-56373 | redhat_vex | ImageMagick: ImageMagick: Use-after-free vulnerability in PDB decoder allows denial of service or limited data corruption. | known affected: 14 | 2026-07-13T15:26:59+00:00 | Vulnerability · Source |
| CVE-2026-54518 | redhat_vex | jackson-databind: jackson-databind: Information disclosure and data manipulation via view-based access control bypass | known affected: 88 known not affected: 14 | 2026-07-13T15:16:19+00:00 | Vulnerability · Source |
| CVE-2026-50168 | redhat_vex | @angular/platform-server: Angular @angular/platform-server: Server-Side Request Forgery (SSRF) via malformed URL parsing | known not affected: 1 | 2026-07-13T15:00:27+00:00 | Vulnerability · Source |
| CVE-2026-54514 | redhat_vex | jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution | known affected: 101 known not affected: 1 | 2026-07-13T14:55:58+00:00 | Vulnerability · Source |
| CVE-2026-52846 | redhat_vex | github.com/caddyserver/caddy: Caddy: Client-side Cross-Site Scripting (XSS) due to incomplete HTML tag stripping | known not affected: 1 | 2026-07-13T14:50:46+00:00 | Vulnerability · Source |
| CVE-2026-44169 | redhat_vex | mariadb: MariaDB server: Information disclosure of stored routine definitions due to insufficient privilege check | fixed: 199 known not affected: 106 | 2026-07-13T14:45:52+00:00 | Vulnerability · Source |
| CVE-2026-59874 | microsoft_vex | node-tar: Negative tar entry size causes infinite loop in archive replace | known affected: 1 | 2026-07-13T14:41:33+00:00 | Vulnerability · Source |
| CVE-2026-59873 | microsoft_vex | node-tar: Decompression/parse DoS via unlimited input | known affected: 1 | 2026-07-13T14:41:27+00:00 | Vulnerability · Source |
| CVE-2026-59871 | microsoft_vex | node-tar: Process crash via PAX numeric path type confusion | known affected: 1 | 2026-07-13T14:41:21+00:00 | Vulnerability · Source |
| CVE-2026-59821 | redhat_vex | litellm: LiteLLM: Arbitrary code execution and information disclosure via custom code guardrails | known not affected: 7 | 2026-07-13T13:56:31+00:00 | Vulnerability · Source |
| CVE-2026-59820 | redhat_vex | litellm: LiteLLM: Directory traversal via crafted skill archive upload | known affected: 1 known not affected: 6 | 2026-07-13T13:36:04+00:00 | Vulnerability · Source |
| CVE-2026-29009 | redhat_vex | u-boot: U-Boot: Memory corruption via NFS readlink buffer overflow | known not affected: 1 | 2026-07-13T13:35:48+00:00 | Vulnerability · Source |
| CVE-2026-29008 | redhat_vex | U-Boot: U-Boot: Integer underflow leads to Denial of Service | known not affected: 1 | 2026-07-13T13:35:41+00:00 | Vulnerability · Source |
| CVE-2026-59819 | redhat_vex | litellm: LiteLLM: Information disclosure via local file read in test connection endpoint | known not affected: 7 | 2026-07-13T13:26:19+00:00 | Vulnerability · Source |