VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296099 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-23562 | redhat_vex | xen: Xen: VM administrator gains unauthorized host hardware access via PCI passthrough | known not affected: 1 | 2026-07-13T13:26:15+00:00 | Vulnerability · Source |
| CVE-2026-42486 | redhat_vex | xen: Xen: Arbitrary dom0 file write due to improper restriction of VM parameter | known not affected: 1 | 2026-07-13T13:21:16+00:00 | Vulnerability · Source |
| CVE-2026-23560 | redhat_vex | xen: Xen: VM-admin can hide virtual machines from management and operations | known not affected: 1 | 2026-07-13T13:21:01+00:00 | Vulnerability · Source |
| CVE-2026-60108 | redhat_vex | zeek: Zeek: Denial of Service via uncontrolled memory consumption in FTP analyzer | known not affected: 1 | 2026-07-13T13:20:44+00:00 | Vulnerability · Source |
| CVE-2026-60109 | redhat_vex | zeek: Zeek: Denial of Service via crafted Kerberos KRB_ERROR message | known not affected: 1 | 2026-07-13T13:20:38+00:00 | Vulnerability · Source |
| CVE-2026-15584 | redhat_vex | RedHatInsights/incluster-checks: incluster-checks: Privileged host-chroot debug pods created in shared default namespace enable privilege escalation to node root | known affected: 1 | 2026-07-13T13:12:29+00:00 | Vulnerability · Source |
| CVE-2026-55807 | redhat_vex | Drupal core: Drupal core: Server-Side Request Forgery vulnerability | known not affected: 1 | 2026-07-13T12:53:27+00:00 | Vulnerability · Source |
| CVE-2026-55808 | redhat_vex | drupal: Drupal core: Cross-site Scripting (XSS) via improper input neutralization | known not affected: 1 | 2026-07-13T12:47:54+00:00 | Vulnerability · Source |
| CVE-2026-40973 | redhat_vex | Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory | fixed: 10 known affected: 2 known not affected: 68 | 2026-07-13T12:25:53+00:00 | Vulnerability · Source |
| CVE-2026-62147 | redhat_vex | tempo-operator: Tempo Operator: Query RBAC bypass | known affected: 2 | 2026-07-13T12:06:35+00:00 | Vulnerability · Source |
| CVE-2026-53538 | redhat_vex | python-multipart: Python-Multipart: Information disclosure due to parser differential in form data handling | known affected: 39 known not affected: 18 | 2026-07-13T11:56:42+00:00 | Vulnerability · Source |
| CVE-2026-15551 | redhat_vex | rlottie: rlottie: Buffer overflow due to integer overflow | known not affected: 1 | 2026-07-13T11:16:30+00:00 | Vulnerability · Source |
| CVE-2026-58379 | redhat_vex | gimp: gimp: Heap buffer overflow in read_channel_data() | fixed: 24 known not affected: 29 | 2026-07-13T10:55:38+00:00 | Vulnerability · Source |
| CVE-2026-15574 | redhat_vex | vllm-orchestrator-gateway: vllm-orchestrator-gateway: Authorization header and full chat payloads logged at hard-coded DEBUG default | under investigation: 1 | 2026-07-13T09:05:52+00:00 | Vulnerability · Source |
| CVE-2026-58467 | redhat_vex | cockpit: Cockpit CMS: Arbitrary file read and code execution via path traversal | known affected: 32 | 2026-07-13T07:20:57+00:00 | Vulnerability · Source |
| CVE-2023-54365 | redhat_vex | github.com/traefik/traefik: net/http2: Traefik: Denial of Service via HTTP/2 Rapid Reset technique | known not affected: 3 | 2026-07-13T07:15:40+00:00 | Vulnerability · Source |
| CVE-2026-58253 | redhat_vex | github.com/nats-io/nats-server: NATS Server: Authentication bypass and privilege escalation via parser fast path | known not affected: 2 | 2026-07-13T07:11:35+00:00 | Vulnerability · Source |
| CVE-2026-58208 | redhat_vex | github.com/nats-io/nats-server: NATS Server: Denial of Service due to incorrect MQTT-over-WebSocket request routing | known not affected: 2 | 2026-07-13T07:06:26+00:00 | Vulnerability · Source |
| CVE-2026-58252 | redhat_vex | github.com/nats-io/nats-server: NATS Server: Information disclosure via access control bypass in wildcard and queue subscriptions | known not affected: 2 | 2026-07-13T06:57:04+00:00 | Vulnerability · Source |
| CVE-2026-58251 | redhat_vex | github.com/nats-io/nats-server: NATS Server: Information disclosure due to bypass of subject deny rules via queue subscriptions | known not affected: 2 | 2026-07-13T06:21:08+00:00 | Vulnerability · Source |
| CVE-2026-58250 | redhat_vex | github.com/nats-io/nats-server: NATS Server: Denial of Service via repeated leafnode INFO messages during pre-authentication | known not affected: 2 | 2026-07-13T06:16:01+00:00 | Vulnerability · Source |
| CVE-2026-53309 | redhat_vex | kernel: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison | known not affected: 274 | 2026-07-13T05:50:22+00:00 | Vulnerability · Source |
| CVE-2025-38096 | microsoft_vex | wifi: iwlwifi: don't warn when if there is a FW error | known affected: 17 under investigation: 3 | 2026-07-13T01:46:49+00:00 | Vulnerability · Source |
| CVE-2021-35042 | suse_vex | SUSE CVE CVE-2021-35042 | known not affected: 6 recommended: 15 | 2026-07-13T01:43:34+00:00 | Vulnerability · Source |
| CVE-2022-4543 | microsoft_vex | A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems. | fixed: 2 known affected: 23 | 2026-07-13T01:38:47+00:00 | Vulnerability · Source |
| CVE-2024-36024 | microsoft_vex | drm/amd/display: Disable idle reallow as part of command/gpint execution | known affected: 19 under investigation: 1 | 2026-07-12T15:02:39+00:00 | Vulnerability · Source |
| CVE-2025-37882 | microsoft_vex | usb: xhci: Fix isochronous Ring Underrun/Overrun event handling | known affected: 8 under investigation: 12 | 2026-07-12T15:02:11+00:00 | Vulnerability · Source |
| CVE-2025-37807 | microsoft_vex | bpf: Fix kmemleak warning for percpu hashmap | known affected: 20 | 2026-07-12T15:01:53+00:00 | Vulnerability · Source |
| CVE-2024-24856 | microsoft_vex | NULL pointer deference in acpi_db_convert_to_package of Linux acpi module | under investigation: 17 | 2026-07-12T15:01:27+00:00 | Vulnerability · Source |
| CVE-2025-37745 | microsoft_vex | PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() | known affected: 18 under investigation: 2 | 2026-07-12T15:00:46+00:00 | Vulnerability · Source |
| CVE-2024-35794 | microsoft_vex | dm-raid: really frozen sync_thread during suspend | fixed: 2 known affected: 21 under investigation: 1 | 2026-07-12T14:59:44+00:00 | Vulnerability · Source |
| CVE-2023-4622 | redhat_vex | kernel: use after free in unix_stream_sendpage | fixed: 1773 known affected: 22 known not affected: 15 | 2026-07-12T14:20:16+00:00 | Vulnerability · Source |
| CVE-2026-31636 | redhat_vex | kernel: rxrpc: fix RESPONSE authenticator parser OOB read | fixed: 309 known not affected: 198 | 2026-07-12T10:21:13+00:00 | Vulnerability · Source |
| CVE-2026-43322 | redhat_vex | kernel: Bluetooth: hci_sync: Fix UAF in le_read_features_complete | fixed: 309 known not affected: 198 | 2026-07-12T09:50:58+00:00 | Vulnerability · Source |
| CVE-2026-31772 | redhat_vex | kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync | fixed: 612 known affected: 22 known not affected: 90 | 2026-07-12T09:50:56+00:00 | Vulnerability · Source |
| CVE-2026-34002 | redhat_vex | xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in XKB modifier map handling | fixed: 905 known affected: 52 | 2026-07-12T09:26:21+00:00 | Vulnerability · Source |
| CVE-2026-34000 | redhat_vex | xwayland: xorg: X.Org X server: Information disclosure and denial of service via out-of-bounds read in XKB geometry processing. | fixed: 945 known affected: 44 | 2026-07-12T09:26:07+00:00 | Vulnerability · Source |
| CVE-2026-4887 | redhat_vex | gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image | fixed: 587 known affected: 6 | 2026-07-12T09:21:10+00:00 | Vulnerability · Source |
| CVE-2026-40385 | redhat_vex | libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling | fixed: 203 known affected: 3 known not affected: 4 | 2026-07-12T09:16:09+00:00 | Vulnerability · Source |
| CVE-2024-6501 | redhat_vex | NetworkManager: Denial of Service | fixed: 223 known affected: 34 known not affected: 24 | 2026-07-12T09:11:07+00:00 | Vulnerability · Source |
| CVE-2026-40386 | redhat_vex | libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding | fixed: 261 known affected: 3 | 2026-07-12T09:10:58+00:00 | Vulnerability · Source |
| CVE-2026-23066 | redhat_vex | kernel: Linux kernel: Denial of Service via unsafe requeue in rxrpc_recvmsg | fixed: 1092 known affected: 184 known not affected: 75 | 2026-07-12T07:55:10+00:00 | Vulnerability · Source |
| CVE-2024-32475 | redhat_vex | envoy: abnormal termination when using auto_sni with authority header longer than 255 characters | fixed: 60 known affected: 3 | 2026-07-12T05:35:09+00:00 | Vulnerability · Source |
| CVE-2024-23326 | redhat_vex | envoy: Envoy incorrectly accepts HTTP 200 response for entering upgrade mode | fixed: 32 known affected: 3 | 2026-07-12T05:35:09+00:00 | Vulnerability · Source |
| CVE-2026-26104 | redhat_vex | udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API | fixed: 146 known not affected: 25 | 2026-07-12T05:05:22+00:00 | Vulnerability · Source |
| CVE-2026-23193 | redhat_vex | kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() | fixed: 2391 known affected: 22 known not affected: 14 | 2026-07-12T02:58:30+00:00 | Vulnerability · Source |
| CVE-2025-14424 | redhat_vex | gimp: GIMP: Remote Code Execution via XCF File Parsing Use-After-Free | fixed: 24 known affected: 6 known not affected: 23 | 2026-07-12T02:36:40+00:00 | Vulnerability · Source |
| CVE-2026-22998 | redhat_vex | kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec | fixed: 762 known affected: 22 known not affected: 42 | 2026-07-12T02:31:50+00:00 | Vulnerability · Source |
| CVE-2025-14422 | redhat_vex | gimp: GIMP: Remote Code Execution via PNM file parsing integer overflow | fixed: 591 known affected: 6 | 2026-07-12T02:17:37+00:00 | Vulnerability · Source |
| CVE-2025-14425 | redhat_vex | gimp: GIMP: Remote Code Execution via JP2 file parsing heap-based buffer overflow | fixed: 144 known affected: 6 known not affected: 23 | 2026-07-12T02:17:37+00:00 | Vulnerability · Source |