VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
284624 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-68973 | redhat_vex | GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write | fixed: 394 known affected: 3 known not affected: 149 | 2026-07-26T13:00:19+00:00 | Vulnerability · Source |
| CVE-2025-49796 | redhat_vex | libxml: Type confusion leads to Denial of service (DoS) | fixed: 568 known affected: 5 known not affected: 7 | 2026-07-26T13:00:14+00:00 | Vulnerability · Source |
| CVE-2025-6965 | redhat_vex | sqlite: Integer Truncation in SQLite | fixed: 1147 known affected: 8 known not affected: 140 | 2026-07-26T12:59:57+00:00 | Vulnerability · Source |
| CVE-2025-54389 | redhat_vex | aide: improper output neutralization enables bypassing | fixed: 134 known affected: 2 known not affected: 1 | 2026-07-26T12:58:08+00:00 | Vulnerability · Source |
| CVE-2026-32287 | redhat_vex | github.com/antchfx/xpath: github.com/antchfx/xpath: Denial of Service due to infinite loop via boolean XPath expressions | fixed: 4 known affected: 23 known not affected: 11 | 2026-07-26T12:05:41+00:00 | Vulnerability · Source |
| CVE-2026-54058 | redhat_vex | Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image | known affected: 74 known not affected: 8 under investigation: 9 | 2026-07-26T12:00:54+00:00 | Vulnerability · Source |
| CVE-2025-66448 | redhat_vex | vllm: vLLM: Remote Code Execution via malicious model configuration | fixed: 37 known affected: 16 known not affected: 653 | 2026-07-26T11:47:33+00:00 | Vulnerability · Source |
| CVE-2026-24842 | redhat_vex | node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check | fixed: 57 known affected: 25 known not affected: 243 | 2026-07-26T11:42:49+00:00 | Vulnerability · Source |
| CVE-2026-23745 | redhat_vex | node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives | fixed: 53 known affected: 24 known not affected: 664 | 2026-07-26T11:42:40+00:00 | Vulnerability · Source |
| CVE-2024-25621 | redhat_vex | github.com/containerd/containerd: containerd local privilege escalation | fixed: 194 known affected: 91 known not affected: 737 | 2026-07-26T11:41:11+00:00 | Vulnerability · Source |
| CVE-2026-6321 | redhat_vex | fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies | fixed: 290 known affected: 30 known not affected: 963 | 2026-07-26T11:39:58+00:00 | Vulnerability · Source |
| CVE-2025-69873 | redhat_vex | ajv: ReDoS via $data reference | fixed: 327 known affected: 38 known not affected: 4716 | 2026-07-26T11:38:48+00:00 | Vulnerability · Source |
| CVE-2025-59343 | redhat_vex | tar-fs: tar-fs symlink validation bypass | fixed: 60 known affected: 12 known not affected: 475 | 2026-07-26T11:37:29+00:00 | Vulnerability · Source |
| CVE-2026-50010 | redhat_vex | netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass | fixed: 8 known affected: 34 known not affected: 17 | 2026-07-26T11:37:09+00:00 | Vulnerability · Source |
| CVE-2026-45416 | redhat_vex | netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake | fixed: 8 known affected: 34 known not affected: 17 | 2026-07-26T11:37:05+00:00 | Vulnerability · Source |
| CVE-2026-45292 | redhat_vex | opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage | fixed: 13 known affected: 27 known not affected: 111 under investigation: 17 | 2026-07-26T11:37:00+00:00 | Vulnerability · Source |
| CVE-2026-44249 | redhat_vex | netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation | fixed: 20 known affected: 32 known not affected: 68 | 2026-07-26T11:36:56+00:00 | Vulnerability · Source |
| CVE-2026-33997 | redhat_vex | moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation | fixed: 12 known affected: 2 known not affected: 56 under investigation: 1 | 2026-07-26T11:33:07+00:00 | Vulnerability · Source |
| CVE-2026-33247 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Information disclosure of credentials via monitoring port and command-line arguments | fixed: 12 known not affected: 52 | 2026-07-26T11:33:03+00:00 | Vulnerability · Source |
| CVE-2026-33218 | redhat_vex | nats-server: github.com/nats-io/nats-server: NATS-Server: Denial of Service via malformed message pre-authentication on leafnode port | fixed: 12 known not affected: 52 | 2026-07-26T11:32:56+00:00 | Vulnerability · Source |
| CVE-2026-33217 | redhat_vex | nats-server: github.com/nats-io/nats-server: NATS-Server: Access control bypass via unapplied ACLs in MQTT namespace | fixed: 12 known not affected: 52 | 2026-07-26T11:32:47+00:00 | Vulnerability · Source |
| CVE-2026-29785 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Denial of Service via leafnode compression | fixed: 12 known not affected: 52 | 2026-07-26T11:32:37+00:00 | Vulnerability · Source |
| CVE-2026-33487 | redhat_vex | github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue | fixed: 32 known not affected: 523 | 2026-07-26T11:31:08+00:00 | Vulnerability · Source |
| CVE-2026-10840 | redhat_vex | openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to Kueue and cert-manager resources | fixed: 8 known affected: 4 known not affected: 68 | 2026-07-26T11:30:33+00:00 | Vulnerability · Source |
| CVE-2026-41567 | redhat_vex | docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload | fixed: 120 known affected: 59 known not affected: 77 | 2026-07-26T11:29:41+00:00 | Vulnerability · Source |
| CVE-2026-21728 | redhat_vex | grafana/tempo: Tempo: Denial of Service via large queries | fixed: 20 known affected: 4 known not affected: 97 | 2026-07-26T11:27:01+00:00 | Vulnerability · Source |
| CVE-2026-4598 | redhat_vex | jsrsasign: jsrsasign: Denial of Service via infinite loop in bnModInverse function with crafted inputs | fixed: 19 known not affected: 124 | 2026-07-26T11:23:10+00:00 | Vulnerability · Source |
| CVE-2026-2377 | redhat_vex | mirror-registry: quay: quay: Server-Side Request Forgery via log export functionality | fixed: 21 known affected: 2 known not affected: 123 | 2026-07-26T11:22:58+00:00 | Vulnerability · Source |
| CVE-2024-34156 | redhat_vex | encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion | fixed: 7045 known affected: 37 known not affected: 2455 | 2026-07-26T11:22:13+00:00 | Vulnerability · Source |
| CVE-2026-42499 | redhat_vex | net/mail: golang: net/mail: Denial of Service via pathological email address parsing | fixed: 125 known affected: 151 known not affected: 657 under investigation: 116 | 2026-07-26T11:18:12+00:00 | Vulnerability · Source |
| CVE-2026-39832 | redhat_vex | golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions | fixed: 700 known affected: 76 known not affected: 422 under investigation: 2 | 2026-07-26T11:17:58+00:00 | Vulnerability · Source |
| CVE-2026-32591 | redhat_vex | mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration | fixed: 25 known affected: 2 known not affected: 151 | 2026-07-26T11:17:19+00:00 | Vulnerability · Source |
| CVE-2026-26007 | redhat_vex | cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves | fixed: 885 known affected: 14 known not affected: 1174 | 2026-07-26T11:12:22+00:00 | Vulnerability · Source |
| CVE-2026-32286 | redhat_vex | github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server | fixed: 131 known affected: 25 known not affected: 286 | 2026-07-26T11:11:43+00:00 | Vulnerability · Source |
| CVE-2026-27459 | redhat_vex | pyOpenSSL: DTLS cookie callback buffer overflow | fixed: 99 known affected: 7 known not affected: 1444 | 2026-07-26T11:10:54+00:00 | Vulnerability · Source |
| CVE-2026-33894 | redhat_vex | node-forge: Forge: Signature Forgery via Weak RSASSA PKCS#1 v1.5 Verification | fixed: 33 known affected: 16 known not affected: 496 | 2026-07-26T11:08:31+00:00 | Vulnerability · Source |
| CVE-2026-32589 | redhat_vex | mirror-registry: quay: insecure direct object reference in BlobUpload | fixed: 28 known affected: 1 known not affected: 150 | 2026-07-26T11:08:17+00:00 | Vulnerability · Source |
| CVE-2025-58190 | redhat_vex | golang.org/x/net/html: Infinite parsing loop in golang.org/x/net | fixed: 40 known affected: 326 known not affected: 255 | 2026-07-26T10:26:30+00:00 | Vulnerability · Source |
| CVE-2025-7783 | redhat_vex | form-data: Unsafe random function in form-data | fixed: 196 known affected: 71 known not affected: 1005 | 2026-07-26T10:21:06+00:00 | Vulnerability · Source |
| CVE-2020-11023 | redhat_vex | jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods | fixed: 5510 known affected: 169 known not affected: 1019 | 2026-07-26T08:45:09+00:00 | Vulnerability · Source |
| CVE-2024-45339 | redhat_vex | github.com/golang/glog: Vulnerability when creating log files in github.com/golang/glog | fixed: 386 known affected: 30 known not affected: 14340 | 2026-07-26T07:28:02+00:00 | Vulnerability · Source |
| CVE-2026-22797 | redhat_vex | keystonemiddleware: OpenStack keystonemiddleware: Privilege escalation and user impersonation via forged authentication headers | fixed: 10 known not affected: 3127 | 2026-07-26T07:22:06+00:00 | Vulnerability · Source |
| CVE-2025-61731 | redhat_vex | cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive | fixed: 5320 known affected: 10 known not affected: 761 | 2026-07-26T07:14:27+00:00 | Vulnerability · Source |
| CVE-2002-2443 | suse_vex | SUSE CVE CVE-2002-2443 | known affected: 2 recommended: 325 | 2026-07-26T02:01:51+00:00 | Vulnerability · Source |
| CVE-2002-20001 | suse_vex | SUSE CVE CVE-2002-20001 | known not affected: 162 recommended: 140 | 2026-07-26T02:01:49+00:00 | Vulnerability · Source |
| CVE-2003-1332 | suse_vex | SUSE CVE CVE-2003-1332 | known not affected: 2097 | 2026-07-26T02:01:47+00:00 | Vulnerability · Source |
| CVE-2004-0427 | suse_vex | SUSE CVE CVE-2004-0427 | known not affected: 25 | 2026-07-26T02:01:44+00:00 | Vulnerability · Source |
| CVE-2004-0791 | suse_vex | SUSE CVE CVE-2004-0791 | known not affected: 248 | 2026-07-26T02:01:41+00:00 | Vulnerability · Source |
| CVE-2004-1074 | suse_vex | SUSE CVE CVE-2004-1074 | known not affected: 372 | 2026-07-26T02:01:39+00:00 | Vulnerability · Source |
| CVE-2004-2771 | suse_vex | SUSE CVE CVE-2004-2771 | known affected: 394 known not affected: 5 recommended: 92 | 2026-07-26T02:01:36+00:00 | Vulnerability · Source |