VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296127 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-1060 | redhat_vex | python: DOS via regular expression catastrophic backtracking in apop() method in pop3lib | fixed: 521 known affected: 24 | 2026-06-30T11:49:35+00:00 | Vulnerability · Source |
| CVE-2017-7519 | redhat_vex | ceph: libradosstriper processes arbitrary printf placeholders in user input | known not affected: 25 | 2026-06-30T11:49:33+00:00 | Vulnerability · Source |
| CVE-2018-1056 | redhat_vex | advancecomp: Heap buffer overflow in zip.cc:zip_entry::load_cent() allows for denial of service or unspecified impact via crafted ZIP file | known affected: 5 | 2026-06-30T11:49:33+00:00 | Vulnerability · Source |
| CVE-2026-48589 | redhat_vex | apache-shiro: shiro-jakarta-ee: Apache Shiro Jakarta EE module: Open Redirect via insufficient HTTP Referer header validation | known affected: 1 | 2026-06-30T11:49:32+00:00 | Vulnerability · Source |
| CVE-2025-4574 | redhat_vex | crossbeam-channel: crossbeam-channel Vulnerable to Double Free on Drop | known affected: 81 known not affected: 61 | 2026-06-30T11:48:21+00:00 | Vulnerability · Source |
| CVE-2025-4478 | redhat_vex | gnome-remote-desktop: freerdp: Unauthenticated RDP Packet Causes Segfault in FreeRDP Leading to Denial of Service | fixed: 65 known not affected: 12 | 2026-06-30T11:48:17+00:00 | Vulnerability · Source |
| CVE-2025-4432 | redhat_vex | ring: Some AES functions may panic when overflow checking is enabled in ring | known affected: 85 | 2026-06-30T11:48:15+00:00 | Vulnerability · Source |
| CVE-2025-4035 | redhat_vex | libsoup: Cookie domain validation bypass via uppercase characters in libsoup | fixed: 18 known affected: 12 | 2026-06-30T11:48:15+00:00 | Vulnerability · Source |
| CVE-2026-34446 | redhat_vex | onnx: ONNX: Information disclosure through hardlink path traversal | known affected: 15 | 2026-06-30T11:47:50+00:00 | Vulnerability · Source |
| CVE-2026-34380 | redhat_vex | OpenEXR: OpenEXR: Denial of Service due to signed integer overflow in image decoding | known affected: 18 | 2026-06-30T11:47:47+00:00 | Vulnerability · Source |
| CVE-2026-34378 | redhat_vex | OpenEXR: OpenEXR: Denial of Service via crafted EXR file integer overflow | known affected: 18 | 2026-06-30T11:47:45+00:00 | Vulnerability · Source |
| CVE-2026-34353 | redhat_vex | ocaml: OCaml: Information disclosure via integer overflow in Bigarray.reshape | known affected: 50 | 2026-06-30T11:47:44+00:00 | Vulnerability · Source |
| CVE-2026-34352 | redhat_vex | TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions | fixed: 408 | 2026-06-30T11:47:41+00:00 | Vulnerability · Source |
| CVE-2026-34165 | redhat_vex | github.com/go-git/go-git/v5: go-git: Denial of Service via crafted .idx file | known affected: 198 | 2026-06-30T11:47:35+00:00 | Vulnerability · Source |
| CVE-2026-33995 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via double-free vulnerability during NLA connection teardown | known affected: 31 | 2026-06-30T11:47:30+00:00 | Vulnerability · Source |
| CVE-2026-33987 | redhat_vex | FreeRDP: FreeRDP: Memory corruption vulnerability allows denial of service or arbitrary code execution | fixed: 195 known affected: 5 known not affected: 19 | 2026-06-30T11:47:27+00:00 | Vulnerability · Source |
| CVE-2026-33985 | redhat_vex | FreeRDP: FreeRDP: Information disclosure via heap memory out of bounds read | fixed: 781 known affected: 5 | 2026-06-30T11:47:25+00:00 | Vulnerability · Source |
| CVE-2026-33982 | redhat_vex | FreeRDP: FreeRDP: Information disclosure and denial of service via heap-buffer-overflow read | fixed: 195 known affected: 12 known not affected: 12 | 2026-06-30T11:47:23+00:00 | Vulnerability · Source |
| CVE-2026-33936 | redhat_vex | python-ecdsa: ecdsa: Denial of Service via crafted DER input | known affected: 6 | 2026-06-30T11:47:20+00:00 | Vulnerability · Source |
| CVE-2026-33753 | redhat_vex | rfc3161-client: rfc3161-client: Authorization bypass allows impersonation of TimeStamping Authority | known affected: 1 | 2026-06-30T11:47:17+00:00 | Vulnerability · Source |
| CVE-2026-33532 | redhat_vex | yaml: yaml: Denial of Service via deeply nested YAML document parsing | known affected: 125 | 2026-06-30T11:47:03+00:00 | Vulnerability · Source |
| CVE-2026-33375 | redhat_vex | Grafana MSSQL Data Source Plugin: Grafana MSSQL Data Source Plugin: Denial of Service via Out-Of-Memory exhaustion | known not affected: 21 | 2026-06-30T11:47:02+00:00 | Vulnerability · Source |
| CVE-2026-32884 | redhat_vex | Botan: Botan: Certificate validation bypass due to mixed-case Common Name in X.509 certificates | known affected: 2 | 2026-06-30T11:46:59+00:00 | Vulnerability · Source |
| CVE-2026-32883 | redhat_vex | Botan: Botan: Compromised certificate validation integrity via unverified OCSP response signatures | known affected: 2 | 2026-06-30T11:46:57+00:00 | Vulnerability · Source |
| CVE-2026-32877 | redhat_vex | Botan: Botan: Denial of Service via heap over-read during SM2 decryption | known not affected: 2 | 2026-06-30T11:46:55+00:00 | Vulnerability · Source |
| CVE-2026-32762 | redhat_vex | rack: Rack: Parameter smuggling via improper Forwarded header parsing | known affected: 50 | 2026-06-30T11:46:53+00:00 | Vulnerability · Source |
| CVE-2026-31407 | redhat_vex | kernel: netfilter: conntrack: add missing netlink policy validations | known affected: 274 | 2026-06-30T11:46:50+00:00 | Vulnerability · Source |
| CVE-2026-31406 | redhat_vex | kernel: xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() | known affected: 76 known not affected: 198 | 2026-06-30T11:46:48+00:00 | Vulnerability · Source |
| CVE-2026-31404 | redhat_vex | kernel: NFSD: Defer sub-object cleanup in export put callbacks | known affected: 198 known not affected: 76 | 2026-06-30T11:46:46+00:00 | Vulnerability · Source |
| CVE-2026-31403 | redhat_vex | kernel: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd | known affected: 274 | 2026-06-30T11:46:44+00:00 | Vulnerability · Source |
| CVE-2026-31398 | redhat_vex | kernel: mm/rmap: fix incorrect pte restoration for lazyfree folios | known affected: 14 known not affected: 260 | 2026-06-30T11:46:41+00:00 | Vulnerability · Source |
| CVE-2026-31392 | redhat_vex | kernel: smb: client: fix krb5 mount with username option | known affected: 232 known not affected: 42 | 2026-06-30T11:46:40+00:00 | Vulnerability · Source |
| CVE-2026-31393 | redhat_vex | kernel: Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access | known affected: 260 known not affected: 14 | 2026-06-30T11:46:39+00:00 | Vulnerability · Source |
| CVE-2026-31389 | redhat_vex | kernel: spi: fix use-after-free on controller registration failure | known affected: 184 known not affected: 90 | 2026-06-30T11:46:36+00:00 | Vulnerability · Source |
| CVE-2026-28375 | redhat_vex | grafana: Grafana: Denial of Service via testdata data-source | known affected: 21 | 2026-06-30T11:46:31+00:00 | Vulnerability · Source |
| CVE-2026-27879 | redhat_vex | Grafana: Grafana: Denial of Service via resample query | known affected: 21 | 2026-06-30T11:46:30+00:00 | Vulnerability · Source |
| CVE-2026-27855 | redhat_vex | dovecot: Dovecot: Replay attack allows unauthorized login via observed One-Time Password (OTP) exchange | known affected: 12 known not affected: 18 | 2026-06-30T11:46:29+00:00 | Vulnerability · Source |
| CVE-2026-27859 | redhat_vex | dovecot: Dovecot: Denial of Service via excessive RFC 2231 MIME parameters | known affected: 30 | 2026-06-30T11:46:26+00:00 | Vulnerability · Source |
| CVE-2026-27456 | redhat_vex | util-linux: TOCTOU in the mount program when setting up loop devices | fixed: 3 known affected: 47 known not affected: 16 | 2026-06-30T11:46:24+00:00 | Vulnerability · Source |
| CVE-2026-26962 | redhat_vex | rack: Rack: Header injection and response splitting via incorrect multipart header parsing | known affected: 50 | 2026-06-30T11:46:17+00:00 | Vulnerability · Source |
| CVE-2026-24450 | redhat_vex | LibRaw: LibRaw: Arbitrary code execution via a specially crafted malicious file | fixed: 132 known affected: 7 | 2026-06-30T11:46:16+00:00 | Vulnerability · Source |
| CVE-2026-23462 | redhat_vex | kernel: Bluetooth: HIDP: Fix possible UAF | known affected: 274 | 2026-06-30T11:46:12+00:00 | Vulnerability · Source |
| CVE-2026-23457 | redhat_vex | kernel: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() | known affected: 274 | 2026-06-30T11:46:08+00:00 | Vulnerability · Source |
| CVE-2026-23461 | redhat_vex | kernel: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user | known affected: 184 known not affected: 90 | 2026-06-30T11:46:08+00:00 | Vulnerability · Source |
| CVE-2026-23456 | redhat_vex | kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case | known affected: 274 | 2026-06-30T11:46:06+00:00 | Vulnerability · Source |
| CVE-2026-23451 | redhat_vex | kernel: bonding: prevent potential infinite loop in bond_header_parse() | known affected: 14 known not affected: 260 | 2026-06-30T11:46:03+00:00 | Vulnerability · Source |
| CVE-2026-23450 | redhat_vex | kernel: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() | known affected: 232 known not affected: 42 | 2026-06-30T11:46:02+00:00 | Vulnerability · Source |
| CVE-2026-23449 | redhat_vex | kernel: net/sched: teql: Fix double-free in teql_master_xmit | known affected: 246 known not affected: 28 | 2026-06-30T11:45:58+00:00 | Vulnerability · Source |
| CVE-2026-23445 | redhat_vex | kernel: igc: fix page fault in XDP TX timestamps handling | known affected: 184 known not affected: 90 | 2026-06-30T11:45:57+00:00 | Vulnerability · Source |
| CVE-2026-23444 | redhat_vex | kernel: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure | known affected: 246 known not affected: 28 | 2026-06-30T11:45:55+00:00 | Vulnerability · Source |