VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
284766 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-68160 | suse_vex | SUSE CVE CVE-2025-68160 | known affected: 462 known not affected: 88 recommended: 441 | 2026-07-26T16:42:16+00:00 | Vulnerability · Source |
| CVE-2025-68210 | suse_vex | SUSE CVE CVE-2025-68210 | first fixed: 2 known affected: 394 known not affected: 415 recommended: 172 | 2026-07-26T16:42:14+00:00 | Vulnerability · Source |
| CVE-2026-2100 | suse_vex | SUSE CVE CVE-2026-2100 | known not affected: 232 recommended: 25 | 2026-07-26T16:42:10+00:00 | Vulnerability · Source |
| CVE-2026-4878 | suse_vex | SUSE CVE CVE-2026-4878 | known affected: 405 recommended: 183 | 2026-07-26T16:42:07+00:00 | Vulnerability · Source |
| CVE-2026-64090 | suse_vex | SUSE CVE CVE-2026-64090 | No product status | 2026-07-26T16:41:43+00:00 | Vulnerability · Source |
| CVE-2026-33022 | redhat_vex | github.com/tektoncd/pipeline: Tekton Pipelines: Denial of Service via long resolver names | fixed: 10 known affected: 72 known not affected: 240 | 2026-07-26T15:27:09+00:00 | Vulnerability · Source |
| CVE-2025-48379 | redhat_vex | python-pillow: pillow: Pillow DDS Heap Buffer Overflow | fixed: 12 known affected: 18 known not affected: 45 | 2026-07-26T15:10:05+00:00 | Vulnerability · Source |
| CVE-2024-45337 | redhat_vex | golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto | fixed: 1728 known affected: 74 known not affected: 8477 | 2026-07-26T15:09:27+00:00 | Vulnerability · Source |
| CVE-2026-26960 | redhat_vex | node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation | fixed: 13 known affected: 15 known not affected: 220 | 2026-07-26T15:00:38+00:00 | Vulnerability · Source |
| CVE-2025-64329 | redhat_vex | github.com/containerd/containerd: containerd: Memory exhaustion via CRI Attach implementation goroutine leaks | fixed: 112 known affected: 372 known not affected: 47 under investigation: 1 | 2026-07-26T14:58:11+00:00 | Vulnerability · Source |
| CVE-2025-57810 | redhat_vex | jspdf: jsPDF Denial of Service (DoS) | fixed: 4 known affected: 2 known not affected: 21 | 2026-07-26T14:52:03+00:00 | Vulnerability · Source |
| CVE-2026-27571 | redhat_vex | nats-server: WebSockets pre-auth memory DoS | fixed: 8 known affected: 3 known not affected: 35 | 2026-07-26T14:49:51+00:00 | Vulnerability · Source |
| CVE-2026-34481 | redhat_vex | org.apache.logging.log4j: Apache Log4j JsonTemplateLayout: Denial of Service via invalid JSON output | fixed: 4 known affected: 9 known not affected: 3 | 2026-07-26T14:49:38+00:00 | Vulnerability · Source |
| CVE-2026-34480 | redhat_vex | org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging | fixed: 7 known affected: 34 known not affected: 222 | 2026-07-26T14:49:30+00:00 | Vulnerability · Source |
| CVE-2026-34479 | redhat_vex | org.apache.logging.log4j/log4j-1.2-api: Apache Log4j 1-to-Log4j 2 bridge: Log processing denial of service due to improper XML escaping | fixed: 2 known affected: 16 | 2026-07-26T14:49:22+00:00 | Vulnerability · Source |
| CVE-2026-33215 | redhat_vex | nats-server: NATS-Server: Session and message hijacking via MQTT Client ID malfeasance | fixed: 12 known not affected: 52 | 2026-07-26T14:44:48+00:00 | Vulnerability · Source |
| CVE-2026-40890 | redhat_vex | github.com/gomarkdown/markdown: github.com/gomarkdown/markdown: Denial of Service via malformed Markdown input | fixed: 20 known not affected: 249 | 2026-07-26T14:40:22+00:00 | Vulnerability · Source |
| CVE-2026-33813 | redhat_vex | golang.org/x/image: golang: golang.org/x/image: Denial of Service via malformed WEBP image parsing | fixed: 30 known affected: 15 known not affected: 144 | 2026-07-26T14:40:03+00:00 | Vulnerability · Source |
| CVE-2026-40161 | redhat_vex | github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure of Git API token via user-controlled serverURL | fixed: 32 known affected: 21 known not affected: 59 | 2026-07-26T14:39:05+00:00 | Vulnerability · Source |
| CVE-2026-32590 | redhat_vex | mirror-registry: remote code execution using pickle deserialization | fixed: 32 known affected: 1 known not affected: 177 | 2026-07-26T14:17:07+00:00 | Vulnerability · Source |
| CVE-2026-31790 | redhat_vex | openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key | fixed: 253 known affected: 6 known not affected: 48 under investigation: 1 | 2026-07-26T14:12:48+00:00 | Vulnerability · Source |
| CVE-2026-2100 | redhat_vex | p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters | fixed: 149 known not affected: 14 under investigation: 1 | 2026-07-26T14:12:22+00:00 | Vulnerability · Source |
| CVE-2025-9230 | redhat_vex | openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap | fixed: 632 known affected: 18 known not affected: 250 | 2026-07-26T14:10:41+00:00 | Vulnerability · Source |
| CVE-2026-31812 | redhat_vex | quinn-proto: quinn-proto: Denial of Service via crafted QUIC Initial packet | fixed: 14 known affected: 20 known not affected: 443 | 2026-07-26T13:02:09+00:00 | Vulnerability · Source |
| CVE-2025-68973 | redhat_vex | GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write | fixed: 394 known affected: 3 known not affected: 149 | 2026-07-26T13:00:19+00:00 | Vulnerability · Source |
| CVE-2025-49796 | redhat_vex | libxml: Type confusion leads to Denial of service (DoS) | fixed: 568 known affected: 5 known not affected: 7 | 2026-07-26T13:00:14+00:00 | Vulnerability · Source |
| CVE-2025-6965 | redhat_vex | sqlite: Integer Truncation in SQLite | fixed: 1147 known affected: 8 known not affected: 140 | 2026-07-26T12:59:57+00:00 | Vulnerability · Source |
| CVE-2025-54389 | redhat_vex | aide: improper output neutralization enables bypassing | fixed: 134 known affected: 2 known not affected: 1 | 2026-07-26T12:58:08+00:00 | Vulnerability · Source |
| CVE-2026-32287 | redhat_vex | github.com/antchfx/xpath: github.com/antchfx/xpath: Denial of Service due to infinite loop via boolean XPath expressions | fixed: 4 known affected: 23 known not affected: 11 | 2026-07-26T12:05:41+00:00 | Vulnerability · Source |
| CVE-2026-54058 | redhat_vex | Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image | known affected: 74 known not affected: 8 under investigation: 9 | 2026-07-26T12:00:54+00:00 | Vulnerability · Source |
| CVE-2025-66448 | redhat_vex | vllm: vLLM: Remote Code Execution via malicious model configuration | fixed: 37 known affected: 16 known not affected: 653 | 2026-07-26T11:47:33+00:00 | Vulnerability · Source |
| CVE-2026-24842 | redhat_vex | node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check | fixed: 57 known affected: 25 known not affected: 243 | 2026-07-26T11:42:49+00:00 | Vulnerability · Source |
| CVE-2026-23745 | redhat_vex | node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives | fixed: 53 known affected: 24 known not affected: 664 | 2026-07-26T11:42:40+00:00 | Vulnerability · Source |
| CVE-2024-25621 | redhat_vex | github.com/containerd/containerd: containerd local privilege escalation | fixed: 194 known affected: 91 known not affected: 737 | 2026-07-26T11:41:11+00:00 | Vulnerability · Source |
| CVE-2026-6321 | redhat_vex | fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies | fixed: 290 known affected: 30 known not affected: 963 | 2026-07-26T11:39:58+00:00 | Vulnerability · Source |
| CVE-2025-69873 | redhat_vex | ajv: ReDoS via $data reference | fixed: 327 known affected: 38 known not affected: 4716 | 2026-07-26T11:38:48+00:00 | Vulnerability · Source |
| CVE-2025-59343 | redhat_vex | tar-fs: tar-fs symlink validation bypass | fixed: 60 known affected: 12 known not affected: 475 | 2026-07-26T11:37:29+00:00 | Vulnerability · Source |
| CVE-2026-50010 | redhat_vex | netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass | fixed: 8 known affected: 34 known not affected: 17 | 2026-07-26T11:37:09+00:00 | Vulnerability · Source |
| CVE-2026-45416 | redhat_vex | netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake | fixed: 8 known affected: 34 known not affected: 17 | 2026-07-26T11:37:05+00:00 | Vulnerability · Source |
| CVE-2026-45292 | redhat_vex | opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage | fixed: 13 known affected: 27 known not affected: 111 under investigation: 17 | 2026-07-26T11:37:00+00:00 | Vulnerability · Source |
| CVE-2026-44249 | redhat_vex | netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation | fixed: 20 known affected: 32 known not affected: 68 | 2026-07-26T11:36:56+00:00 | Vulnerability · Source |
| CVE-2026-33997 | redhat_vex | moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation | fixed: 12 known affected: 2 known not affected: 56 under investigation: 1 | 2026-07-26T11:33:07+00:00 | Vulnerability · Source |
| CVE-2026-33247 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Information disclosure of credentials via monitoring port and command-line arguments | fixed: 12 known not affected: 52 | 2026-07-26T11:33:03+00:00 | Vulnerability · Source |
| CVE-2026-33218 | redhat_vex | nats-server: github.com/nats-io/nats-server: NATS-Server: Denial of Service via malformed message pre-authentication on leafnode port | fixed: 12 known not affected: 52 | 2026-07-26T11:32:56+00:00 | Vulnerability · Source |
| CVE-2026-33217 | redhat_vex | nats-server: github.com/nats-io/nats-server: NATS-Server: Access control bypass via unapplied ACLs in MQTT namespace | fixed: 12 known not affected: 52 | 2026-07-26T11:32:47+00:00 | Vulnerability · Source |
| CVE-2026-29785 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Denial of Service via leafnode compression | fixed: 12 known not affected: 52 | 2026-07-26T11:32:37+00:00 | Vulnerability · Source |
| CVE-2026-33487 | redhat_vex | github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue | fixed: 32 known not affected: 523 | 2026-07-26T11:31:08+00:00 | Vulnerability · Source |
| CVE-2026-10840 | redhat_vex | openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to Kueue and cert-manager resources | fixed: 8 known affected: 4 known not affected: 68 | 2026-07-26T11:30:33+00:00 | Vulnerability · Source |
| CVE-2026-41567 | redhat_vex | docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload | fixed: 120 known affected: 59 known not affected: 77 | 2026-07-26T11:29:41+00:00 | Vulnerability · Source |
| CVE-2026-21728 | redhat_vex | grafana/tempo: Tempo: Denial of Service via large queries | fixed: 20 known affected: 4 known not affected: 97 | 2026-07-26T11:27:01+00:00 | Vulnerability · Source |