VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296687 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-33901 | redhat_vex | ImageMagick: Magick.NET: ImageMagick: Denial of Service due to heap buffer overflow in MVG decoder | known affected: 14 | 2026-06-30T04:08:31+00:00 | Vulnerability · Source |
| CVE-2026-33806 | redhat_vex | fastify: Fastify: Schema validation bypass via malformed Content-Type header | known not affected: 9 | 2026-06-30T04:08:02+00:00 | Vulnerability · Source |
| CVE-2026-33805 | redhat_vex | @fastify/reply-from: @fastify/http-proxy: Fastify Reply From and HTTP Proxy: Security bypass via Connection header manipulation | fixed: 4 known affected: 4 known not affected: 58 | 2026-06-30T04:08:01+00:00 | Vulnerability · Source |
| CVE-2026-33758 | redhat_vex | OpenBao: reflected XSS in OpenBao OIDC authentication error message | known not affected: 1 | 2026-06-30T04:07:58+00:00 | Vulnerability · Source |
| CVE-2026-33757 | redhat_vex | OpenBao: lack of user confirmation for OpenBao OIDC direct callback mode | known not affected: 1 | 2026-06-30T04:07:57+00:00 | Vulnerability · Source |
| CVE-2026-33557 | redhat_vex | kafka: Apache Kafka: Authentication bypass via improper JWT validation | known affected: 3 known not affected: 29 | 2026-06-30T04:07:50+00:00 | Vulnerability · Source |
| CVE-2026-33526 | redhat_vex | squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling | fixed: 217 known affected: 4 known not affected: 16 | 2026-06-30T04:07:49+00:00 | Vulnerability · Source |
| CVE-2026-33414 | redhat_vex | podman: github.com/containers/podman: Podman: Arbitrary code execution via command injection in HyperV backend | fixed: 4 known not affected: 32 | 2026-06-30T04:07:42+00:00 | Vulnerability · Source |
| CVE-2026-33180 | redhat_vex | HAPI FHIR: hapifhir/org.hl7.fhir.core: HAPI FHIR: Information disclosure and potential impersonation via HTTP redirects sending sensitive headers | known affected: 4 | 2026-06-30T04:07:09+00:00 | Vulnerability · Source |
| CVE-2026-33116 | redhat_vex | dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform | fixed: 1469 known not affected: 6 | 2026-06-30T04:07:03+00:00 | Vulnerability · Source |
| CVE-2026-33150 | redhat_vex | libfuse: libfuse: Arbitrary code execution via use-after-free in io_uring subsystem | known affected: 1 known not affected: 4 | 2026-06-30T04:07:03+00:00 | Vulnerability · Source |
| CVE-2026-32882 | redhat_vex | libheif: libheif: Denial of Service and Information Disclosure vulnerability | known not affected: 1 | 2026-06-30T04:06:53+00:00 | Vulnerability · Source |
| CVE-2026-32875 | redhat_vex | ultrajson: UltraJSON: Denial of Service via large indent parameter in JSON serialization | known not affected: 4 | 2026-06-30T04:06:50+00:00 | Vulnerability · Source |
| CVE-2026-32874 | redhat_vex | UltraJSON: UltraJSON: Denial of Service due to memory leak when parsing large integers | known not affected: 4 | 2026-06-30T04:06:49+00:00 | Vulnerability · Source |
| CVE-2026-32748 | redhat_vex | Squid: Squid: Denial of Service via crafted ICP traffic | fixed: 217 known affected: 4 known not affected: 16 | 2026-06-30T04:06:41+00:00 | Vulnerability · Source |
| CVE-2026-32741 | redhat_vex | libheif: libheif: Heap buffer overflow vulnerability in image decoding | known not affected: 1 | 2026-06-30T04:06:38+00:00 | Vulnerability · Source |
| CVE-2026-32740 | redhat_vex | libheif: libheif: Arbitrary code execution or denial of service via crafted HEIF/AVIF file | known not affected: 1 | 2026-06-30T04:06:36+00:00 | Vulnerability · Source |
| CVE-2026-32695 | redhat_vex | github.com/traefik/traefik: Traefik: Cross-tenant traffic exposure and host restriction bypass via rule-syntax injection in Knative provider | fixed: 4 known not affected: 57 | 2026-06-30T04:06:33+00:00 | Vulnerability · Source |
| CVE-2026-32647 | redhat_vex | nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files | fixed: 825 known affected: 1 known not affected: 190 | 2026-06-30T04:06:31+00:00 | Vulnerability · Source |
| CVE-2026-32305 | redhat_vex | Traefik: github.com/traefik/traefik: Traefik: mTLS bypass allows unauthorized service access via fragmented ClientHello. | fixed: 8 known affected: 1 known not affected: 114 | 2026-06-30T04:06:17+00:00 | Vulnerability · Source |
| CVE-2026-32304 | redhat_vex | locutusjs: Locutus: Arbitrary code execution via unsanitized parameters in create_function | known affected: 6 | 2026-06-30T04:06:15+00:00 | Vulnerability · Source |
| CVE-2026-32274 | redhat_vex | black: Black: Arbitrary file writes from unsanitized user input in cache file name | fixed: 41 known affected: 7 known not affected: 390 | 2026-06-30T04:06:13+00:00 | Vulnerability · Source |
| CVE-2026-32178 | redhat_vex | dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw | fixed: 1469 known not affected: 6 | 2026-06-30T04:06:08+00:00 | Vulnerability · Source |
| CVE-2026-32203 | redhat_vex | dotnet: .NET: Denial of Service via stack overflow | fixed: 1469 known not affected: 6 | 2026-06-30T04:06:08+00:00 | Vulnerability · Source |
| CVE-2026-32177 | redhat_vex | dotnet: .NET: heap-based buffer overflow allows an attacker to elevate privileges locally | known not affected: 133 | 2026-06-30T04:06:04+00:00 | Vulnerability · Source |
| CVE-2026-32146 | redhat_vex | gleam: Gleam compiler: Arbitrary file system modification and potential code execution via improper path validation in git dependency handling. | known not affected: 22 | 2026-06-30T04:06:02+00:00 | Vulnerability · Source |
| CVE-2026-32144 | redhat_vex | Erlang OTP: Erlang OTP public_key: OCSP authorization bypass and information disclosure due to missing signature verification | known affected: 41 | 2026-06-30T04:06:00+00:00 | Vulnerability · Source |
| CVE-2026-31892 | redhat_vex | github.com/argoproj/argo-workflows: Argo Workflows: Security bypass allows privilege escalation via podSpecPatch field | fixed: 21 known not affected: 192 | 2026-06-30T04:05:51+00:00 | Vulnerability · Source |
| CVE-2026-31806 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages | fixed: 732 known not affected: 5 | 2026-06-30T04:05:41+00:00 | Vulnerability · Source |
| CVE-2026-31709 | redhat_vex | kernel: smb: client: validate the whole DACL before rewriting it in cifsacl | fixed: 1808 known affected: 22 known not affected: 42 | 2026-06-30T04:05:40+00:00 | Vulnerability · Source |
| CVE-2026-31474 | redhat_vex | kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() | fixed: 919 known affected: 22 known not affected: 90 | 2026-06-30T04:05:19+00:00 | Vulnerability · Source |
| CVE-2026-29186 | redhat_vex | backstage/plugin-techdocs-node: TechDocs Mkdocs configuration key enables arbitrary code execution | fixed: 2 known affected: 1 known not affected: 4 | 2026-06-30T04:04:52+00:00 | Vulnerability · Source |
| CVE-2026-29091 | redhat_vex | locutus: Locutus: Remote Code Execution via insecure callback function implementation | known affected: 6 | 2026-06-30T04:04:47+00:00 | Vulnerability · Source |
| CVE-2026-29062 | redhat_vex | jackson-core: jackson-core: Denial of Service via excessive JSON nesting | known not affected: 14 | 2026-06-30T04:04:39+00:00 | Vulnerability · Source |
| CVE-2026-29054 | redhat_vex | github.com/traefik/traefik: Traefik: Information disclosure due to case-insensitive Connection header processing | fixed: 4 known not affected: 57 | 2026-06-30T04:04:36+00:00 | Vulnerability · Source |
| CVE-2026-29004 | redhat_vex | BusyBox: BusyBox: Arbitrary Code Execution via DHCPv6 Client Heap Buffer Overflow | fixed: 3 known not affected: 3 | 2026-06-30T04:04:34+00:00 | Vulnerability · Source |
| CVE-2026-28955 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:32+00:00 | Vulnerability · Source |
| CVE-2026-28953 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:30+00:00 | Vulnerability · Source |
| CVE-2026-28947 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:27+00:00 | Vulnerability · Source |
| CVE-2026-28905 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:22+00:00 | Vulnerability · Source |
| CVE-2026-28904 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:20+00:00 | Vulnerability · Source |
| CVE-2026-28903 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:17+00:00 | Vulnerability · Source |
| CVE-2026-28902 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:15+00:00 | Vulnerability · Source |
| CVE-2026-28901 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:12+00:00 | Vulnerability · Source |
| CVE-2026-28883 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:11+00:00 | Vulnerability · Source |
| CVE-2026-28859 | redhat_vex | webkitgtk: A malicious website may be able to process restricted web content outside the sandbox | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:04:09+00:00 | Vulnerability · Source |
| CVE-2026-28847 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:08+00:00 | Vulnerability · Source |
| CVE-2026-28808 | redhat_vex | erlang/otp: inets: Erlang OTP inets modules: Unauthenticated access to protected CGI scripts via incorrect authorization | known affected: 40 known not affected: 1 | 2026-06-30T04:03:59+00:00 | Vulnerability · Source |
| CVE-2026-28693 | redhat_vex | ImageMagick: ImageMagick: Out-of-bounds read or write due to integer overflow in DIB coder | fixed: 51 known affected: 7 | 2026-06-30T04:03:53+00:00 | Vulnerability · Source |
| CVE-2026-28691 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via uninitialized pointer dereference in JBIG decoder | fixed: 51 known affected: 7 | 2026-06-30T04:03:51+00:00 | Vulnerability · Source |