VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296687 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-48748 | redhat_vex | netty: Netty: Denial of Service due to memory exhaustion in HTTP/3 codec | under investigation: 1 | 2026-06-30T03:48:32+00:00 | Vulnerability · Source |
| CVE-2026-47220 | redhat_vex | envoy: Envoy: Denial of Service via missing host header in specific logging configurations | known not affected: 2 | 2026-06-30T03:48:07+00:00 | Vulnerability · Source |
| CVE-2026-46523 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted MSL image leading to heap-use-after-free | fixed: 51 known affected: 7 | 2026-06-30T03:47:51+00:00 | Vulnerability · Source |
| CVE-2026-46522 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted MIFF file | fixed: 51 known affected: 7 | 2026-06-30T03:47:50+00:00 | Vulnerability · Source |
| CVE-2026-46520 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via out-of-bounds write when processing multiple images | fixed: 51 known affected: 7 | 2026-06-30T03:47:47+00:00 | Vulnerability · Source |
| CVE-2026-46125 | redhat_vex | kernel: wifi: mac80211: remove station if connection prep fails | fixed: 1880 known affected: 22 known not affected: 28 under investigation: 14 | 2026-06-30T03:46:58+00:00 | Vulnerability · Source |
| CVE-2026-45972 | redhat_vex | kernel: smb: client: fix potential UAF and double free in smb2_open_file() | known affected: 184 known not affected: 90 | 2026-06-30T03:46:40+00:00 | Vulnerability · Source |
| CVE-2026-45898 | redhat_vex | kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list | fixed: 1224 known affected: 22 known not affected: 76 under investigation: 14 | 2026-06-30T03:46:34+00:00 | Vulnerability · Source |
| CVE-2026-45696 | redhat_vex | OpenEXR: OpenEXR: Denial of Service and potential information disclosure via crafted EXR file | known affected: 3 known not affected: 9 | 2026-06-30T03:46:15+00:00 | Vulnerability · Source |
| CVE-2026-45664 | redhat_vex | ImageMagick: ImageMagick: Denial of Service due to excessive resource use in MNG coder | fixed: 51 known affected: 7 | 2026-06-30T03:46:11+00:00 | Vulnerability · Source |
| CVE-2026-45591 | redhat_vex | dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption | fixed: 1441 known not affected: 2 | 2026-06-30T03:46:10+00:00 | Vulnerability · Source |
| CVE-2026-45490 | redhat_vex | dotnet: .NET SDK workload elevate: arbitrary file creation/truncation via LogFile named pipe. | known not affected: 133 | 2026-06-30T03:46:07+00:00 | Vulnerability · Source |
| CVE-2026-45359 | redhat_vex | ImageMagick: ImageMagick: Information Disclosure via Invalid Connected-Components Value | known affected: 7 known not affected: 7 | 2026-06-30T03:46:01+00:00 | Vulnerability · Source |
| CVE-2026-45031 | redhat_vex | ImageMagick: ImageMagick: Denial of Service due to resource policy bypass in PSD decoder | fixed: 51 known not affected: 7 | 2026-06-30T03:45:45+00:00 | Vulnerability · Source |
| CVE-2026-44894 | redhat_vex | netty-codec-classes-quic: Netty: Denial of Service amplification via improper QUIC token validation | known affected: 1 | 2026-06-30T03:45:34+00:00 | Vulnerability · Source |
| CVE-2026-44484 | redhat_vex | pytorch-lightning: PyTorch Lightning: Credential harvesting via introduced functionality | known not affected: 11 | 2026-06-30T03:44:44+00:00 | Vulnerability · Source |
| CVE-2026-5201 | redhat_vex | gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image | fixed: 812 known affected: 5 known not affected: 11 | 2026-06-30T03:44:02+00:00 | Vulnerability · Source |
| CVE-2026-5081 | redhat_vex | Apache::Session::Generate::ModUniqueId: Perl: mod_unique_id: Apache HTTP Server: Apache::Session::Generate::ModUniqueId: Session ID predictability allows unauthorized access | known not affected: 1 | 2026-06-30T03:43:55+00:00 | Vulnerability · Source |
| CVE-2026-4802 | redhat_vex | cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UI | fixed: 296 known not affected: 7 | 2026-06-30T03:43:46+00:00 | Vulnerability · Source |
| CVE-2026-4775 | redhat_vex | libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing | fixed: 620 known affected: 4 | 2026-06-30T03:43:39+00:00 | Vulnerability · Source |
| CVE-2026-4636 | redhat_vex | keycloak: Keycloak: UMA policy bypass allows authenticated users to gain unauthorized access to victim-owned resources. | fixed: 20 | 2026-06-30T03:43:28+00:00 | Vulnerability · Source |
| CVE-2026-4660 | redhat_vex | go-getter: go-getter: Arbitrary file reads via maliciously crafted URL | fixed: 1 known affected: 2 known not affected: 1 | 2026-06-30T03:43:27+00:00 | Vulnerability · Source |
| CVE-2026-4634 | redhat_vex | keycloak: Keycloak: Denial of Service via excessive processing of OpenID Connect scope parameters | fixed: 20 | 2026-06-30T03:43:22+00:00 | Vulnerability · Source |
| CVE-2026-4525 | redhat_vex | Vault: Vault: Information disclosure of authentication tokens via incorrect header handling | known affected: 6 known not affected: 7 | 2026-06-30T03:43:11+00:00 | Vulnerability · Source |
| CVE-2026-4519 | redhat_vex | python: Python: Command-line option injection in webbrowser.open() via crafted URLs | fixed: 1772 known not affected: 96 | 2026-06-30T03:43:08+00:00 | Vulnerability · Source |
| CVE-2026-56379 | redhat_vex | ImageMagick: ImageMagick: Arbitrary code execution via SVG decoder command injection | fixed: 51 known affected: 7 | 2026-06-30T03:42:54+00:00 | Vulnerability · Source |
| CVE-2026-9795 | redhat_vex | keycloak: Keycloak: Privilege escalation via improper scope mapping enforcement | fixed: 20 | 2026-06-30T03:42:14+00:00 | Vulnerability · Source |
| CVE-2026-9099 | redhat_vex | keycloak: Group-Admin Escalation to Realm-Admin | fixed: 20 | 2026-06-30T03:42:06+00:00 | Vulnerability · Source |
| CVE-2026-9086 | redhat_vex | keycloak: Keycloak: Cross-site scripting (XSS) via case-insensitive URI validation bypass | fixed: 20 | 2026-06-30T03:42:02+00:00 | Vulnerability · Source |
| CVE-2026-8390 | redhat_vex | firefox: Use-after-free in the JavaScript: WebAssembly component | known not affected: 12 | 2026-06-30T03:41:49+00:00 | Vulnerability · Source |
| CVE-2026-7507 | redhat_vex | org.keycloak/keycloak-services: Session fixation in OIDC login flow that can lead to account takeover | fixed: 20 | 2026-06-30T03:41:37+00:00 | Vulnerability · Source |
| CVE-2026-7504 | redhat_vex | org.keycloak/keycloak-services: Open redirect when using wildcard valid redirect URIs in Keycloak | fixed: 20 | 2026-06-30T03:41:34+00:00 | Vulnerability · Source |
| CVE-2026-7323 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 | fixed: 273 known affected: 8 | 2026-06-30T03:41:26+00:00 | Vulnerability · Source |
| CVE-2026-7263 | redhat_vex | php: denial of service via DOMNode::C14N() | fixed: 201 known not affected: 253 | 2026-06-30T03:41:19+00:00 | Vulnerability · Source |
| CVE-2026-6918 | redhat_vex | Eclipse Open9J: Denial of Service in JITServer via crafted TCP message | fixed: 51 | 2026-06-30T03:41:06+00:00 | Vulnerability · Source |
| CVE-2026-6859 | redhat_vex | instructlab: InstructLab: Arbitrary code execution due to hardcoded `trust_remote_code=True` | known affected: 4 known not affected: 2 | 2026-06-30T03:41:00+00:00 | Vulnerability · Source |
| CVE-2026-6654 | redhat_vex | thin-vec: mozilla/thin-vec: Memory corruption vulnerability via Double-Free/Use-After-Free | known not affected: 71 | 2026-06-30T03:40:28+00:00 | Vulnerability · Source |
| CVE-2026-6388 | redhat_vex | argocd-image-updater: ArgoCD Image Updater: Cross-Namespace Privilege Escalation via insufficient namespace validation | known affected: 1 | 2026-06-30T03:40:07+00:00 | Vulnerability · Source |
| CVE-2026-6384 | redhat_vex | gimp: GIMP: Arbitrary code execution or denial of service via buffer overflow in GIF image processing | known affected: 24 known not affected: 8 | 2026-06-30T03:40:04+00:00 | Vulnerability · Source |
| CVE-2026-6104 | redhat_vex | php: global buffer over-read in mb_convert_encoding() with attacker-supplied encoding | fixed: 201 known not affected: 253 | 2026-06-30T03:39:47+00:00 | Vulnerability · Source |
| CVE-2026-5807 | redhat_vex | Vault: Vault: Denial of Service via unauthenticated root token generation or rekey operations | known affected: 6 known not affected: 7 | 2026-06-30T03:39:27+00:00 | Vulnerability · Source |
| CVE-2026-5735 | redhat_vex | thunderbird: firefox: Memory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.2 | known not affected: 12 | 2026-06-30T03:39:20+00:00 | Vulnerability · Source |
| CVE-2026-5734 | redhat_vex | thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 | fixed: 316 known affected: 8 | 2026-06-30T03:39:15+00:00 | Vulnerability · Source |
| CVE-2026-5731 | redhat_vex | thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 | fixed: 316 known affected: 8 | 2026-06-30T03:39:12+00:00 | Vulnerability · Source |
| CVE-2026-5656 | redhat_vex | wireshark: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark | fixed: 74 known not affected: 16 | 2026-06-30T03:39:11+00:00 | Vulnerability · Source |
| CVE-2026-5483 | redhat_vex | odh-dashboard: ODH Dashboard Kubernetes Service Account Exposure | fixed: 13 known not affected: 7 | 2026-06-30T03:38:50+00:00 | Vulnerability · Source |
| CVE-2026-5405 | redhat_vex | wireshark: Heap-based Buffer Overflow in Wireshark | fixed: 74 known not affected: 16 | 2026-06-30T03:38:48+00:00 | Vulnerability · Source |
| CVE-2026-5403 | redhat_vex | wireshark: Heap-based Buffer Overflow in Wireshark | known affected: 4 known not affected: 16 | 2026-06-30T03:38:41+00:00 | Vulnerability · Source |
| CVE-2026-5402 | redhat_vex | wireshark: Heap-based Buffer Overflow in Wireshark | known not affected: 20 | 2026-06-30T03:38:37+00:00 | Vulnerability · Source |
| CVE-2021-29923 | redhat_vex | golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet | fixed: 860 known affected: 169 known not affected: 119 | 2026-06-30T03:17:42+00:00 | Vulnerability · Source |