VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296687 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-25067 | redhat_vex | podman: Privilege escalation in API component | known affected: 19 known not affected: 37 | 2026-06-30T03:17:20+00:00 | Vulnerability · Source |
| CVE-2022-0696 | redhat_vex | vim: NULL Pointer Dereference in vim prior to 8.2 | known not affected: 30 | 2026-06-30T03:17:17+00:00 | Vulnerability · Source |
| CVE-2022-0629 | redhat_vex | vim: Stack-based Buffer Overflow in vim prior to 8.2. | known not affected: 30 | 2026-06-30T03:17:14+00:00 | Vulnerability · Source |
| CVE-2022-25844 | redhat_vex | angular: Regular Expression Denial of Service (ReDoS) in angular | known affected: 12 known not affected: 59 | 2026-06-30T03:17:05+00:00 | Vulnerability · Source |
| CVE-2022-3599 | redhat_vex | libtiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c | fixed: 42 known affected: 17 | 2026-06-30T03:17:03+00:00 | Vulnerability · Source |
| CVE-2022-3627 | redhat_vex | libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c | fixed: 84 known affected: 13 | 2026-06-30T03:16:53+00:00 | Vulnerability · Source |
| CVE-2022-3598 | redhat_vex | libtiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c | fixed: 42 known affected: 17 | 2026-06-30T03:16:52+00:00 | Vulnerability · Source |
| CVE-2022-3970 | redhat_vex | libtiff: integer overflow in function TIFFReadRGBATileExt of the file | fixed: 84 known affected: 13 | 2026-06-30T03:16:49+00:00 | Vulnerability · Source |
| CVE-2022-3626 | redhat_vex | libtiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c | fixed: 42 known affected: 11 known not affected: 6 | 2026-06-30T03:16:48+00:00 | Vulnerability · Source |
| CVE-2022-3570 | redhat_vex | libtiff: heap Buffer overflows in tiffcrop.c | fixed: 42 known affected: 17 | 2026-06-30T03:16:40+00:00 | Vulnerability · Source |
| CVE-2022-3597 | redhat_vex | libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix | fixed: 42 known affected: 11 known not affected: 6 | 2026-06-30T03:16:40+00:00 | Vulnerability · Source |
| CVE-2025-32914 | redhat_vex | libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process | fixed: 285 known affected: 3 | 2026-06-30T03:16:11+00:00 | Vulnerability · Source |
| CVE-2025-32912 | redhat_vex | libsoup: NULL pointer dereference in client when server omits the "nonce" parameter in an Unauthorized response with Digest authentication | fixed: 18 known affected: 12 | 2026-06-30T03:16:09+00:00 | Vulnerability · Source |
| CVE-2025-32910 | redhat_vex | libsoup: Null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an Unauthorized response with Digest authentication | fixed: 10 known affected: 9 known not affected: 4 | 2026-06-30T03:16:07+00:00 | Vulnerability · Source |
| CVE-2025-32909 | redhat_vex | libsoup: NULL Pointer Dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c | fixed: 10 known affected: 9 known not affected: 4 | 2026-06-30T03:16:05+00:00 | Vulnerability · Source |
| CVE-2025-32907 | redhat_vex | libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header | fixed: 112 known affected: 6 known not affected: 3 | 2026-06-30T03:16:05+00:00 | Vulnerability · Source |
| CVE-2025-32053 | redhat_vex | libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() | fixed: 135 known affected: 6 known not affected: 4 | 2026-06-30T03:16:01+00:00 | Vulnerability · Source |
| CVE-2025-32052 | redhat_vex | libsoup: Heap buffer overflow in sniff_unknown() | fixed: 135 known affected: 6 known not affected: 4 | 2026-06-30T03:16:00+00:00 | Vulnerability · Source |
| CVE-2025-32051 | redhat_vex | libsoup: Segmentation fault when parsing malformed data URI | known affected: 6 known not affected: 10 | 2026-06-30T03:15:57+00:00 | Vulnerability · Source |
| CVE-2025-32050 | redhat_vex | libsoup: Integer overflow in append_param_quoted | fixed: 135 known affected: 6 known not affected: 4 | 2026-06-30T03:15:56+00:00 | Vulnerability · Source |
| CVE-2025-32049 | redhat_vex | libsoup: Denial of Service attack to websocket server | fixed: 285 known affected: 3 | 2026-06-30T03:15:53+00:00 | Vulnerability · Source |
| CVE-2025-7345 | redhat_vex | gdk‑pixbuf: Heap‑buffer‑overflow in gdk‑pixbuf | fixed: 651 known affected: 3 | 2026-06-30T03:15:48+00:00 | Vulnerability · Source |
| CVE-2025-2784 | redhat_vex | libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content | fixed: 285 known affected: 3 | 2026-06-30T03:15:45+00:00 | Vulnerability · Source |
| CVE-2025-2487 | redhat_vex | 389-ds-base: null pointer dereference leads to denial of service | fixed: 157 known affected: 17 known not affected: 8 | 2026-06-30T03:15:42+00:00 | Vulnerability · Source |
| CVE-2023-43628 | redhat_vex | gpsd: integer overflow | known not affected: 3 | 2026-06-30T03:15:12+00:00 | Vulnerability · Source |
| CVE-2023-31355 | redhat_vex | linux-firmware: hw:amd: Improper Restriction of Write Operations in SNP Firmware | known not affected: 60 | 2026-06-30T03:15:03+00:00 | Vulnerability · Source |
| CVE-2025-61912 | redhat_vex | python-ldap: python-ldap Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination | known affected: 36 | 2026-06-30T03:12:22+00:00 | Vulnerability · Source |
| CVE-2025-61911 | redhat_vex | python-ldap: sanitization bypass in ldap.filter.escape_filter_chars | known affected: 36 | 2026-06-30T03:12:18+00:00 | Vulnerability · Source |
| CVE-2025-61795 | redhat_vex | tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service | fixed: 56 known affected: 127 | 2026-06-30T03:12:14+00:00 | Vulnerability · Source |
| CVE-2025-61727 | redhat_vex | golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs | fixed: 28 known affected: 1339 known not affected: 8 | 2026-06-30T03:12:05+00:00 | Vulnerability · Source |
| CVE-2025-61107 | redhat_vex | frr: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c | known affected: 10 | 2026-06-30T03:11:48+00:00 | Vulnerability · Source |
| CVE-2025-61106 | redhat_vex | frr: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c | known affected: 10 | 2026-06-30T03:11:46+00:00 | Vulnerability · Source |
| CVE-2025-61105 | redhat_vex | FRRouting: frr: NULL Pointer Dereference in FRRouting | known affected: 10 | 2026-06-30T03:11:43+00:00 | Vulnerability · Source |
| CVE-2025-61104 | redhat_vex | frr: NULL pointer dereference in show_vty_unknown_tlv() in ospf_ext.c | known affected: 10 | 2026-06-30T03:11:42+00:00 | Vulnerability · Source |
| CVE-2025-61103 | redhat_vex | frr: NULL pointer dereference in show_vty_ext_link_lan_adj_sid() in ospf_ext.c | known affected: 10 | 2026-06-30T03:11:40+00:00 | Vulnerability · Source |
| CVE-2025-61102 | redhat_vex | FRRouting: frr: NULL Pointer Dereference in FRRouting | known affected: 10 | 2026-06-30T03:11:38+00:00 | Vulnerability · Source |
| CVE-2025-61100 | redhat_vex | frr: FRRouting: NULL Pointer Dereference in FRRouting | known affected: 10 | 2026-06-30T03:11:37+00:00 | Vulnerability · Source |
| CVE-2025-61099 | redhat_vex | FRRouting: frr: NULL Pointer Dereference in FRRouting | known affected: 10 | 2026-06-30T03:11:35+00:00 | Vulnerability · Source |
| CVE-2025-61101 | redhat_vex | FRRouting: frr: NULL Pointer Dereference in FRRouting | known affected: 10 | 2026-06-30T03:11:34+00:00 | Vulnerability · Source |
| CVE-2025-59825 | redhat_vex | astral-tokio-tar: astral-tokio-tar path traversal | known affected: 12 | 2026-06-30T03:11:24+00:00 | Vulnerability · Source |
| CVE-2025-59800 | redhat_vex | Artifex Ghostscript: Artifex Ghostscript: Denial of Service via crafted document processing | known affected: 39 | 2026-06-30T03:11:20+00:00 | Vulnerability · Source |
| CVE-2025-59799 | redhat_vex | Artifex Ghostscript: From CVEorg collector | known affected: 39 | 2026-06-30T03:11:19+00:00 | Vulnerability · Source |
| CVE-2025-59798 | redhat_vex | Artifex Ghostscript: Artifex Ghostscript: Denial of Service via stack-based buffer overflow in pdf_write_cmap | known affected: 39 | 2026-06-30T03:11:15+00:00 | Vulnerability · Source |
| CVE-2025-59432 | redhat_vex | ongres-scram: Timing Attack Vulnerability in SCRAM Authentication | fixed: 2 known affected: 17 | 2026-06-30T03:11:05+00:00 | Vulnerability · Source |
| CVE-2025-59362 | redhat_vex | squid-cache: Squid cache buffer overflow | known affected: 17 | 2026-06-30T03:11:02+00:00 | Vulnerability · Source |
| CVE-2025-57752 | redhat_vex | nextjs: Next.js Affected by Cache Key Confusion for Image Optimization API Routes | known affected: 30 | 2026-06-30T03:10:42+00:00 | Vulnerability · Source |
| CVE-2025-56648 | redhat_vex | parcel: Parcel Origin Validation Error | known affected: 33 known not affected: 2 | 2026-06-30T03:10:42+00:00 | Vulnerability · Source |
| CVE-2025-55754 | redhat_vex | org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation | fixed: 65 known affected: 53 | 2026-06-30T03:10:38+00:00 | Vulnerability · Source |
| CVE-2025-55668 | redhat_vex | org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve | fixed: 65 known affected: 109 | 2026-06-30T03:10:36+00:00 | Vulnerability · Source |
| CVE-2025-55183 | redhat_vex | next: React Server Components: Source code exposure through crafted HTTP request | known not affected: 32 | 2026-06-30T03:10:32+00:00 | Vulnerability · Source |