VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296690 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-54313 | redhat_vex | eslint-config-prettier: Eslint-config-prettier Supply Chain Compromise | known not affected: 122 | 2026-06-30T00:29:44+00:00 | Vulnerability · Source |
| CVE-2025-31215 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 320 known affected: 9 | 2026-06-30T00:29:29+00:00 | Vulnerability · Source |
| CVE-2025-31205 | redhat_vex | webkitgtk: A malicious website may exfiltrate data cross-origin | fixed: 393 known affected: 9 | 2026-06-30T00:29:26+00:00 | Vulnerability · Source |
| CVE-2025-30359 | redhat_vex | webpack-dev-server: webpack-dev-server information exposure | known affected: 89 | 2026-06-30T00:25:47+00:00 | Vulnerability · Source |
| CVE-2025-30360 | redhat_vex | webpack-dev-server: webpack-dev-server information exposure | known affected: 89 | 2026-06-30T00:25:45+00:00 | Vulnerability · Source |
| CVE-2025-30346 | redhat_vex | varnish: Client-Side Desynchronization in Varnish Cache | known affected: 4 known not affected: 10 | 2026-06-30T00:25:41+00:00 | Vulnerability · Source |
| CVE-2025-27837 | redhat_vex | Ghostscript: Access to arbitrary files through truncated path with invalid UTF-8 | known not affected: 39 | 2026-06-30T00:25:27+00:00 | Vulnerability · Source |
| CVE-2025-27836 | redhat_vex | Ghostscript: device: Print buffer overflow | known affected: 39 | 2026-06-30T00:25:26+00:00 | Vulnerability · Source |
| CVE-2025-27834 | redhat_vex | Ghostscript: Buffer overflow caused by an oversized Type 4 function in a PDF | known affected: 39 | 2026-06-30T00:25:23+00:00 | Vulnerability · Source |
| CVE-2025-27835 | redhat_vex | Ghostscript: Buffer overflow when converting glyphs to unicode | known affected: 39 | 2026-06-30T00:25:23+00:00 | Vulnerability · Source |
| CVE-2025-27833 | redhat_vex | Ghostscript: Buffer overflow with long TTF font name | known affected: 39 | 2026-06-30T00:25:17+00:00 | Vulnerability · Source |
| CVE-2025-27832 | redhat_vex | Ghostscript: NPDL device: Compression buffer overflow | fixed: 405 known affected: 13 | 2026-06-30T00:25:15+00:00 | Vulnerability · Source |
| CVE-2025-27831 | redhat_vex | Ghostscript: Text buffer overflow with long characters | known affected: 39 | 2026-06-30T00:25:13+00:00 | Vulnerability · Source |
| CVE-2025-27830 | redhat_vex | Ghostscript: Buffer overflow during serialization of DollarBlend in font | known affected: 39 | 2026-06-30T00:25:08+00:00 | Vulnerability · Source |
| CVE-2025-27209 | redhat_vex | nodejs: Node.js Rapidhash HashDoS Vulnerability | known not affected: 47 | 2026-06-30T00:24:54+00:00 | Vulnerability · Source |
| CVE-2025-27151 | redhat_vex | redis: Redis Stack Buffer Overflow | fixed: 35 known affected: 4 known not affected: 31 | 2026-06-30T00:24:51+00:00 | Vulnerability · Source |
| CVE-2025-3549 | redhat_vex | Assimp: Open Asset Import Library Assimp File MD3Loader.cpp ValidateSurfaceHeaderOffsets heap-based overflow | known not affected: 4 | 2026-06-30T00:24:32+00:00 | Vulnerability · Source |
| CVE-2025-3548 | redhat_vex | Assimp: Open Asset Import Library Assimp File types.h Set heap-based overflow | known affected: 4 | 2026-06-30T00:24:28+00:00 | Vulnerability · Source |
| CVE-2025-3454 | redhat_vex | grafana: Unauthorized Data Source Access in Grafana via URL Path Manipulation | known not affected: 21 | 2026-06-30T00:24:27+00:00 | Vulnerability · Source |
| CVE-2025-3196 | redhat_vex | assimp: Open Asset Import Library Assimp Malformed File MD2Loader.cpp InternReadFile stack-based overflow | known affected: 4 | 2026-06-30T00:24:23+00:00 | Vulnerability · Source |
| CVE-2025-2703 | redhat_vex | grafana: Cross-Site Scripting in Grafana XY Chart Panel | known not affected: 21 | 2026-06-30T00:24:05+00:00 | Vulnerability · Source |
| CVE-2025-2584 | redhat_vex | wabt: WebAssembly wabt binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflow | known affected: 4 known not affected: 18 | 2026-06-30T00:24:03+00:00 | Vulnerability · Source |
| CVE-2025-2592 | redhat_vex | assimp: Open Asset Import Library Assimp CSMLoader.cpp InternReadFile heap-based overflow | known not affected: 4 | 2026-06-30T00:24:01+00:00 | Vulnerability · Source |
| CVE-2025-38072 | redhat_vex | kernel: libnvdimm/labels: Fix divide error in nd_label_data_init() | known affected: 212 known not affected: 62 | 2026-06-30T00:23:30+00:00 | Vulnerability · Source |
| CVE-2025-38071 | redhat_vex | kernel: x86/mm: Check return value from memblock_phys_alloc_range() | known affected: 274 | 2026-06-30T00:23:28+00:00 | Vulnerability · Source |
| CVE-2025-38067 | redhat_vex | kernel: rseq: Fix segfault on registration when rseq_cs is non-zero | fixed: 309 known affected: 156 known not affected: 42 | 2026-06-30T00:23:24+00:00 | Vulnerability · Source |
| CVE-2025-38066 | redhat_vex | kernel: dm cache: prevent BUG_ON by blocking retries on failed device resumes | known affected: 274 | 2026-06-30T00:23:22+00:00 | Vulnerability · Source |
| CVE-2025-38063 | redhat_vex | kernel: dm: fix unconditional IO throttle caused by REQ_PREFLUSH | known affected: 274 | 2026-06-30T00:23:18+00:00 | Vulnerability · Source |
| CVE-2025-38061 | redhat_vex | kernel: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() | known affected: 274 | 2026-06-30T00:23:14+00:00 | Vulnerability · Source |
| CVE-2025-38056 | redhat_vex | kernel: Linux kernel: Use-after-free in ASoC SOF Intel HDA driver allows information disclosure, privilege escalation, or denial of service | known affected: 184 known not affected: 90 | 2026-06-30T00:23:05+00:00 | Vulnerability · Source |
| CVE-2025-38053 | redhat_vex | kernel: idpf: fix null-ptr-deref in idpf_features_check | fixed: 429 known affected: 118 known not affected: 22 | 2026-06-30T00:23:00+00:00 | Vulnerability · Source |
| CVE-2025-38044 | redhat_vex | kernel: media: cx231xx: set device_caps for 417 | known affected: 260 known not affected: 14 | 2026-06-30T00:22:49+00:00 | Vulnerability · Source |
| CVE-2025-38040 | redhat_vex | kernel: serial: mctrl_gpio: split disable_ms into sync and no_sync APIs | known affected: 232 known not affected: 42 | 2026-06-30T00:22:46+00:00 | Vulnerability · Source |
| CVE-2025-38038 | redhat_vex | kernel: Linux kernel: Denial of Service in amd-pstate cpufreq driver via deadlock | known affected: 232 known not affected: 42 | 2026-06-30T00:20:08+00:00 | Vulnerability · Source |
| CVE-2025-38036 | redhat_vex | kernel: Linux kernel: Denial of Service due to null pointer dereference in GT MMIO initialization for VFs | known affected: 184 known not affected: 90 | 2026-06-30T00:20:07+00:00 | Vulnerability · Source |
| CVE-2025-38029 | redhat_vex | kernel: Linux kernel: Denial of Service due to sleepable page allocation in KASAN | known affected: 232 known not affected: 42 | 2026-06-30T00:19:59+00:00 | Vulnerability · Source |
| CVE-2025-49007 | redhat_vex | rack: rubygem-rack: Rack Content-Disposition Denial of Service | known affected: 3 known not affected: 27 | 2026-06-30T00:18:27+00:00 | Vulnerability · Source |
| CVE-2025-48071 | redhat_vex | openexr: OpenEXR Heap-Based Buffer Overflow | known not affected: 24 | 2026-06-30T00:18:02+00:00 | Vulnerability · Source |
| CVE-2025-43541 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 482 known affected: 9 | 2026-06-30T00:17:50+00:00 | Vulnerability · Source |
| CVE-2025-43536 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 482 known affected: 9 | 2026-06-30T00:17:48+00:00 | Vulnerability · Source |
| CVE-2025-43535 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 482 known affected: 9 | 2026-06-30T00:17:46+00:00 | Vulnerability · Source |
| CVE-2025-43531 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 482 known affected: 9 | 2026-06-30T00:17:43+00:00 | Vulnerability · Source |
| CVE-2025-43529 | redhat_vex | webkitgtk: webkitgtk: Use-after-free due to improper memory management | fixed: 482 known affected: 10 | 2026-06-30T00:17:41+00:00 | Vulnerability · Source |
| CVE-2025-43501 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 482 known affected: 9 | 2026-06-30T00:17:39+00:00 | Vulnerability · Source |
| CVE-2025-43458 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 482 known affected: 9 | 2026-06-30T00:17:36+00:00 | Vulnerability · Source |
| CVE-2025-43443 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 482 known affected: 9 | 2026-06-30T00:17:34+00:00 | Vulnerability · Source |
| CVE-2025-43440 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 482 known affected: 9 | 2026-06-30T00:17:33+00:00 | Vulnerability · Source |
| CVE-2025-43432 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 482 known affected: 9 | 2026-06-30T00:17:30+00:00 | Vulnerability · Source |
| CVE-2025-43434 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 482 known affected: 9 | 2026-06-30T00:17:30+00:00 | Vulnerability · Source |
| CVE-2025-43430 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 482 known affected: 9 | 2026-06-30T00:17:21+00:00 | Vulnerability · Source |