VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297743 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-5091 | redhat_vex | perl-Catalyst-Plugin-Authentication: Catalyst::Plugin::Authentication: Information disclosure via timing attack | known not affected: 1 | 2026-06-28T07:43:20+00:00 | Vulnerability · Source |
| CVE-2026-5037 | redhat_vex | mxml: mxml: Denial of Service via stack-based buffer overflow in index_sort | known not affected: 1 | 2026-06-28T07:43:19+00:00 | Vulnerability · Source |
| CVE-2026-5052 | redhat_vex | Vault: Vault: Information disclosure via Server-Side Request Forgery in ACME challenge validation | known affected: 13 | 2026-06-28T07:43:18+00:00 | Vulnerability · Source |
| CVE-2021-2166 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Apr 2021) | fixed: 889 known affected: 22 known not affected: 24 | 2026-06-28T07:43:18+00:00 | Vulnerability · Source |
| CVE-2021-2164 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:43:16+00:00 | Vulnerability · Source |
| CVE-2026-50266 | redhat_vex | openstack-neutron: OpenStack Neutron: Network spoofing via incorrect port RBAC policies | known affected: 25 | 2026-06-28T07:43:16+00:00 | Vulnerability · Source |
| CVE-2023-49582 | redhat_vex | APR: Lax permissions in Apache Portable Runtime shared memory | known affected: 2 known not affected: 21 | 2026-06-28T07:43:16+00:00 | Vulnerability · Source |
| CVE-2021-2163 | redhat_vex | OpenJDK: Incomplete enforcement of JAR signing disabled algorithms (Libraries, 8249906) | fixed: 684 known affected: 4 | 2026-06-28T07:43:15+00:00 | Vulnerability · Source |
| CVE-2022-45935 | redhat_vex | apache-james: Temporary File Information Disclosure | known not affected: 18 | 2026-06-28T07:43:14+00:00 | Vulnerability · Source |
| CVE-2021-2146 | redhat_vex | mysql: Server: Options unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:43:13+00:00 | Vulnerability · Source |
| CVE-2026-49762 | redhat_vex | elixir: Elixir Version module: Denial of Service via uncontrolled resource consumption with crafted version string | known affected: 3 | 2026-06-28T07:43:12+00:00 | Vulnerability · Source |
| CVE-2023-52594 | redhat_vex | kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() | fixed: 709 known affected: 64 known not affected: 8 | 2026-06-28T07:43:10+00:00 | Vulnerability · Source |
| CVE-2026-4985 | redhat_vex | cgif: dloebl CGIF: Denial of Service via integer overflow in GIF image handling | known not affected: 1 | 2026-06-28T07:43:10+00:00 | Vulnerability · Source |
| CVE-2026-49510 | redhat_vex | rlottie: From CVEorg collector | known not affected: 1 | 2026-06-28T07:43:08+00:00 | Vulnerability · Source |
| CVE-2026-49299 | redhat_vex | openstack-neutron: OpenStack Neutron: Unauthorized tag modification due to policy enforcement mismatch | known affected: 25 | 2026-06-28T07:43:07+00:00 | Vulnerability · Source |
| CVE-2026-4933 | redhat_vex | Unpublished Node Permissions: Drupal: Drupal Unpublished Node Permissions: Information disclosure via incorrect authorization | known not affected: 1 | 2026-06-28T07:43:07+00:00 | Vulnerability · Source |
| CVE-2026-48847 | redhat_vex | roundcubemail: arbitrary file deletion via redis/memcache session poisoning bypass | known not affected: 1 | 2026-06-28T07:43:07+00:00 | Vulnerability · Source |
| CVE-2026-49214 | redhat_vex | guzzlehttp/psr7: `guzzlehttp/psr7`: Request Smuggling and Cache Poisoning via HTTP Header Injection | known not affected: 1 | 2026-06-28T07:43:06+00:00 | Vulnerability · Source |
| CVE-2024-38629 | redhat_vex | kernel: dmaengine: idxd: Avoid unnecessary destruction of file_ida | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T07:43:05+00:00 | Vulnerability · Source |
| CVE-2026-49017 | redhat_vex | openstack-swift: OpenStack Swift: Denial of Service via truncated aws-chunked PUT request | known affected: 13 | 2026-06-28T07:43:05+00:00 | Vulnerability · Source |
| CVE-2026-48998 | redhat_vex | guzzlehttp/psr7: guzzlehttp/psr7: Information disclosure via improper Host header validation | known not affected: 1 | 2026-06-28T07:43:05+00:00 | Vulnerability · Source |
| CVE-2026-48920 | redhat_vex | jenkins-email-extension-plugin: Jenkins Email Extension Plugin: Information disclosure via arbitrary file read | known affected: 3 | 2026-06-28T07:43:04+00:00 | Vulnerability · Source |
| CVE-2026-48848 | redhat_vex | roundcubemail: CSS injection via an SVG document that has an animate element with the attributeName attribute | known not affected: 1 | 2026-06-28T07:43:03+00:00 | Vulnerability · Source |
| CVE-2026-48700 | redhat_vex | pcmanfm-qt: PCManFM-Qt: Arbitrary code execution via crafted URI | known not affected: 1 | 2026-06-28T07:43:03+00:00 | Vulnerability · Source |
| CVE-2026-48844 | redhat_vex | roundcubemail: code injection via insecure LDAP autovalues option | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48860 | redhat_vex | erlang: Erlang/OTP: Authentication bypass allows arbitrary code execution via improper IP address validation | known affected: 41 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48831 | redhat_vex | wine: Wine: Sandbox escape via blind execution of EXE files | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48840 | redhat_vex | exim: Exim: Information disclosure via mishandled short payloads in proxy configurations | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48827 | redhat_vex | org.apache.sshd/sshd-git: Apache MINA SSHD: Path Traversal Vulnerability Allows Access to Unauthorized Git Repositories | known affected: 2 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48842 | redhat_vex | roundcubemail: pre-auth SQL injection in the virtuser_query plugin via a preg_replace() backslash escape bypass | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48845 | redhat_vex | roundcubemail: privilege escalation via remote image blocking bypass | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48851 | redhat_vex | PuTTY: TELNET session data is marked with trust sigils after authenticating to a proxy | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48782 | redhat_vex | pydantic-ai: Pydantic AI: Information Disclosure via Cloud-Metadata Blocklist Bypass | known affected: 4 | 2026-06-28T07:43:01+00:00 | Vulnerability · Source |
| CVE-2026-48096 | redhat_vex | OpenFGA: OpenFGA: Incorrect authorization due to cache key collision in iterator caching | known affected: 9 | 2026-06-28T07:43:00+00:00 | Vulnerability · Source |
| CVE-2026-48682 | redhat_vex | fastnetmon: FastNetMon: Information disclosure and denial of service in IPv4 packet parser | known not affected: 1 | 2026-06-28T07:42:57+00:00 | Vulnerability · Source |
| CVE-2026-48692 | redhat_vex | fastnetmon: FastNetMon Community Edition: Denial of Service and arbitrary script execution via unauthenticated gRPC API | known not affected: 1 | 2026-06-28T07:42:57+00:00 | Vulnerability · Source |
| CVE-2026-48688 | redhat_vex | fastnetmon: FastNetMon: Out-of-bounds read vulnerability allows information disclosure or denial of service | known not affected: 1 | 2026-06-28T07:42:57+00:00 | Vulnerability · Source |
| CVE-2026-48102 | redhat_vex | 7-Zip: 7-Zip: Information disclosure and denial of service via crafted UDF image | known not affected: 1 | 2026-06-28T07:42:56+00:00 | Vulnerability · Source |
| CVE-2026-48104 | redhat_vex | 7-Zip: uninitialized heap read in the SquashFS archive handler | known not affected: 1 | 2026-06-28T07:42:56+00:00 | Vulnerability · Source |
| CVE-2024-38575 | redhat_vex | kernel: wifi: brcmfmac: pcie: handle randbuf allocation failure | fixed: 429 known affected: 50 known not affected: 22 | 2026-06-28T07:42:56+00:00 | Vulnerability · Source |
| CVE-2026-47760 | redhat_vex | TinyMCE: Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs | known not affected: 1 | 2026-06-28T07:42:55+00:00 | Vulnerability · Source |
| CVE-2026-48095 | redhat_vex | 7-Zip: 7-Zip: Arbitrary code execution via heap buffer overflow in NTFS handler | known not affected: 1 | 2026-06-28T07:42:55+00:00 | Vulnerability · Source |
| CVE-2021-2036 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:42:54+00:00 | Vulnerability · Source |
| CVE-2021-2042 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:42:54+00:00 | Vulnerability · Source |
| CVE-2026-47320 | redhat_vex | rlottie: From CVEorg collector | known not affected: 1 | 2026-06-28T07:42:53+00:00 | Vulnerability · Source |
| CVE-2021-20325 | redhat_vex | httpd: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in Red Hat Enterprise Linux 8.5 | fixed: 85 known not affected: 38 | 2026-06-28T07:42:53+00:00 | Vulnerability · Source |
| CVE-2026-4726 | redhat_vex | firefox: Denial-of-service in the XML component | known not affected: 12 | 2026-06-28T07:42:52+00:00 | Vulnerability · Source |
| CVE-2022-40898 | redhat_vex | python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli | fixed: 18 known affected: 37 known not affected: 65 | 2026-06-28T07:42:51+00:00 | Vulnerability · Source |
| CVE-2026-4739 | redhat_vex | InsightSoftwareConsortium/ITK: Expat: InsightSoftwareConsortium ITK: Arbitrary code execution or denial of service via integer overflow. | known not affected: 1 | 2026-06-28T07:42:50+00:00 | Vulnerability · Source |
| CVE-2026-47323 | redhat_vex | camel: camel-cxf-rest: camel-cxf-transport: camel-knative-http: camel-exec: camel-file: camel-undertow: Apache Camel: Remote Code Execution via header injection due to missing inbound filtering | known affected: 8 known not affected: 12 | 2026-06-28T07:42:50+00:00 | Vulnerability · Source |