VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-30827 | redhat_vex | express-rate-limit: express-rate-limit: Denial of Service for IPv4 clients due to incorrect IPv6 subnet masking | fixed: 8 known affected: 2 known not affected: 163 | 2026-06-28T07:24:35+00:00 | Vulnerability · Source |
| CVE-2026-30836 | redhat_vex | github.com/smallstep/certificates: Step CA: Unauthenticated certificate issuance via SCEP Update Request | known not affected: 1 | 2026-06-28T07:24:35+00:00 | Vulnerability · Source |
| CVE-2026-30230 | redhat_vex | flare: Flare: Unauthorized information disclosure due to improper access control in the thumbnail endpoint. | known not affected: 1 | 2026-06-28T07:24:35+00:00 | Vulnerability · Source |
| CVE-2026-3063 | redhat_vex | chromium-browser: Inappropriate implementation in DevTools | known not affected: 1 | 2026-06-28T07:24:34+00:00 | Vulnerability · Source |
| CVE-2026-30656 | redhat_vex | fio: fio: Denial of Service via NULL pointer dereference when parsing job files | known not affected: 19 | 2026-06-28T07:24:34+00:00 | Vulnerability · Source |
| CVE-2026-30587 | redhat_vex | Seafile Server: Seadoc editor: seahub: seadoc-editor: Seafile Server: Arbitrary client-side code execution via Stored Cross-Site Scripting in Seadoc editor | known not affected: 1 | 2026-06-28T07:24:32+00:00 | Vulnerability · Source |
| CVE-2019-2587 | redhat_vex | mysql: Server: Partition unspecified vulnerability (CPU Apr 2019) | fixed: 291 known not affected: 123 | 2026-06-28T07:24:31+00:00 | Vulnerability · Source |
| CVE-2026-30231 | redhat_vex | flare: Flare: Information disclosure via inconsistent access checks for private files | known not affected: 1 | 2026-06-28T07:24:31+00:00 | Vulnerability · Source |
| CVE-2019-12455 | redhat_vex | kernel: null pointer dereference in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c causing denial of service | known not affected: 104 | 2026-06-28T07:24:29+00:00 | Vulnerability · Source |
| CVE-2026-29976 | redhat_vex | hcxpcapngtool: hcxtools: ZerBea hcxpcapngtool: Information disclosure via buffer overflow in getradiotapfield() function | known not affected: 1 | 2026-06-28T07:24:28+00:00 | Vulnerability · Source |
| CVE-2019-12379 | redhat_vex | kernel: memory leak in con_insert_unipair in drivers/tty/vt/consolemap.c | known not affected: 104 | 2026-06-28T07:24:25+00:00 | Vulnerability · Source |
| CVE-2023-0590 | redhat_vex | kernel: use-after-free due to race condition in qdisc_graft() | fixed: 710 known affected: 42 | 2026-06-28T07:24:24+00:00 | Vulnerability · Source |
| CVE-2019-12381 | redhat_vex | kernel: unchecked kmalloc of new_ra in ip_ra_control leads to denial of service | known affected: 1 known not affected: 103 | 2026-06-28T07:24:24+00:00 | Vulnerability · Source |
| CVE-2019-12380 | redhat_vex | kernel: memory allocation failure in the efi subsystem leads to denial of service | known affected: 88 known not affected: 16 | 2026-06-28T07:24:23+00:00 | Vulnerability · Source |
| CVE-2026-2968 | redhat_vex | mongoose: Cesanta Mongoose: Improper cryptographic signature verification in Poly1305 Authentication Tag Handler | known not affected: 1 | 2026-06-28T07:24:21+00:00 | Vulnerability · Source |
| CVE-2019-12068 | redhat_vex | qemu: scsi: lsi: potential infinite loop when executing script in lsi_execute_script | known affected: 1 known not affected: 69 | 2026-06-28T07:24:21+00:00 | Vulnerability · Source |
| CVE-2026-2967 | redhat_vex | Mongoose: Mongoose: Remote Denial of Service in TCP Sequence Number Handler | known not affected: 1 | 2026-06-28T07:24:21+00:00 | Vulnerability · Source |
| CVE-2019-12378 | redhat_vex | kernel: unchecked kmalloc of new_ra in ip6_ra_control leads to denial of service | known not affected: 104 | 2026-06-28T07:24:21+00:00 | Vulnerability · Source |
| CVE-2019-12155 | redhat_vex | QEMU: qxl: null pointer dereference while releasing spice resources | fixed: 1716 known affected: 26 known not affected: 6 | 2026-06-28T07:24:20+00:00 | Vulnerability · Source |
| CVE-2026-29514 | redhat_vex | NetBox: NetBox: Remote code execution via malicious Python callables in templates | known not affected: 1 | 2026-06-28T07:24:20+00:00 | Vulnerability · Source |
| CVE-2019-11884 | redhat_vex | kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command | fixed: 386 known affected: 27 | 2026-06-28T07:24:17+00:00 | Vulnerability · Source |
| CVE-2019-11810 | redhat_vex | kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS | fixed: 791 known affected: 13 | 2026-06-28T07:24:17+00:00 | Vulnerability · Source |
| CVE-2019-2422 | redhat_vex | OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290) | fixed: 903 known not affected: 45 | 2026-06-28T07:24:16+00:00 | Vulnerability · Source |
| CVE-2019-2420 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019) | fixed: 291 known affected: 8 known not affected: 98 | 2026-06-28T07:24:15+00:00 | Vulnerability · Source |
| CVE-2026-29185 | redhat_vex | @backstage/integration: Backstage SCM Integration: Unauthorized access to SCM APIs via path traversal | known affected: 2 | 2026-06-28T07:24:14+00:00 | Vulnerability · Source |
| CVE-2026-2913 | redhat_vex | libvips: libvips: Denial of Service via heap-based buffer overflow in vips_source_read_to_memory | known not affected: 4 | 2026-06-28T07:24:12+00:00 | Vulnerability · Source |
| CVE-2026-29089 | redhat_vex | timescaledb: TimescaleDB: Arbitrary code execution via malicious functions in user-writable schemas during extension upgrade | known not affected: 1 | 2026-06-28T07:24:10+00:00 | Vulnerability · Source |
| CVE-2026-29068 | redhat_vex | PJSIP: PJSIP: Denial of Service via malformed RTP payload processing | known not affected: 1 | 2026-06-28T07:24:08+00:00 | Vulnerability · Source |
| CVE-2026-29013 | redhat_vex | libcoap: libcoap: Memory corruption and denial of service via crafted CoAP requests | known not affected: 1 | 2026-06-28T07:24:08+00:00 | Vulnerability · Source |
| CVE-2019-11683 | redhat_vex | kernel: udp_gro_receive_segment in net/ipv4/udp_offload.c allows denial of service or other unspecified impact via UDP packets with 0 payload | known not affected: 104 | 2026-06-28T07:24:07+00:00 | Vulnerability · Source |
| CVE-2026-29043 | redhat_vex | HDF5: HDF5: Remote code execution and denial of service via heap buffer overflow in H5T__ref_mem_setnull | known not affected: 1 | 2026-06-28T07:24:05+00:00 | Vulnerability · Source |
| CVE-2019-11048 | redhat_vex | php: Integer wraparounds when receiving multipart forms | fixed: 605 known affected: 133 | 2026-06-28T07:23:59+00:00 | Vulnerability · Source |
| CVE-2019-11047 | redhat_vex | php: Information disclosure in exif_read_data() | fixed: 605 known affected: 133 | 2026-06-28T07:23:58+00:00 | Vulnerability · Source |
| CVE-2019-11043 | redhat_vex | php: underflow in env_path_info in fpm_main.c | fixed: 2529 known not affected: 32 | 2026-06-28T07:23:57+00:00 | Vulnerability · Source |
| CVE-2019-10773 | redhat_vex | nodejs-yarn: Install functionality can be abused to generate arbitrary symlinks | fixed: 1 | 2026-06-28T07:23:56+00:00 | Vulnerability · Source |
| CVE-2026-28799 | redhat_vex | PJSIP: PJSIP: Denial of Service via heap use-after-free in event subscription | known not affected: 1 | 2026-06-28T07:23:56+00:00 | Vulnerability · Source |
| CVE-2019-10639 | redhat_vex | Kernel: net: using kernel space address bits to derive IP ID may potentially break KASLR | fixed: 477 known affected: 28 known not affected: 15 | 2026-06-28T07:23:55+00:00 | Vulnerability · Source |
| CVE-2019-10746 | redhat_vex | nodejs-mixin-deep: prototype pollution in function mixin-deep | fixed: 86 known affected: 7 known not affected: 6 | 2026-06-28T07:23:55+00:00 | Vulnerability · Source |
| CVE-2026-28741 | redhat_vex | mattermost: CSRF protection bypass allows updating a user's authentication method | known not affected: 1 | 2026-06-28T07:23:53+00:00 | Vulnerability · Source |
| CVE-2019-10638 | redhat_vex | Kernel: net: weak IP ID generation leads to remote device tracking | fixed: 361 known affected: 28 known not affected: 15 | 2026-06-28T07:23:53+00:00 | Vulnerability · Source |
| CVE-2026-28407 | redhat_vex | malcontent: malcontent: Malicious content may remain unexamined due to improper handling of failed archive extraction. | known not affected: 1 | 2026-06-28T07:23:50+00:00 | Vulnerability · Source |
| CVE-2019-2025 | redhat_vex | kernel: Use-after-free due to race condition in android/binder.c | known not affected: 104 | 2026-06-28T07:23:50+00:00 | Vulnerability · Source |
| CVE-2019-10202 | redhat_vex | codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities | fixed: 20 known affected: 12 known not affected: 477 | 2026-06-28T07:23:49+00:00 | Vulnerability · Source |
| CVE-2019-10193 | redhat_vex | redis: Stack buffer overflow in HyperLogLog triggered by malicious client | fixed: 56 known not affected: 20 | 2026-06-28T07:23:48+00:00 | Vulnerability · Source |
| CVE-2019-10198 | redhat_vex | foreman: authorization bypasses in foreman-tasks leading to information disclosure | fixed: 1215 | 2026-06-28T07:23:47+00:00 | Vulnerability · Source |
| CVE-2026-28416 | redhat_vex | Gradio: Gradio: Server-Side Request Forgery allows access to internal services via malicious Space loading | known not affected: 1 | 2026-06-28T07:23:47+00:00 | Vulnerability · Source |
| CVE-2019-10161 | redhat_vex | libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API | fixed: 1717 known not affected: 2 | 2026-06-28T07:23:45+00:00 | Vulnerability · Source |
| CVE-2026-28348 | redhat_vex | lxml_html_clean: lxml_html_clean: Cross-Site Scripting (XSS) via CSS filter bypass | known not affected: 1 | 2026-06-28T07:23:42+00:00 | Vulnerability · Source |
| CVE-2019-10160 | redhat_vex | python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc | fixed: 264 known affected: 8 known not affected: 74 | 2026-06-28T07:23:42+00:00 | Vulnerability · Source |
| CVE-2026-28343 | redhat_vex | ckeditor: CKEditor: Unauthorized JavaScript code execution via specially crafted markup in General HTML Support | known not affected: 1 | 2026-06-28T07:23:41+00:00 | Vulnerability · Source |