VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-28351 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF with RunLengthDecode filter | known affected: 4 known not affected: 5 | 2026-06-28T07:23:41+00:00 | Vulnerability · Source |
| CVE-2019-10140 | redhat_vex | kernel: overlayfs: NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c | fixed: 204 known affected: 16 known not affected: 75 | 2026-06-28T07:23:40+00:00 | Vulnerability · Source |
| CVE-2019-10139 | redhat_vex | cockpit-ovirt: admin and appliance passwords saved in plain text variable file during HE deployment | fixed: 15 | 2026-06-28T07:23:40+00:00 | Vulnerability · Source |
| CVE-2019-10130 | redhat_vex | postgresql: Selectivity estimators bypass row security policies | fixed: 997 known affected: 12 known not affected: 53 | 2026-06-28T07:23:40+00:00 | Vulnerability · Source |
| CVE-2026-28224 | redhat_vex | Firebird: Firebird: Denial of Service due to null pointer dereference from unauthenticated packet | known not affected: 1 | 2026-06-28T07:23:40+00:00 | Vulnerability · Source |
| CVE-2026-2801 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component | known not affected: 23 | 2026-06-28T07:23:38+00:00 | Vulnerability · Source |
| CVE-2026-2805 | redhat_vex | firefox: thunderbird: Invalid pointer in the DOM: Core & HTML component | known not affected: 18 | 2026-06-28T07:23:38+00:00 | Vulnerability · Source |
| CVE-2026-2802 | redhat_vex | firefox: thunderbird: Race condition in the JavaScript: GC component | known not affected: 23 | 2026-06-28T07:23:38+00:00 | Vulnerability · Source |
| CVE-2026-2803 | redhat_vex | firefox: thunderbird: Information disclosure, mitigation bypass in the Settings UI component | known not affected: 23 | 2026-06-28T07:23:38+00:00 | Vulnerability · Source |
| CVE-2026-2804 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component | known not affected: 18 | 2026-06-28T07:23:38+00:00 | Vulnerability · Source |
| CVE-2026-2800 | redhat_vex | firefox: thunderbird: Spoofing issue in the WebAuthn component in Firefox for Android | known not affected: 23 | 2026-06-28T07:23:37+00:00 | Vulnerability · Source |
| CVE-2019-10082 | redhat_vex | httpd: read-after-free in h2 connection shutdown | fixed: 175 known affected: 15 known not affected: 16 | 2026-06-28T07:23:37+00:00 | Vulnerability · Source |
| CVE-2026-27979 | redhat_vex | next.js: Next.js: Unbounded postponed resume buffering can lead to DoS | known affected: 6 known not affected: 12 | 2026-06-28T07:23:36+00:00 | Vulnerability · Source |
| CVE-2026-27978 | redhat_vex | next.js: Next.js: null origin can bypass Server Actions CSRF checks | known affected: 18 | 2026-06-28T07:23:36+00:00 | Vulnerability · Source |
| CVE-2026-27902 | redhat_vex | svelte: Svelte: Cross-Site Scripting via unsanitized error output | known affected: 2 | 2026-06-28T07:23:34+00:00 | Vulnerability · Source |
| CVE-2026-2791 | redhat_vex | firefox: thunderbird: Mitigation bypass in the Networking: Cache component | fixed: 320 known affected: 8 | 2026-06-28T07:23:34+00:00 | Vulnerability · Source |
| CVE-2026-27901 | redhat_vex | svelte: Svelte: Cross-Site Scripting and HTML injection via improper escaping of bind:innerText and bind:textContent | known affected: 1 | 2026-06-28T07:23:33+00:00 | Vulnerability · Source |
| CVE-2019-0981 | redhat_vex | dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service | fixed: 109 | 2026-06-28T07:23:32+00:00 | Vulnerability · Source |
| CVE-2026-2787 | redhat_vex | firefox: thunderbird: Use-after-free in the DOM: Window and Location component | fixed: 320 known affected: 6 | 2026-06-28T07:23:31+00:00 | Vulnerability · Source |
| CVE-2019-0980 | redhat_vex | dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service | fixed: 109 | 2026-06-28T07:23:31+00:00 | Vulnerability · Source |
| CVE-2019-0545 | redhat_vex | Core: NCL - SocketsHttpHandler mishandling 1xx response as a final response leads to info disclosure | fixed: 63 known not affected: 9 | 2026-06-28T07:23:30+00:00 | Vulnerability · Source |
| CVE-2019-0548 | redhat_vex | Core: AspNetCoreModule WebSocket DOS | fixed: 63 known not affected: 9 | 2026-06-28T07:23:30+00:00 | Vulnerability · Source |
| CVE-2026-27853 | redhat_vex | dnsdist: dnsdist: Denial of Service via crafted DNS responses | known not affected: 1 | 2026-06-28T07:23:30+00:00 | Vulnerability · Source |
| CVE-2026-27824 | redhat_vex | calibre: Calibre: Brute-force protection bypass via X-Forwarded-For header manipulation | known not affected: 1 | 2026-06-28T07:23:29+00:00 | Vulnerability · Source |
| CVE-2026-27810 | redhat_vex | calibre: Calibre: HTTP Response Header Injection via unsanitized query parameter | known not affected: 1 | 2026-06-28T07:23:29+00:00 | Vulnerability · Source |
| CVE-2026-2781 | redhat_vex | firefox: thunderbird: Integer overflow in the Libraries component in NSS | fixed: 320 known affected: 6 | 2026-06-28T07:23:28+00:00 | Vulnerability · Source |
| CVE-2026-27803 | redhat_vex | vaultwarden: Vaultwarden: Unauthorized collection management operations due to improper access control | known not affected: 1 | 2026-06-28T07:23:28+00:00 | Vulnerability · Source |
| CVE-2026-27802 | redhat_vex | vaultwarden: Vaultwarden: Privilege Escalation via Unauthorized Bulk Permission Update | known not affected: 1 | 2026-06-28T07:23:27+00:00 | Vulnerability · Source |
| CVE-2026-27795 | redhat_vex | langchain-core: @langchain/community: Server-Side Request Forgery (SSRF) bypass via redirect manipulation | known affected: 39 | 2026-06-28T07:23:27+00:00 | Vulnerability · Source |
| CVE-2018-9518 | redhat_vex | kernel: NFC: llcp: Out of bounds write in nfc_llcp_sdp_tlv struct in nfc/llcp_commands.c | known not affected: 104 | 2026-06-28T07:23:27+00:00 | Vulnerability · Source |
| CVE-2026-27801 | redhat_vex | vaultwarden: Vaultwarden: Two-factor authentication bypass allows unauthorized access and data deletion. | known not affected: 1 | 2026-06-28T07:23:27+00:00 | Vulnerability · Source |
| CVE-2018-9517 | redhat_vex | kernel: l2tp: Race condition between pppol2tp_session_create() and l2tp_eth_create() | fixed: 204 known affected: 12 known not affected: 79 | 2026-06-28T07:23:26+00:00 | Vulnerability · Source |
| CVE-2018-9516 | redhat_vex | kernel: HID: debug: Buffer overflow in hid_debug_events_read() in drivers/hid/hid-debug.c | fixed: 204 known affected: 43 known not affected: 48 | 2026-06-28T07:23:25+00:00 | Vulnerability · Source |
| CVE-2026-27794 | redhat_vex | langgraph-checkpoint: LangGraph Checkpoint: Remote Code Execution via insecure deserialization in caching layer | known affected: 2 | 2026-06-28T07:23:24+00:00 | Vulnerability · Source |
| CVE-2026-27769 | redhat_vex | mattermost: connected workspaces: malicious remote server can manipulate arbitrary user's status | known not affected: 1 | 2026-06-28T07:23:24+00:00 | Vulnerability · Source |
| CVE-2026-2777 | redhat_vex | firefox: thunderbird: Privilege escalation in the Messaging System component | fixed: 320 known affected: 6 | 2026-06-28T07:23:24+00:00 | Vulnerability · Source |
| CVE-2026-27631 | redhat_vex | Exiv2: Exiv2: Denial of Service via integer overflow in preview component | known affected: 28 | 2026-06-28T07:23:18+00:00 | Vulnerability · Source |
| CVE-2026-27624 | redhat_vex | coturn: IPv4-mapped IPv6 bypasses denied-peer-ip ACL | known not affected: 1 | 2026-06-28T07:23:17+00:00 | Vulnerability · Source |
| CVE-2026-27590 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddyhttp: Caddy: Remote Code Execution via FastCGI path confusion | known not affected: 1 | 2026-06-28T07:23:15+00:00 | Vulnerability · Source |
| CVE-2026-27596 | redhat_vex | exiv2: Exiv2: Denial of Service via out-of-bounds read in preview component | known affected: 28 | 2026-06-28T07:23:15+00:00 | Vulnerability · Source |
| CVE-2018-8416 | redhat_vex | Core: Arbitrary file and directory creation | fixed: 21 known not affected: 10 | 2026-06-28T07:23:10+00:00 | Vulnerability · Source |
| CVE-2018-8292 | redhat_vex | Core: information disclosure due to authentication information exposed in a redirect | fixed: 18 known affected: 1 known not affected: 8 | 2026-06-28T07:23:08+00:00 | Vulnerability · Source |
| CVE-2026-27585 | redhat_vex | github.com/caddyserver/caddy/v2/modules/caddyhttp/fileserver: Caddy: Path security bypass due to unsanitized backslashes | known not affected: 1 | 2026-06-28T07:23:07+00:00 | Vulnerability · Source |
| CVE-2018-7995 | redhat_vex | kernel: Race condition in the store_int_with_restart() function in cpu/mcheck/mce.c | known not affected: 88 | 2026-06-28T07:23:04+00:00 | Vulnerability · Source |
| CVE-2026-27448 | redhat_vex | pyOpenSSL: TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback | fixed: 2 known affected: 39 known not affected: 5 | 2026-06-28T07:23:04+00:00 | Vulnerability · Source |
| CVE-2018-7757 | redhat_vex | kernel: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c | fixed: 248 known affected: 27 known not affected: 41 | 2026-06-28T07:23:03+00:00 | Vulnerability · Source |
| CVE-2018-7755 | redhat_vex | kernel: Information exposure in fd_locked_ioctl function in drivers/block/floppy.c | fixed: 204 known affected: 16 known not affected: 59 | 2026-06-28T07:23:02+00:00 | Vulnerability · Source |
| CVE-2026-2741 | redhat_vex | Vaadin-Flow: Vaadin: Arbitrary file write via path traversal during Node.js download | known affected: 4 | 2026-06-28T07:23:01+00:00 | Vulnerability · Source |
| CVE-2016-9565 | redhat_vex | nagios: Command injection via curl in MagpieRSS | fixed: 34 known affected: 1 known not affected: 3 | 2026-06-28T07:23:00+00:00 | Vulnerability · Source |
| CVE-2026-27204 | redhat_vex | wasmtime: Wasmtime: Denial of Service via guest-controlled resource exhaustion in WASI host interfaces | known affected: 1 | 2026-06-28T07:22:59+00:00 | Vulnerability · Source |