VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299456 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-54764 | redhat_vex | mbedtls: Mbedtls timing attacks in RSA operations | known not affected: 1 | 2026-06-28T07:05:26+00:00 | Vulnerability · Source |
| CVE-2018-16079 | redhat_vex | chromium-browser: URL spoof in permission dialogs | fixed: 12 | 2026-06-28T07:05:26+00:00 | Vulnerability · Source |
| CVE-2025-54419 | redhat_vex | @node-saml/node-saml: Node-SAML Signature Verification Vulnerability | fixed: 1 known not affected: 3 | 2026-06-28T07:05:25+00:00 | Vulnerability · Source |
| CVE-2024-40997 | redhat_vex | kernel: cpufreq: amd-pstate: fix memory leak on CPU EPP exit | fixed: 709 known affected: 22 known not affected: 50 | 2026-06-28T07:05:24+00:00 | Vulnerability · Source |
| CVE-2026-35367 | redhat_vex | rust-coreutils: nohup: information disclosure via insecure default output permissions | known not affected: 1 | 2026-06-28T07:05:22+00:00 | Vulnerability · Source |
| CVE-2024-35176 | redhat_vex | REXML: DoS parsing an XML with many `<`s in an attribute value | fixed: 160 known affected: 238 | 2026-06-28T07:05:22+00:00 | Vulnerability · Source |
| CVE-2026-35356 | redhat_vex | rust-coreutils: install: arbitrary file overwrite with -D via path component symlink race | known not affected: 1 | 2026-06-28T07:05:21+00:00 | Vulnerability · Source |
| CVE-2026-35344 | redhat_vex | rust-coreutils: dd: silent data corruption via unconditional truncation error suppression | known not affected: 1 | 2026-06-28T07:05:21+00:00 | Vulnerability · Source |
| CVE-2026-35371 | redhat_vex | rust-coreutils: id: misleading identity reporting in pretty print mode | known not affected: 1 | 2026-06-28T07:05:21+00:00 | Vulnerability · Source |
| CVE-2026-35350 | redhat_vex | rust-coreutils: cp: unexpected privileged executable creation with -p | known not affected: 1 | 2026-06-28T07:05:21+00:00 | Vulnerability · Source |
| CVE-2020-15393 | redhat_vex | kernel: memory leak in usbtest_disconnect function in drivers/usb/misc/usbtest.c | known affected: 1 known not affected: 103 | 2026-06-28T07:05:19+00:00 | Vulnerability · Source |
| CVE-2025-54412 | redhat_vex | skops: Skops OperatorFuncNode Code Execution Vulnerability | known not affected: 1 | 2026-06-28T07:05:19+00:00 | Vulnerability · Source |
| CVE-2025-54388 | redhat_vex | github.com/moby/moby: Moby's Firewalld reload makes container ports accessible | known affected: 15 | 2026-06-28T07:05:19+00:00 | Vulnerability · Source |
| CVE-2025-54368 | redhat_vex | uv: uv ZIP Archive Validation Vulnerability | known not affected: 1 | 2026-06-28T07:05:18+00:00 | Vulnerability · Source |
| CVE-2021-20270 | redhat_vex | python-pygments: Infinite loop in SML lexer may lead to DoS | fixed: 488 known affected: 12 known not affected: 3 | 2026-06-28T07:05:18+00:00 | Vulnerability · Source |
| CVE-2025-54386 | redhat_vex | traefik: Traefik's Client Plugin is Vulnerable to Path Traversal, Arbitrary File Overwrites and Remote Code Execution | fixed: 4 known not affected: 57 | 2026-06-28T07:05:18+00:00 | Vulnerability · Source |
| CVE-2025-54352 | redhat_vex | wordpress: WordPress Pingback Title Disclosure Vulnerability | known not affected: 1 | 2026-06-28T07:05:18+00:00 | Vulnerability · Source |
| CVE-2025-54310 | redhat_vex | qbittorrent: qBittorrent local file access | known not affected: 1 | 2026-06-28T07:05:17+00:00 | Vulnerability · Source |
| CVE-2025-5416 | redhat_vex | keycloak-core: Keycloak Environment Information | known affected: 1 | 2026-06-28T07:05:17+00:00 | Vulnerability · Source |
| CVE-2025-53864 | redhat_vex | com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT | fixed: 1 known affected: 14 | 2026-06-28T07:05:17+00:00 | Vulnerability · Source |
| CVE-2025-5417 | redhat_vex | rhdh: Red Hat Developer Hub user permissions | fixed: 1 known not affected: 2 | 2026-06-28T07:05:17+00:00 | Vulnerability · Source |
| CVE-2025-54121 | redhat_vex | starlette: Starlette denial-of-service | known affected: 95 | 2026-06-28T07:05:16+00:00 | Vulnerability · Source |
| CVE-2025-54072 | redhat_vex | yt-dlp: yt-dlp allows `--exec` command injection when using placeholder on Windows | known not affected: 1 | 2026-06-28T07:05:14+00:00 | Vulnerability · Source |
| CVE-2025-53862 | redhat_vex | aap: aap-gateway: automation-hub: Sensitive Information Disclosure | known not affected: 3 | 2026-06-28T07:05:12+00:00 | Vulnerability · Source |
| CVE-2025-53816 | redhat_vex | 7zip: 7-Zip heap buffer overflow | known not affected: 1 | 2026-06-28T07:05:11+00:00 | Vulnerability · Source |
| CVE-2021-2024 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:05:11+00:00 | Vulnerability · Source |
| CVE-2025-53689 | redhat_vex | jackrabbit-spi-commons: jackrabbit-core: Apache Jackrabbit XXE vulnerability | known affected: 2 known not affected: 2 | 2026-06-28T07:05:10+00:00 | Vulnerability · Source |
| CVE-2025-53644 | redhat_vex | opencv: OpenCV use after free | known not affected: 15 | 2026-06-28T07:05:10+00:00 | Vulnerability · Source |
| CVE-2025-53629 | redhat_vex | cpp-httplib: cpp-httplib Unbounded Memory Allocation | known not affected: 1 | 2026-06-28T07:05:09+00:00 | Vulnerability · Source |
| CVE-2025-53628 | redhat_vex | cpp-httplib: cpp-httplib does not limit the length of a line | known not affected: 1 | 2026-06-28T07:05:09+00:00 | Vulnerability · Source |
| CVE-2025-53391 | redhat_vex | zulucrypt: ZuluCrypt PolicyKit Privilege Escalation | known not affected: 1 | 2026-06-28T07:05:09+00:00 | Vulnerability · Source |
| CVE-2025-53630 | redhat_vex | llama.cpp: Integer Overflow in llama.cpp | known not affected: 1 | 2026-06-28T07:05:09+00:00 | Vulnerability · Source |
| CVE-2025-53367 | redhat_vex | djvulibre: DjVuLibre out of bounds write | known not affected: 1 | 2026-06-28T07:05:09+00:00 | Vulnerability · Source |
| CVE-2025-53365 | redhat_vex | mcp: MCP Server Crash via ClosedResourceError | known affected: 1 | 2026-06-28T07:05:08+00:00 | Vulnerability · Source |
| CVE-2025-53366 | redhat_vex | mcp: MCP SDK Denial of Service Vulnerability | known affected: 1 | 2026-06-28T07:05:08+00:00 | Vulnerability · Source |
| CVE-2013-2446 | redhat_vex | OpenJDK: output stream access restrictions (CORBA, 8000642) | fixed: 555 | 2026-06-28T07:05:06+00:00 | Vulnerability · Source |
| CVE-2018-14734 | redhat_vex | kernel: use-after-free in ucma_leave_multicast in drivers/infiniband/core/ucma.c | fixed: 230 known affected: 27 known not affected: 32 | 2026-06-28T07:05:06+00:00 | Vulnerability · Source |
| CVE-2022-22827 | redhat_vex | expat: Integer overflow in storeAtts in xmlparse.c | fixed: 209 known affected: 21 known not affected: 31 | 2026-06-28T07:05:06+00:00 | Vulnerability · Source |
| CVE-2025-53192 | redhat_vex | ognl/ognl: Apache Commons OGNL: Expression Injection leading to RCE | known affected: 2 known not affected: 3 | 2026-06-28T07:05:06+00:00 | Vulnerability · Source |
| CVE-2022-22823 | redhat_vex | expat: Integer overflow in build_model in xmlparse.c | fixed: 264 known affected: 13 known not affected: 31 | 2026-06-28T07:05:06+00:00 | Vulnerability · Source |
| CVE-2025-53021 | redhat_vex | moodle: Moodle session fixation | known not affected: 1 | 2026-06-28T07:05:05+00:00 | Vulnerability · Source |
| CVE-2025-53103 | redhat_vex | org.junit.platform/junit-platform-reporting: JUnit can leak Git credentials | known not affected: 2 | 2026-06-28T07:05:04+00:00 | Vulnerability · Source |
| CVE-2021-20181 | redhat_vex | qemu: 9pfs: TOCTOU privilege escalation vulnerability | known not affected: 105 | 2026-06-28T07:05:03+00:00 | Vulnerability · Source |
| CVE-2025-5302 | redhat_vex | llama_index: Denial of Service (DOS) in JSONReader in run-llama/llama_index | fixed: 4 known not affected: 154 | 2026-06-28T07:05:02+00:00 | Vulnerability · Source |
| CVE-2013-2427 | redhat_vex | JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX) | fixed: 52 | 2026-06-28T07:05:02+00:00 | Vulnerability · Source |
| CVE-2025-53014 | redhat_vex | ImageMagick: ImageMagick Heap Buffer Overflow | known affected: 14 | 2026-06-28T07:05:01+00:00 | Vulnerability · Source |
| CVE-2013-2425 | redhat_vex | JDK: unspecified vulnerability fixed in 7u21 (Install) | fixed: 52 | 2026-06-28T07:05:01+00:00 | Vulnerability · Source |
| CVE-2025-53000 | redhat_vex | nbconvert: nbconvert: Arbitrary code execution via malicious SVG to PDF conversion on Windows | known not affected: 19 | 2026-06-28T07:05:01+00:00 | Vulnerability · Source |
| CVE-2025-52890 | redhat_vex | incus: Incus firewall rule bypass | known not affected: 1 | 2026-06-28T07:04:59+00:00 | Vulnerability · Source |
| CVE-2025-52887 | redhat_vex | cpp-httplib: cpp-httplib memory leak | known not affected: 1 | 2026-06-28T07:04:59+00:00 | Vulnerability · Source |