VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286604 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-5079 | redhat_vex | multer: Multer: Denial of Service via deeply nested field names in multipart form data | fixed: 2 known not affected: 6 under investigation: 23 | 2026-07-29T18:51:42+00:00 | Vulnerability · Source |
| CVE-2026-5038 | redhat_vex | multer: Multer: Denial of Service via aborted or malformed multipart uploads | fixed: 2 known not affected: 6 under investigation: 23 | 2026-07-29T18:51:39+00:00 | Vulnerability · Source |
| CVE-2026-64317 | redhat_vex | kernel: isofs: bound Rock Ridge symlink components to the SL record | known affected: 76 known not affected: 198 | 2026-07-29T18:50:58+00:00 | Vulnerability · Source |
| CVE-2026-58178 | redhat_vex | Apache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery | known not affected: 1 | 2026-07-29T18:48:03+00:00 | Vulnerability · Source |
| CVE-2026-58159 | redhat_vex | Apache Traffic Server: listener and ACL handling allow access-control bypass | known not affected: 1 | 2026-07-29T18:47:50+00:00 | Vulnerability · Source |
| CVE-2026-58180 | redhat_vex | Apache Traffic Server: txn_box plugin overflows the stack from attacker input | known not affected: 1 | 2026-07-29T18:47:32+00:00 | Vulnerability · Source |
| CVE-2026-45149 | redhat_vex | brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges | fixed: 44 known affected: 27 known not affected: 235 under investigation: 103 | 2026-07-29T18:40:33+00:00 | Vulnerability · Source |
| CVE-2026-42342 | redhat_vex | react-router: @remix-run/server-runtime: React Router / Remix: Denial of Service via unbounded path expansion in __manifest endpoint | fixed: 10 known affected: 139 known not affected: 89 | 2026-07-29T18:40:29+00:00 | Vulnerability · Source |
| CVE-2026-33245 | redhat_vex | react-router: React Router: Cross-Site Scripting vulnerability via untrusted React Server Component redirects | fixed: 49 known affected: 62 known not affected: 582 under investigation: 93 | 2026-07-29T18:40:25+00:00 | Vulnerability · Source |
| CVE-2026-50193 | redhat_vex | jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing | fixed: 5 known affected: 64 known not affected: 156 | 2026-07-29T18:40:11+00:00 | Vulnerability · Source |
| CVE-2026-64336 | redhat_vex | kernel: USB: serial: keyspan_pda: fix information leak | known affected: 246 known not affected: 28 | 2026-07-29T18:37:22+00:00 | Vulnerability · Source |
| CVE-2026-64323 | redhat_vex | kernel: udf: validate VAT header length against the VAT inode size | known affected: 274 known not affected: 1 | 2026-07-29T18:32:23+00:00 | Vulnerability · Source |
| CVE-2026-64270 | redhat_vex | kernel: Input: mms114 - reject an oversized device packet size | known not affected: 274 | 2026-07-29T18:27:25+00:00 | Vulnerability · Source |
| CVE-2026-64484 | redhat_vex | kernel: ALSA: es1938: check snd_ctl_new1() return value | known not affected: 274 | 2026-07-29T18:22:19+00:00 | Vulnerability · Source |
| CVE-2026-64458 | redhat_vex | kernel: mm/damon/ops-common: handle extreme intervals in damon_hot_score() | known affected: 184 known not affected: 90 | 2026-07-29T18:17:18+00:00 | Vulnerability · Source |
| CVE-2026-64308 | redhat_vex | kernel: crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD) | known affected: 184 known not affected: 90 | 2026-07-29T18:12:45+00:00 | Vulnerability · Source |
| CVE-2026-64415 | redhat_vex | kernel: mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup | known affected: 90 known not affected: 185 | 2026-07-29T18:07:19+00:00 | Vulnerability · Source |
| CVE-2026-59920 | redhat_vex | io.netty/netty-codec-stomp: Netty: Improper CR/LF neutralization in netty-codec-stomp | known affected: 10 | 2026-07-29T18:02:44+00:00 | Vulnerability · Source |
| CVE-2026-49844 | redhat_vex | org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values | known affected: 66 | 2026-07-29T18:02:42+00:00 | Vulnerability · Source |
| CVE-2026-46681 | redhat_vex | @nevware21/ts-utils: @nevware21/ts-utils: Arbitrary Code Execution via Prototype Pollution | known affected: 2 | 2026-07-29T18:02:27+00:00 | Vulnerability · Source |
| CVE-2026-48526 | redhat_vex | python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens | fixed: 857 known affected: 44 known not affected: 1124 | 2026-07-29T17:49:19+00:00 | Vulnerability · Source |
| CVE-2026-27962 | redhat_vex | authlib: Authlib: Authentication bypass due to JWK Header Injection vulnerability | fixed: 18 known not affected: 134 | 2026-07-29T17:48:44+00:00 | Vulnerability · Source |
| CVE-2026-64268 | redhat_vex | kernel: RDMA/siw: bound Read Response placement to the RREAD length | known affected: 156 known not affected: 118 | 2026-07-29T17:38:19+00:00 | Vulnerability · Source |
| CVE-2026-64391 | redhat_vex | kernel: ksmbd: use opener credentials for ADS I/O | known not affected: 275 | 2026-07-29T17:29:09+00:00 | Vulnerability · Source |
| CVE-2026-56392 | redhat_vex | coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values | fixed: 28 known affected: 12 under investigation: 1 | 2026-07-29T17:26:05+00:00 | Vulnerability · Source |
| CVE-2026-66038 | redhat_vex | FFmpeg: Information disclosure via malformed zlib video stream | known affected: 8 | 2026-07-29T17:23:35+00:00 | Vulnerability · Source |
| CVE-2026-45695 | redhat_vex | github.com/kopia/kopia: Kopia: Arbitrary code execution via unauthenticated SFTP configuration in HTTP server. | known affected: 5 | 2026-07-29T17:12:52+00:00 | Vulnerability · Source |
| CVE-2026-53378 | redhat_vex | kernel: drm/colorop: Fix blob property reference tracking in state lifecycle | known affected: 184 known not affected: 90 | 2026-07-29T17:09:46+00:00 | Vulnerability · Source |
| CVE-2026-53367 | redhat_vex | kernel: selinux: fix avdcache auditing | known affected: 14 known not affected: 260 | 2026-07-29T17:09:42+00:00 | Vulnerability · Source |
| CVE-2026-53370 | redhat_vex | kernel: perf/x86/intel: Improve validation and configuration of ACR masks | known affected: 76 known not affected: 198 | 2026-07-29T17:09:41+00:00 | Vulnerability · Source |
| CVE-2026-53377 | redhat_vex | kernel: drm/msm: always recover the gpu | known not affected: 274 | 2026-07-29T17:09:38+00:00 | Vulnerability · Source |
| CVE-2026-29167 | redhat_vex | httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration | fixed: 4 known affected: 38 known not affected: 6 under investigation: 24 | 2026-07-29T17:09:35+00:00 | Vulnerability · Source |
| CVE-2026-64274 | redhat_vex | kernel: Input: goodix - clamp the device-reported contact count | known not affected: 274 | 2026-07-29T17:09:31+00:00 | Vulnerability · Source |
| CVE-2026-56764 | redhat_vex | hono: Hono - Timing Attack in basicAuth and bearerAuth Middleware | fixed: 6 known affected: 1 known not affected: 7 | 2026-07-29T17:09:29+00:00 | Vulnerability · Source |
| CVE-2026-53379 | redhat_vex | kernel: media: i2c: ov8856: free control handler on error in ov8856_init_controls() | known affected: 76 known not affected: 198 | 2026-07-29T17:09:26+00:00 | Vulnerability · Source |
| CVE-2026-64262 | redhat_vex | kernel: fuse-uring: end fuse_req on io-uring cancel task work | known not affected: 274 | 2026-07-29T17:09:25+00:00 | Vulnerability · Source |
| CVE-2026-64480 | redhat_vex | kernel: ALSA: ice1712: check snd_ctl_new1() return value | known affected: 246 known not affected: 28 | 2026-07-29T17:09:24+00:00 | Vulnerability · Source |
| CVE-2026-53371 | redhat_vex | kernel: RDMA/ionic: bound node_desc sysfs read with %.64s | known not affected: 274 | 2026-07-29T17:08:21+00:00 | Vulnerability · Source |
| CVE-2026-44631 | redhat_vex | httpd: Apache HTTP Server: Denial of Service via crafted regular expressions | fixed: 314 known affected: 29 | 2026-07-29T17:08:17+00:00 | Vulnerability · Source |
| CVE-2024-43204 | redhat_vex | httpd: SSRF in Apache HTTP Server with mod_proxy loaded | known affected: 54 | 2026-07-29T17:08:15+00:00 | Vulnerability · Source |
| CVE-2026-53372 | redhat_vex | kernel: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking | known affected: 184 known not affected: 90 | 2026-07-29T17:08:14+00:00 | Vulnerability · Source |
| CVE-2026-42535 | redhat_vex | httpd: Apache httpd mod_dav_fs: Denial of Service due to path handling issue | fixed: 154 known affected: 44 | 2026-07-29T17:08:11+00:00 | Vulnerability · Source |
| CVE-2026-18255 | redhat_vex | quay: quay: Global read-only superuser can view robot account tokens | known affected: 2 | 2026-07-29T17:02:59+00:00 | Vulnerability · Source |
| CVE-2026-64282 | redhat_vex | kernel: KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier | known affected: 76 known not affected: 198 | 2026-07-29T16:57:59+00:00 | Vulnerability · Source |
| CVE-2026-56404 | redhat_vex | libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding | fixed: 3 known affected: 43 | 2026-07-29T16:57:57+00:00 | Vulnerability · Source |
| CVE-2026-16118 | redhat_vex | xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c | known affected: 30 | 2026-07-29T16:55:40+00:00 | Vulnerability · Source |
| CVE-2026-4360 | redhat_vex | python: Python Tarfile: Unexpected file ownership when extracting hardlinks | fixed: 16 known affected: 232 | 2026-07-29T16:55:36+00:00 | Vulnerability · Source |
| CVE-2026-64341 | redhat_vex | kernel: USB: iowarrior: fix use-after-free on disconnect race | known affected: 274 | 2026-07-29T16:47:54+00:00 | Vulnerability · Source |
| CVE-2026-64312 | redhat_vex | kernel: crypto: pcrypt - restore callback for non-parallel fallback | known affected: 184 known not affected: 90 | 2026-07-29T16:47:46+00:00 | Vulnerability · Source |
| CVE-2026-64284 | redhat_vex | kernel: KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits | known affected: 198 known not affected: 76 | 2026-07-29T16:47:44+00:00 | Vulnerability · Source |