VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288716 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-14243 | redhat_vex | mirror-registry: OpenShift Mirror Registry: User enumeration via authentication error messages | known affected: 2 | 2026-08-05T18:45:59+00:00 | Vulnerability · Source |
| CVE-2026-16100 | redhat_vex | keycloak-services: keycloak-services: Unbounded metric cardinality in user event metrics via request-controlled error text | fixed: 10 known not affected: 3 | 2026-08-05T18:45:35+00:00 | Vulnerability · Source |
| CVE-2026-11986 | redhat_vex | keycloak-rest-admin-ui-ext: Authorization Bypass vulnerability in the admin-ui-ext bulk role-mapping-delete endpoints of Keycloak | fixed: 10 known not affected: 1 | 2026-08-05T18:45:32+00:00 | Vulnerability · Source |
| CVE-2026-9798 | redhat_vex | keycloak: Keycloak: Brute-force protection bypass in CIBA flow | fixed: 20 | 2026-08-05T18:45:31+00:00 | Vulnerability · Source |
| CVE-2026-9689 | redhat_vex | keycloak: org.keycloak.protocol.oidc: HTTP Parameter Pollution in OIDC redirect URI allows response parameter duplication - #GHI-604 | fixed: 20 | 2026-08-05T18:45:30+00:00 | Vulnerability · Source |
| CVE-2026-9793 | redhat_vex | keycloak: Keycloak: Security policy bypass in JWE-encrypted request object processing | fixed: 20 | 2026-08-05T18:45:30+00:00 | Vulnerability · Source |
| CVE-2026-4629 | redhat_vex | keycloak: Keycloak: Privilege escalation through hardcoded role mapper injection | fixed: 10 | 2026-08-05T18:45:29+00:00 | Vulnerability · Source |
| CVE-2026-16071 | redhat_vex | keycloak-services: keycloak-services: LDAP entry-DN user search bypasses configured users DN boundary | fixed: 20 known not affected: 3 | 2026-08-05T18:45:19+00:00 | Vulnerability · Source |
| CVE-2026-14614 | redhat_vex | keycloak-services: keycloak-services: FGAP v2 client scope assignment bypass via ClientResource | fixed: 20 known not affected: 5 | 2026-08-05T18:45:14+00:00 | Vulnerability · Source |
| CVE-2026-14209 | redhat_vex | keycloak-admin-ui: keycloak-admin-ui:Admin UI extension brute-force-user endpoint bypasses FGAPv2 user view restrictions | fixed: 20 known affected: 1 | 2026-08-05T18:45:13+00:00 | Vulnerability · Source |
| CVE-2026-53404 | redhat_vex | Apache Tomcat: Apache Tomcat: Incorrect control flow in rewrite valve allows unexpected rule processing | fixed: 72 known affected: 78 | 2026-08-05T18:45:09+00:00 | Vulnerability · Source |
| CVE-2026-50031 | redhat_vex | freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client | fixed: 573 known affected: 4 | 2026-08-05T18:44:58+00:00 | Vulnerability · Source |
| CVE-2026-33554 | redhat_vex | freeipmi: buffer overflows on response messages via ipmi-oem | fixed: 707 known affected: 4 | 2026-08-05T18:44:57+00:00 | Vulnerability · Source |
| CVE-2021-42252 | redhat_vex | kernel: memory overwrite in the kernel with potential privileges execution | known not affected: 197 | 2026-08-05T18:43:58+00:00 | Vulnerability · Source |
| CVE-2026-45411 | redhat_vex | vm2: vm2: Arbitrary Code Execution due to sandbox escape vulnerability | fixed: 1 known not affected: 1 | 2026-08-05T18:22:30+00:00 | Vulnerability · Source |
| CVE-2026-44009 | redhat_vex | vm2: vm2: Arbitrary Code Execution via Sandbox Escape | fixed: 1 known not affected: 1 | 2026-08-05T18:22:24+00:00 | Vulnerability · Source |
| CVE-2026-44008 | redhat_vex | vm2: vm2: Arbitrary code execution due to sandbox escape | fixed: 1 known not affected: 1 | 2026-08-05T18:22:20+00:00 | Vulnerability · Source |
| CVE-2026-44007 | redhat_vex | vm2: vm2: Arbitrary code execution via nested NodeVM bypass | fixed: 1 known not affected: 1 | 2026-08-05T18:22:16+00:00 | Vulnerability · Source |
| CVE-2026-44006 | redhat_vex | vm2: vm2: Sandbox escape via arbitrary prototype access leading to arbitrary code execution | fixed: 1 known not affected: 1 | 2026-08-05T18:22:11+00:00 | Vulnerability · Source |
| CVE-2026-44005 | redhat_vex | vm2: vm2: Sandbox Escape leading to Arbitrary Code Execution | fixed: 1 known not affected: 1 | 2026-08-05T18:22:05+00:00 | Vulnerability · Source |
| CVE-2026-44004 | redhat_vex | vm2: vm2: Denial of Service via host memory exhaustion | fixed: 1 known not affected: 1 | 2026-08-05T18:22:01+00:00 | Vulnerability · Source |
| CVE-2026-44001 | redhat_vex | vm2: vm2: Sandbox escape leads to Denial of Service | fixed: 1 known not affected: 1 | 2026-08-05T18:21:58+00:00 | Vulnerability · Source |
| CVE-2026-43999 | redhat_vex | vm2: vm2: Remote code execution via NodeVM builtin allowlist bypass | fixed: 1 known not affected: 1 | 2026-08-05T18:21:52+00:00 | Vulnerability · Source |
| CVE-2026-43998 | redhat_vex | vm2: vm2: Remote code execution due to path restriction bypass via symlinks | fixed: 1 known not affected: 1 | 2026-08-05T18:21:50+00:00 | Vulnerability · Source |
| CVE-2026-43997 | redhat_vex | vm2: vm2: Arbitrary code execution via sandbox escape | fixed: 1 known not affected: 1 | 2026-08-05T18:21:47+00:00 | Vulnerability · Source |
| CVE-2026-1002 | redhat_vex | io.vertx/vertx-core: static handler component cache can be manipulated to deny the access to static files | fixed: 30 known affected: 19 known not affected: 322 | 2026-08-05T18:21:01+00:00 | Vulnerability · Source |
| CVE-2026-6637 | redhat_vex | postgresql: PostgreSQL: Arbitrary code execution vulnerability in 'refint' module | fixed: 3660 known affected: 1 known not affected: 15 | 2026-08-05T18:12:41+00:00 | Vulnerability · Source |
| CVE-2026-9800 | redhat_vex | keycloak-policy-enforcer: Keycloak Policy Enforcer: Authorization bypass via incorrect URI comparison | fixed: 30 known affected: 2 known not affected: 1 | 2026-08-05T18:12:34+00:00 | Vulnerability · Source |
| CVE-2026-16102 | redhat_vex | keycloak-services: keycloak-services: Default DCR policy allows role forgery via User Property mappers | fixed: 20 known affected: 3 | 2026-08-05T18:11:55+00:00 | Vulnerability · Source |
| CVE-2026-15573 | redhat_vex | keycloak-services: keycloak-services: Authorization bypass via unnormalized URI matching in PathMatcher | fixed: 20 known affected: 3 | 2026-08-05T18:11:45+00:00 | Vulnerability · Source |
| CVE-2026-15572 | redhat_vex | keycloak-services: keycloak-services: DCR protocol mapper type-swap policy bypass allows privilege escalation | fixed: 20 | 2026-08-05T18:11:37+00:00 | Vulnerability · Source |
| CVE-2026-17523 | redhat_vex | kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges | known affected: 48 known not affected: 226 | 2026-08-05T17:29:24+00:00 | Vulnerability · Source |
| CVE-2026-51992 | redhat_vex | ClickHouse Server: ClickHouse Server: Arbitrary code execution via SQL Injection in create dictionaries function | known not affected: 1 | 2026-08-05T17:24:05+00:00 | Vulnerability · Source |
| CVE-2025-38068 | redhat_vex | kernel: Linux kernel: LZO compression buffer overrun due to insufficient output buffer checks | known affected: 29 known not affected: 245 | 2026-08-05T17:03:54+00:00 | Vulnerability · Source |
| CVE-2024-56656 | redhat_vex | kernel: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips | known not affected: 198 | 2026-08-05T16:31:45+00:00 | Vulnerability · Source |
| CVE-2024-56688 | redhat_vex | kernel: sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport | fixed: 305 known affected: 112 | 2026-08-05T16:31:42+00:00 | Vulnerability · Source |
| CVE-2025-21791 | redhat_vex | kernel: vrf: use RCU protection in l3mdev_l3_out() | fixed: 917 known affected: 112 | 2026-08-05T16:30:05+00:00 | Vulnerability · Source |
| CVE-2025-22004 | redhat_vex | kernel: net: atm: fix use after free in lec_send() | fixed: 1497 known affected: 36 known not affected: 76 | 2026-08-05T16:26:59+00:00 | Vulnerability · Source |
| CVE-2024-56704 | redhat_vex | kernel: 9p/xen: fix release of IRQ | known not affected: 198 | 2026-08-05T16:19:47+00:00 | Vulnerability · Source |
| CVE-2026-67301 | redhat_vex | FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders | known affected: 26 known not affected: 5 | 2026-08-05T16:16:56+00:00 | Vulnerability · Source |
| CVE-2026-71202 | redhat_vex | raster: Raster: Denial of Service via integer underflow in image cropping function | known affected: 1 known not affected: 1 | 2026-08-05T16:03:40+00:00 | Vulnerability · Source |
| CVE-2025-22040 | redhat_vex | kernel: ksmbd: fix session use-after-free in multichannel connection | known not affected: 274 | 2026-08-05T16:00:54+00:00 | Vulnerability · Source |
| CVE-2026-47763 | redhat_vex | pdm: pdm: Arbitrary File Overwrite via Symlink Following | known not affected: 1 | 2026-08-05T15:36:13+00:00 | Vulnerability · Source |
| CVE-2026-49331 | redhat_vex | openshift/oauth-proxy: openshift/oauth-proxy: unauthenticated identity header injection on whitelisted paths | known affected: 2 | 2026-08-05T15:36:13+00:00 | Vulnerability · Source |
| CVE-2026-67592 | redhat_vex | org.apache.qpid/protonj2: Apache Qpid ProtonJ2: Denial of Service via uncontrolled incoming data transfers | known affected: 1 | 2026-08-05T15:36:12+00:00 | Vulnerability · Source |
| CVE-2026-66759 | redhat_vex | gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted ICNS images | fixed: 24 known affected: 18 known not affected: 11 | 2026-08-05T15:21:41+00:00 | Vulnerability · Source |
| CVE-2026-42169 | redhat_vex | gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c) | fixed: 24 known not affected: 29 | 2026-08-05T15:21:37+00:00 | Vulnerability · Source |
| CVE-2026-66758 | redhat_vex | gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images | fixed: 24 known affected: 29 | 2026-08-05T15:21:29+00:00 | Vulnerability · Source |
| CVE-2026-43164 | redhat_vex | kernel: udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb() | known affected: 14 known not affected: 260 | 2026-08-05T15:01:25+00:00 | Vulnerability · Source |
| CVE-2026-43126 | redhat_vex | kernel: ALSA: mixer: oss: Add card disconnect checkpoints | known not affected: 274 | 2026-08-05T15:01:25+00:00 | Vulnerability · Source |