VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
289759 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-59927 | redhat_vex | mistune: Mistune: Denial of Service via unbounded recursion in Markdown include directive | known affected: 25 | 2026-08-06T10:23:47+00:00 | Vulnerability · Source |
| CVE-2026-71190 | redhat_vex | openstack-swift: openstack-swift: Unauthenticated denial of service via catastrophic backtracking in Accept header parser | known affected: 33 | 2026-08-06T10:15:07+00:00 | Vulnerability · Source |
| CVE-2024-9143 | redhat_vex | openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access | known affected: 41 known not affected: 26 | 2026-08-06T10:06:51+00:00 | Vulnerability · Source |
| CVE-2026-64579 | redhat_vex | kernel: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert | known affected: 232 known not affected: 42 | 2026-08-06T10:06:22+00:00 | Vulnerability · Source |
| CVE-2025-62171 | redhat_vex | ImageMagick: ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems | fixed: 51 known affected: 7 | 2026-08-06T10:06:20+00:00 | Vulnerability · Source |
| CVE-2026-71192 | redhat_vex | openstack-swift: openstack-swift: S3API cross-tenant object read via Swift-native header injection | known affected: 33 | 2026-08-06T10:02:08+00:00 | Vulnerability · Source |
| CVE-2026-71191 | redhat_vex | openstack-swift: openstack-swift: S3API presigned URL unsigned header authorization bypass | known affected: 33 | 2026-08-06T09:54:47+00:00 | Vulnerability · Source |
| CVE-2026-31617 | redhat_vex | kernel: usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() | known affected: 76 known not affected: 198 | 2026-08-06T09:16:57+00:00 | Vulnerability · Source |
| CVE-2025-1975 | redhat_vex | ollama: Improper Validation of Array Index in ollama/ollama | known not affected: 4 | 2026-08-06T09:13:33+00:00 | Vulnerability · Source |
| CVE-2023-52969 | redhat_vex | mariadb: MariaDB Server Crash Due to Empty Backtrace Log | fixed: 924 known not affected: 28 | 2026-08-06T08:55:57+00:00 | Vulnerability · Source |
| CVE-2023-52971 | redhat_vex | mariadb: MariaDB Server Crash | fixed: 651 known not affected: 81 | 2026-08-06T08:55:56+00:00 | Vulnerability · Source |
| CVE-2023-52970 | redhat_vex | mariadb: MariaDB Server Crash via Item_direct_view_ref | fixed: 924 known not affected: 28 | 2026-08-06T08:55:44+00:00 | Vulnerability · Source |
| CVE-2026-31532 | redhat_vex | kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() | fixed: 2295 known affected: 22 known not affected: 14 | 2026-08-06T08:49:01+00:00 | Vulnerability · Source |
| CVE-2025-59530 | redhat_vex | github.com/quic-go/quic-go: quic-go Crash Due to Premature HANDSHAKE_DONE Frame | fixed: 418 known affected: 15 known not affected: 2496 | 2026-08-06T08:39:55+00:00 | Vulnerability · Source |
| CVE-2025-21869 | redhat_vex | kernel: powerpc/code-patching: Disable KASAN report during patching via temporary mm | known affected: 226 known not affected: 48 | 2026-08-06T08:35:47+00:00 | Vulnerability · Source |
| CVE-2025-68665 | redhat_vex | langchain-core: LangChain: Arbitrary Code Execution via Serialization Injection | fixed: 2 known affected: 3 known not affected: 276 | 2026-08-06T08:30:08+00:00 | Vulnerability · Source |
| CVE-2025-38045 | redhat_vex | kernel: wifi: iwlwifi: fix debug actions order | known affected: 260 known not affected: 14 | 2026-08-06T08:20:46+00:00 | Vulnerability · Source |
| CVE-2025-38032 | redhat_vex | kernel: mr: consolidate the ipmr_can_free_table() checks. | known affected: 118 known not affected: 156 | 2026-08-06T08:20:44+00:00 | Vulnerability · Source |
| CVE-2026-45903 | redhat_vex | kernel: bpf: Fix memory access flags in helper prototypes | known affected: 90 known not affected: 184 | 2026-08-06T08:20:21+00:00 | Vulnerability · Source |
| CVE-2025-68209 | redhat_vex | kernel: mlx5: Fix default values in create CQ | known affected: 246 known not affected: 28 | 2026-08-06T08:20:18+00:00 | Vulnerability · Source |
| CVE-2025-38147 | redhat_vex | kernel: calipso: Don't call calipso functions for AF_INET sk. | known affected: 274 | 2026-08-06T08:20:16+00:00 | Vulnerability · Source |
| CVE-2025-38105 | redhat_vex | kernel: Linux kernel: Denial of Service in USB-audio MIDI driver due to improper timer shutdown | known affected: 274 | 2026-08-06T08:20:13+00:00 | Vulnerability · Source |
| CVE-2025-38048 | redhat_vex | kernel: Linux kernel: Data race in virtio_ring can lead to denial of service | known affected: 274 | 2026-08-06T08:20:13+00:00 | Vulnerability · Source |
| CVE-2024-53206 | redhat_vex | kernel: tcp: Fix use-after-free of nreq in reqsk_timer_handler(). | known not affected: 198 | 2026-08-06T08:14:48+00:00 | Vulnerability · Source |
| CVE-2026-17718 | redhat_vex | chromium-browser: chromium-browser: Use after free in ANGLE | known not affected: 1 | 2026-08-06T08:03:19+00:00 | Vulnerability · Source |
| CVE-2026-43825 | redhat_vex | org.apache.opennlp/opennlp-tools: Apache OpenNLP SvmDoccatModel: Remote code execution via untrusted Java deserialization | known not affected: 4 | 2026-08-06T07:58:24+00:00 | Vulnerability · Source |
| CVE-2026-55688 | redhat_vex | async-http-client: AsyncHttpClient: Cookie injection allows planting cookies for unrelated domains | known affected: 2 | 2026-08-06T07:58:24+00:00 | Vulnerability · Source |
| CVE-2026-17894 | redhat_vex | chromium-browser: chromium-browser: Use after free in Views | known not affected: 1 | 2026-08-06T07:58:23+00:00 | Vulnerability · Source |
| CVE-2026-7482 | redhat_vex | github.com/ollama/ollama: ollama: Ollama: Information disclosure via heap out-of-bounds read in GGUF model loader | known not affected: 7 | 2026-08-06T07:38:22+00:00 | Vulnerability · Source |
| CVE-2026-70368 | redhat_vex | stunnel: Stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message | known affected: 4 known not affected: 3 | 2026-08-06T07:33:27+00:00 | Vulnerability · Source |
| CVE-2026-64560 | redhat_vex | kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race | known affected: 184 known not affected: 90 | 2026-08-06T07:33:08+00:00 | Vulnerability · Source |
| CVE-2026-70367 | redhat_vex | stunnel: SSRF bypass in stunnel SOCKS proxy via IPv4-mapped IPv6 loopback and unspecified addresses allows access to loopback-only services | known affected: 4 known not affected: 3 | 2026-08-06T07:28:08+00:00 | Vulnerability · Source |
| CVE-2019-15890 | redhat_vex | QEMU: Slirp: use-after-free during packet reassembly | fixed: 1937 known affected: 54 known not affected: 3 | 2026-08-06T07:18:23+00:00 | Vulnerability · Source |
| CVE-2021-26691 | redhat_vex | httpd: mod_session: Heap overflow via a crafted SessionHeader value | fixed: 297 known affected: 12 known not affected: 18 | 2026-08-06T07:13:41+00:00 | Vulnerability · Source |
| CVE-2023-2700 | redhat_vex | libvirt: Memory leak in virPCIVirtualFunctionList cleanup | fixed: 2141 known affected: 101 | 2026-08-06T07:13:23+00:00 | Vulnerability · Source |
| CVE-2026-3260 | redhat_vex | undertow: Undertow: Denial of Service due to premature multipart/form-data parsing in GET requests | known affected: 26 | 2026-08-06T07:03:07+00:00 | Vulnerability · Source |
| CVE-2021-3903 | redhat_vex | vim: heap-based buffer overflow vulnerability | fixed: 66 known affected: 12 known not affected: 7 | 2026-08-06T06:53:12+00:00 | Vulnerability · Source |
| CVE-2026-71311 | redhat_vex | github.com/rclone/rclone: rclone: FTP command injection via CRLF in filename encoding | known not affected: 1 | 2026-08-06T06:18:07+00:00 | Vulnerability · Source |
| CVE-2026-67863 | redhat_vex | open62541: open62541: Denial of Service via use-after-free vulnerability | known not affected: 1 | 2026-08-06T06:13:07+00:00 | Vulnerability · Source |
| CVE-2026-71310 | redhat_vex | github.com/rclone/rclone: rclone: Denial of Service via unbounded HTTP CONNECT response headers | known affected: 1 | 2026-08-06T06:10:15+00:00 | Vulnerability · Source |
| CVE-2026-71312 | redhat_vex | github.com/rclone/rclone: rclone: Server-Side Command Execution via Malicious SFTP Filenames | known not affected: 1 | 2026-08-06T06:03:13+00:00 | Vulnerability · Source |
| CVE-2026-71309 | redhat_vex | github.com/rclone/rclone: rclone: Backend Root Escape via Incomplete Path Validation | known not affected: 1 | 2026-08-06T05:53:30+00:00 | Vulnerability · Source |
| CVE-2026-71267 | redhat_vex | microtar: microtar: Stack buffer overflow via overly long filenames | known not affected: 1 | 2026-08-06T04:43:08+00:00 | Vulnerability · Source |
| CVE-2026-67870 | redhat_vex | open62541: open62541: Denial of Service via incomplete validation in AddReferences | known not affected: 1 | 2026-08-06T04:23:43+00:00 | Vulnerability · Source |
| CVE-2026-67869 | redhat_vex | open62541: open62541: Denial of Service via buffer overflow in Service_Call | known not affected: 1 | 2026-08-06T04:18:31+00:00 | Vulnerability · Source |
| CVE-2026-16729 | redhat_vex | undici: Undici: Cookie attribute injection allows bypassing security protections | fixed: 8 known affected: 1 known not affected: 4 | 2026-08-06T03:49:54+00:00 | Vulnerability · Source |
| CVE-2026-39244 | redhat_vex | adm-zip: adm-zip: Denial of Service via crafted ZIP file leading to excessive memory allocation | known affected: 20 known not affected: 2 | 2026-08-06T03:49:52+00:00 | Vulnerability · Source |
| CVE-2026-8458 | redhat_vex | curl: libcurl: Unauthorized connection reuse due to a logical error | fixed: 7 known affected: 19 known not affected: 8 | 2026-08-06T03:46:10+00:00 | Vulnerability · Source |
| CVE-2026-67550 | redhat_vex | re2: Denial of Service via out-of-bounds read | known affected: 1 known not affected: 1 | 2026-08-06T03:34:33+00:00 | Vulnerability · Source |
| CVE-2022-21299 | redhat_vex | OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646) | fixed: 1072 known affected: 53 known not affected: 228 | 2026-08-06T03:03:22+00:00 | Vulnerability · Source |