VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290392 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-23451 | redhat_vex | openstack-barbican: Barbican allows authenticated users to add/modify/delete arbitrary metadata on any secret | fixed: 9 known affected: 7 known not affected: 5 | 2026-08-07T15:56:16+00:00 | Vulnerability · Source |
| CVE-2024-40767 | redhat_vex | openstack-nova: Regression VMDK/qcow arbitrary file access | fixed: 43 known not affected: 1 | 2026-08-07T15:54:01+00:00 | Vulnerability · Source |
| CVE-2026-46448 | redhat_vex | openstack-nova: OpenStack Nova: Resource allocation issue due to unstripped hint data in server creation API | known affected: 43 | 2026-08-07T15:48:41+00:00 | Vulnerability · Source |
| CVE-2022-1655 | redhat_vex | OpenStack: Horizon session cookies are not flagged HttpOnly | fixed: 1 known not affected: 2 | 2026-08-07T15:14:20+00:00 | Vulnerability · Source |
| CVE-2014-8177 | redhat_vex | swiftonfile: gluster-swift metadata constraints are not correctly enforced | fixed: 150 | 2026-08-07T15:14:15+00:00 | Vulnerability · Source |
| CVE-2024-1141 | redhat_vex | glance-store: Glance Store access key logged in DEBUG log level | fixed: 2 known affected: 5 | 2026-08-07T15:14:09+00:00 | Vulnerability · Source |
| CVE-2026-18206 | redhat_vex | keycloak-services: keycloak-services: Client policy source-host wildcard domain matching bypass | known affected: 3 known not affected: 3 | 2026-08-07T15:04:19+00:00 | Vulnerability · Source |
| CVE-2026-64600 | microsoft_vex | xfs: resample the data fork mapping after cycling ILOCK | fixed: 1 known affected: 1 | 2026-08-07T14:49:10+00:00 | Vulnerability · Source |
| CVE-2026-59677 | microsoft_vex | Process Kill Attack Vector in killall() in seunshare | known not affected: 2 | 2026-08-07T14:49:00+00:00 | Vulnerability · Source |
| CVE-2026-59676 | microsoft_vex | Local File Deletion Attack Vector in rm_rf() in seunshare | known not affected: 2 | 2026-08-07T14:48:49+00:00 | Vulnerability · Source |
| CVE-2026-18209 | redhat_vex | keycloak-services: keycloak-services: OIDC redirect_uri fragment bypass in HTTP parameter pollution check | known affected: 3 known not affected: 3 | 2026-08-07T14:43:50+00:00 | Vulnerability · Source |
| CVE-2026-18211 | redhat_vex | keycloak-services: keycloak-services: secure-client-uris policy bypass via localhost-prefixed domains | known affected: 3 known not affected: 3 | 2026-08-07T14:43:41+00:00 | Vulnerability · Source |
| CVE-2026-61477 | redhat_vex | libvirt: libvirt: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection | known affected: 138 | 2026-08-07T14:24:10+00:00 | Vulnerability · Source |
| CVE-2019-3830 | redhat_vex | openstack-ceilometer: ceilometer-agent prints sensitive data from config files through log files | fixed: 27 known not affected: 27 | 2026-08-07T14:15:29+00:00 | Vulnerability · Source |
| CVE-2019-17134 | redhat_vex | openstack-octavia: amphora-agent not requiring client certificate | fixed: 35 | 2026-08-07T14:14:50+00:00 | Vulnerability · Source |
| CVE-2017-2621 | redhat_vex | openstack-heat: /var/log/heat/ is world readable | fixed: 14 known not affected: 15 | 2026-08-07T14:14:46+00:00 | Vulnerability · Source |
| CVE-2019-3895 | redhat_vex | openstack-tripleo-common: Allows running new amphorae based on arbitrary images | fixed: 11 known not affected: 5 | 2026-08-07T14:14:38+00:00 | Vulnerability · Source |
| CVE-2017-2653 | redhat_vex | CloudForms: UI security issue on Openstack actions | fixed: 8 | 2026-08-07T14:14:35+00:00 | Vulnerability · Source |
| CVE-2019-10138 | redhat_vex | python-novajoin: novajoin API lacks access control | fixed: 126 known not affected: 1 | 2026-08-07T14:14:35+00:00 | Vulnerability · Source |
| CVE-2020-27781 | redhat_vex | ceph: User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila | fixed: 704 known affected: 41 known not affected: 107 | 2026-08-07T14:14:00+00:00 | Vulnerability · Source |
| CVE-2026-48145 | redhat_vex | apache-thrift: Apache Thrift: Information disclosure due to improper certificate validation | known affected: 1 | 2026-08-07T13:59:06+00:00 | Vulnerability · Source |
| CVE-2026-64028 | redhat_vex | kernel: tracing: Avoid NULL return from hist_field_name() on truncation | known affected: 232 known not affected: 42 | 2026-08-07T13:54:35+00:00 | Vulnerability · Source |
| CVE-2026-64022 | redhat_vex | kernel: gpio: aggregator: remove the software node when deactivating the aggregator | known not affected: 274 | 2026-08-07T13:54:34+00:00 | Vulnerability · Source |
| CVE-2026-63982 | redhat_vex | kernel: net/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop | known affected: 14 known not affected: 261 | 2026-08-07T13:50:31+00:00 | Vulnerability · Source |
| CVE-2026-63967 | redhat_vex | kernel: iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer | known not affected: 274 | 2026-08-07T13:50:24+00:00 | Vulnerability · Source |
| CVE-2026-63965 | redhat_vex | kernel: iio: pressure: bmp280: fix stack leak in bmp580 trigger handler | known not affected: 274 | 2026-08-07T13:50:22+00:00 | Vulnerability · Source |
| CVE-2026-63960 | redhat_vex | kernel: usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() | known not affected: 274 | 2026-08-07T13:50:20+00:00 | Vulnerability · Source |
| CVE-2026-63959 | redhat_vex | kernel: usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT | known not affected: 274 | 2026-08-07T13:50:18+00:00 | Vulnerability · Source |
| CVE-2026-63936 | redhat_vex | kernel: iio: adc: mt6359: fix unchecked return value in mt6358_read_imp | known not affected: 274 | 2026-08-07T13:50:16+00:00 | Vulnerability · Source |
| CVE-2026-63934 | redhat_vex | kernel: iio: gyro: itg3200: fix i2c read into the wrong stack location | known not affected: 274 | 2026-08-07T13:50:13+00:00 | Vulnerability · Source |
| CVE-2026-63932 | redhat_vex | kernel: iio: chemical: mhz19b: reject oversized serial replies | known not affected: 275 | 2026-08-07T13:50:09+00:00 | Vulnerability · Source |
| CVE-2026-63931 | redhat_vex | kernel: iio: chemical: scd30: fix division by zero in write_raw | known not affected: 274 | 2026-08-07T13:50:08+00:00 | Vulnerability · Source |
| CVE-2026-63908 | redhat_vex | kernel: Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem | known not affected: 275 | 2026-08-07T13:50:05+00:00 | Vulnerability · Source |
| CVE-2026-63873 | redhat_vex | kernel: accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range() | known not affected: 274 | 2026-08-07T13:50:02+00:00 | Vulnerability · Source |
| CVE-2026-63876 | redhat_vex | kernel: serial: zs: Convert to use a platform device | known not affected: 274 | 2026-08-07T13:50:02+00:00 | Vulnerability · Source |
| CVE-2026-64013 | redhat_vex | kernel: ACPI: button: Fix ACPI GPE handler leak during removal | known affected: 198 known not affected: 76 | 2026-08-07T13:49:49+00:00 | Vulnerability · Source |
| CVE-2026-64012 | redhat_vex | kernel: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked | known affected: 76 known not affected: 199 | 2026-08-07T13:49:46+00:00 | Vulnerability · Source |
| CVE-2026-64006 | redhat_vex | kernel: netfilter: nf_tables: fix dst corruption in same register operation | known affected: 184 known not affected: 91 | 2026-08-07T13:49:45+00:00 | Vulnerability · Source |
| CVE-2026-64001 | redhat_vex | kernel: ALSA: pcm: oss: Fix setup list UAF on proc write error | known affected: 198 known not affected: 76 | 2026-08-07T13:49:41+00:00 | Vulnerability · Source |
| CVE-2026-63981 | redhat_vex | kernel: net/sched: act_mirred: Fix blockcast recursion bypass leading to stack overflow | known affected: 14 known not affected: 261 | 2026-08-07T13:49:35+00:00 | Vulnerability · Source |
| CVE-2026-63961 | redhat_vex | kernel: usb: typec: altmodes/displayport: validate count before reading Status Update VDO | known affected: 260 known not affected: 14 | 2026-08-07T13:49:35+00:00 | Vulnerability · Source |
| CVE-2026-63969 | redhat_vex | kernel: ipv6: fix possible infinite loop in rt6_fill_node() | known affected: 198 known not affected: 76 | 2026-08-07T13:49:33+00:00 | Vulnerability · Source |
| CVE-2026-63958 | redhat_vex | kernel: usb: typec: ucsi: validate connector number in ucsi_connector_change() | known affected: 260 known not affected: 14 | 2026-08-07T13:49:30+00:00 | Vulnerability · Source |
| CVE-2026-63957 | redhat_vex | kernel: USB: serial: safe_serial: fix memory corruption with small endpoint | known affected: 274 | 2026-08-07T13:49:30+00:00 | Vulnerability · Source |
| CVE-2026-63948 | redhat_vex | kernel: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn | known affected: 232 known not affected: 42 | 2026-08-07T13:49:06+00:00 | Vulnerability · Source |
| CVE-2021-3114 | redhat_vex | golang: crypto/elliptic: incorrect operations on the P-224 curve | fixed: 829 known affected: 320 known not affected: 1108 | 2026-08-07T13:46:08+00:00 | Vulnerability · Source |
| CVE-2026-63962 | redhat_vex | kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() | known affected: 232 known not affected: 43 | 2026-08-07T13:43:59+00:00 | Vulnerability · Source |
| CVE-2026-63890 | redhat_vex | kernel: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker | known affected: 274 | 2026-08-07T13:42:45+00:00 | Vulnerability · Source |
| CVE-2023-43804 | redhat_vex | python-urllib3: Cookie request header isn't stripped during cross-origin redirects | fixed: 1878 known affected: 36 known not affected: 80 | 2026-08-07T13:42:37+00:00 | Vulnerability · Source |
| CVE-2025-4374 | redhat_vex | quay: Incorrect Privilege Assignment | fixed: 120 | 2026-08-07T13:38:35+00:00 | Vulnerability · Source |