VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290392 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-63981 | redhat_vex | kernel: net/sched: act_mirred: Fix blockcast recursion bypass leading to stack overflow | known affected: 14 known not affected: 261 | 2026-08-07T13:49:35+00:00 | Vulnerability · Source |
| CVE-2026-63961 | redhat_vex | kernel: usb: typec: altmodes/displayport: validate count before reading Status Update VDO | known affected: 260 known not affected: 14 | 2026-08-07T13:49:35+00:00 | Vulnerability · Source |
| CVE-2026-63969 | redhat_vex | kernel: ipv6: fix possible infinite loop in rt6_fill_node() | known affected: 198 known not affected: 76 | 2026-08-07T13:49:33+00:00 | Vulnerability · Source |
| CVE-2026-63958 | redhat_vex | kernel: usb: typec: ucsi: validate connector number in ucsi_connector_change() | known affected: 260 known not affected: 14 | 2026-08-07T13:49:30+00:00 | Vulnerability · Source |
| CVE-2026-63957 | redhat_vex | kernel: USB: serial: safe_serial: fix memory corruption with small endpoint | known affected: 274 | 2026-08-07T13:49:30+00:00 | Vulnerability · Source |
| CVE-2026-63948 | redhat_vex | kernel: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn | known affected: 232 known not affected: 42 | 2026-08-07T13:49:06+00:00 | Vulnerability · Source |
| CVE-2021-3114 | redhat_vex | golang: crypto/elliptic: incorrect operations on the P-224 curve | fixed: 829 known affected: 320 known not affected: 1108 | 2026-08-07T13:46:08+00:00 | Vulnerability · Source |
| CVE-2026-63962 | redhat_vex | kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() | known affected: 232 known not affected: 43 | 2026-08-07T13:43:59+00:00 | Vulnerability · Source |
| CVE-2026-63890 | redhat_vex | kernel: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker | known affected: 274 | 2026-08-07T13:42:45+00:00 | Vulnerability · Source |
| CVE-2023-43804 | redhat_vex | python-urllib3: Cookie request header isn't stripped during cross-origin redirects | fixed: 1878 known affected: 36 known not affected: 80 | 2026-08-07T13:42:37+00:00 | Vulnerability · Source |
| CVE-2025-4374 | redhat_vex | quay: Incorrect Privilege Assignment | fixed: 120 | 2026-08-07T13:38:35+00:00 | Vulnerability · Source |
| CVE-2022-27664 | redhat_vex | golang: net/http: handle server errors after sending GOAWAY | fixed: 2066 known affected: 97 known not affected: 3729 | 2026-08-07T13:33:07+00:00 | Vulnerability · Source |
| CVE-2024-36039 | redhat_vex | python-pymysql: SQL injection if used with untrusted JSON input | fixed: 40 known affected: 17 known not affected: 2 | 2026-08-07T13:31:46+00:00 | Vulnerability · Source |
| CVE-2020-10696 | redhat_vex | buildah: Crafted input tar file may lead to local file overwrite during image build process | fixed: 882 known affected: 17 | 2026-08-07T13:30:22+00:00 | Vulnerability · Source |
| CVE-2025-32023 | redhat_vex | redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability | fixed: 303 known affected: 4 known not affected: 48 | 2026-08-07T13:28:11+00:00 | Vulnerability · Source |
| CVE-2024-6827 | redhat_vex | gunicorn: HTTP Request Smuggling in benoitc/gunicorn | fixed: 92 known affected: 1 | 2026-08-07T13:27:53+00:00 | Vulnerability · Source |
| CVE-2025-21605 | redhat_vex | redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client | fixed: 323 known affected: 1 known not affected: 7 | 2026-08-07T13:27:34+00:00 | Vulnerability · Source |
| CVE-2024-9675 | redhat_vex | buildah: Buildah allows arbitrary directory mount | fixed: 1697 known affected: 5 known not affected: 3632 | 2026-08-07T13:25:29+00:00 | Vulnerability · Source |
| CVE-2026-63862 | redhat_vex | kernel: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found | known not affected: 274 | 2026-08-07T13:24:05+00:00 | Vulnerability · Source |
| CVE-2026-63861 | redhat_vex | kernel: spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback | known not affected: 274 | 2026-08-07T13:24:03+00:00 | Vulnerability · Source |
| CVE-2026-63859 | redhat_vex | kernel: net: airoha: Add missing bits in airoha_qdma_cleanup_tx_queue() | known not affected: 275 | 2026-08-07T13:23:52+00:00 | Vulnerability · Source |
| CVE-2026-58039 | redhat_vex | nodejs: Information disclosure due to improper permission enforcement | fixed: 12 known affected: 56 | 2026-08-07T13:23:43+00:00 | Vulnerability · Source |
| CVE-2026-63989 | redhat_vex | kernel: bridge: Fix sleep in atomic context in netlink path | known affected: 90 known not affected: 184 | 2026-08-07T13:11:59+00:00 | Vulnerability · Source |
| CVE-2026-68481 | redhat_vex | org.apache.cxf/cxf-rt-rs-security-oauth2: Apache CXF: Revocation bypass allows unauthorized access | known affected: 3 | 2026-08-07T13:11:55+00:00 | Vulnerability · Source |
| CVE-2026-50623 | redhat_vex | org.apache.cxf/cxf-rt-rs-security-oauth2: Apache CXF: Authentication Bypass in OAuth2 TokenIntrospectionService | known not affected: 4 | 2026-08-07T12:55:08+00:00 | Vulnerability · Source |
| CVE-2026-50629 | redhat_vex | org.apache.cxf/cxf-rt-rs-security-oauth2: apache-cxf: Log injection in OAuth2 server logs | known not affected: 4 | 2026-08-07T12:55:06+00:00 | Vulnerability · Source |
| CVE-2026-50634 | redhat_vex | org.apache.cxf/cxf-rt-rs-security-jose-jaxrs: Apache CXF: Signature bypass due to unauthenticated metadata processing in JwsJsonContainerRequestFilter | known not affected: 4 | 2026-08-07T12:55:04+00:00 | Vulnerability · Source |
| CVE-2025-58188 | redhat_vex | crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509 | fixed: 8 known affected: 10 known not affected: 56 under investigation: 345 | 2026-08-07T12:54:52+00:00 | Vulnerability · Source |
| CVE-2026-50630 | redhat_vex | org.apache.cxf/cxf-rt-rs-security-oauth2: apache-cxf: HTTP header injection and response splitting via CRLF injection | known not affected: 4 | 2026-08-07T12:54:44+00:00 | Vulnerability · Source |
| CVE-2026-50627 | redhat_vex | apache-cxf: org.apache.cxf/cxf-rt-rs-security-oauth2: Apache CXF: Token Confusion/Routing attacks due to improper validation of JWT audience claims | fixed: 1 known affected: 4 known not affected: 2 | 2026-08-07T12:54:32+00:00 | Vulnerability · Source |
| CVE-2026-44545 | redhat_vex | daphne: daphne: Denial of Service via excessive WebSocket message size | fixed: 22 known affected: 3 known not affected: 602 | 2026-08-07T12:54:19+00:00 | Vulnerability · Source |
| CVE-2026-50628 | redhat_vex | cxf: org.apache.cxf/cxf-rt-rs-security-oauth2: cxf: Unauthorized access due to logic error in OAuthRequestFilter | fixed: 1 known affected: 4 known not affected: 2 | 2026-08-07T12:54:17+00:00 | Vulnerability · Source |
| CVE-2026-63966 | redhat_vex | kernel: iio: imu: adis16550: fix stack leak in trigger handler | known not affected: 274 | 2026-08-07T12:48:31+00:00 | Vulnerability · Source |
| CVE-2026-63904 | redhat_vex | kernel: usb: usbtmc: check URB actual_length for interrupt-IN notifications | known affected: 274 | 2026-08-07T12:48:30+00:00 | Vulnerability · Source |
| CVE-2026-63997 | redhat_vex | kernel: ethtool: module: avoid leaking a netdev ref on module flash errors | known affected: 184 known not affected: 90 | 2026-08-07T12:45:31+00:00 | Vulnerability · Source |
| CVE-2026-63990 | redhat_vex | kernel: bonding: refuse to enslave CAN devices | known affected: 274 known not affected: 1 | 2026-08-07T12:45:30+00:00 | Vulnerability · Source |
| CVE-2026-63907 | redhat_vex | kernel: uio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory | known not affected: 274 | 2026-08-07T12:45:29+00:00 | Vulnerability · Source |
| CVE-2026-64075 | redhat_vex | kernel: fprobe: Fix unregister_fprobe() to wait for RCU grace period | known not affected: 275 | 2026-08-07T12:45:27+00:00 | Vulnerability · Source |
| CVE-2026-63963 | redhat_vex | kernel: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers | known affected: 232 known not affected: 42 | 2026-08-07T12:45:09+00:00 | Vulnerability · Source |
| CVE-2026-63896 | redhat_vex | kernel: usb: gadget: composite: fix integer underflow in WebUSB GET_URL handling | known affected: 76 known not affected: 198 | 2026-08-07T12:45:08+00:00 | Vulnerability · Source |
| CVE-2021-41091 | redhat_vex | moby: data directory contains subdirectories with insufficiently restricted permissions, which could lead to directory traversal | fixed: 8 known affected: 9 known not affected: 11 | 2026-08-07T12:41:48+00:00 | Vulnerability · Source |
| CVE-2026-49980 | redhat_vex | github.com/rclone/rclone: Rclone: Remote Code Execution via unauthenticated requests when `rcd --rc-serve` is enabled | known not affected: 6 | 2026-08-07T12:15:31+00:00 | Vulnerability · Source |
| CVE-2026-59935 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF with unterminated inline image | known affected: 11 | 2026-08-07T12:08:05+00:00 | Vulnerability · Source |
| CVE-2026-44283 | redhat_vex | etcd: etcd: Authenticated user can bypass RBAC for unauthorized data access | known affected: 7 | 2026-08-07T11:40:30+00:00 | Vulnerability · Source |
| CVE-2026-12261 | redhat_vex | nltk: NLTK: Resource poisoning via improper package archive extraction | known affected: 14 | 2026-08-07T11:40:25+00:00 | Vulnerability · Source |
| CVE-2026-63839 | redhat_vex | kernel: platform/x86: lenovo-wmi-helpers: Fix memory leak in lwmi_dev_evaluate_int() | known not affected: 274 | 2026-08-07T11:20:51+00:00 | Vulnerability · Source |
| CVE-2026-63821 | redhat_vex | kernel: wifi: rtw88: usb: fix memory leaks on USB write failures | known affected: 184 known not affected: 90 | 2026-08-07T11:20:50+00:00 | Vulnerability · Source |
| CVE-2026-64060 | redhat_vex | kernel: netfs: Fix leak of request in netfs_write_begin() error handling | known affected: 184 known not affected: 90 | 2026-08-07T11:20:48+00:00 | Vulnerability · Source |
| CVE-2026-40683 | redhat_vex | OpenStack Keystone: OpenStack Keystone: Unauthorized access due to incorrect LDAP user status handling | fixed: 3 known affected: 1 known not affected: 8 | 2026-08-07T11:20:46+00:00 | Vulnerability · Source |
| CVE-2026-63838 | redhat_vex | kernel: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] | known affected: 76 known not affected: 198 | 2026-08-07T11:19:37+00:00 | Vulnerability · Source |