VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290392 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-71313 | redhat_vex | github.com/rclone/rclone: rclone: Path Traversal allows arbitrary file write | known affected: 1 | 2026-08-07T10:44:52+00:00 | Vulnerability · Source |
| CVE-2026-59203 | redhat_vex | Pillow: Pillow: Denial of Service via crafted EPS file | known affected: 63 known not affected: 6 under investigation: 22 | 2026-08-07T10:44:42+00:00 | Vulnerability · Source |
| CVE-2026-49458 | redhat_vex | dompurify: DOMPurify: Cross-site scripting due to improper sanitization of DOM nodes | known affected: 40 known not affected: 1 under investigation: 7 | 2026-08-07T10:44:39+00:00 | Vulnerability · Source |
| CVE-2026-64038 | redhat_vex | kernel: hwmon: (lm90) Stop work before releasing hwmon device | known affected: 90 known not affected: 184 | 2026-08-07T10:39:35+00:00 | Vulnerability · Source |
| CVE-2026-64043 | redhat_vex | kernel: ovpn: fix race between deleting interface and adding new peer | known not affected: 275 | 2026-08-07T10:33:33+00:00 | Vulnerability · Source |
| CVE-2026-64101 | redhat_vex | kernel: fwctl: pds: Validate RPC input size before parsing | known not affected: 274 | 2026-08-07T10:32:50+00:00 | Vulnerability · Source |
| CVE-2026-64094 | redhat_vex | kernel: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface | known not affected: 274 | 2026-08-07T10:32:50+00:00 | Vulnerability · Source |
| CVE-2026-64090 | redhat_vex | kernel: batman-adv: tt: avoid empty VLAN responses | known not affected: 274 | 2026-08-07T10:32:43+00:00 | Vulnerability · Source |
| CVE-2026-64072 | redhat_vex | kernel: nvme: fix bio leak on mapping failure | known affected: 76 known not affected: 198 | 2026-08-07T10:32:43+00:00 | Vulnerability · Source |
| CVE-2026-64070 | redhat_vex | kernel: powerpc/hv-gpci: fix preempt count leak in sysfs show paths | known affected: 232 known not affected: 42 | 2026-08-07T10:32:40+00:00 | Vulnerability · Source |
| CVE-2026-64085 | redhat_vex | kernel: hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer | known not affected: 275 | 2026-08-07T10:32:36+00:00 | Vulnerability · Source |
| CVE-2024-7885 | redhat_vex | undertow: Improper State Management in Proxy Protocol parsing causes information leakage | fixed: 145 known affected: 9 known not affected: 3 | 2026-08-07T09:58:58+00:00 | Vulnerability · Source |
| CVE-2026-43827 | redhat_vex | apache-shiro: Apache Shiro: Session fixation vulnerability due to improper session invalidation upon login | known affected: 1 known not affected: 1 | 2026-08-07T09:49:29+00:00 | Vulnerability · Source |
| CVE-2026-67298 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling | known affected: 25 known not affected: 6 | 2026-08-07T09:49:24+00:00 | Vulnerability · Source |
| CVE-2026-68480 | redhat_vex | kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability | known affected: 260 known not affected: 14 | 2026-08-07T09:44:05+00:00 | Vulnerability · Source |
| CVE-2026-54499 | redhat_vex | stanza: Stanza: Remote Code Execution via unsafe deserialization in model loaders | known affected: 2 known not affected: 5 | 2026-08-07T09:32:06+00:00 | Vulnerability · Source |
| CVE-2026-71497 | redhat_vex | org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names | known affected: 97 | 2026-08-07T09:19:53+00:00 | Vulnerability · Source |
| CVE-2026-31221 | redhat_vex | pytorch-lightning: PyTorch-Lightning: Arbitrary code execution via insecure deserialization of checkpoint files | known affected: 11 | 2026-08-07T09:04:04+00:00 | Vulnerability · Source |
| CVE-2021-34866 | redhat_vex | kernel: eBPF verification flaw | fixed: 129 known affected: 182 known not affected: 15 | 2026-08-07T07:50:53+00:00 | Vulnerability · Source |
| CVE-2021-3778 | redhat_vex | vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c | fixed: 66 known affected: 12 known not affected: 7 | 2026-08-07T07:50:53+00:00 | Vulnerability · Source |
| CVE-2021-41103 | redhat_vex | containerd: insufficiently restricted permissions on container root and plugin directories | fixed: 3 known affected: 2 known not affected: 3 | 2026-08-07T07:44:51+00:00 | Vulnerability · Source |
| CVE-2021-22569 | redhat_vex | protobuf-java: potential DoS in the parsing procedure for binary data | fixed: 7 known affected: 20 known not affected: 2 | 2026-08-07T07:40:47+00:00 | Vulnerability · Source |
| CVE-2021-32723 | redhat_vex | npm-prismjs: a malicious (long) string will take a long time to highlight may result in ReDoS | known affected: 11 known not affected: 1 | 2026-08-07T07:40:41+00:00 | Vulnerability · Source |
| CVE-2022-0392 | redhat_vex | vim: Heap-based buffer overflow in getexmodeline() in ex_getln.c | fixed: 66 known not affected: 18 | 2026-08-07T07:36:55+00:00 | Vulnerability · Source |
| CVE-2022-21708 | redhat_vex | graphql-go: Denial of service via stack overflow panics | fixed: 12 known affected: 1 known not affected: 808 | 2026-08-07T07:36:34+00:00 | Vulnerability · Source |
| CVE-2022-29162 | redhat_vex | runc: incorrect handling of inheritable capabilities | fixed: 562 known affected: 7 known not affected: 803 | 2026-08-07T07:31:24+00:00 | Vulnerability · Source |
| CVE-2021-23648 | redhat_vex | sanitize-url: XSS due to improper sanitization in sanitizeUrl function | fixed: 22 known affected: 5 known not affected: 608 | 2026-08-07T07:31:08+00:00 | Vulnerability · Source |
| CVE-2022-21658 | redhat_vex | rust: Race condition in remove_dir_all leading to removal of files outside of the directory being removed | fixed: 73 known affected: 5 known not affected: 18 | 2026-08-07T07:31:04+00:00 | Vulnerability · Source |
| CVE-2026-71430 | redhat_vex | re2: node-re2: Denial of Service due to excessive string length in replacements | known not affected: 1 | 2026-08-07T07:31:02+00:00 | Vulnerability · Source |
| CVE-2022-3248 | redhat_vex | kubernetes: OpenShift API admission checks does not enforce "custom-host" permissions | known affected: 24 known not affected: 2 | 2026-08-07T07:26:57+00:00 | Vulnerability · Source |
| CVE-2022-0393 | redhat_vex | vim: out-of-bounds read in delete_buff_tail() in getchar.c | known not affected: 24 | 2026-08-07T07:26:45+00:00 | Vulnerability · Source |
| CVE-2022-23308 | redhat_vex | libxml2: Use-after-free of ID and IDREF attributes | fixed: 180 known affected: 10 known not affected: 4 | 2026-08-07T07:26:42+00:00 | Vulnerability · Source |
| CVE-2022-22942 | redhat_vex | kernel: failing usercopy allows for use-after-free exploitation | fixed: 1260 known affected: 14 known not affected: 117 | 2026-08-07T07:25:37+00:00 | Vulnerability · Source |
| CVE-2022-2385 | redhat_vex | aws-iam-authenticator: AccessKeyID validation bypass | known affected: 1 | 2026-08-07T07:25:04+00:00 | Vulnerability · Source |
| CVE-2022-25758 | redhat_vex | scss-tokenizer: Regular expression denial of service in scss-tokenizer | known affected: 40 known not affected: 6 | 2026-08-07T07:14:46+00:00 | Vulnerability · Source |
| CVE-2022-35929 | redhat_vex | cosign: `cosign verify-attestation --type` can report a false positive if any attestation exists | known affected: 6 | 2026-08-07T07:14:43+00:00 | Vulnerability · Source |
| CVE-2022-29901 | redhat_vex | hw: cpu: Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions | fixed: 736 known affected: 14 | 2026-08-07T07:14:30+00:00 | Vulnerability · Source |
| CVE-2024-46292 | redhat_vex | mod_security: denial of service via name paramter | known not affected: 9 | 2026-08-07T06:18:22+00:00 | Vulnerability · Source |
| CVE-2026-11793 | redhat_vex | 389-ds-base: 389-ds-base: stack buffer overflow in checkPrefix() algorithm ID parsing | known affected: 33 | 2026-08-07T04:58:44+00:00 | Vulnerability · Source |
| CVE-2026-64246 | microsoft_vex | power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() | known not affected: 1 | 2026-08-07T04:26:58+00:00 | Vulnerability · Source |
| CVE-2026-66033 | microsoft_vex | libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation | fixed: 1 known affected: 1 known not affected: 1 under investigation: 1 | 2026-08-07T04:26:50+00:00 | Vulnerability · Source |
| CVE-2026-66035 | microsoft_vex | libssh2 Heap Buffer Overflow via ETM Cipher Negotiation | fixed: 1 known affected: 1 known not affected: 1 under investigation: 1 | 2026-08-07T04:26:33+00:00 | Vulnerability · Source |
| CVE-2026-66032 | microsoft_vex | libssh2 Double-Free Heap Corruption via sftp_open() | fixed: 1 known affected: 1 known not affected: 1 under investigation: 1 | 2026-08-07T04:26:12+00:00 | Vulnerability · Source |
| CVE-2026-66034 | microsoft_vex | libssh2 Heap Out-of-Bounds Read via publickey subsystem | fixed: 1 known affected: 1 known not affected: 1 under investigation: 1 | 2026-08-07T04:25:47+00:00 | Vulnerability · Source |
| CVE-2026-64254 | microsoft_vex | NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR | known not affected: 1 | 2026-08-07T04:25:29+00:00 | Vulnerability · Source |
| CVE-2026-64252 | microsoft_vex | MIPS: DEC: Prevent initial console buffer from landing in XKPHYS | known not affected: 1 | 2026-08-07T04:25:20+00:00 | Vulnerability · Source |
| CVE-2026-64250 | microsoft_vex | LoongArch: Report dying CPU to RCU in stop_this_cpu() | fixed: 1 known affected: 1 | 2026-08-07T04:25:12+00:00 | Vulnerability · Source |
| CVE-2026-64248 | microsoft_vex | MIPS: smp: report dying CPU to RCU in stop_this_cpu() | fixed: 1 known affected: 1 | 2026-08-07T04:24:53+00:00 | Vulnerability · Source |
| CVE-2026-64249 | microsoft_vex | fpga: region: fix use-after-free in child_regions_with_firmware() | known not affected: 1 | 2026-08-07T04:24:34+00:00 | Vulnerability · Source |
| CVE-2026-64212 | microsoft_vex | wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it | known affected: 1 known not affected: 1 | 2026-08-07T04:24:17+00:00 | Vulnerability · Source |