VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291773 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-24539 | redhat_vex | golang: html/template: improper sanitization of CSS values | fixed: 1663 known affected: 47 known not affected: 1106 under investigation: 1 | 2026-08-12T21:22:28+00:00 | Vulnerability · Source |
| CVE-2023-24537 | redhat_vex | golang: go/parser: Infinite loop in parsing | fixed: 2041 known affected: 80 known not affected: 1021 | 2026-08-12T21:22:21+00:00 | Vulnerability · Source |
| CVE-2023-24534 | redhat_vex | golang: net/http, net/textproto: denial of service from excessive memory allocation | fixed: 2038 known affected: 107 known not affected: 1248 | 2026-08-12T21:22:10+00:00 | Vulnerability · Source |
| CVE-2022-42968 | redhat_vex | gitea: Sanitize and Escape refs in git backend | known not affected: 8 | 2026-08-12T21:22:01+00:00 | Vulnerability · Source |
| CVE-2022-41725 | redhat_vex | golang: net/http, mime/multipart: denial of service from excessive resource consumption | fixed: 2279 known affected: 103 known not affected: 2328 | 2026-08-12T21:21:51+00:00 | Vulnerability · Source |
| CVE-2022-32190 | redhat_vex | golang: net/url: JoinPath does not strip relative path components in all circumstances | fixed: 1590 known affected: 47 known not affected: 2669 | 2026-08-12T21:21:18+00:00 | Vulnerability · Source |
| CVE-2026-19016 | redhat_vex | consul: Consul: Authorization bypass allows arbitrary session deletion via transaction API | known affected: 15 | 2026-08-12T21:13:57+00:00 | Vulnerability · Source |
| CVE-2026-53110 | redhat_vex | kernel: s390/bpf: Zero-extend bpf prog return values and kfunc arguments | known affected: 184 known not affected: 90 | 2026-08-12T21:00:23+00:00 | Vulnerability · Source |
| CVE-2026-53031 | redhat_vex | kernel: bpf: Validate node_id in arena_alloc_pages() | known affected: 184 known not affected: 90 | 2026-08-12T20:58:45+00:00 | Vulnerability · Source |
| CVE-2023-28154 | redhat_vex | webpack: avoid cross-realm objects | fixed: 20 known affected: 5 known not affected: 145 | 2026-08-12T20:49:54+00:00 | Vulnerability · Source |
| CVE-2022-48195 | redhat_vex | mellium.im/sasl: insufficient randomness during authentication | known affected: 1 known not affected: 3 | 2026-08-12T20:49:34+00:00 | Vulnerability · Source |
| CVE-2026-55200 | redhat_vex | libssh2: libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c | fixed: 4 known affected: 4 known not affected: 4 | 2026-08-12T20:48:26+00:00 | Vulnerability · Source |
| CVE-2026-43632 | redhat_vex | llama.cpp: llama.cpp: Potential code execution via a race condition in tokenization endpoints | known not affected: 1 | 2026-08-12T20:46:32+00:00 | Vulnerability · Source |
| CVE-2026-19158 | redhat_vex | chromium-browser: Google Chrome: Arbitrary code execution via use-after-free in Views | known not affected: 1 | 2026-08-12T20:46:24+00:00 | Vulnerability · Source |
| CVE-2026-71393 | redhat_vex | emacs: integer overflow via a malicious font file | known not affected: 29 | 2026-08-12T19:44:21+00:00 | Vulnerability · Source |
| CVE-2026-35554 | redhat_vex | Apache Kafka Clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management | fixed: 5 known affected: 12 known not affected: 573 | 2026-08-12T19:42:03+00:00 | Vulnerability · Source |
| CVE-2026-50559 | redhat_vex | io.quarkus/quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters | fixed: 16 known affected: 13 known not affected: 82 | 2026-08-12T19:40:37+00:00 | Vulnerability · Source |
| CVE-2026-48059 | redhat_vex | netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers | fixed: 120 known affected: 23 known not affected: 80 | 2026-08-12T19:40:32+00:00 | Vulnerability · Source |
| CVE-2026-48043 | redhat_vex | netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak | fixed: 136 known affected: 28 known not affected: 131 | 2026-08-12T19:40:29+00:00 | Vulnerability · Source |
| CVE-2026-45109 | redhat_vex | next.js: Next.js: Information disclosure via security fix bypass in middleware with Turbopack | fixed: 4 known affected: 4 known not affected: 33 | 2026-08-12T19:40:23+00:00 | Vulnerability · Source |
| CVE-2026-44893 | redhat_vex | netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message | fixed: 120 known affected: 21 known not affected: 81 | 2026-08-12T19:40:21+00:00 | Vulnerability · Source |
| CVE-2026-44579 | redhat_vex | next.js: Next.js: Denial of Service via crafted POST requests to server actions | fixed: 4 known affected: 4 known not affected: 33 | 2026-08-12T19:40:20+00:00 | Vulnerability · Source |
| CVE-2026-44578 | redhat_vex | Next.js: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests | fixed: 4 known affected: 4 known not affected: 33 | 2026-08-12T19:40:17+00:00 | Vulnerability · Source |
| CVE-2026-44577 | redhat_vex | Next.js: Next.js: Denial of Service via Image Optimization API | fixed: 4 known affected: 4 known not affected: 33 | 2026-08-12T19:40:15+00:00 | Vulnerability · Source |
| CVE-2026-44575 | redhat_vex | next.js: Next.js: Unauthorized access to protected content via middleware bypass | fixed: 4 known affected: 4 known not affected: 33 | 2026-08-12T19:40:14+00:00 | Vulnerability · Source |
| CVE-2026-44574 | redhat_vex | Next.js: Next.js: Authorization bypass via crafted query parameters | fixed: 4 known affected: 4 known not affected: 33 | 2026-08-12T19:40:12+00:00 | Vulnerability · Source |
| CVE-2026-44573 | redhat_vex | next.js: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n | fixed: 4 known affected: 4 known not affected: 33 | 2026-08-12T19:40:10+00:00 | Vulnerability · Source |
| CVE-2026-42587 | redhat_vex | netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression | fixed: 133 known affected: 39 known not affected: 346 | 2026-08-12T19:40:04+00:00 | Vulnerability · Source |
| CVE-2026-42583 | redhat_vex | netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder | fixed: 7 known affected: 33 known not affected: 86 | 2026-08-12T19:39:58+00:00 | Vulnerability · Source |
| CVE-2026-42578 | redhat_vex | netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation | fixed: 130 known affected: 30 known not affected: 344 | 2026-08-12T19:39:48+00:00 | Vulnerability · Source |
| CVE-2026-40983 | redhat_vex | micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests | fixed: 13 known affected: 12 known not affected: 5 under investigation: 6 | 2026-08-12T19:39:45+00:00 | Vulnerability · Source |
| CVE-2026-16308 | redhat_vex | io.quarkus/quarkus-rest: io.quarkus/quarkus-vertx-http: io.quarkus.resteasy.reactive/resteasy-reactive: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service | fixed: 23 known affected: 7 known not affected: 4 under investigation: 1 | 2026-08-12T19:39:28+00:00 | Vulnerability · Source |
| CVE-2026-15075 | redhat_vex | vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects | fixed: 4 known affected: 35 known not affected: 9 under investigation: 13 | 2026-08-12T19:39:24+00:00 | Vulnerability · Source |
| CVE-2026-40984 | redhat_vex | micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests | fixed: 14 known affected: 15 known not affected: 1 | 2026-08-12T19:39:22+00:00 | Vulnerability · Source |
| CVE-2026-59901 | redhat_vex | io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2) | fixed: 1 known affected: 3 known not affected: 2 | 2026-08-12T19:39:21+00:00 | Vulnerability · Source |
| CVE-2023-52562 | redhat_vex | kernel: mm/slab_common: slab_caches list corruption after kmem_cache_destroy() | fixed: 443 known affected: 150 known not affected: 14 | 2026-08-12T19:08:14+00:00 | Vulnerability · Source |
| CVE-2023-45290 | redhat_vex | golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm | fixed: 5501 known affected: 93 known not affected: 2600 | 2026-08-12T19:05:52+00:00 | Vulnerability · Source |
| CVE-2026-64179 | redhat_vex | kernel: net: wwan: iosm: fix potential memory leaks in ipc_imem_init() | known affected: 184 known not affected: 91 | 2026-08-12T17:28:35+00:00 | Vulnerability · Source |
| CVE-2026-64180 | redhat_vex | kernel: mm/memory_hotplug: fix memory block reference leak on remove | known affected: 14 known not affected: 260 | 2026-08-12T17:28:32+00:00 | Vulnerability · Source |
| CVE-2026-64254 | redhat_vex | kernel: NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR | known affected: 3 known not affected: 274 | 2026-08-12T17:28:28+00:00 | Vulnerability · Source |
| CVE-2026-64107 | redhat_vex | kernel: ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put() | known affected: 76 known not affected: 198 | 2026-08-12T17:28:26+00:00 | Vulnerability · Source |
| CVE-2026-64110 | redhat_vex | kernel: igc: fix potential skb leak in igc_fpe_xmit_smd_frame() | known affected: 184 known not affected: 90 | 2026-08-12T17:28:24+00:00 | Vulnerability · Source |
| CVE-2026-64105 | redhat_vex | kernel: KVM: arm64: vgic: Free private_irqs when init fails after allocation | known affected: 184 known not affected: 90 | 2026-08-12T17:28:22+00:00 | Vulnerability · Source |
| CVE-2026-64256 | redhat_vex | kernel: xfs: don't wrap around quota ids in dqiterate | known affected: 184 known not affected: 90 | 2026-08-12T17:28:21+00:00 | Vulnerability · Source |
| CVE-2026-64103 | redhat_vex | kernel: scsi: isci: Fix use-after-free in device removal path | known affected: 42 known not affected: 232 | 2026-08-12T17:28:18+00:00 | Vulnerability · Source |
| CVE-2026-64267 | redhat_vex | kernel: fuse: avoid 32-bit prune notification count wrap | known affected: 14 known not affected: 260 | 2026-08-12T17:28:17+00:00 | Vulnerability · Source |
| CVE-2026-64290 | redhat_vex | kernel: iommufd: Break the loop on failure in iommufd_fault_fops_read() | known affected: 184 known not affected: 90 | 2026-08-12T17:28:13+00:00 | Vulnerability · Source |
| CVE-2026-64253 | redhat_vex | kernel: kernel/fork: clear PF_BLOCK_TS in copy_process() | known affected: 198 known not affected: 76 | 2026-08-12T17:28:04+00:00 | Vulnerability · Source |
| CVE-2025-0167 | suse_vex | SUSE CVE CVE-2025-0167 | first fixed: 13 known affected: 379 known not affected: 2 recommended: 210 | 2026-08-12T17:07:12+00:00 | Vulnerability · Source |
| CVE-2025-0218 | suse_vex | SUSE CVE CVE-2025-0218 | known affected: 26 | 2026-08-12T17:07:09+00:00 | Vulnerability · Source |