VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291897 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-68185 | redhat_vex | kernel: LoongArch: Move jump_label_init() before parse_early_param() | known not affected: 274 | 2026-08-11T18:46:09+00:00 | Vulnerability · Source |
| CVE-2026-18949 | redhat_vex | odh-dashboard: odh-dashboard: ClusterRole grants cluster-wide CRUD on secrets and RBAC management resources | fixed: 12 known affected: 7 known not affected: 304 | 2026-08-11T18:38:58+00:00 | Vulnerability · Source |
| CVE-2026-18941 | redhat_vex | feast: feast-operator: Feast: Default authentication mode is no_auth — shared multi-tenant instances deployed without authentication | fixed: 9 known affected: 3 known not affected: 317 | 2026-08-11T18:38:54+00:00 | Vulnerability · Source |
| CVE-2026-16456 | redhat_vex | odh-model-controller: odh-model-controller: Cross-namespace secret read via NIM Account CRD confused deputy | fixed: 12 known not affected: 304 | 2026-08-11T18:38:40+00:00 | Vulnerability · Source |
| CVE-2026-73030 | redhat_vex | unearth: unearth: Arbitrary file write via unnormalized paths | known not affected: 1 | 2026-08-11T17:41:26+00:00 | Vulnerability · Source |
| CVE-2026-71870 | suse_vex | SUSE CVE CVE-2026-71870 | No product status | 2026-08-11T17:15:49+00:00 | Vulnerability · Source |
| CVE-2026-68327 | redhat_vex | kernel: wan: wanxl: Only reset hardware after BAR mapping | known not affected: 274 | 2026-08-11T16:47:52+00:00 | Vulnerability · Source |
| CVE-2026-68213 | redhat_vex | kernel: media: rtl2832_sdr: Return queued buffers on start_streaming() failure | known not affected: 274 | 2026-08-11T16:47:51+00:00 | Vulnerability · Source |
| CVE-2026-68292 | redhat_vex | kernel: ice: prevent tstamp ring allocation for non-PF VSI types | known affected: 184 known not affected: 90 | 2026-08-11T16:47:47+00:00 | Vulnerability · Source |
| CVE-2026-68372 | redhat_vex | kernel: usb: core: port: Deattach Type-C connector on component unbind | known affected: 184 known not affected: 90 | 2026-08-11T16:45:38+00:00 | Vulnerability · Source |
| CVE-2026-70639 | redhat_vex | llama.cpp: llama.cpp: Denial of Service in Android JNI wrapper via malicious model file | known not affected: 1 | 2026-08-11T16:45:35+00:00 | Vulnerability · Source |
| CVE-2026-71326 | redhat_vex | github.com/traefik/traefik: Traefik: Authenticated identity spoofing via BasicAuth key collision | known not affected: 1 | 2026-08-11T15:34:27+00:00 | Vulnerability · Source |
| CVE-2026-68288 | redhat_vex | kernel: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD | known affected: 246 known not affected: 28 | 2026-08-11T15:34:24+00:00 | Vulnerability · Source |
| CVE-2026-68285 | redhat_vex | kernel: LoongArch: BPF: Fix memory leak in bpf_jit_free() | known not affected: 274 | 2026-08-11T15:34:22+00:00 | Vulnerability · Source |
| CVE-2026-68230 | redhat_vex | kernel: media: amlogic-c3: Add validations for ae and awb config | known not affected: 274 | 2026-08-11T15:34:17+00:00 | Vulnerability · Source |
| CVE-2026-68132 | redhat_vex | kernel: super: fix emergency thaw deadlock on frozen block devices | known affected: 246 known not affected: 28 | 2026-08-11T15:34:13+00:00 | Vulnerability · Source |
| CVE-2026-68120 | redhat_vex | kernel: rtase: Workaround for TX hang caused by hardware packet parsing | known not affected: 274 | 2026-08-11T15:34:09+00:00 | Vulnerability · Source |
| CVE-2026-68124 | redhat_vex | kernel: mctp: serial: handle zero-length frames to prevent rx buffer overflow | known not affected: 274 | 2026-08-11T15:33:55+00:00 | Vulnerability · Source |
| CVE-2026-68336 | redhat_vex | kernel: bonding: fix devconf_all NULL dereference when IPv6 is disabled | known affected: 198 known not affected: 76 | 2026-08-11T15:33:48+00:00 | Vulnerability · Source |
| CVE-2026-68088 | redhat_vex | kernel: usb: gadget: function: rndis: add length check to response query | known not affected: 274 | 2026-08-11T15:33:44+00:00 | Vulnerability · Source |
| CVE-2026-68403 | redhat_vex | kernel: wifi: brcmfmac: initialize SDIO data work before cleanup | known affected: 232 known not affected: 42 | 2026-08-11T15:33:41+00:00 | Vulnerability · Source |
| CVE-2026-68301 | redhat_vex | kernel: net: hsr: fix memory leak on slave unregistration by removing synced VLANs | known affected: 184 known not affected: 90 | 2026-08-11T15:33:37+00:00 | Vulnerability · Source |
| CVE-2026-68179 | redhat_vex | kernel: misc: nsm: only unlock nsm_dev on post-lock error paths | known not affected: 274 | 2026-08-11T15:33:34+00:00 | Vulnerability · Source |
| CVE-2025-71072 | redhat_vex | kernel: shmem: fix recovery on rename failures | fixed: 309 known affected: 14 known not affected: 184 | 2026-08-11T15:33:07+00:00 | Vulnerability · Source |
| CVE-2021-22133 | redhat_vex | go.elastic.co/apm: leaks sensitive HTTP headers during panic | fixed: 3 known affected: 3 known not affected: 439 | 2026-08-11T15:32:38+00:00 | Vulnerability · Source |
| CVE-2021-21609 | redhat_vex | jenkins: Missing permission check for paths with specific prefix | fixed: 385 known not affected: 134 | 2026-08-11T15:32:36+00:00 | Vulnerability · Source |
| CVE-2026-68416 | redhat_vex | kernel: mtd: fix double free and WARN_ON in add_mtd_device() error paths | known affected: 90 known not affected: 184 | 2026-08-11T15:32:27+00:00 | Vulnerability · Source |
| CVE-2026-68396 | redhat_vex | kernel: scsi: core: wake eh reliably when using scsi_schedule_eh | known affected: 246 known not affected: 28 | 2026-08-11T15:32:26+00:00 | Vulnerability · Source |
| CVE-2026-68259 | redhat_vex | kernel: drm/amdkfd: Check bounds in allocate_event_notification_slot | known affected: 274 | 2026-08-11T15:32:17+00:00 | Vulnerability · Source |
| CVE-2026-19160 | redhat_vex | chromium-browser: Skia: Information disclosure via uninitialized use in Google Chrome | known not affected: 1 | 2026-08-11T15:32:00+00:00 | Vulnerability · Source |
| CVE-2026-16336 | redhat_vex | trino: Trino: Open redirect vulnerability in OAuth2/OIDC component | known not affected: 1 | 2026-08-11T15:31:57+00:00 | Vulnerability · Source |
| CVE-2026-58044 | redhat_vex | nodejs: Node.js: Request smuggling via HTTP client header truncation | fixed: 12 known affected: 60 | 2026-08-11T15:31:55+00:00 | Vulnerability · Source |
| CVE-2026-58042 | redhat_vex | nodejs: Node.js: Denial of Service via DNS responses with excessive A records | fixed: 12 known affected: 60 known not affected: 2 | 2026-08-11T15:31:51+00:00 | Vulnerability · Source |
| CVE-2026-58041 | redhat_vex | nodejs: Node.js node:sqlite: Unintended data modification due to stale statement iterator | fixed: 12 known affected: 60 | 2026-08-11T15:31:50+00:00 | Vulnerability · Source |
| CVE-2026-68195 | redhat_vex | kernel: wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses | known not affected: 274 | 2026-08-11T15:31:46+00:00 | Vulnerability · Source |
| CVE-2026-68169 | redhat_vex | kernel: mptcp: pm: userspace: fix use-after-free in get_local_id | known affected: 184 known not affected: 90 | 2026-08-11T15:31:28+00:00 | Vulnerability · Source |
| CVE-2026-64368 | redhat_vex | kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled | fixed: 612 known affected: 22 known not affected: 91 | 2026-08-11T15:27:27+00:00 | Vulnerability · Source |
| CVE-2026-23415 | redhat_vex | kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() | fixed: 612 known affected: 22 known not affected: 90 | 2026-08-11T15:27:24+00:00 | Vulnerability · Source |
| CVE-2024-53143 | redhat_vex | kernel: fsnotify: Fix ordering of iput() and watched_objects decrement | fixed: 309 known affected: 28 known not affected: 170 | 2026-08-11T15:27:23+00:00 | Vulnerability · Source |
| CVE-2024-47211 | redhat_vex | openstack-ironic: Lack of checksum validation on images | fixed: 674 known not affected: 710 | 2026-08-11T15:22:35+00:00 | Vulnerability · Source |
| CVE-2024-43803 | redhat_vex | Bare Metal Operator: BMO can expose particularly named secrets from other namespaces via BMH CRD | fixed: 666 known not affected: 116 | 2026-08-11T15:22:24+00:00 | Vulnerability · Source |
| CVE-2024-34064 | redhat_vex | jinja2: accepts keys containing non-attribute characters | fixed: 1722 known affected: 67 known not affected: 1429 | 2026-08-11T15:20:52+00:00 | Vulnerability · Source |
| CVE-2021-20218 | redhat_vex | fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise | fixed: 395 known affected: 6 known not affected: 27 | 2026-08-11T15:13:36+00:00 | Vulnerability · Source |
| CVE-2021-21645 | redhat_vex | jenkins-2-plugins/config-file-provider: Does not perform permission checks in several HTTP endpoints. | fixed: 377 known not affected: 156 | 2026-08-11T15:09:51+00:00 | Vulnerability · Source |
| CVE-2021-21644 | redhat_vex | jenkins-2-plugins/config-file-provider: does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery (CSRF) vulnerability. | fixed: 377 known not affected: 156 | 2026-08-11T15:09:47+00:00 | Vulnerability · Source |
| CVE-2021-21643 | redhat_vex | jenkins-2-plugins/config-file-provider: Does not correctly perform permission checks in several HTTP endpoints. | fixed: 377 known not affected: 156 | 2026-08-11T15:09:44+00:00 | Vulnerability · Source |
| CVE-2021-21607 | redhat_vex | jenkins: Excessive memory allocation in graph URLs leads to denial of service | fixed: 385 known not affected: 134 | 2026-08-11T15:09:41+00:00 | Vulnerability · Source |
| CVE-2021-21606 | redhat_vex | jenkins: Arbitrary file existence check in file fingerprints | fixed: 385 known not affected: 134 | 2026-08-11T15:09:39+00:00 | Vulnerability · Source |
| CVE-2021-21602 | redhat_vex | jenkins: Arbitrary file read vulnerability in workspace browsers | fixed: 385 known not affected: 134 | 2026-08-11T15:09:38+00:00 | Vulnerability · Source |
| CVE-2021-20319 | redhat_vex | coreos-installer: incorrect signature verification on gzip-compressed install images | fixed: 83 known not affected: 667 | 2026-08-11T15:09:26+00:00 | Vulnerability · Source |