VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291897 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-20612 | redhat_vex | jenkins: no POST request is required for the endpoint handling manual build requests which could result in CSRF | fixed: 12 known not affected: 699 | 2026-08-11T15:09:26+00:00 | Vulnerability · Source |
| CVE-2021-21698 | redhat_vex | jenkins-2-plugins/subversion: does not restrict the name of a file when looking up a subversion key | fixed: 12 known not affected: 743 | 2026-08-11T15:09:25+00:00 | Vulnerability · Source |
| CVE-2026-19176 | redhat_vex | chromium-browser: Skia: Arbitrary code execution via crafted HTML page | known not affected: 1 | 2026-08-11T15:07:54+00:00 | Vulnerability · Source |
| CVE-2026-60122 | redhat_vex | gpsd: gpsd: Arbitrary OS command execution via code injection in gpsprof utility | known affected: 7 | 2026-08-11T15:07:51+00:00 | Vulnerability · Source |
| CVE-2026-19161 | redhat_vex | chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use | known not affected: 1 | 2026-08-11T15:07:42+00:00 | Vulnerability · Source |
| CVE-2026-19154 | redhat_vex | chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page | known not affected: 1 | 2026-08-11T15:07:41+00:00 | Vulnerability · Source |
| CVE-2026-12852 | redhat_vex | bouncycastle: Bouncy Castle for Java: Denial of Service via MLS wire decoder | known not affected: 124 | 2026-08-11T15:07:28+00:00 | Vulnerability · Source |
| CVE-2026-5134 | redhat_vex | Loca Software Informatics Technology Ltd. Co. CMS: CMS: Critical SQL Injection vulnerability | known not affected: 1 | 2026-08-11T15:07:16+00:00 | Vulnerability · Source |
| CVE-2024-45496 | redhat_vex | openshift-controller-manager: Elevated Build Pods Can Lead to Node Compromise in OpenShift | fixed: 684 known not affected: 676 | 2026-08-11T14:55:30+00:00 | Vulnerability · Source |
| CVE-2024-6508 | redhat_vex | openshift-console: OAuth2 insufficient state parameter entropy | fixed: 680 known not affected: 2423 | 2026-08-11T14:54:52+00:00 | Vulnerability · Source |
| CVE-2026-63978 | microsoft_vex | net/handshake: Drain pending requests at net namespace exit | known affected: 3 | 2026-08-11T14:41:15+00:00 | Vulnerability · Source |
| CVE-2026-63999 | microsoft_vex | ethtool: rss: fix indir_table and hkey leak on get_rxfh failure | known affected: 3 | 2026-08-11T14:41:09+00:00 | Vulnerability · Source |
| CVE-2021-30465 | redhat_vex | runc: vulnerable to symlink exchange attack | fixed: 1188 known affected: 2 known not affected: 95 | 2026-08-11T14:28:37+00:00 | Vulnerability · Source |
| CVE-2021-21642 | redhat_vex | jenkins-2-plugins/config-file-provider: Does not configure its XML parser to prevent XML external entity (XXE) attacks. | fixed: 377 known not affected: 156 | 2026-08-11T14:28:30+00:00 | Vulnerability · Source |
| CVE-2021-21611 | redhat_vex | jenkins: Stored XSS vulnerability on new item page | fixed: 385 known not affected: 134 | 2026-08-11T14:28:18+00:00 | Vulnerability · Source |
| CVE-2021-21610 | redhat_vex | jenkins: Reflected XSS vulnerability in markup formatter preview | fixed: 385 known not affected: 134 | 2026-08-11T14:28:07+00:00 | Vulnerability · Source |
| CVE-2021-21608 | redhat_vex | jenkins: Stored XSS vulnerability in button labels | fixed: 385 known not affected: 134 | 2026-08-11T14:27:59+00:00 | Vulnerability · Source |
| CVE-2021-21605 | redhat_vex | jenkins: Path traversal vulnerability in agent names | fixed: 385 known not affected: 134 | 2026-08-11T14:27:49+00:00 | Vulnerability · Source |
| CVE-2021-21604 | redhat_vex | jenkins: Improper handling of REST API XML deserialization errors | fixed: 385 known not affected: 134 | 2026-08-11T14:27:41+00:00 | Vulnerability · Source |
| CVE-2021-21603 | redhat_vex | jenkins: XSS vulnerability in notification bar | fixed: 385 known not affected: 134 | 2026-08-11T14:27:30+00:00 | Vulnerability · Source |
| CVE-2022-20617 | redhat_vex | jenkins-2-plugins/docker-commons: does not sanitize the name of an image or a tag which could result in an OS command execution | fixed: 12 known not affected: 698 | 2026-08-11T14:27:22+00:00 | Vulnerability · Source |
| CVE-2021-21697 | redhat_vex | jenkins: Agent-to-controller access control allows reading/writing most content of build directories | fixed: 12 known not affected: 744 | 2026-08-11T14:27:11+00:00 | Vulnerability · Source |
| CVE-2021-21696 | redhat_vex | jenkins: Agent-to-controller access control allowed writing to sensitive directory used by Pipeline: Shared Groovy Libraries Plugin | fixed: 12 known not affected: 744 | 2026-08-11T14:27:03+00:00 | Vulnerability · Source |
| CVE-2021-21695 | redhat_vex | jenkins: FilePath#listFiles lists files outside directories with agent read access when following symbolic links. | fixed: 12 known not affected: 744 | 2026-08-11T14:26:51+00:00 | Vulnerability · Source |
| CVE-2021-21694 | redhat_vex | jenkins: FilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get*DiskSpace do not check any permissions | fixed: 12 known not affected: 744 | 2026-08-11T14:26:42+00:00 | Vulnerability · Source |
| CVE-2021-21693 | redhat_vex | jenkins: When creating temporary files, permission to create files is only checked after they’ve been created. | fixed: 12 known not affected: 744 | 2026-08-11T14:26:31+00:00 | Vulnerability · Source |
| CVE-2021-21692 | redhat_vex | jenkins: The operations FilePath#renameTo and FilePath#moveAllChildrenTo only check read permission on the source path | fixed: 12 known not affected: 744 | 2026-08-11T14:26:22+00:00 | Vulnerability · Source |
| CVE-2021-21691 | redhat_vex | jenkins: Creating symbolic links is possible without the symlink permission | fixed: 12 known not affected: 744 | 2026-08-11T14:26:11+00:00 | Vulnerability · Source |
| CVE-2021-21690 | redhat_vex | jenkins: Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path | fixed: 12 known not affected: 744 | 2026-08-11T14:26:03+00:00 | Vulnerability · Source |
| CVE-2021-21689 | redhat_vex | jenkins: FilePath#unzip and FilePath#untar were not subject to any access control | fixed: 12 known not affected: 744 | 2026-08-11T14:25:52+00:00 | Vulnerability · Source |
| CVE-2021-21688 | redhat_vex | jenkins: FilePath#reading(FileVisitor) does not reject any operations allowing users to have unrestricted read access | fixed: 12 known not affected: 744 | 2026-08-11T14:25:40+00:00 | Vulnerability · Source |
| CVE-2021-21687 | redhat_vex | jenkins: FilePath#untar does not check permission to create symbolic links when unarchiving a symbolic link | fixed: 12 known not affected: 744 | 2026-08-11T14:25:31+00:00 | Vulnerability · Source |
| CVE-2021-21686 | redhat_vex | jenkins: File path filters do not canonicalize paths, allowing operations to follow symbolic links to outside allowed directories | fixed: 12 known not affected: 744 | 2026-08-11T14:25:20+00:00 | Vulnerability · Source |
| CVE-2021-21685 | redhat_vex | jenkins: FilePath#mkdirs does not check permission to create parent directories | fixed: 12 known not affected: 744 | 2026-08-11T14:25:01+00:00 | Vulnerability · Source |
| CVE-2026-48069 | redhat_vex | grpc-js: @grpc/grpc-js: Client or server crash via malformed compressed message | fixed: 5 known affected: 4 known not affected: 10 | 2026-08-11T14:13:03+00:00 | Vulnerability · Source |
| CVE-2026-64320 | microsoft_vex | nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page | known affected: 3 | 2026-08-11T14:03:48+00:00 | Vulnerability · Source |
| CVE-2026-64424 | microsoft_vex | netpoll: fix a use-after-free on shutdown path | known affected: 3 | 2026-08-11T14:03:42+00:00 | Vulnerability · Source |
| CVE-2026-64241 | microsoft_vex | gpio: rockchip: teardown bugs and resource leaks | known affected: 3 | 2026-08-11T14:03:33+00:00 | Vulnerability · Source |
| CVE-2026-64255 | microsoft_vex | wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers | known affected: 3 | 2026-08-11T14:03:27+00:00 | Vulnerability · Source |
| CVE-2026-64210 | microsoft_vex | net/mlx5e: xsk: Fix unlocked writing to ICOSQ | known affected: 3 | 2026-08-11T14:03:21+00:00 | Vulnerability · Source |
| CVE-2026-64213 | microsoft_vex | hwmon: (lm90) Add lock protection to lm90_alert | known affected: 3 | 2026-08-11T14:03:14+00:00 | Vulnerability · Source |
| CVE-2026-59850 | microsoft_vex | Libssh: libssh: use-after-free via data callbacks on closed channels | fixed: 2 known affected: 2 | 2026-08-11T14:03:05+00:00 | Vulnerability · Source |
| CVE-2026-59844 | microsoft_vex | Libssh: libssh: denial of service via oversized sftp read length | fixed: 2 known affected: 2 | 2026-08-11T14:02:58+00:00 | Vulnerability · Source |
| CVE-2026-59845 | microsoft_vex | Libssh: libssh: denial of service via unchecked proxycommand fork() failure | fixed: 2 known affected: 2 | 2026-08-11T14:02:50+00:00 | Vulnerability · Source |
| CVE-2026-59847 | microsoft_vex | Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification | fixed: 2 known affected: 2 | 2026-08-11T14:02:43+00:00 | Vulnerability · Source |
| CVE-2026-59843 | microsoft_vex | Libssh: libssh: denial of service via zero advertised channel packet size | fixed: 2 known affected: 2 | 2026-08-11T14:02:35+00:00 | Vulnerability · Source |
| CVE-2026-59848 | microsoft_vex | Libssh: libssh: denial of service via sftp responses with unknown request ids | fixed: 2 known affected: 2 | 2026-08-11T14:02:27+00:00 | Vulnerability · Source |
| CVE-2026-64190 | microsoft_vex | net: team: fix NULL pointer dereference in team_xmit during mode change | known affected: 3 | 2026-08-11T14:02:08+00:00 | Vulnerability · Source |
| CVE-2026-64082 | microsoft_vex | riscv: Fix register corruption from uninitialized cregs on error | known affected: 3 | 2026-08-11T14:02:02+00:00 | Vulnerability · Source |
| CVE-2026-64146 | microsoft_vex | erofs: fix metabuf leak in inode xattr initialization | known affected: 3 | 2026-08-11T14:01:56+00:00 | Vulnerability · Source |