VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291900 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-29169 | redhat_vex | httpd: NULL pointer dereference via specially crafted request | fixed: 344 known affected: 15 known not affected: 38 | 2026-08-11T09:45:38+00:00 | Vulnerability · Source |
| CVE-2026-68411 | redhat_vex | kernel: wifi: mac80211_hwsim: clamp virtio RX length before skb_put | known not affected: 274 | 2026-08-11T09:42:16+00:00 | Vulnerability · Source |
| CVE-2026-33006 | redhat_vex | httpd: mod_auth_digest: timing attack allows a bypass of digest authentication | fixed: 156 known affected: 30 | 2026-08-11T09:31:24+00:00 | Vulnerability · Source |
| CVE-2026-14739 | redhat_vex | DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders | fixed: 54 known affected: 4 | 2026-08-11T09:11:30+00:00 | Vulnerability · Source |
| CVE-2026-14380 | redhat_vex | DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute | fixed: 54 known affected: 4 | 2026-08-11T09:11:24+00:00 | Vulnerability · Source |
| CVE-2026-10879 | redhat_vex | perl-DBI: perl-DBI: Heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution. | fixed: 54 known affected: 4 | 2026-08-11T09:11:16+00:00 | Vulnerability · Source |
| CVE-2026-9698 | redhat_vex | DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution | fixed: 54 known affected: 4 | 2026-08-11T09:11:00+00:00 | Vulnerability · Source |
| CVE-2026-68408 | redhat_vex | kernel: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock | known affected: 198 known not affected: 76 | 2026-08-11T08:51:37+00:00 | Vulnerability · Source |
| CVE-2026-68359 | redhat_vex | kernel: hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop | known not affected: 274 | 2026-08-11T08:51:35+00:00 | Vulnerability · Source |
| CVE-2026-68313 | redhat_vex | kernel: tipc: fix infinite loop in __tipc_nl_compat_dumpit | known affected: 232 known not affected: 42 | 2026-08-11T08:51:33+00:00 | Vulnerability · Source |
| CVE-2026-68199 | redhat_vex | kernel: wifi: ath6kl: fix OOB access from firmware ADDBA window size | known not affected: 274 | 2026-08-11T08:51:29+00:00 | Vulnerability · Source |
| CVE-2026-68151 | redhat_vex | kernel: binfmt_elf_fdpic: only honour the first PT_INTERP | known not affected: 274 | 2026-08-11T08:51:25+00:00 | Vulnerability · Source |
| CVE-2026-19411 | redhat_vex | shim/dp.c library: NULL-pointer dereference in is_removable_media_path() when DevicePathToStr() returns NULL | known affected: 8 | 2026-08-11T08:51:24+00:00 | Vulnerability · Source |
| CVE-2026-68355 | redhat_vex | kernel: wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() | known affected: 232 known not affected: 42 | 2026-08-11T08:51:13+00:00 | Vulnerability · Source |
| CVE-2026-68239 | redhat_vex | kernel: drm/ttm: Account for NULL and handle pages in ttm_pool_backup | known affected: 184 known not affected: 90 | 2026-08-11T08:51:08+00:00 | Vulnerability · Source |
| CVE-2026-67288 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests | known affected: 26 known not affected: 5 | 2026-08-11T08:51:06+00:00 | Vulnerability · Source |
| CVE-2026-34191 | redhat_vex | apr-util: Apache Portable Runtime Utility: SQL Injection via apr_dbd_oracle | known not affected: 48 | 2026-08-11T08:49:58+00:00 | Vulnerability · Source |
| CVE-2026-55814 | redhat_vex | Apache Ranger: Apache Ranger: Information disclosure via missing authentication in download APIs | known not affected: 1 | 2026-08-11T08:39:54+00:00 | Vulnerability · Source |
| CVE-2026-56848 | redhat_vex | nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service | known affected: 60 known not affected: 5 | 2026-08-11T08:37:44+00:00 | Vulnerability · Source |
| CVE-2026-16442 | redhat_vex | keycloak-services: keycloak-services: SAML IdP-initiated broker login bypasses link-only restriction | fixed: 20 known not affected: 3 | 2026-08-11T08:22:54+00:00 | Vulnerability · Source |
| CVE-2026-16443 | redhat_vex | keycloak-services: keycloak-services: SAML broker metadata import disables response signature validation | fixed: 20 known not affected: 3 | 2026-08-11T08:22:06+00:00 | Vulnerability · Source |
| CVE-2026-41115 | redhat_vex | org.apache.kafka: Apache Kafka: Information disclosure due to improper authorization in CONSUMER_GROUP_DESCRIBE API | known affected: 17 known not affected: 59 | 2026-08-11T07:39:47+00:00 | Vulnerability · Source |
| CVE-2026-19391 | redhat_vex | insights-core: insights-core: Incomplete credential redaction exposes SSSD bind passwords and Pacemaker fence credentials in uploaded archives | known affected: 9 known not affected: 4 | 2026-08-11T07:19:30+00:00 | Vulnerability · Source |
| CVE-2026-18967 | redhat_vex | keycloak-services: keycloak-services: SAML OneTimeUse assertion replay in IdP-Initiated broker flow | known affected: 4 known not affected: 1 | 2026-08-11T06:25:22+00:00 | Vulnerability · Source |
| CVE-2026-19278 | redhat_vex | stackrox: stackrox: Privilege escalation via unanchored regular expressions in Auth M2M role mappings | known affected: 1 | 2026-08-11T06:25:15+00:00 | Vulnerability · Source |
| CVE-2026-22068 | redhat_vex | Apache Traffic Server: regex mappings match with malicious domain names | known not affected: 1 | 2026-08-11T05:30:44+00:00 | Vulnerability · Source |
| CVE-2026-24329 | redhat_vex | wildfly-core: WildFly Core: Denial of Service via malformed payload injection by an authenticated administrative user. | known affected: 6 | 2026-08-11T04:37:54+00:00 | Vulnerability · Source |
| CVE-2026-24330 | redhat_vex | wildfly-core: WildFly: Arbitrary File Read via malicious archive deployment | known affected: 6 | 2026-08-11T04:37:52+00:00 | Vulnerability · Source |
| CVE-2026-56846 | redhat_vex | nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks | fixed: 8 known affected: 60 known not affected: 3 | 2026-08-11T04:37:42+00:00 | Vulnerability · Source |
| CVE-2026-24033 | redhat_vex | Apache Traffic Server: request smuggling via chunked extension quoted-string parsing | known not affected: 1 | 2026-08-11T04:37:19+00:00 | Vulnerability · Source |
| CVE-2026-33267 | redhat_vex | Apache Traffic Server: untrusted @ headers can spoof ATS internal metadata | known not affected: 1 | 2026-08-11T02:54:29+00:00 | Vulnerability · Source |
| CVE-2026-35025 | redhat_vex | ProFTPD: ACL bypass via /proc/self/root path prefix in RNFR | known not affected: 1 | 2026-08-11T02:54:28+00:00 | Vulnerability · Source |
| CVE-2024-57795 | microsoft_vex | RDMA/rxe: Remove the direct link to net_device | fixed: 1 known affected: 12 | 2026-08-11T01:47:32+00:00 | Vulnerability · Source |
| CVE-2026-3087 | microsoft_vex | shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs | fixed: 2 known affected: 6 known not affected: 1 | 2026-08-11T01:47:32+00:00 | Vulnerability · Source |
| CVE-2024-57888 | microsoft_vex | workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker | known affected: 4 | 2026-08-11T01:47:32+00:00 | Vulnerability · Source |
| CVE-2024-57857 | microsoft_vex | RDMA/siw: Remove direct link to net_device | known affected: 23 | 2026-08-11T01:47:21+00:00 | Vulnerability · Source |
| CVE-2024-57899 | microsoft_vex | wifi: mac80211: fix mbss changed flags corruption on 32 bit systems | known affected: 5 | 2026-08-11T01:47:21+00:00 | Vulnerability · Source |
| CVE-2025-21629 | microsoft_vex | net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets | known affected: 5 | 2026-08-11T01:47:14+00:00 | Vulnerability · Source |
| CVE-2024-57893 | microsoft_vex | ALSA: seq: oss: Fix races at processing SysEx messages | known affected: 5 | 2026-08-11T01:46:45+00:00 | Vulnerability · Source |
| CVE-2025-21682 | microsoft_vex | eth: bnxt: always recalculate features after XDP clearing, fix null-deref | fixed: 1 known affected: 1 under investigation: 13 | 2026-08-11T01:46:16+00:00 | Vulnerability · Source |
| CVE-2024-52005 | microsoft_vex | The sideband payload is passed unfiltered to the terminal in git | known affected: 3 | 2026-08-11T01:46:07+00:00 | Vulnerability · Source |
| CVE-2024-57895 | microsoft_vex | ksmbd: set ATTR_CTIME flags when setting mtime | fixed: 2 known affected: 2 under investigation: 5 | 2026-08-11T01:45:32+00:00 | Vulnerability · Source |
| CVE-2025-37938 | microsoft_vex | tracing: Verify event formats that have "%*p.." | fixed: 2 known affected: 7 | 2026-08-11T01:44:50+00:00 | Vulnerability · Source |
| CVE-2025-37931 | microsoft_vex | btrfs: adjust subpage bit start based on sectorsize | fixed: 1 known affected: 6 under investigation: 2 | 2026-08-11T01:44:40+00:00 | Vulnerability · Source |
| CVE-2025-37961 | microsoft_vex | ipvs: fix uninit-value for saddr in do_output_route4 | fixed: 2 known affected: 6 | 2026-08-11T01:44:27+00:00 | Vulnerability · Source |
| CVE-2025-37959 | microsoft_vex | bpf: Scrub packet on bpf_redirect_peer | known affected: 5 | 2026-08-11T01:44:17+00:00 | Vulnerability · Source |
| CVE-2025-37856 | microsoft_vex | btrfs: harden block_group::bg_list against list_del() races | known affected: 21 under investigation: 3 | 2026-08-11T01:43:40+00:00 | Vulnerability · Source |
| CVE-2025-37945 | microsoft_vex | net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY | fixed: 1 known affected: 10 | 2026-08-11T01:43:25+00:00 | Vulnerability · Source |
| CVE-2024-57898 | microsoft_vex | wifi: cfg80211: clear link ID from bitmap during link delete after clean up | known affected: 19 under investigation: 4 | 2026-08-11T01:43:15+00:00 | Vulnerability · Source |
| CVE-2025-37903 | microsoft_vex | drm/amd/display: Fix slab-use-after-free in hdcp | fixed: 2 known affected: 6 | 2026-08-11T01:43:15+00:00 | Vulnerability · Source |