VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291904 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-57853 | redhat_vex | web-terminal: privilege escalation via excessive /etc/passwd permissions | known affected: 1 | 2026-08-10T12:53:04+00:00 | Vulnerability · Source |
| CVE-2025-57851 | redhat_vex | mce: privilege escalation via excessive /etc/passwd permissions | known affected: 3 | 2026-08-10T12:53:02+00:00 | Vulnerability · Source |
| CVE-2025-57850 | redhat_vex | codeready-ws: privilege escalation via excessive /etc/passwd permissions | known affected: 5 | 2026-08-10T12:52:55+00:00 | Vulnerability · Source |
| CVE-2025-70103 | redhat_vex | libjxl: libjxl: Arbitrary code execution via crafted PBM images | known not affected: 8 | 2026-08-10T12:52:52+00:00 | Vulnerability · Source |
| CVE-2025-6242 | redhat_vex | vllm: Server Side request forgery (SSRF) in MediaConnector | fixed: 25 known affected: 61 known not affected: 660 | 2026-08-10T12:52:36+00:00 | Vulnerability · Source |
| CVE-2026-41059 | redhat_vex | github.com/oauth2-proxy/oauth2-proxy: OAuth2 Proxy: Authentication bypass via crafted request path leading to unauthorized access | known affected: 1 | 2026-08-10T12:49:37+00:00 | Vulnerability · Source |
| CVE-2026-39378 | redhat_vex | nbconvert: nbconvert: Sensitive file exfiltration via path traversal in image references | known affected: 17 known not affected: 2 | 2026-08-10T12:49:34+00:00 | Vulnerability · Source |
| CVE-2026-18401 | redhat_vex | tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser | known affected: 76 known not affected: 96 | 2026-08-10T12:45:54+00:00 | Vulnerability · Source |
| CVE-2026-31613 | redhat_vex | kernel: smb: client: fix OOB reads parsing symlink error response | fixed: 1546 known affected: 22 known not affected: 42 | 2026-08-10T11:53:52+00:00 | Vulnerability · Source |
| CVE-2026-22990 | redhat_vex | kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() | fixed: 1671 known affected: 126 known not affected: 14 | 2026-08-10T11:53:44+00:00 | Vulnerability · Source |
| CVE-2025-71116 | redhat_vex | kernel: libceph: make decode_pool() more resilient against corrupted osdmaps | fixed: 1671 known affected: 126 known not affected: 14 | 2026-08-10T11:53:40+00:00 | Vulnerability · Source |
| CVE-2026-52976 | redhat_vex | kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() | fixed: 1224 known affected: 22 known not affected: 90 | 2026-08-10T11:52:02+00:00 | Vulnerability · Source |
| CVE-2026-65819 | redhat_vex | github.com/gopacket/gopacket: gopacket: Remote Denial of Service via crafted packet processing | known affected: 2 | 2026-08-10T10:53:03+00:00 | Vulnerability · Source |
| CVE-2026-59900 | redhat_vex | io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2 | fixed: 2 known affected: 49 | 2026-08-10T10:17:40+00:00 | Vulnerability · Source |
| CVE-2026-71498 | redhat_vex | re2: node-re2: Information disclosure via out-of-bounds read with malformed UTF-8 input | known not affected: 1 | 2026-08-10T10:06:22+00:00 | Vulnerability · Source |
| CVE-2026-71439 | redhat_vex | mermaid: Mermaid: Denial of Service via Radar Diagrams 'ticks' parameter | known affected: 2 known not affected: 1 | 2026-08-10T10:06:20+00:00 | Vulnerability · Source |
| CVE-2026-50159 | redhat_vex | mermaid: Mermaid: CSS injection allows altering page elements via diagram input | known affected: 2 known not affected: 1 | 2026-08-10T10:06:16+00:00 | Vulnerability · Source |
| CVE-2026-19404 | redhat_vex | 389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort CleanAllRUV replication maintenance | known affected: 33 | 2026-08-10T10:05:56+00:00 | Vulnerability · Source |
| CVE-2026-12570 | redhat_vex | keras: Keras: Denial of Service via HDF5 Shape Bomb when loading malicious model files | known affected: 9 | 2026-08-10T10:05:56+00:00 | Vulnerability · Source |
| CVE-2026-64654 | redhat_vex | github.com/cli/cli: GitHub CLI: Terminal escape sequence injection allows command execution | known not affected: 3 | 2026-08-10T09:45:35+00:00 | Vulnerability · Source |
| CVE-2026-12372 | redhat_vex | nltk: NLTK: Server-Side Request Forgery via improper network URL validation | known affected: 14 | 2026-08-10T09:45:35+00:00 | Vulnerability · Source |
| CVE-2026-59892 | redhat_vex | @opentelemetry/propagator-jaeger: OpenTelemetry JavaScript: Denial of Service via malformed HTTP header decoding | fixed: 2 known affected: 10 known not affected: 6 | 2026-08-10T09:44:08+00:00 | Vulnerability · Source |
| CVE-2026-64653 | redhat_vex | github.com/cli/cli: GitHub CLI: Path traversal via unescaped URL variables | known not affected: 3 | 2026-08-10T09:28:39+00:00 | Vulnerability · Source |
| CVE-2026-60074 | redhat_vex | Date-Manip: Date::Manip: Incorrect date parsing leads to logic errors | known affected: 5 | 2026-08-10T08:26:22+00:00 | Vulnerability · Source |
| CVE-2025-71381 | redhat_vex | Hono: Hono: Potential CORS bypass via Vary Header Injection | known not affected: 7 | 2026-08-10T08:21:29+00:00 | Vulnerability · Source |
| CVE-2026-66011 | redhat_vex | Imagemagick: ImageMagick before 7.1.2-27 Memory Leak via Invalid CLI Options | known affected: 14 | 2026-08-10T06:56:24+00:00 | Vulnerability · Source |
| CVE-2026-67290 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via malformed media data | known affected: 31 | 2026-08-10T06:54:08+00:00 | Vulnerability · Source |
| CVE-2026-67864 | redhat_vex | open62541: open62541: Denial of Service via NodeManagement type-instantiation logic | known not affected: 1 | 2026-08-10T06:36:43+00:00 | Vulnerability · Source |
| CVE-2026-67861 | redhat_vex | open62541: open62541: Denial of Service via UA_Client_getRemoteDataTypes component | known not affected: 1 | 2026-08-10T06:36:35+00:00 | Vulnerability · Source |
| CVE-2026-67860 | redhat_vex | open62541: open62541: Heap-based buffer overflow in HistoryRead path | known not affected: 1 | 2026-08-10T06:36:34+00:00 | Vulnerability · Source |
| CVE-2026-56000 | redhat_vex | X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() | fixed: 121 known affected: 19 known not affected: 20 | 2026-08-10T06:35:54+00:00 | Vulnerability · Source |
| CVE-2026-48933 | redhat_vex | nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt() | fixed: 336 | 2026-08-10T02:57:28+00:00 | Vulnerability · Source |
| CVE-2026-48618 | redhat_vex | nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch | fixed: 336 | 2026-08-10T02:57:23+00:00 | Vulnerability · Source |
| CVE-2026-6100 | redhat_vex | python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules | fixed: 1665 known affected: 19 known not affected: 94 | 2026-08-10T02:34:20+00:00 | Vulnerability · Source |
| CVE-2025-12150 | redhat_vex | org.keycloak/keycloak-services: WebAuthn Attestation Statement Verification Bypass | fixed: 20 | 2026-08-10T01:55:06+00:00 | Vulnerability · Source |
| CVE-2026-54876 | microsoft_vex | Client-Side Memory Leak in OCSP Response Checking | known affected: 1 | 2026-08-10T01:43:33+00:00 | Vulnerability · Source |
| CVE-2026-64189 | microsoft_vex | netfilter: ipset: fix race between dump and ip_set_list resize | fixed: 1 known affected: 1 | 2026-08-10T01:41:46+00:00 | Vulnerability · Source |
| CVE-2026-64206 | microsoft_vex | Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock | fixed: 1 known affected: 1 | 2026-08-10T01:41:38+00:00 | Vulnerability · Source |
| CVE-2026-64205 | microsoft_vex | i2c: i801: fix hardware state machine corruption in error path | fixed: 1 known affected: 2 | 2026-08-10T01:41:25+00:00 | Vulnerability · Source |
| CVE-2026-64192 | microsoft_vex | bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized | fixed: 1 known affected: 2 | 2026-08-10T01:41:19+00:00 | Vulnerability · Source |
| CVE-2026-64187 | microsoft_vex | xfs: fail recovery on a committed log item with no regions | fixed: 1 known affected: 1 | 2026-08-10T01:41:12+00:00 | Vulnerability · Source |
| CVE-2026-26199 | microsoft_vex | Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero | fixed: 1 known affected: 2 | 2026-08-10T01:41:05+00:00 | Vulnerability · Source |
| CVE-2026-26197 | microsoft_vex | Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c | fixed: 1 known affected: 2 | 2026-08-10T01:40:58+00:00 | Vulnerability · Source |
| CVE-2026-38752 | microsoft_vex | A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. | fixed: 2 known affected: 2 | 2026-08-10T01:40:51+00:00 | Vulnerability · Source |
| CVE-2026-38753 | microsoft_vex | A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. | fixed: 2 known affected: 2 | 2026-08-10T01:40:44+00:00 | Vulnerability · Source |
| CVE-2025-14559 | redhat_vex | org.keycloak/keycloak-services: Keycloak keycloak-services: Business logic flaw allows unauthorized token issuance for disabled users | fixed: 10 | 2026-08-10T01:34:47+00:00 | Vulnerability · Source |
| CVE-2025-14082 | redhat_vex | keycloak-services: Keycloak Admin REST API: Improper Access Control leads to sensitive role metadata information disclosure | fixed: 10 | 2026-08-10T01:25:15+00:00 | Vulnerability · Source |
| CVE-2025-14083 | redhat_vex | keycloak-server: Keycloak: Improper Access Control in Admin REST API leads to information disclosure | fixed: 10 | 2026-08-10T01:25:15+00:00 | Vulnerability · Source |
| CVE-2007-4988 | suse_vex | SUSE CVE CVE-2007-4988 | recommended: 80 | 2026-08-09T23:40:58+00:00 | Vulnerability · Source |
| CVE-2007-5971 | suse_vex | SUSE CVE CVE-2007-5971 | known not affected: 2 recommended: 67 | 2026-08-09T23:40:56+00:00 | Vulnerability · Source |