VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291911 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-30472 | redhat_vex | corosync: Stack buffer overflow from 'orf_token_endian_convert' | fixed: 163 known affected: 13 | 2026-08-06T14:05:12+00:00 | Vulnerability · Source |
| CVE-2026-12844 | redhat_vex | perl-List-SomeUtils-XS: List::SomeUtils::XS: Heap buffer overflow in pairwise() function leading to arbitrary code execution | known not affected: 1 | 2026-08-06T14:03:25+00:00 | Vulnerability · Source |
| CVE-2023-44442 | redhat_vex | gimp: PSD buffer overflow RCE | fixed: 816 known affected: 6 | 2026-08-06T14:01:05+00:00 | Vulnerability · Source |
| CVE-2023-44441 | redhat_vex | gimp: dds buffer overflow RCE | fixed: 180 known not affected: 29 | 2026-08-06T14:00:27+00:00 | Vulnerability · Source |
| CVE-2023-44444 | redhat_vex | gimp: psp off-by-one RCE | fixed: 816 known affected: 6 | 2026-08-06T14:00:05+00:00 | Vulnerability · Source |
| CVE-2023-44443 | redhat_vex | gimp: psp integer overflow RCE | fixed: 277 known not affected: 29 | 2026-08-06T13:59:52+00:00 | Vulnerability · Source |
| CVE-2025-61021 | redhat_vex | virtuoso-opensource: Openlink Virtuoso-opensource: Denial of Service via crafted SQL statements | known not affected: 3 | 2026-08-06T13:59:10+00:00 | Vulnerability · Source |
| CVE-2025-61029 | redhat_vex | virtuoso-opensource: Virtuoso-opensource: Denial of Service via crafted SQL statements | known not affected: 3 | 2026-08-06T13:58:20+00:00 | Vulnerability · Source |
| CVE-2025-3931 | redhat_vex | yggdrasil: Local privilege escalation in yggdrasil | fixed: 33 known not affected: 6 | 2026-08-06T13:54:35+00:00 | Vulnerability · Source |
| CVE-2026-67588 | redhat_vex | org.apache.qpid/protonj2: Apache Qpid ProtonJ2: Denial of Service via unbounded symbol value caching | known affected: 1 | 2026-08-06T13:53:56+00:00 | Vulnerability · Source |
| CVE-2026-18785 | redhat_vex | open62541: open62541: Use-after-free vulnerability via local manipulation | known not affected: 1 | 2026-08-06T13:38:52+00:00 | Vulnerability · Source |
| CVE-2025-32803 | redhat_vex | kea: Insecure file permissions can result in confidential information leakage | fixed: 78 | 2026-08-06T13:34:31+00:00 | Vulnerability · Source |
| CVE-2025-4123 | redhat_vex | grafana: Cross-site Scripting (XSS) in Grafana via Custom Frontend Plugins and Open Redirect | fixed: 131 | 2026-08-06T13:34:13+00:00 | Vulnerability · Source |
| CVE-2025-46802 | redhat_vex | screen: TTY Hijacking while Attaching to a Multiuser Session | known affected: 3 | 2026-08-06T13:33:46+00:00 | Vulnerability · Source |
| CVE-2025-24495 | redhat_vex | microcode_ctl: From CVEorg collector | fixed: 30 known affected: 2 known not affected: 1 | 2026-08-06T13:28:43+00:00 | Vulnerability · Source |
| CVE-2025-32801 | redhat_vex | kea: Loading a malicious hook library can lead to local privilege escalation | fixed: 78 | 2026-08-06T13:24:15+00:00 | Vulnerability · Source |
| CVE-2025-23166 | redhat_vex | nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js | fixed: 217 | 2026-08-06T13:19:04+00:00 | Vulnerability · Source |
| CVE-2025-3877 | redhat_vex | thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links | fixed: 118 known affected: 5 | 2026-08-06T13:19:01+00:00 | Vulnerability · Source |
| CVE-2024-5629 | redhat_vex | python-pymongo: Out-of-bounds read in bson module | fixed: 82 known affected: 16 known not affected: 4 | 2026-08-06T13:09:53+00:00 | Vulnerability · Source |
| CVE-2025-32802 | redhat_vex | kea: Insecure handling of file paths allows multiple local attacks | fixed: 78 | 2026-08-06T13:09:50+00:00 | Vulnerability · Source |
| CVE-2025-49133 | redhat_vex | libtpms: Libtpms Out-of-Bounds Read Vulnerability | fixed: 2927 known affected: 6 | 2026-08-06T13:09:44+00:00 | Vulnerability · Source |
| CVE-2025-49091 | redhat_vex | konsole: Konsole Remote Code Execution Vulnerability | fixed: 14 | 2026-08-06T13:09:31+00:00 | Vulnerability · Source |
| CVE-2025-5473 | redhat_vex | gimp: GIMP ICO File Parsing Integer Overflow | fixed: 533 known affected: 6 | 2026-08-06T13:08:56+00:00 | Vulnerability · Source |
| CVE-2023-6816 | redhat_vex | xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer | fixed: 702 known affected: 9 | 2026-08-06T12:55:06+00:00 | Vulnerability · Source |
| CVE-2024-21886 | redhat_vex | xorg-x11-server: heap buffer overflow in DisableDevice | fixed: 702 known affected: 9 | 2026-08-06T12:55:02+00:00 | Vulnerability · Source |
| CVE-2024-0229 | redhat_vex | xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access | fixed: 702 known affected: 9 | 2026-08-06T12:54:57+00:00 | Vulnerability · Source |
| CVE-2024-21885 | redhat_vex | xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent | fixed: 702 known affected: 9 | 2026-08-06T12:54:33+00:00 | Vulnerability · Source |
| CVE-2024-31083 | redhat_vex | xorg-x11-server: Use-after-free in ProcRenderAddGlyphs | fixed: 758 known affected: 9 known not affected: 5 | 2026-08-06T12:54:16+00:00 | Vulnerability · Source |
| CVE-2023-6478 | redhat_vex | xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty | fixed: 720 known affected: 9 | 2026-08-06T12:53:25+00:00 | Vulnerability · Source |
| CVE-2025-27613 | redhat_vex | gitk: Git file creation flaw | fixed: 150 known affected: 32 | 2026-08-06T12:51:40+00:00 | Vulnerability · Source |
| CVE-2025-48367 | redhat_vex | redis: Redis Unauthenticated Denial of Service | fixed: 213 known affected: 6 known not affected: 42 | 2026-08-06T12:51:25+00:00 | Vulnerability · Source |
| CVE-2026-59930 | redhat_vex | mistune: Mistune: Same-page navigation redirection due to predictable heading IDs | known affected: 23 known not affected: 1 under investigation: 1 | 2026-08-06T12:51:14+00:00 | Vulnerability · Source |
| CVE-2025-49809 | redhat_vex | mtr: From CVEorg collector | known affected: 4 known not affected: 6 | 2026-08-06T12:44:39+00:00 | Vulnerability · Source |
| CVE-2026-58203 | redhat_vex | pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size | known affected: 45 known not affected: 7 | 2026-08-06T12:41:49+00:00 | Vulnerability · Source |
| CVE-2026-11527 | redhat_vex | Config-Inifiles: Config::IniFiles: OS command injection and file overwrite via untrusted file argument | known not affected: 1 | 2026-08-06T12:41:46+00:00 | Vulnerability · Source |
| CVE-2026-15788 | redhat_vex | github.com/moby/buildkit: BuildKit: Information Disclosure via Improper Handling of NTFS Directory Junctions | fixed: 10 | 2026-08-06T12:41:35+00:00 | Vulnerability · Source |
| CVE-2026-64573 | redhat_vex | kernel: Bluetooth: qca: fix NVM tag length underflow in TLV parser | known not affected: 274 | 2026-08-06T12:41:26+00:00 | Vulnerability · Source |
| CVE-2026-67296 | redhat_vex | FreeRDP: FreeRDP: Denial of Service due to RDPEI message processing | known affected: 26 known not affected: 5 | 2026-08-06T12:41:21+00:00 | Vulnerability · Source |
| CVE-2026-67303 | redhat_vex | FreeRDP: FreeRDP: Denial of Service via unsupported serial device control request | known affected: 31 | 2026-08-06T12:41:16+00:00 | Vulnerability · Source |
| CVE-2023-6377 | redhat_vex | xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions | fixed: 720 known affected: 9 | 2026-08-06T12:40:43+00:00 | Vulnerability · Source |
| CVE-2024-31080 | redhat_vex | xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents | fixed: 758 known affected: 9 known not affected: 5 | 2026-08-06T12:40:11+00:00 | Vulnerability · Source |
| CVE-2025-26240 | redhat_vex | python-pdfkit: python-pdfkit: Arbitrary Code Execution and Information Disclosure | known not affected: 1 | 2026-08-06T12:39:28+00:00 | Vulnerability · Source |
| CVE-2024-9632 | redhat_vex | xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability | fixed: 663 known affected: 19 | 2026-08-06T12:39:12+00:00 | Vulnerability · Source |
| CVE-2026-64569 | redhat_vex | kernel: mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n | known affected: 232 known not affected: 42 | 2026-08-06T12:35:45+00:00 | Vulnerability · Source |
| CVE-2026-53689 | redhat_vex | libnfs: libnfs: Information disclosure and data corruption via crafted NFS server connection | known not affected: 1 | 2026-08-06T12:28:46+00:00 | Vulnerability · Source |
| CVE-2025-57803 | redhat_vex | imagemagick: ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow | fixed: 51 known affected: 7 | 2026-08-06T12:10:05+00:00 | Vulnerability · Source |
| CVE-2026-67305 | redhat_vex | FreeRDP: FreeRDP Windows Client: Remote Code Execution via Heap Buffer Overflow in Clipboard Processing | known not affected: 31 | 2026-08-06T12:08:20+00:00 | Vulnerability · Source |
| CVE-2026-68579 | redhat_vex | FreeRDP: FreeRDP: Arbitrary Code Execution via Heap Overflow in Clipboard Processing | known not affected: 31 | 2026-08-06T12:06:45+00:00 | Vulnerability · Source |
| CVE-2023-3384 | redhat_vex | quay: stored cross site scripting | fixed: 10 | 2026-08-06T11:23:56+00:00 | Vulnerability · Source |
| CVE-2025-8177 | redhat_vex | libtiff: LibTIFF Buffer Overflow | fixed: 4 known not affected: 61 | 2026-08-06T11:23:50+00:00 | Vulnerability · Source |