VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304238 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-103262 | redhat_vex | tornado: Tornado: Denial of Service via decompression bomb in CurlAsyncHTTPClient | known affected: 66 known not affected: 5 | 2026-10-02T14:40:14+00:00 | Vulnerability · Source |
| CVE-2026-90440 | redhat_vex | thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer | known affected: 13 | 2026-10-02T14:39:59+00:00 | Vulnerability · Source |
| CVE-2026-86537 | redhat_vex | thrift: thrift: Denial of Service via infinite loop in D language bindings | known affected: 13 | 2026-10-02T14:39:54+00:00 | Vulnerability · Source |
| CVE-2026-86535 | redhat_vex | thrift: thrift: Denial of Service via TJSONProtocol in Node.js bindings | known affected: 1 | 2026-10-02T14:39:48+00:00 | Vulnerability · Source |
| CVE-2026-85088 | redhat_vex | thrift: thrift: Man-in-the-middle attacks via improper certificate validation | known affected: 13 | 2026-10-02T14:39:46+00:00 | Vulnerability · Source |
| CVE-2026-83745 | redhat_vex | thrift: thrift: Denial of Service via excessive memory allocation in WebSocket transport | known affected: 13 | 2026-10-02T14:39:28+00:00 | Vulnerability · Source |
| CVE-2026-82417 | redhat_vex | qs: qs: Denial of Service via improper validation in stringify function | fixed: 38 known affected: 243 known not affected: 2409 | 2026-10-02T14:39:22+00:00 | Vulnerability · Source |
| CVE-2026-73646 | redhat_vex | postcss: PostCSS: Information disclosure via path traversal in source map auto-loading | fixed: 29 known affected: 37 known not affected: 741 | 2026-10-02T14:39:13+00:00 | Vulnerability · Source |
| CVE-2026-73089 | redhat_vex | browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results | fixed: 118 known affected: 37 known not affected: 1218 | 2026-10-02T14:39:04+00:00 | Vulnerability · Source |
| CVE-2026-66858 | redhat_vex | thrift: Apache Thrift: Denial of Service via deeply nested unknown fields | known affected: 13 | 2026-10-02T14:38:53+00:00 | Vulnerability · Source |
| CVE-2026-66837 | redhat_vex | thrift: thrift: Denial of Service via buffer overflow in PHP bindings | known affected: 13 | 2026-10-02T14:38:49+00:00 | Vulnerability · Source |
| CVE-2026-66054 | redhat_vex | thrift: thrift: Denial of Service via improper handling of compressed data | known affected: 13 | 2026-10-02T14:38:44+00:00 | Vulnerability · Source |
| CVE-2026-46600 | redhat_vex | golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing | fixed: 172 known affected: 50 known not affected: 1859 | 2026-10-02T14:38:20+00:00 | Vulnerability · Source |
| CVE-2026-40682 | redhat_vex | org.apache.opennlp/opennlp-tools: Apache OpenNLP: XML External Entity (XXE) vulnerability via crafted dictionary parsing | known affected: 2 known not affected: 6 | 2026-10-02T14:38:15+00:00 | Vulnerability · Source |
| CVE-2026-19693 | redhat_vex | extract-zip: extract-zip: Arbitrary file write via symlink in archive | known affected: 19 known not affected: 96 | 2026-10-02T14:38:07+00:00 | Vulnerability · Source |
| CVE-2026-17507 | redhat_vex | bouncycastle: Bouncy Castle: Denial of Service via improper leaf index validation in MLS | known not affected: 1 | 2026-10-02T14:38:06+00:00 | Vulnerability · Source |
| CVE-2026-94084 | redhat_vex | suricata: suricata: use-after-free in HTTP/2 response header inspection | known not affected: 1 | 2026-10-02T14:37:38+00:00 | Vulnerability · Source |
| CVE-2026-94638 | redhat_vex | thrift: Apache Thrift: Denial of Service via uncontrolled resource allocation in PHP bindings | known affected: 13 | 2026-10-02T14:30:04+00:00 | Vulnerability · Source |
| CVE-2026-96804 | redhat_vex | mlflow: MLflow: Arbitrary Code Execution via Insecure Deserialization | known affected: 18 known not affected: 4 | 2026-10-02T14:29:57+00:00 | Vulnerability · Source |
| CVE-2026-96277 | redhat_vex | thrift: thrift: Denial of Service via uncaught exception in Ruby bindings | known affected: 1 | 2026-10-02T14:29:51+00:00 | Vulnerability · Source |
| CVE-2026-95350 | redhat_vex | chromium-browser: Buffer overflow in ANGLE | known not affected: 1 | 2026-10-02T14:29:49+00:00 | Vulnerability · Source |
| CVE-2026-95349 | redhat_vex | chromium-browser: Buffer overflow in WebGL | known not affected: 1 | 2026-10-02T14:29:49+00:00 | Vulnerability · Source |
| CVE-2026-95357 | redhat_vex | chromium-browser: Out of bounds write in GPU | known not affected: 1 | 2026-10-02T14:29:49+00:00 | Vulnerability · Source |
| CVE-2026-95339 | redhat_vex | chromium-browser: Use after free in ServiceWorker | known not affected: 1 | 2026-10-02T14:29:48+00:00 | Vulnerability · Source |
| CVE-2026-95281 | redhat_vex | chromium-browser: Buffer overflow in ANGLE | known not affected: 1 | 2026-10-02T14:29:47+00:00 | Vulnerability · Source |
| CVE-2026-95313 | redhat_vex | chromium-browser: Use after free in Fullscreen | known not affected: 1 | 2026-10-02T14:29:47+00:00 | Vulnerability · Source |
| CVE-2026-94657 | redhat_vex | thrift: thrift: Denial of Service via improper resource allocation in JavaME bindings | known affected: 13 | 2026-10-02T14:29:45+00:00 | Vulnerability · Source |
| CVE-2026-94646 | redhat_vex | thrift: thrift: Denial of Service via prototype pollution in Node.js bindings | known affected: 1 | 2026-10-02T14:29:39+00:00 | Vulnerability · Source |
| CVE-2026-94422 | redhat_vex | xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape | known affected: 2 | 2026-10-02T14:29:37+00:00 | Vulnerability · Source |
| CVE-2026-94083 | redhat_vex | suricata: suricata: type confusion and invalid free in DoH2 protocol handling | known not affected: 1 | 2026-10-02T14:29:36+00:00 | Vulnerability · Source |
| CVE-2026-93393 | redhat_vex | mongo-c-driver: Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream | known not affected: 1 | 2026-10-02T14:29:31+00:00 | Vulnerability · Source |
| CVE-2026-91949 | redhat_vex | freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass | fixed: 130 known not affected: 24 | 2026-10-02T14:18:37+00:00 | Vulnerability · Source |
| CVE-2026-95512 | redhat_vex | freetype: FreeType: Denial of Service via repeated subroutine allocations in CID font loader | fixed: 7 known affected: 271 | 2026-10-02T14:00:48+00:00 | Vulnerability · Source |
| CVE-2026-17084 | redhat_vex | python: Python stringprep module: Incorrect domain name processing breaks IDNA interoperability | fixed: 58 known not affected: 1 | 2026-10-02T14:00:40+00:00 | Vulnerability · Source |
| CVE-2026-93981 | redhat_vex | hono: hono/jsx: Cross-Site Scripting via Unescaped Strings | fixed: 12 known affected: 8 | 2026-10-02T14:00:33+00:00 | Vulnerability · Source |
| CVE-2026-79705 | redhat_vex | podman: buildah: buildah/copier: Directory escape via crafted tar symlinks when used outside Buildah by non-root callers | fixed: 11 known affected: 65 known not affected: 1 | 2026-10-02T14:00:32+00:00 | Vulnerability · Source |
| CVE-2026-101903 | redhat_vex | axios: Axios: Denial of Service via malformed data URLs | fixed: 9 known not affected: 1 | 2026-10-02T14:00:30+00:00 | Vulnerability · Source |
| CVE-2026-94635 | redhat_vex | thrift: thrift: Denial of Service via improper length parameter handling in Lua bindings | fixed: 13 known affected: 12 | 2026-10-02T14:00:23+00:00 | Vulnerability · Source |
| CVE-2026-94633 | redhat_vex | thrift: thrift: Denial of Service via excessive memory allocation in Dart bindings | fixed: 13 known affected: 12 | 2026-10-02T14:00:21+00:00 | Vulnerability · Source |
| CVE-2026-93926 | redhat_vex | thrift: thrift: Denial of Service via memory leak in THeaderTransport | fixed: 13 known affected: 12 | 2026-10-02T14:00:19+00:00 | Vulnerability · Source |
| CVE-2026-93925 | redhat_vex | thrift: thrift: Denial of Service via stack-based buffer overflow in THeaderProtocol | fixed: 13 known affected: 12 | 2026-10-02T14:00:15+00:00 | Vulnerability · Source |
| CVE-2026-85494 | redhat_vex | thrift: thrift: Denial of Service via improper message handling in language bindings | fixed: 13 known affected: 12 | 2026-10-02T14:00:12+00:00 | Vulnerability · Source |
| CVE-2026-85086 | redhat_vex | thrift: thrift: Information disclosure via improper certificate validation in Perl bindings | fixed: 13 known affected: 12 | 2026-10-02T14:00:06+00:00 | Vulnerability · Source |
| CVE-2026-82459 | redhat_vex | thrift: thrift: Denial of Service via integer underflow in THeaderTransport | fixed: 13 known affected: 12 | 2026-10-02T14:00:05+00:00 | Vulnerability · Source |
| CVE-2026-81871 | redhat_vex | go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration | fixed: 56 known affected: 70 known not affected: 3 | 2026-10-02T13:59:48+00:00 | Vulnerability · Source |
| CVE-2026-88265 | redhat_vex | crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown | fixed: 7 known affected: 11 | 2026-10-02T13:59:45+00:00 | Vulnerability · Source |
| CVE-2026-84233 | redhat_vex | rpm: Command Execution via Macro Expansion in `rpmuncompress -x` for Crafted `.gem` Filenames | fixed: 41 known affected: 17 known not affected: 52 | 2026-10-02T13:59:40+00:00 | Vulnerability · Source |
| CVE-2026-19617 | redhat_vex | libdm: lvm2: libdm: Denial of Service via uncontrolled recursion in config parser | fixed: 13 known affected: 62 known not affected: 12 | 2026-10-02T13:59:35+00:00 | Vulnerability · Source |
| CVE-2023-28320 | redhat_vex | curl: siglongjmp race condition may lead to crash | known affected: 8 known not affected: 15 | 2026-10-02T13:38:44+00:00 | Vulnerability · Source |
| CVE-2026-73637 | redhat_vex | httpd: httpd: Authentication state corruption via concurrent Digest authentication requests | fixed: 23 known affected: 47 known not affected: 6 | 2026-10-02T12:05:50+00:00 | Vulnerability · Source |