VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
309740 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-113657 | redhat_vex | sanitize-html: sanitize-html: arbitrary script execution via namespace-prefixed SVG animation elements | known affected: 17 | 2026-10-20T21:08:10+00:00 | Vulnerability · Source |
| CVE-2026-107890 | redhat_vex | cups: cups: Denial of Service via repeated IPP group tags | fixed: 25 known affected: 40 | 2026-10-20T21:08:09+00:00 | Vulnerability · Source |
| CVE-2026-107886 | redhat_vex | cups: cups: Denial of Service via double-free in printer class management | fixed: 25 known affected: 34 known not affected: 6 | 2026-10-20T21:08:09+00:00 | Vulnerability · Source |
| CVE-2026-107885 | redhat_vex | cups: cups: Denial of Service via improper job submission timeout handling | fixed: 25 known affected: 40 | 2026-10-20T21:08:06+00:00 | Vulnerability · Source |
| CVE-2026-110688 | redhat_vex | perl-Cpanel-JSON-XS: Quadratic CPU usage in incr_parse | known not affected: 1 | 2026-10-20T21:08:03+00:00 | Vulnerability · Source |
| CVE-2026-110686 | redhat_vex | perl-Cpanel-JSON-XS: Use-after-free in decode_hv filter callbacks | known not affected: 1 | 2026-10-20T21:08:03+00:00 | Vulnerability · Source |
| CVE-2026-110685 | redhat_vex | perl-Cpanel-JSON-XS: Memory leak in decode_tag when THAW method dies | known not affected: 1 | 2026-10-20T21:08:03+00:00 | Vulnerability · Source |
| CVE-2026-110684 | redhat_vex | perl-Cpanel-JSON-XS: Memory leak in encode_stringify when encoding overloaded objects | known not affected: 1 | 2026-10-20T21:08:02+00:00 | Vulnerability · Source |
| CVE-2026-110678 | redhat_vex | perl-Cpanel-JSON-XS: Memory exhaustion in incr_parse bypasses max_size | known not affected: 1 | 2026-10-20T21:08:02+00:00 | Vulnerability · Source |
| CVE-2026-110677 | redhat_vex | perl-Cpanel-JSON-XS: Memory leak in decode_hv under dupkeys_as_arrayref | known not affected: 1 | 2026-10-20T21:08:02+00:00 | Vulnerability · Source |
| CVE-2026-110675 | redhat_vex | perl-Cpanel-JSON-XS: Acceptance of malformed UTF-8 in bare hash keys | known not affected: 1 | 2026-10-20T21:08:01+00:00 | Vulnerability · Source |
| CVE-2026-110674 | redhat_vex | perl-Cpanel-JSON-XS: Type confusion via duplicate non-ASCII bare keys | known not affected: 1 | 2026-10-20T21:08:00+00:00 | Vulnerability · Source |
| CVE-2026-113386 | redhat_vex | roundcubemail: roundcubemail: Arbitrary IMAP command execution via CRLF injection in the _uid parameter | known not affected: 1 | 2026-10-20T21:07:59+00:00 | Vulnerability · Source |
| CVE-2026-107888 | redhat_vex | cups: CUPS: Denial of Service via deleted temporary printer | fixed: 25 known affected: 40 | 2026-10-20T21:07:59+00:00 | Vulnerability · Source |
| CVE-2026-113356 | redhat_vex | dokuwiki: dokuwiki: Arbitrary code execution via insecure draft deserialization | known not affected: 1 | 2026-10-20T21:07:58+00:00 | Vulnerability · Source |
| CVE-2026-112897 | redhat_vex | pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding | known affected: 89 known not affected: 5 | 2026-10-20T21:07:55+00:00 | Vulnerability · Source |
| CVE-2026-112896 | redhat_vex | pillow: Pillow: Denial of Service via out-of-bounds read in TIFF encoder | known affected: 89 known not affected: 5 | 2026-10-20T21:07:54+00:00 | Vulnerability · Source |
| CVE-2026-112895 | redhat_vex | pillow: pillow: Denial of service via crafted PDF during append operations | known affected: 89 known not affected: 5 | 2026-10-20T21:07:51+00:00 | Vulnerability · Source |
| CVE-2026-112893 | redhat_vex | pillow: Pillow: Denial of Service via invalid pointer free during font rendering | known affected: 89 known not affected: 5 | 2026-10-20T21:07:49+00:00 | Vulnerability · Source |
| CVE-2026-112894 | redhat_vex | pillow: pillow: Denial of Service via crafted multi-frame image conversion | known affected: 89 known not affected: 5 | 2026-10-20T21:07:49+00:00 | Vulnerability · Source |
| CVE-2026-112404 | redhat_vex | pillow: Pillow: Denial of Service via out-of-bounds read in TIFF decoding | known affected: 89 known not affected: 5 | 2026-10-20T21:07:44+00:00 | Vulnerability · Source |
| CVE-2026-112405 | redhat_vex | pillow: Pillow: Denial of Service via null pointer dereference in Image.merge() | known affected: 89 known not affected: 5 | 2026-10-20T21:07:44+00:00 | Vulnerability · Source |
| CVE-2026-112402 | redhat_vex | pillow: pillow: Denial of service via double free during image transformation | known affected: 89 known not affected: 5 | 2026-10-20T21:07:41+00:00 | Vulnerability · Source |
| CVE-2026-112400 | redhat_vex | pillow: pillow: Denial of Service via memory exhaustion from crafted GIF image | known affected: 89 known not affected: 5 | 2026-10-20T21:07:39+00:00 | Vulnerability · Source |
| CVE-2026-112399 | redhat_vex | pillow: pillow: Denial of service via crafted APNG image | known affected: 89 known not affected: 5 | 2026-10-20T21:07:37+00:00 | Vulnerability · Source |
| CVE-2026-112397 | redhat_vex | pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images | known affected: 89 known not affected: 5 | 2026-10-20T21:07:34+00:00 | Vulnerability · Source |
| CVE-2026-112392 | redhat_vex | pillow: pillow: Denial of Service via zero-size images in rank filters | known affected: 89 known not affected: 5 | 2026-10-20T21:07:31+00:00 | Vulnerability · Source |
| CVE-2026-112391 | redhat_vex | pillow: Pillow: Denial of Service via unbounded recursion in PDF parser | known affected: 89 known not affected: 5 | 2026-10-20T21:07:30+00:00 | Vulnerability · Source |
| CVE-2026-112390 | redhat_vex | pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing | known affected: 89 known not affected: 5 | 2026-10-20T21:07:27+00:00 | Vulnerability · Source |
| CVE-2026-112258 | redhat_vex | gimp: gimp: use-after-free in XCF loader via PROP_LINKED and PROP_SELECTION on channels | known affected: 7 known not affected: 29 | 2026-10-20T21:07:26+00:00 | Vulnerability · Source |
| CVE-2026-111756 | redhat_vex | follow-redirects: follow-redirects: Information disclosure via array-formatted headers during cross-origin redirects | known affected: 5 | 2026-10-20T21:07:25+00:00 | Vulnerability · Source |
| CVE-2025-12385 | redhat_vex | qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of <img> tag size in Text component parser | known affected: 21 | 2026-10-20T21:07:23+00:00 | Vulnerability · Source |
| CVE-2026-86922 | redhat_vex | webkitgtk: WebKitGTK: Arbitrary code execution via type confusion | known affected: 16 | 2026-10-20T21:07:22+00:00 | Vulnerability · Source |
| CVE-2026-53995 | redhat_vex | mlflow: mlflow: Arbitrary file write via FileStore path traversal | known affected: 22 | 2026-10-20T21:07:22+00:00 | Vulnerability · Source |
| CVE-2026-110681 | redhat_vex | perl-Cpanel-JSON-XS: Use of parent interpreter scalars in cloned threads | known not affected: 1 | 2026-10-20T20:59:08+00:00 | Vulnerability · Source |
| CVE-2026-112273 | redhat_vex | libtins: Heap Out-of-Bounds Read via DNS::compose_name | known not affected: 1 | 2026-10-20T20:59:05+00:00 | Vulnerability · Source |
| CVE-2026-110673 | redhat_vex | perl-Cpanel-JSON-XS: Stack exhaustion via nested tagged values under allow_tags | known not affected: 1 | 2026-10-20T20:59:03+00:00 | Vulnerability · Source |
| CVE-2026-110676 | redhat_vex | perl-Cpanel-JSON-XS: Memory and CPU exhaustion via allow_bignum exponent encoding | known not affected: 1 | 2026-10-20T20:59:03+00:00 | Vulnerability · Source |
| CVE-2026-110672 | redhat_vex | perl-Cpanel-JSON-XS: Memory leak in decode_hv when rejecting objects | known not affected: 1 | 2026-10-20T20:59:02+00:00 | Vulnerability · Source |
| CVE-2026-98606 | redhat_vex | kernel: drm/virtio: release the GEM object on virtio_gpu_vram_create() errors | known affected: 235 known not affected: 42 | 2026-10-20T20:59:00+00:00 | Vulnerability · Source |
| CVE-2026-112368 | redhat_vex | php-pecl-mongodb: php-pecl-mongodb: Denial of Service via uncontrolled recursion during BSON decoding | known not affected: 1 | 2026-10-20T20:59:00+00:00 | Vulnerability · Source |
| CVE-2026-112366 | redhat_vex | picomatch: picomatch: Denial of Service via single-branch repeated extglob patterns | known affected: 5 known not affected: 6 | 2026-10-20T20:58:56+00:00 | Vulnerability · Source |
| CVE-2026-112307 | redhat_vex | sqlparse: sqlparse: Arbitrary code execution via unescaped PHP output formatting | known affected: 47 known not affected: 10 | 2026-10-20T20:58:53+00:00 | Vulnerability · Source |
| CVE-2026-112261 | redhat_vex | gimp: gimp: use-after-free in XCF loader via PROP_SELECTED_PATH | known affected: 7 known not affected: 29 | 2026-10-20T20:58:50+00:00 | Vulnerability · Source |
| CVE-2026-112260 | redhat_vex | gimp: gimp: heap out-of-bounds read in XCF text-layer parasite parsing | known affected: 7 known not affected: 29 | 2026-10-20T20:58:49+00:00 | Vulnerability · Source |
| CVE-2026-112257 | redhat_vex | gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader (load_resource_1033) | known affected: 36 | 2026-10-20T20:58:41+00:00 | Vulnerability · Source |
| CVE-2026-112177 | redhat_vex | ghostscript: Reintroduction of .charkeys -dSAFER bypass in RHEL 8 | known affected: 9 known not affected: 30 | 2026-10-20T20:58:39+00:00 | Vulnerability · Source |
| CVE-2026-112094 | redhat_vex | mxml: mxml: memory corruption via use-after-free in mxml_load_data | known not affected: 1 | 2026-10-20T20:58:38+00:00 | Vulnerability · Source |
| CVE-2026-112075 | redhat_vex | unsloth: unsloth: Arbitrary code execution via unsafe class selection | known affected: 6 known not affected: 1 | 2026-10-20T20:58:37+00:00 | Vulnerability · Source |
| CVE-2026-111759 | redhat_vex | markdown-it: markdown-it: Denial of Service via mismatched quote parsing | known affected: 13 known not affected: 2 | 2026-10-20T20:58:34+00:00 | Vulnerability · Source |