VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
317795 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-33818 | redhat_vex | encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal | fixed: 8584 known affected: 263 known not affected: 4876 | 2026-11-10T11:39:36+00:00 | Vulnerability · Source |
| CVE-2026-102702 | redhat_vex | xen: Xen: Memory corruption via cache flush on read-only grant mappings | known not affected: 1 | 2026-11-10T11:35:15+00:00 | Vulnerability · Source |
| CVE-2026-102700 | redhat_vex | xen: xen: Denial of Service via page reference leak in cache flush error path | known not affected: 1 | 2026-11-10T11:35:11+00:00 | Vulnerability · Source |
| CVE-2026-112061 | redhat_vex | rtmpdump: rtmpdump: Denial of Service via heap-based out-of-bounds read in AMFProp_Decode | known not affected: 1 | 2026-11-10T11:35:11+00:00 | Vulnerability · Source |
| CVE-2026-116731 | redhat_vex | furnace: Furnace: Denial of Service via out-of-bounds write during FamiTracker module parsing | known not affected: 1 | 2026-11-10T11:35:11+00:00 | Vulnerability · Source |
| CVE-2026-116730 | redhat_vex | furnace: Furnace: Denial of Service via crafted FamiTracker module import | known not affected: 1 | 2026-11-10T11:35:11+00:00 | Vulnerability · Source |
| CVE-2026-112060 | redhat_vex | rtmpdump: rtmpdump: Heap memory corruption via improper AMF3 decoding | known not affected: 1 | 2026-11-10T11:35:11+00:00 | Vulnerability · Source |
| CVE-2026-111943 | redhat_vex | crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates | fixed: 7963 known affected: 223 known not affected: 2233 | 2026-11-10T11:35:10+00:00 | Vulnerability · Source |
| CVE-2026-125709 | redhat_vex | libstdc++: overflow leaves streambuf in inconsistent state on I/O error. | known affected: 203 | 2026-11-10T11:23:17+00:00 | Vulnerability · Source |
| CVE-2026-125707 | redhat_vex | gst-plugins-bad: gst-plugins-bad: off-by-one write in MXF demuxer temporal offset table | known affected: 21 | 2026-11-10T11:23:13+00:00 | Vulnerability · Source |
| CVE-2026-125706 | redhat_vex | gst-plugins-bad: gst-plugins-bad: missing bounds checks in MPEG PS PES header parsing | known affected: 21 | 2026-11-10T11:23:08+00:00 | Vulnerability · Source |
| CVE-2026-79607 | redhat_vex | xen: xen: Denial of Service via Xenstore live update state corruption | known not affected: 1 | 2026-11-10T11:23:08+00:00 | Vulnerability · Source |
| CVE-2026-37236 | redhat_vex | github.com/grpc-ecosystem/grpc-gateway: github.com/grpc-ecosystem/grpc-gateway/v2: grpc-gateway: Access control bypass via X-HTTP-Method-Override header | fixed: 8 known affected: 54 known not affected: 348 | 2026-11-10T11:22:59+00:00 | Vulnerability · Source |
| CVE-2026-125712 | redhat_vex | gst-plugins-base: gst-plugins-base: Missing bounds checks in RTCP SDES packet parsing | known affected: 21 | 2026-11-10T11:22:56+00:00 | Vulnerability · Source |
| CVE-2026-83589 | redhat_vex | oauth-proxy: Open Redirect via /\ and /\t Bypass in Post-Login Redirect | fixed: 33 known not affected: 5390 | 2026-11-10T11:22:50+00:00 | Vulnerability · Source |
| CVE-2026-76641 | redhat_vex | expat: Expat: Denial of Service via XML external entity parsing | fixed: 7 known affected: 27 known not affected: 14 under investigation: 1 | 2026-11-10T11:22:47+00:00 | Vulnerability · Source |
| CVE-2026-56862 | redhat_vex | crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages | fixed: 8708 known affected: 182 known not affected: 5260 | 2026-11-10T11:22:45+00:00 | Vulnerability · Source |
| CVE-2026-56860 | redhat_vex | net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution | fixed: 8799 known affected: 182 known not affected: 5343 | 2026-11-10T11:22:39+00:00 | Vulnerability · Source |
| CVE-2026-56853 | redhat_vex | net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service | fixed: 3305 known affected: 178 known not affected: 3564 | 2026-11-10T11:22:35+00:00 | Vulnerability · Source |
| CVE-2026-7017 | redhat_vex | perl-HTTP-Tiny: HTTP::Tiny: Information disclosure via cross-origin redirect of credential headers | known affected: 7 | 2026-11-10T11:22:30+00:00 | Vulnerability · Source |
| CVE-2026-32280 | redhat_vex | crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building | fixed: 4792 known affected: 124 known not affected: 7585 | 2026-11-10T11:22:30+00:00 | Vulnerability · Source |
| CVE-2026-13697 | redhat_vex | undici: undici: Information disclosure and Denial of Service via malformed Cache-Control directives | fixed: 59 known affected: 21 known not affected: 485 | 2026-11-10T11:22:30+00:00 | Vulnerability · Source |
| CVE-2026-101760 | redhat_vex | mysql: mysql: Denial of service in InnoDB | known affected: 33 known not affected: 2 | 2026-11-10T11:13:46+00:00 | Vulnerability · Source |
| CVE-2026-101724 | redhat_vex | mysql: mysql: Denial of Service in InnoDB component | known affected: 33 known not affected: 2 | 2026-11-10T11:13:43+00:00 | Vulnerability · Source |
| CVE-2026-101747 | redhat_vex | mysql: mysql: Denial of Service in InnoDB | known affected: 33 known not affected: 2 | 2026-11-10T11:13:42+00:00 | Vulnerability · Source |
| CVE-2026-101627 | redhat_vex | mysql: mysql: Denial of Service in InnoDB component | known affected: 33 known not affected: 2 | 2026-11-10T11:13:35+00:00 | Vulnerability · Source |
| CVE-2026-101624 | redhat_vex | mysql: mysql: Denial of service via InnoDB storage engine | known affected: 33 known not affected: 2 | 2026-11-10T11:13:32+00:00 | Vulnerability · Source |
| CVE-2026-101622 | redhat_vex | mysql: mysql: Denial of Service in InnoDB | known affected: 33 known not affected: 2 | 2026-11-10T11:13:30+00:00 | Vulnerability · Source |
| CVE-2026-101621 | redhat_vex | mysql: mysql: Denial of Service in InnoDB | known affected: 33 known not affected: 2 | 2026-11-10T11:13:25+00:00 | Vulnerability · Source |
| CVE-2026-101619 | redhat_vex | mysql: mysql: Denial of Service in InnoDB | known affected: 33 known not affected: 2 | 2026-11-10T11:13:22+00:00 | Vulnerability · Source |
| CVE-2026-101618 | redhat_vex | mysql: mysql: Denial of Service in InnoDB | known affected: 33 known not affected: 2 | 2026-11-10T11:13:17+00:00 | Vulnerability · Source |
| CVE-2026-101617 | redhat_vex | mysql: mysql: Denial of Service in InnoDB | known affected: 33 known not affected: 2 | 2026-11-10T11:13:15+00:00 | Vulnerability · Source |
| CVE-2026-101615 | redhat_vex | mysql: mysql: Denial of service in InnoDB | known affected: 33 known not affected: 2 | 2026-11-10T11:13:10+00:00 | Vulnerability · Source |
| CVE-2026-101614 | redhat_vex | mysql: mysql: Denial of Service in InnoDB component | known affected: 33 known not affected: 2 | 2026-11-10T11:13:07+00:00 | Vulnerability · Source |
| CVE-2026-112900 | redhat_vex | pillow: Pillow: Argument Injection in Ghostscript call, potentially leading into RCE | fixed: 62 known affected: 59 known not affected: 21 | 2026-11-10T11:13:05+00:00 | Vulnerability · Source |
| CVE-2026-103241 | redhat_vex | vllm: vLLM: Denial of Service via crafted input to Gemma4UnifiedParser | known affected: 23 known not affected: 9 | 2026-11-10T11:12:49+00:00 | Vulnerability · Source |
| CVE-2026-101611 | redhat_vex | mysql: mysql: Denial of Service in InnoDB | known affected: 33 known not affected: 2 | 2026-11-10T11:12:46+00:00 | Vulnerability · Source |
| CVE-2025-68121 | redhat_vex | crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption | fixed: 8465 known affected: 189 known not affected: 9036 under investigation: 37 | 2026-11-10T11:12:46+00:00 | Vulnerability · Source |
| CVE-2026-101612 | redhat_vex | mysql: mysql: Denial of Service in InnoDB component | known affected: 33 known not affected: 2 | 2026-11-10T11:12:46+00:00 | Vulnerability · Source |
| CVE-2026-101609 | redhat_vex | mysql: mysql: Denial of service in InnoDB | known affected: 33 known not affected: 2 | 2026-11-10T11:12:46+00:00 | Vulnerability · Source |
| CVE-2026-125703 | redhat_vex | gst-plugins-bad: gst-plugins-bad: Bounds check errors in MXF VANC packet handling | known affected: 21 | 2026-11-10T10:43:43+00:00 | Vulnerability · Source |
| CVE-2026-125672 | redhat_vex | cockpit: cockpit-storaged: Tang keyserver address from an untrusted LUKS header clevis token reaches curl's argument vector as an option | known affected: 25 | 2026-11-10T10:43:40+00:00 | Vulnerability · Source |
| CVE-2026-122054 | redhat_vex | glibc: glibc: Denial of Service via crafted BIG-HKSCS input conversion | known affected: 454 known not affected: 1 under investigation: 3 | 2026-11-10T10:43:25+00:00 | Vulnerability · Source |
| CVE-2026-114121 | redhat_vex | electron: Electron: Unauthorized application launch via external protocol URL misattribution | known affected: 4 | 2026-11-10T10:43:22+00:00 | Vulnerability · Source |
| CVE-2026-125704 | redhat_vex | gstreamer: gstreamer: Use-after-free in GStreamer core buffer value deserialization | known affected: 11 | 2026-11-10T10:43:21+00:00 | Vulnerability · Source |
| CVE-2026-102485 | redhat_vex | ntpsec: ntpsec: Denial of Service via out-of-bounds read in Motorola Oncore driver | known not affected: 1 | 2026-11-10T10:43:20+00:00 | Vulnerability · Source |
| CVE-2026-113798 | redhat_vex | electron: Electron: Unauthorized pointer lock permission grant via cross-origin iframes | known affected: 4 | 2026-11-10T10:43:20+00:00 | Vulnerability · Source |
| CVE-2026-102484 | redhat_vex | ntpsec: ntpsec: Denial of Service via excessive JJY time replies | known not affected: 1 | 2026-11-10T10:43:20+00:00 | Vulnerability · Source |
| CVE-2026-116591 | redhat_vex | github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input | fixed: 188 known affected: 487 known not affected: 216 | 2026-11-10T10:43:14+00:00 | Vulnerability · Source |
| CVE-2026-102483 | redhat_vex | ntpsec: ntpsec: Denial of Service via excessive NTS Cookie Placeholder extension fields | known not affected: 1 | 2026-11-10T10:43:06+00:00 | Vulnerability · Source |