VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294033 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-2673 | redhat_vex | openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group | fixed: 6 known affected: 14 known not affected: 30 | 2026-07-22T15:03:03+00:00 | Vulnerability · Source |
| CVE-2026-55956 | redhat_vex | tomcat: Apache Tomcat: Improper Authorization Allows Security Constraint Bypass | fixed: 72 known affected: 78 known not affected: 57 | 2026-07-22T15:02:54+00:00 | Vulnerability · Source |
| CVE-2026-46215 | redhat_vex | kernel: drm: Set old handle to NULL before prime swap in change_handle | fixed: 612 known affected: 22 known not affected: 90 | 2026-07-22T14:41:59+00:00 | Vulnerability · Source |
| CVE-2018-3149 | redhat_vex | OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177) | fixed: 1095 known affected: 8 | 2026-07-22T14:16:29+00:00 | Vulnerability · Source |
| CVE-2026-16560 | redhat_vex | 389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued RDN | known affected: 33 | 2026-07-22T14:06:31+00:00 | Vulnerability · Source |
| CVE-2026-13036 | redhat_vex | chromium-browser: chromium-browser: Use after free in Blink | known not affected: 1 | 2026-07-22T13:56:15+00:00 | Vulnerability · Source |
| CVE-2026-13021 | redhat_vex | chromium-browser: chromium-browser: Inappropriate implementation in DeviceBoundSessionCredentials | known not affected: 1 | 2026-07-22T13:20:42+00:00 | Vulnerability · Source |
| CVE-2026-13037 | redhat_vex | chromium-browser: chromium-browser: Use after free in WebView | known not affected: 1 | 2026-07-22T13:20:40+00:00 | Vulnerability · Source |
| CVE-2026-13034 | redhat_vex | chromium-browser: chromium-browser: Inappropriate implementation in Passwords | known not affected: 1 | 2026-07-22T13:20:37+00:00 | Vulnerability · Source |
| CVE-2026-13022 | redhat_vex | Chromium-browser: Chromium Autofill: Information disclosure via crafted HTML page after renderer compromise | known not affected: 1 | 2026-07-22T13:15:48+00:00 | Vulnerability · Source |
| CVE-2026-44187 | redhat_vex | ansible-lightspeed: Ansible Lightspeed extension for Visual Studio Code: Information disclosure of Google Gemini API key | known not affected: 3 | 2026-07-22T13:13:37+00:00 | Vulnerability · Source |
| CVE-2026-44192 | redhat_vex | ansible-lightspeed: Ansible Lightspeed MCP Server: Remote Code Execution and Data Exfiltration via Path Traversal | known not affected: 3 | 2026-07-22T13:12:55+00:00 | Vulnerability · Source |
| CVE-2026-44189 | redhat_vex | ansible-lightspeed: Visual Studio Code Ansible Lightspeed Extension: Arbitrary Code Execution via Malicious Playbook Filename | known not affected: 3 | 2026-07-22T13:12:42+00:00 | Vulnerability · Source |
| CVE-2026-44191 | redhat_vex | ansible-lightspeed: Visual Studio Code Ansible Lightspeed extension: Remote Code Execution via command injection in configuration settings | known not affected: 3 | 2026-07-22T13:12:40+00:00 | Vulnerability · Source |
| CVE-2026-44190 | redhat_vex | ansible-lightspeed: Ansible Lightspeed Visual Studio Code extension: Arbitrary code execution via command injection in activation script setting | known not affected: 3 | 2026-07-22T13:12:22+00:00 | Vulnerability · Source |
| CVE-2026-6722 | redhat_vex | php: php-soap: php-src: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability | fixed: 1718 known affected: 54 | 2026-07-22T13:08:47+00:00 | Vulnerability · Source |
| CVE-2023-3390 | redhat_vex | kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests | fixed: 1306 known not affected: 43 | 2026-07-22T12:26:04+00:00 | Vulnerability · Source |
| CVE-2026-16317 | redhat_vex | s2n-tls: s2n-tls: Undetectable data loss via man-in-the-middle attack on TLS 1.3 records | known not affected: 1 | 2026-07-22T12:06:42+00:00 | Vulnerability · Source |
| CVE-2026-16544 | redhat_vex | awx: websocket EventConsumer missing authorization for inventory_update_events, project_update_events, and system_job_events allows cross-organization stdout disclosure | known affected: 2 | 2026-07-22T12:06:41+00:00 | Vulnerability · Source |
| CVE-2026-43078 | redhat_vex | kernel: crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl | known affected: 232 known not affected: 42 | 2026-07-22T11:56:14+00:00 | Vulnerability · Source |
| CVE-2026-47714 | redhat_vex | libheif: libheif: Denial of service and information disclosure via integer overflow in inline mask parsing | known not affected: 1 | 2026-07-22T11:41:07+00:00 | Vulnerability · Source |
| CVE-2026-45382 | redhat_vex | libde265: libde265: Denial of Service due to heap-buffer-overflow when processing malformed H.265 video | known not affected: 1 | 2026-07-22T11:40:59+00:00 | Vulnerability · Source |
| CVE-2026-47709 | redhat_vex | libheif: libheif: Denial of Service via malformed HEIF image | known not affected: 1 | 2026-07-22T11:36:19+00:00 | Vulnerability · Source |
| CVE-2026-47251 | redhat_vex | libheif: libheif: Denial of Service and information disclosure via crafted HEIF file | known not affected: 1 | 2026-07-22T11:36:17+00:00 | Vulnerability · Source |
| CVE-2026-12701 | redhat_vex | pulpcore: pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport | fixed: 32 known affected: 2 known not affected: 590 | 2026-07-22T11:36:06+00:00 | Vulnerability · Source |
| CVE-2026-47667 | redhat_vex | CImg: CImg Library: Denial of service due to unbounded memory allocation in image file processing. | known not affected: 1 | 2026-07-22T11:20:38+00:00 | Vulnerability · Source |
| CVE-2026-16318 | redhat_vex | s2n-tls: s2n-tls: Denial of Service due to memory leak in QUIC transport parameters handler | known not affected: 1 | 2026-07-22T11:15:49+00:00 | Vulnerability · Source |
| CVE-2026-41238 | redhat_vex | DOMPurify: DOMPurify: Cross-Site Scripting bypass via prototype pollution | known affected: 77 known not affected: 1 | 2026-07-22T07:56:32+00:00 | Vulnerability · Source |
| CVE-2026-41239 | redhat_vex | DOMPurify: Vue 2: DOMPurify: Cross-site scripting due to incomplete sanitization of template expressions | known affected: 77 known not affected: 1 | 2026-07-22T07:41:15+00:00 | Vulnerability · Source |
| CVE-2026-63976 | redhat_vex | kernel: Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success | known affected: 232 known not affected: 42 | 2026-07-22T07:06:14+00:00 | Vulnerability · Source |
| CVE-2026-63864 | redhat_vex | kernel: bpf: Propagate error from visit_tailcall_insn | known affected: 76 known not affected: 198 | 2026-07-22T07:06:12+00:00 | Vulnerability · Source |
| CVE-2026-64005 | redhat_vex | kernel: net/smc: Do not re-initialize smc hashtables | known affected: 232 known not affected: 42 | 2026-07-22T07:06:10+00:00 | Vulnerability · Source |
| CVE-2026-63995 | redhat_vex | kernel: ethtool: cmis: validate start_cmd_payload_size from module | known affected: 184 known not affected: 90 | 2026-07-22T07:06:08+00:00 | Vulnerability · Source |
| CVE-2026-63985 | redhat_vex | kernel: ethtool: eeprom: add more safeties to EEPROM Netlink fallback | known affected: 232 known not affected: 42 | 2026-07-22T07:06:05+00:00 | Vulnerability · Source |
| CVE-2026-63942 | redhat_vex | kernel: parport: Fix race between port and client registration | known affected: 246 known not affected: 28 | 2026-07-22T07:06:02+00:00 | Vulnerability · Source |
| CVE-2026-63977 | redhat_vex | kernel: dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work | known affected: 184 known not affected: 90 | 2026-07-22T07:06:01+00:00 | Vulnerability · Source |
| CVE-2026-63860 | redhat_vex | kernel: RDMA/core: Prefer NLA_NUL_STRING | known affected: 274 | 2026-07-22T07:05:56+00:00 | Vulnerability · Source |
| CVE-2026-63870 | redhat_vex | kernel: ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() | known affected: 156 known not affected: 118 | 2026-07-22T07:05:53+00:00 | Vulnerability · Source |
| CVE-2026-63926 | redhat_vex | kernel: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data | known affected: 246 known not affected: 28 | 2026-07-22T07:05:48+00:00 | Vulnerability · Source |
| CVE-2026-63968 | redhat_vex | kernel: ipv6: fix possible infinite loop in fib6_select_path() | known affected: 198 known not affected: 76 | 2026-07-22T07:05:47+00:00 | Vulnerability · Source |
| CVE-2026-28369 | redhat_vex | undertow: Undertow: Request Smuggling via Malformed HTTP Request Headers | fixed: 53 known affected: 14 known not affected: 10 | 2026-07-22T05:35:32+00:00 | Vulnerability · Source |
| CVE-2026-57962 | redhat_vex | thunderbird: Thunderbird: Denial of Service via malicious LDAP server | known not affected: 11 | 2026-07-22T05:05:37+00:00 | Vulnerability · Source |
| CVE-2026-63937 | redhat_vex | kernel: KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer | known affected: 184 known not affected: 90 | 2026-07-22T03:09:29+00:00 | Vulnerability · Source |
| CVE-2026-63924 | redhat_vex | kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() | known affected: 260 under investigation: 14 | 2026-07-22T03:09:28+00:00 | Vulnerability · Source |
| CVE-2026-55874 | redhat_vex | SeaweedFS: github.com/seaweedfs/seaweedfs: SeaweedFS: Information disclosure via S3 API gateway path traversal | known affected: 1 | 2026-07-22T03:09:23+00:00 | Vulnerability · Source |
| CVE-2026-63915 | redhat_vex | kernel: nfc: hci: fix out-of-bounds read in HCP header parsing | known not affected: 274 | 2026-07-22T03:09:19+00:00 | Vulnerability · Source |
| CVE-2026-41855 | redhat_vex | spring-jms: Spring Framework: Arbitrary code execution via deserialization in JMS message converters | known not affected: 2 | 2026-07-22T03:09:05+00:00 | Vulnerability · Source |
| CVE-2023-53073 | redhat_vex | kernel: perf/x86/amd/core: Always clear status for idx | known affected: 184 known not affected: 90 | 2026-07-22T03:08:48+00:00 | Vulnerability · Source |
| CVE-2023-53089 | redhat_vex | kernel: ext4: fix task hung in ext4_xattr_delete_inode | fixed: 120 known affected: 166 known not affected: 76 | 2026-07-22T03:08:48+00:00 | Vulnerability · Source |
| CVE-2023-53113 | redhat_vex | kernel: wifi: nl80211: fix NULL-ptr deref in offchan check | fixed: 120 known affected: 166 known not affected: 76 | 2026-07-22T03:08:32+00:00 | Vulnerability · Source |