VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294114 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-16317 | redhat_vex | s2n-tls: s2n-tls: Undetectable data loss via man-in-the-middle attack on TLS 1.3 records | known not affected: 1 | 2026-07-22T12:06:42+00:00 | Vulnerability · Source |
| CVE-2026-16544 | redhat_vex | awx: websocket EventConsumer missing authorization for inventory_update_events, project_update_events, and system_job_events allows cross-organization stdout disclosure | known affected: 2 | 2026-07-22T12:06:41+00:00 | Vulnerability · Source |
| CVE-2026-43078 | redhat_vex | kernel: crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl | known affected: 232 known not affected: 42 | 2026-07-22T11:56:14+00:00 | Vulnerability · Source |
| CVE-2026-47714 | redhat_vex | libheif: libheif: Denial of service and information disclosure via integer overflow in inline mask parsing | known not affected: 1 | 2026-07-22T11:41:07+00:00 | Vulnerability · Source |
| CVE-2026-45382 | redhat_vex | libde265: libde265: Denial of Service due to heap-buffer-overflow when processing malformed H.265 video | known not affected: 1 | 2026-07-22T11:40:59+00:00 | Vulnerability · Source |
| CVE-2026-47709 | redhat_vex | libheif: libheif: Denial of Service via malformed HEIF image | known not affected: 1 | 2026-07-22T11:36:19+00:00 | Vulnerability · Source |
| CVE-2026-47251 | redhat_vex | libheif: libheif: Denial of Service and information disclosure via crafted HEIF file | known not affected: 1 | 2026-07-22T11:36:17+00:00 | Vulnerability · Source |
| CVE-2026-12701 | redhat_vex | pulpcore: pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport | fixed: 32 known affected: 2 known not affected: 590 | 2026-07-22T11:36:06+00:00 | Vulnerability · Source |
| CVE-2026-47667 | redhat_vex | CImg: CImg Library: Denial of service due to unbounded memory allocation in image file processing. | known not affected: 1 | 2026-07-22T11:20:38+00:00 | Vulnerability · Source |
| CVE-2026-16318 | redhat_vex | s2n-tls: s2n-tls: Denial of Service due to memory leak in QUIC transport parameters handler | known not affected: 1 | 2026-07-22T11:15:49+00:00 | Vulnerability · Source |
| CVE-2026-41238 | redhat_vex | DOMPurify: DOMPurify: Cross-Site Scripting bypass via prototype pollution | known affected: 77 known not affected: 1 | 2026-07-22T07:56:32+00:00 | Vulnerability · Source |
| CVE-2026-41239 | redhat_vex | DOMPurify: Vue 2: DOMPurify: Cross-site scripting due to incomplete sanitization of template expressions | known affected: 77 known not affected: 1 | 2026-07-22T07:41:15+00:00 | Vulnerability · Source |
| CVE-2026-63976 | redhat_vex | kernel: Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success | known affected: 232 known not affected: 42 | 2026-07-22T07:06:14+00:00 | Vulnerability · Source |
| CVE-2026-63864 | redhat_vex | kernel: bpf: Propagate error from visit_tailcall_insn | known affected: 76 known not affected: 198 | 2026-07-22T07:06:12+00:00 | Vulnerability · Source |
| CVE-2026-64005 | redhat_vex | kernel: net/smc: Do not re-initialize smc hashtables | known affected: 232 known not affected: 42 | 2026-07-22T07:06:10+00:00 | Vulnerability · Source |
| CVE-2026-63995 | redhat_vex | kernel: ethtool: cmis: validate start_cmd_payload_size from module | known affected: 184 known not affected: 90 | 2026-07-22T07:06:08+00:00 | Vulnerability · Source |
| CVE-2026-63985 | redhat_vex | kernel: ethtool: eeprom: add more safeties to EEPROM Netlink fallback | known affected: 232 known not affected: 42 | 2026-07-22T07:06:05+00:00 | Vulnerability · Source |
| CVE-2026-63942 | redhat_vex | kernel: parport: Fix race between port and client registration | known affected: 246 known not affected: 28 | 2026-07-22T07:06:02+00:00 | Vulnerability · Source |
| CVE-2026-63977 | redhat_vex | kernel: dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work | known affected: 184 known not affected: 90 | 2026-07-22T07:06:01+00:00 | Vulnerability · Source |
| CVE-2026-63860 | redhat_vex | kernel: RDMA/core: Prefer NLA_NUL_STRING | known affected: 274 | 2026-07-22T07:05:56+00:00 | Vulnerability · Source |
| CVE-2026-63870 | redhat_vex | kernel: ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() | known affected: 156 known not affected: 118 | 2026-07-22T07:05:53+00:00 | Vulnerability · Source |
| CVE-2026-63926 | redhat_vex | kernel: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data | known affected: 246 known not affected: 28 | 2026-07-22T07:05:48+00:00 | Vulnerability · Source |
| CVE-2026-63968 | redhat_vex | kernel: ipv6: fix possible infinite loop in fib6_select_path() | known affected: 198 known not affected: 76 | 2026-07-22T07:05:47+00:00 | Vulnerability · Source |
| CVE-2026-28369 | redhat_vex | undertow: Undertow: Request Smuggling via Malformed HTTP Request Headers | fixed: 53 known affected: 14 known not affected: 10 | 2026-07-22T05:35:32+00:00 | Vulnerability · Source |
| CVE-2026-57962 | redhat_vex | thunderbird: Thunderbird: Denial of Service via malicious LDAP server | known not affected: 11 | 2026-07-22T05:05:37+00:00 | Vulnerability · Source |
| CVE-2026-63937 | redhat_vex | kernel: KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer | known affected: 184 known not affected: 90 | 2026-07-22T03:09:29+00:00 | Vulnerability · Source |
| CVE-2026-63924 | redhat_vex | kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() | known affected: 260 under investigation: 14 | 2026-07-22T03:09:28+00:00 | Vulnerability · Source |
| CVE-2026-55874 | redhat_vex | SeaweedFS: github.com/seaweedfs/seaweedfs: SeaweedFS: Information disclosure via S3 API gateway path traversal | known affected: 1 | 2026-07-22T03:09:23+00:00 | Vulnerability · Source |
| CVE-2026-63915 | redhat_vex | kernel: nfc: hci: fix out-of-bounds read in HCP header parsing | known not affected: 274 | 2026-07-22T03:09:19+00:00 | Vulnerability · Source |
| CVE-2026-41855 | redhat_vex | spring-jms: Spring Framework: Arbitrary code execution via deserialization in JMS message converters | known not affected: 2 | 2026-07-22T03:09:05+00:00 | Vulnerability · Source |
| CVE-2023-53073 | redhat_vex | kernel: perf/x86/amd/core: Always clear status for idx | known affected: 184 known not affected: 90 | 2026-07-22T03:08:48+00:00 | Vulnerability · Source |
| CVE-2023-53089 | redhat_vex | kernel: ext4: fix task hung in ext4_xattr_delete_inode | fixed: 120 known affected: 166 known not affected: 76 | 2026-07-22T03:08:48+00:00 | Vulnerability · Source |
| CVE-2023-53113 | redhat_vex | kernel: wifi: nl80211: fix NULL-ptr deref in offchan check | fixed: 120 known affected: 166 known not affected: 76 | 2026-07-22T03:08:32+00:00 | Vulnerability · Source |
| CVE-2026-63868 | redhat_vex | kernel: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr | known affected: 260 known not affected: 14 | 2026-07-22T03:08:26+00:00 | Vulnerability · Source |
| CVE-2026-63866 | redhat_vex | kernel: wifi: mt76: mt7996: Clear wcid pointer in mt7996_mac_sta_deinit_link() | known not affected: 274 | 2026-07-22T03:08:21+00:00 | Vulnerability · Source |
| CVE-2023-53575 | redhat_vex | kernel: wifi: iwlwifi: mvm: fix potential array out of bounds access | fixed: 120 known affected: 124 known not affected: 118 | 2026-07-22T03:08:19+00:00 | Vulnerability · Source |
| CVE-2023-53433 | redhat_vex | kernel: net: add vlan_get_protocol_and_depth() helper | known affected: 170 known not affected: 104 | 2026-07-22T03:08:12+00:00 | Vulnerability · Source |
| CVE-2022-50829 | redhat_vex | kernel: wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() | fixed: 120 known affected: 166 known not affected: 76 | 2026-07-22T03:08:11+00:00 | Vulnerability · Source |
| CVE-2023-53241 | redhat_vex | kernel: nfsd: call op_release, even when op_func returns an error | fixed: 120 known affected: 138 known not affected: 104 | 2026-07-22T03:08:07+00:00 | Vulnerability · Source |
| CVE-2026-63945 | redhat_vex | kernel: Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock | known affected: 184 known not affected: 90 | 2026-07-22T03:08:07+00:00 | Vulnerability · Source |
| CVE-2023-53121 | redhat_vex | kernel: tcp: tcp_make_synack() can be called from process context | known affected: 198 known not affected: 76 | 2026-07-22T03:08:02+00:00 | Vulnerability · Source |
| CVE-2023-53706 | redhat_vex | kernel: mm/vmemmap/devdax: fix kernel crash when probing devdax devices | known affected: 41 known not affected: 233 | 2026-07-22T03:07:46+00:00 | Vulnerability · Source |
| CVE-2022-49746 | redhat_vex | kernel: dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init | known affected: 108 known not affected: 166 | 2026-07-22T03:07:40+00:00 | Vulnerability · Source |
| CVE-2023-53582 | redhat_vex | kernel: wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds | fixed: 120 known affected: 152 known not affected: 90 | 2026-07-22T03:07:35+00:00 | Vulnerability · Source |
| CVE-2023-53268 | redhat_vex | kernel: ASoC: fsl_mqs: move of_node_put() to the correct location | known affected: 108 known not affected: 166 | 2026-07-22T03:07:32+00:00 | Vulnerability · Source |
| CVE-2026-63978 | redhat_vex | kernel: net/handshake: Drain pending requests at net namespace exit | known affected: 184 known not affected: 90 | 2026-07-22T03:07:30+00:00 | Vulnerability · Source |
| CVE-2026-64207 | redhat_vex | kernel: net/sched: dualpi2: fix GSO backlog accounting | known not affected: 274 | 2026-07-22T03:07:21+00:00 | Vulnerability · Source |
| CVE-2022-50712 | redhat_vex | kernel: devlink: hold region lock when flushing snapshots | known affected: 156 known not affected: 118 | 2026-07-22T03:07:12+00:00 | Vulnerability · Source |
| CVE-2023-54259 | redhat_vex | kernel: soundwire: bus: Fix unbalanced pm_runtime_put() causing usage count underflow | fixed: 120 known affected: 124 known not affected: 118 | 2026-07-22T03:03:53+00:00 | Vulnerability · Source |
| CVE-2023-54015 | redhat_vex | kernel: net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device | fixed: 120 known affected: 166 known not affected: 76 | 2026-07-22T03:03:48+00:00 | Vulnerability · Source |