VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294121 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-42530 | redhat_vex | nginx: ngx_http_v3_module: use-after-free issue leads to denial of service | fixed: 4 known not affected: 65 | 2026-07-15T14:18:23+00:00 | Vulnerability · Source |
| CVE-2026-25243 | redhat_vex | redis: RESTORE invalid memory access may allow remote code execution | fixed: 251 known not affected: 1 | 2026-07-15T14:17:52+00:00 | Vulnerability · Source |
| CVE-2026-23631 | redhat_vex | redis: Remote code execution via use-after-free in Lua scripting | fixed: 109 known not affected: 1 under investigation: 8 | 2026-07-15T14:17:51+00:00 | Vulnerability · Source |
| CVE-2026-15146 | redhat_vex | wget: Wget: Server-Side Request Forgery via FTP PASV response IP address validation bypass | known affected: 9 | 2026-07-15T14:16:35+00:00 | Vulnerability · Source |
| CVE-2026-53015 | redhat_vex | kernel: erofs: unify lcn as u64 for 32-bit platforms | known affected: 76 known not affected: 198 | 2026-07-15T14:07:06+00:00 | Vulnerability · Source |
| CVE-2026-53014 | redhat_vex | kernel: net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir | known affected: 198 known not affected: 76 | 2026-07-15T14:06:52+00:00 | Vulnerability · Source |
| CVE-2026-13030 | redhat_vex | chromium-browser: chromium-browser: Uninitialized Use in GPU | known not affected: 1 | 2026-07-15T13:26:56+00:00 | Vulnerability · Source |
| CVE-2026-52994 | redhat_vex | kernel: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting | known affected: 184 known not affected: 90 | 2026-07-15T13:17:29+00:00 | Vulnerability · Source |
| CVE-2026-52995 | redhat_vex | kernel: net/rds: zero per-item info buffer before handing it to visitors | known affected: 14 known not affected: 260 | 2026-07-15T13:17:27+00:00 | Vulnerability · Source |
| CVE-2026-34487 | redhat_vex | Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files | fixed: 43 known affected: 55 under investigation: 1 | 2026-07-15T13:15:11+00:00 | Vulnerability · Source |
| CVE-2026-34483 | redhat_vex | Apache Tomcat: Apache Tomcat: Information disclosure due to improper encoding in JsonAccessLogValve | fixed: 43 known affected: 55 under investigation: 1 | 2026-07-15T13:15:10+00:00 | Vulnerability · Source |
| CVE-2026-29129 | redhat_vex | Apache Tomcat: Apache Tomcat: Configured cipher preference order not preserved | fixed: 9 known affected: 55 known not affected: 2 | 2026-07-15T13:15:07+00:00 | Vulnerability · Source |
| CVE-2026-25854 | redhat_vex | Apache Tomcat: Apache Tomcat: Open Redirect vulnerability via LoadBalancerDrainingValve | fixed: 43 known affected: 56 | 2026-07-15T13:15:06+00:00 | Vulnerability · Source |
| CVE-2026-24880 | redhat_vex | Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension | fixed: 43 known affected: 56 | 2026-07-15T13:15:04+00:00 | Vulnerability · Source |
| CVE-2026-29145 | redhat_vex | Apache Tomcat: Apache Tomcat: Authentication bypass due to CLIENT_CERT soft fail misconfiguration | fixed: 43 known affected: 56 | 2026-07-15T13:14:50+00:00 | Vulnerability · Source |
| CVE-2026-24734 | redhat_vex | tomcat: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation | fixed: 74 known affected: 1 known not affected: 37 | 2026-07-15T13:13:36+00:00 | Vulnerability · Source |
| CVE-2026-15779 | redhat_vex | samba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validation | known affected: 5 | 2026-07-15T13:06:57+00:00 | Vulnerability · Source |
| CVE-2026-46635 | redhat_vex | twig/twig: Twig: Information disclosure via column filter in template language | known not affected: 1 | 2026-07-15T12:49:31+00:00 | Vulnerability · Source |
| CVE-2026-47730 | redhat_vex | twig/twig: Twig: Cross-site Scripting (XSS) vulnerability in HTML profiler dump | known not affected: 1 | 2026-07-15T12:49:30+00:00 | Vulnerability · Source |
| CVE-2026-48808 | redhat_vex | twig/twig: Twig: Information Disclosure via Sandbox Bypass in Column Filter | known not affected: 1 | 2026-07-15T12:49:30+00:00 | Vulnerability · Source |
| CVE-2026-48805 | redhat_vex | twig/twig: Twig: Sandbox bypass vulnerability via deprecated internal wrappers | known not affected: 1 | 2026-07-15T12:49:28+00:00 | Vulnerability · Source |
| CVE-2026-53633 | redhat_vex | @vitest/browser: vite-plus: Vitest: Remote code execution via exposed Chrome DevTools Protocol API | known not affected: 1 | 2026-07-15T12:35:56+00:00 | Vulnerability · Source |
| CVE-2026-48806 | redhat_vex | twig/twig: Twig: Information disclosure and limited data modification via sandbox bypass | known not affected: 1 | 2026-07-15T12:29:14+00:00 | Vulnerability · Source |
| CVE-2026-46633 | redhat_vex | twig/twig: Twig: Arbitrary code execution via crafted template name | known not affected: 1 | 2026-07-15T12:29:13+00:00 | Vulnerability · Source |
| CVE-2026-49981 | redhat_vex | twig/twig: Twig: Information disclosure via sandbox bypass | known not affected: 1 | 2026-07-15T12:28:51+00:00 | Vulnerability · Source |
| CVE-2026-46639 | redhat_vex | twig/twig: Twig: Sandbox bypass allows information disclosure and method invocation | known not affected: 1 | 2026-07-15T12:27:46+00:00 | Vulnerability · Source |
| CVE-2026-46638 | redhat_vex | twig/twig: Twig: Security bypass allows unauthorized template execution | known not affected: 1 | 2026-07-15T12:25:18+00:00 | Vulnerability · Source |
| CVE-2026-46640 | redhat_vex | twig/twig: Twig: Arbitrary code execution via improper handling of dynamic attributes | known not affected: 1 | 2026-07-15T12:24:57+00:00 | Vulnerability · Source |
| CVE-2026-48807 | redhat_vex | twig/twig: Twig: Sandbox bypass allows information disclosure | known not affected: 1 | 2026-07-15T12:24:43+00:00 | Vulnerability · Source |
| CVE-2026-47732 | redhat_vex | twig/twig: Twig: Security policy bypass leads to information disclosure | known not affected: 1 | 2026-07-15T12:24:34+00:00 | Vulnerability · Source |
| CVE-2026-47736 | redhat_vex | puma: Puma: Denial of Service due to unbounded memory growth in PROXY protocol v1 | known not affected: 19 | 2026-07-15T10:17:11+00:00 | Vulnerability · Source |
| CVE-2026-47737 | redhat_vex | puma: Puma: Source IP spoofing via PROXY protocol header re-parsing | known not affected: 19 | 2026-07-15T10:16:31+00:00 | Vulnerability · Source |
| CVE-2026-42997 | redhat_vex | OpenStack Ironic: OpenStack Ironic: Information disclosure via credential forwarding during mold import | fixed: 4 known affected: 9 known not affected: 4 | 2026-07-15T09:56:18+00:00 | Vulnerability · Source |
| CVE-2026-6523 | redhat_vex | wireshark: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark | known affected: 4 known not affected: 16 | 2026-07-15T09:08:31+00:00 | Vulnerability · Source |
| CVE-2026-6525 | redhat_vex | wireshark: NULL Pointer Dereference in Wireshark | known not affected: 20 | 2026-07-15T09:08:30+00:00 | Vulnerability · Source |
| CVE-2026-9759 | redhat_vex | wireshark: NULL Pointer Dereference in Wireshark | known affected: 4 known not affected: 16 | 2026-07-15T09:07:15+00:00 | Vulnerability · Source |
| CVE-2026-5299 | redhat_vex | wireshark: Uncontrolled Recursion in Wireshark | known affected: 4 known not affected: 16 | 2026-07-15T09:07:12+00:00 | Vulnerability · Source |
| CVE-2026-14251 | redhat_vex | gitops-operator: gitops-operator: Missing allowedNamespace check in ReconcilerHook for ClusterRole/Role cases enables potential privilege escalation and DoS | known affected: 2 | 2026-07-15T08:06:07+00:00 | Vulnerability · Source |
| CVE-2025-40907 | suse_vex | SUSE CVE CVE-2025-40907 | recommended: 3 | 2026-07-15T05:54:11+00:00 | Vulnerability · Source |
| CVE-2025-66577 | suse_vex | SUSE CVE CVE-2025-66577 | recommended: 6 | 2026-07-15T05:50:39+00:00 | Vulnerability · Source |
| CVE-2026-12325 | redhat_vex | firefox: thunderbird: Denial-of-service in the Graphics: ImageLib component | fixed: 260 known affected: 8 | 2026-07-15T05:48:54+00:00 | Vulnerability · Source |
| CVE-2026-12324 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Graphics: CanvasWebGL component | fixed: 260 known affected: 8 | 2026-07-15T05:48:51+00:00 | Vulnerability · Source |
| CVE-2026-12330 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Internationalization component | fixed: 260 known affected: 8 | 2026-07-15T05:47:54+00:00 | Vulnerability · Source |
| CVE-2026-12327 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 | fixed: 260 known affected: 8 | 2026-07-15T05:47:51+00:00 | Vulnerability · Source |
| CVE-2026-12315 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Security component | fixed: 260 known affected: 8 | 2026-07-15T05:47:48+00:00 | Vulnerability · Source |
| CVE-2026-12314 | redhat_vex | firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 | fixed: 260 known affected: 8 | 2026-07-15T05:47:47+00:00 | Vulnerability · Source |
| CVE-2026-12313 | redhat_vex | firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component | fixed: 260 known affected: 8 | 2026-07-15T05:47:46+00:00 | Vulnerability · Source |
| CVE-2026-12312 | redhat_vex | firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 | fixed: 260 known affected: 8 | 2026-07-15T05:47:41+00:00 | Vulnerability · Source |
| CVE-2026-12311 | redhat_vex | firefox: thunderbird: Information disclosure, sandbox escape in the Security: Process Sandboxing component | fixed: 260 known affected: 8 | 2026-07-15T05:47:39+00:00 | Vulnerability · Source |
| CVE-2026-12310 | redhat_vex | firefox: thunderbird: Memory safety bug fixed in Thunderbird ESR 140.12 | fixed: 260 known affected: 8 | 2026-07-15T05:47:37+00:00 | Vulnerability · Source |