VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294135 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-59161 | suse_vex | SUSE CVE CVE-2026-59161 | known affected: 3 | 2026-07-15T05:01:50+00:00 | Vulnerability · Source |
| CVE-2026-59162 | suse_vex | SUSE CVE CVE-2026-59162 | known affected: 3 | 2026-07-15T05:01:49+00:00 | Vulnerability · Source |
| CVE-2026-59180 | suse_vex | SUSE CVE CVE-2026-59180 | No product status | 2026-07-15T05:01:48+00:00 | Vulnerability · Source |
| CVE-2026-59922 | suse_vex | SUSE CVE CVE-2026-59922 | first fixed: 2 known affected: 5 known not affected: 35 | 2026-07-15T05:01:43+00:00 | Vulnerability · Source |
| CVE-2026-59923 | suse_vex | SUSE CVE CVE-2026-59923 | first fixed: 2 known affected: 5 known not affected: 35 | 2026-07-15T05:01:42+00:00 | Vulnerability · Source |
| CVE-2026-59924 | suse_vex | SUSE CVE CVE-2026-59924 | first fixed: 2 known affected: 5 known not affected: 35 | 2026-07-15T05:01:41+00:00 | Vulnerability · Source |
| CVE-2026-59925 | suse_vex | SUSE CVE CVE-2026-59925 | first fixed: 2 known affected: 5 known not affected: 35 | 2026-07-15T05:01:40+00:00 | Vulnerability · Source |
| CVE-2026-59926 | suse_vex | SUSE CVE CVE-2026-59926 | first fixed: 2 known not affected: 40 | 2026-07-15T05:01:39+00:00 | Vulnerability · Source |
| CVE-2026-59927 | suse_vex | SUSE CVE CVE-2026-59927 | first fixed: 2 known affected: 5 known not affected: 35 | 2026-07-15T05:01:38+00:00 | Vulnerability · Source |
| CVE-2026-59928 | suse_vex | SUSE CVE CVE-2026-59928 | first fixed: 2 known affected: 5 known not affected: 35 | 2026-07-15T05:01:37+00:00 | Vulnerability · Source |
| CVE-2026-59929 | suse_vex | SUSE CVE CVE-2026-59929 | first fixed: 2 known affected: 5 known not affected: 35 | 2026-07-15T05:01:36+00:00 | Vulnerability · Source |
| CVE-2026-59930 | suse_vex | SUSE CVE CVE-2026-59930 | first fixed: 2 known affected: 40 | 2026-07-15T05:01:35+00:00 | Vulnerability · Source |
| CVE-2025-43213 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-07-15T03:16:38+00:00 | Vulnerability · Source |
| CVE-2021-47952 | redhat_vex | python-jsonpickle: python-jsonpickle: Arbitrary Code Execution via Malicious JSON Deserialization | known not affected: 2 | 2026-07-15T03:16:31+00:00 | Vulnerability · Source |
| CVE-2026-1207 | redhat_vex | Django: Django: SQL Injection via RasterField band index parameter | fixed: 122 known affected: 6 known not affected: 4552 | 2026-07-15T03:13:09+00:00 | Vulnerability · Source |
| CVE-2026-0877 | redhat_vex | firefox: thunderbird: Mitigation bypass in the DOM: Security component | fixed: 320 known affected: 7 | 2026-07-15T03:13:07+00:00 | Vulnerability · Source |
| CVE-2025-70974 | redhat_vex | fastjson: Fastjson: Remote Code Execution via JNDI Injection due to autoType mishandling | known not affected: 14 | 2026-07-15T03:13:03+00:00 | Vulnerability · Source |
| CVE-2026-8946 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component | fixed: 260 known affected: 8 | 2026-07-15T03:00:00+00:00 | Vulnerability · Source |
| CVE-2026-45829 | redhat_vex | chromadb: ChromaDB Python Project: Arbitrary code execution via pre-authentication code injection | known not affected: 4 | 2026-07-15T03:00:00+00:00 | Vulnerability · Source |
| CVE-2026-24869 | redhat_vex | firefox: Use-after-free in the Layout: Scrolling and Overflow component | known not affected: 12 | 2026-07-15T02:42:36+00:00 | Vulnerability · Source |
| CVE-2026-2447 | redhat_vex | libvpx: Heap buffer overflow in libvpx | fixed: 721 known affected: 7 | 2026-07-15T02:42:24+00:00 | Vulnerability · Source |
| CVE-2026-23868 | redhat_vex | giflib: Giflib: Double-free vulnerability leading to memory corruption | fixed: 480 known affected: 3 | 2026-07-15T02:42:01+00:00 | Vulnerability · Source |
| CVE-2026-25521 | redhat_vex | locutus: Locutus is vulnerable to Prototype Pollution | known not affected: 6 | 2026-07-15T02:41:27+00:00 | Vulnerability · Source |
| CVE-2026-2797 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript: GC component | known not affected: 18 | 2026-07-15T02:38:06+00:00 | Vulnerability · Source |
| CVE-2026-2759 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Graphics: ImageLib component | fixed: 320 known affected: 6 | 2026-07-15T02:38:02+00:00 | Vulnerability · Source |
| CVE-2026-2611 | redhat_vex | mlflow: MLflow: Arbitrary Code Execution via Improper Origin Validation | known not affected: 19 | 2026-07-15T02:37:51+00:00 | Vulnerability · Source |
| CVE-2026-2761 | redhat_vex | firefox: thunderbird: Sandbox escape in the Graphics: WebRender component | fixed: 320 known affected: 6 | 2026-07-15T02:36:52+00:00 | Vulnerability · Source |
| CVE-2026-2651 | redhat_vex | github.com/mlflow/mlflow: MLflow: Arbitrary code execution via unauthorized multipart upload access | known not affected: 19 | 2026-07-15T02:36:38+00:00 | Vulnerability · Source |
| CVE-2026-2766 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component | fixed: 320 known affected: 8 | 2026-07-15T02:36:21+00:00 | Vulnerability · Source |
| CVE-2026-37555 | redhat_vex | libsndfile: integer overflow in ima_reader_init() | fixed: 328 known affected: 7 | 2026-07-15T02:23:27+00:00 | Vulnerability · Source |
| CVE-2026-41044 | redhat_vex | org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: Apache ActiveMQ: Arbitrary code execution via improper input validation in admin console | known affected: 1 known not affected: 13 | 2026-07-15T02:22:26+00:00 | Vulnerability · Source |
| CVE-2026-40860 | redhat_vex | Apache Camel: camel-jms: camel-sjms: camel-sjms2: camel-amqp: camel-activemq: camel-activemq6: Apache Camel: Remote Code Execution via deserialization of JMS ObjectMessage | fixed: 2 known affected: 2 known not affected: 7 | 2026-07-15T02:22:22+00:00 | Vulnerability · Source |
| CVE-2026-4698 | redhat_vex | firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component | fixed: 320 known affected: 8 | 2026-07-15T02:07:35+00:00 | Vulnerability · Source |
| CVE-2026-58253 | microsoft_vex | NATS Server: Route API Auth Bypass | fixed: 1 known affected: 1 | 2026-07-15T01:41:30+00:00 | Vulnerability · Source |
| CVE-2026-58209 | microsoft_vex | NATS Server: MQTT retained and QoS replay bypass subscribe deny filters | fixed: 1 known affected: 1 | 2026-07-15T01:41:23+00:00 | Vulnerability · Source |
| CVE-2026-58252 | microsoft_vex | NATS Server: Subscribe Authz Bypass via Wildcard-Overlap | fixed: 1 known affected: 1 | 2026-07-15T01:41:15+00:00 | Vulnerability · Source |
| CVE-2026-58250 | microsoft_vex | NATS Server: Pre-auth server crash via double INFO in leafnode handshake | fixed: 1 known affected: 1 | 2026-07-15T01:41:08+00:00 | Vulnerability · Source |
| CVE-2026-58208 | microsoft_vex | NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled | fixed: 1 known affected: 1 | 2026-07-15T01:41:00+00:00 | Vulnerability · Source |
| CVE-2026-58251 | microsoft_vex | NATS Server: Queue Subscribe Authz Bypass | fixed: 1 known affected: 1 | 2026-07-15T01:40:53+00:00 | Vulnerability · Source |
| CVE-2026-58207 | microsoft_vex | NATS Server: Remote crash via integer overflow in Connz pagination | fixed: 1 known affected: 1 | 2026-07-15T01:40:45+00:00 | Vulnerability · Source |
| CVE-2026-44839 | microsoft_vex | RabbitMQ: Unsanitized vhost names allow for XSS in management UI | fixed: 1 known affected: 3 | 2026-07-15T01:39:24+00:00 | Vulnerability · Source |
| CVE-2026-52969 | redhat_vex | kernel: KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | known not affected: 274 | 2026-07-15T01:25:51+00:00 | Vulnerability · Source |
| CVE-2026-52910 | redhat_vex | kernel: bpf: Free reuseport cBPF prog after RCU grace period | known affected: 246 known not affected: 28 | 2026-07-15T01:12:54+00:00 | Vulnerability · Source |
| CVE-2026-6748 | redhat_vex | firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component | fixed: 368 known affected: 8 | 2026-07-15T01:08:09+00:00 | Vulnerability · Source |
| CVE-2026-8389 | redhat_vex | firefox: JIT miscompilation in the JavaScript Engine: JIT component | known not affected: 12 | 2026-07-15T01:08:05+00:00 | Vulnerability · Source |
| CVE-2026-8388 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the JavaScript Engine: JIT component | fixed: 260 known affected: 8 | 2026-07-15T01:08:02+00:00 | Vulnerability · Source |
| CVE-2026-8947 | redhat_vex | firefox: thunderbird: Use-after-free in the DOM: Bindings (WebIDL) component | fixed: 260 known affected: 8 | 2026-07-15T01:07:59+00:00 | Vulnerability · Source |
| CVE-2026-8948 | redhat_vex | firefox: thunderbird: Same-origin policy bypass in the DOM: Networking component | known not affected: 23 | 2026-07-15T01:07:56+00:00 | Vulnerability · Source |
| CVE-2026-8401 | redhat_vex | firefox: thunderbird: Sandbox escape in the Profile Backup component | fixed: 260 known affected: 8 | 2026-07-15T01:07:42+00:00 | Vulnerability · Source |
| CVE-2026-8975 | redhat_vex | firefox: Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151 | fixed: 260 known affected: 8 | 2026-07-15T01:07:31+00:00 | Vulnerability · Source |