VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294136 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-55170 | redhat_vex | github.com/openfga/openfga: OpenFGA: Incorrect authorization decisions due to case-insensitive comparisons in MySQL datastore | known affected: 9 | 2026-07-14T01:35:32+00:00 | Vulnerability · Source |
| CVE-2026-57158 | redhat_vex | FreeRDP: FreeRDP: Information disclosure via truncated RDPGFX planar payload | known affected: 31 | 2026-07-13T23:25:46+00:00 | Vulnerability · Source |
| CVE-2026-57157 | redhat_vex | FreeRDP: FreeRDP: Out-of-bounds read leads to information disclosure and denial of service | known affected: 31 | 2026-07-13T23:25:45+00:00 | Vulnerability · Source |
| CVE-2026-42216 | redhat_vex | OpenEXR: OpenEXR: Information disclosure and denial of service via malformed EXR files | fixed: 214 known affected: 3 known not affected: 7 | 2026-07-13T23:11:46+00:00 | Vulnerability · Source |
| CVE-2026-41142 | redhat_vex | OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing | fixed: 214 known not affected: 10 | 2026-07-13T23:11:42+00:00 | Vulnerability · Source |
| CVE-2026-56372 | redhat_vex | ImageMagick: ImageMagick: Information Disclosure and Denial of Service | known affected: 14 | 2026-07-13T22:25:36+00:00 | Vulnerability · Source |
| CVE-2026-61465 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted image due to missing memory allocation check | known affected: 14 | 2026-07-13T22:25:35+00:00 | Vulnerability · Source |
| CVE-2026-61858 | redhat_vex | ImageMagick: ImageMagick: Policy bypass allows unauthorized file writing via APNG encoder | known affected: 14 | 2026-07-13T22:15:55+00:00 | Vulnerability · Source |
| CVE-2026-61857 | redhat_vex | ImageMagick: ImageMagick: Application crashes via malicious XMP profiles | known affected: 14 | 2026-07-13T22:15:54+00:00 | Vulnerability · Source |
| CVE-2026-61861 | redhat_vex | ImageMagick: ImageMagick: Use-after-free vulnerability leading to denial of service or code execution | known affected: 14 | 2026-07-13T22:15:48+00:00 | Vulnerability · Source |
| CVE-2026-61870 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via specially crafted VIFF images | known affected: 14 | 2026-07-13T22:15:46+00:00 | Vulnerability · Source |
| CVE-2026-44024 | redhat_vex | fluentd: Fluentd: Remote Code Execution via arbitrary file write due to insufficient tag validation | known not affected: 1 | 2026-07-13T16:20:42+00:00 | Vulnerability · Source |
| CVE-2026-56366 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via memory leak in APP1JPEG image processing | known affected: 14 | 2026-07-13T15:27:12+00:00 | Vulnerability · Source |
| CVE-2026-56373 | redhat_vex | ImageMagick: ImageMagick: Use-after-free vulnerability in PDB decoder allows denial of service or limited data corruption. | known affected: 14 | 2026-07-13T15:26:59+00:00 | Vulnerability · Source |
| CVE-2026-54518 | redhat_vex | jackson-databind: jackson-databind: Information disclosure and data manipulation via view-based access control bypass | known affected: 88 known not affected: 14 | 2026-07-13T15:16:19+00:00 | Vulnerability · Source |
| CVE-2026-59818 | redhat_vex | etcd: etcd: Authentication bypass due to improper Certificate Revocation List enforcement on gRPC listener | known affected: 4 | 2026-07-13T15:05:46+00:00 | Vulnerability · Source |
| CVE-2026-50168 | redhat_vex | @angular/platform-server: Angular @angular/platform-server: Server-Side Request Forgery (SSRF) via malformed URL parsing | known not affected: 1 | 2026-07-13T15:00:27+00:00 | Vulnerability · Source |
| CVE-2026-54514 | redhat_vex | jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution | known affected: 101 known not affected: 1 | 2026-07-13T14:55:58+00:00 | Vulnerability · Source |
| CVE-2026-52846 | redhat_vex | github.com/caddyserver/caddy: Caddy: Client-side Cross-Site Scripting (XSS) due to incomplete HTML tag stripping | known not affected: 1 | 2026-07-13T14:50:46+00:00 | Vulnerability · Source |
| CVE-2026-44169 | redhat_vex | mariadb: MariaDB server: Information disclosure of stored routine definitions due to insufficient privilege check | fixed: 199 known not affected: 106 | 2026-07-13T14:45:52+00:00 | Vulnerability · Source |
| CVE-2026-59874 | microsoft_vex | node-tar: Negative tar entry size causes infinite loop in archive replace | known affected: 1 | 2026-07-13T14:41:33+00:00 | Vulnerability · Source |
| CVE-2026-59873 | microsoft_vex | node-tar: Decompression/parse DoS via unlimited input | known affected: 1 | 2026-07-13T14:41:27+00:00 | Vulnerability · Source |
| CVE-2026-59871 | microsoft_vex | node-tar: Process crash via PAX numeric path type confusion | known affected: 1 | 2026-07-13T14:41:21+00:00 | Vulnerability · Source |
| CVE-2026-59821 | redhat_vex | litellm: LiteLLM: Arbitrary code execution and information disclosure via custom code guardrails | known not affected: 7 | 2026-07-13T13:56:31+00:00 | Vulnerability · Source |
| CVE-2026-59820 | redhat_vex | litellm: LiteLLM: Directory traversal via crafted skill archive upload | known affected: 1 known not affected: 6 | 2026-07-13T13:36:04+00:00 | Vulnerability · Source |
| CVE-2026-29009 | redhat_vex | u-boot: U-Boot: Memory corruption via NFS readlink buffer overflow | known not affected: 1 | 2026-07-13T13:35:48+00:00 | Vulnerability · Source |
| CVE-2026-29008 | redhat_vex | U-Boot: U-Boot: Integer underflow leads to Denial of Service | known not affected: 1 | 2026-07-13T13:35:41+00:00 | Vulnerability · Source |
| CVE-2026-59819 | redhat_vex | litellm: LiteLLM: Information disclosure via local file read in test connection endpoint | known not affected: 7 | 2026-07-13T13:26:19+00:00 | Vulnerability · Source |
| CVE-2026-23562 | redhat_vex | xen: Xen: VM administrator gains unauthorized host hardware access via PCI passthrough | known not affected: 1 | 2026-07-13T13:26:15+00:00 | Vulnerability · Source |
| CVE-2026-42486 | redhat_vex | xen: Xen: Arbitrary dom0 file write due to improper restriction of VM parameter | known not affected: 1 | 2026-07-13T13:21:16+00:00 | Vulnerability · Source |
| CVE-2026-23560 | redhat_vex | xen: Xen: VM-admin can hide virtual machines from management and operations | known not affected: 1 | 2026-07-13T13:21:01+00:00 | Vulnerability · Source |
| CVE-2026-60108 | redhat_vex | zeek: Zeek: Denial of Service via uncontrolled memory consumption in FTP analyzer | known not affected: 1 | 2026-07-13T13:20:44+00:00 | Vulnerability · Source |
| CVE-2026-60109 | redhat_vex | zeek: Zeek: Denial of Service via crafted Kerberos KRB_ERROR message | known not affected: 1 | 2026-07-13T13:20:38+00:00 | Vulnerability · Source |
| CVE-2026-15584 | redhat_vex | RedHatInsights/incluster-checks: incluster-checks: Privileged host-chroot debug pods created in shared default namespace enable privilege escalation to node root | known affected: 1 | 2026-07-13T13:12:29+00:00 | Vulnerability · Source |
| CVE-2026-55807 | redhat_vex | Drupal core: Drupal core: Server-Side Request Forgery vulnerability | known not affected: 1 | 2026-07-13T12:53:27+00:00 | Vulnerability · Source |
| CVE-2026-55808 | redhat_vex | drupal: Drupal core: Cross-site Scripting (XSS) via improper input neutralization | known not affected: 1 | 2026-07-13T12:47:54+00:00 | Vulnerability · Source |
| CVE-2026-40973 | redhat_vex | Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory | fixed: 10 known affected: 2 known not affected: 68 | 2026-07-13T12:25:53+00:00 | Vulnerability · Source |
| CVE-2026-62147 | redhat_vex | tempo-operator: Tempo Operator: Query RBAC bypass | known affected: 2 | 2026-07-13T12:06:35+00:00 | Vulnerability · Source |
| CVE-2026-53538 | redhat_vex | python-multipart: Python-Multipart: Information disclosure due to parser differential in form data handling | known affected: 39 known not affected: 18 | 2026-07-13T11:56:42+00:00 | Vulnerability · Source |
| CVE-2026-15551 | redhat_vex | rlottie: rlottie: Buffer overflow due to integer overflow | known not affected: 1 | 2026-07-13T11:16:30+00:00 | Vulnerability · Source |
| CVE-2026-58379 | redhat_vex | gimp: gimp: Heap buffer overflow in read_channel_data() | fixed: 24 known not affected: 29 | 2026-07-13T10:55:38+00:00 | Vulnerability · Source |
| CVE-2026-15574 | redhat_vex | vllm-orchestrator-gateway: vllm-orchestrator-gateway: Authorization header and full chat payloads logged at hard-coded DEBUG default | under investigation: 1 | 2026-07-13T09:05:52+00:00 | Vulnerability · Source |
| CVE-2026-58467 | redhat_vex | cockpit: Cockpit CMS: Arbitrary file read and code execution via path traversal | known affected: 32 | 2026-07-13T07:20:57+00:00 | Vulnerability · Source |
| CVE-2023-54365 | redhat_vex | github.com/traefik/traefik: net/http2: Traefik: Denial of Service via HTTP/2 Rapid Reset technique | known not affected: 3 | 2026-07-13T07:15:40+00:00 | Vulnerability · Source |
| CVE-2026-58253 | redhat_vex | github.com/nats-io/nats-server: NATS Server: Authentication bypass and privilege escalation via parser fast path | known not affected: 2 | 2026-07-13T07:11:35+00:00 | Vulnerability · Source |
| CVE-2026-58208 | redhat_vex | github.com/nats-io/nats-server: NATS Server: Denial of Service due to incorrect MQTT-over-WebSocket request routing | known not affected: 2 | 2026-07-13T07:06:26+00:00 | Vulnerability · Source |
| CVE-2026-58252 | redhat_vex | github.com/nats-io/nats-server: NATS Server: Information disclosure via access control bypass in wildcard and queue subscriptions | known not affected: 2 | 2026-07-13T06:57:04+00:00 | Vulnerability · Source |
| CVE-2026-58251 | redhat_vex | github.com/nats-io/nats-server: NATS Server: Information disclosure due to bypass of subject deny rules via queue subscriptions | known not affected: 2 | 2026-07-13T06:21:08+00:00 | Vulnerability · Source |
| CVE-2026-58250 | redhat_vex | github.com/nats-io/nats-server: NATS Server: Denial of Service via repeated leafnode INFO messages during pre-authentication | known not affected: 2 | 2026-07-13T06:16:01+00:00 | Vulnerability · Source |
| CVE-2026-53309 | redhat_vex | kernel: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison | known not affected: 274 | 2026-07-13T05:50:22+00:00 | Vulnerability · Source |