VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294144 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-52998 | microsoft_vex | netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check | fixed: 1 known affected: 1 | 2026-07-09T14:40:04+00:00 | Vulnerability · Source |
| CVE-2026-53023 | microsoft_vex | fs/ntfs3: terminate the cached volume label after UTF-8 conversion | fixed: 1 known affected: 1 | 2026-07-09T14:39:55+00:00 | Vulnerability · Source |
| CVE-2026-53223 | microsoft_vex | net: guard timestamp cmsgs to real error queue skbs | fixed: 1 known affected: 1 | 2026-07-09T14:39:54+00:00 | Vulnerability · Source |
| CVE-2026-53075 | microsoft_vex | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | fixed: 1 known affected: 1 | 2026-07-09T14:39:47+00:00 | Vulnerability · Source |
| CVE-2026-12413 | microsoft_vex | IKEv2 Denial of Service via malformed fragmentation | fixed: 1 known affected: 1 | 2026-07-09T14:39:45+00:00 | Vulnerability · Source |
| CVE-2026-53011 | microsoft_vex | net/sched: taprio: fix use-after-free in advance_sched() on schedule switch | fixed: 1 known affected: 1 | 2026-07-09T14:39:39+00:00 | Vulnerability · Source |
| CVE-2026-50722 | microsoft_vex | IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload | fixed: 1 known affected: 1 | 2026-07-09T14:39:37+00:00 | Vulnerability · Source |
| CVE-2026-53077 | microsoft_vex | net/rds: Restrict use of RDS/IB to the initial network namespace | fixed: 1 known affected: 1 | 2026-07-09T14:39:30+00:00 | Vulnerability · Source |
| CVE-2026-50721 | microsoft_vex | IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload | fixed: 1 known affected: 1 | 2026-07-09T14:39:28+00:00 | Vulnerability · Source |
| CVE-2026-52936 | microsoft_vex | crypto: jitterentropy - replace long-held spinlock with mutex | fixed: 1 known affected: 1 | 2026-07-09T14:39:21+00:00 | Vulnerability · Source |
| CVE-2026-12912 | microsoft_vex | Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image | fixed: 1 known affected: 1 | 2026-07-09T14:39:20+00:00 | Vulnerability · Source |
| CVE-2026-53003 | microsoft_vex | pppoe: drop PFC frames | fixed: 1 known affected: 1 | 2026-07-09T14:39:13+00:00 | Vulnerability · Source |
| CVE-2026-14164 | microsoft_vex | Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() | fixed: 1 known affected: 1 | 2026-07-09T14:39:11+00:00 | Vulnerability · Source |
| CVE-2026-53082 | microsoft_vex | net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf | fixed: 1 known affected: 1 | 2026-07-09T14:39:05+00:00 | Vulnerability · Source |
| CVE-2026-52920 | microsoft_vex | netfilter: xt_policy: fix strict mode inbound policy matching | fixed: 1 known affected: 1 | 2026-07-09T14:38:56+00:00 | Vulnerability · Source |
| CVE-2026-53357 | microsoft_vex | Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() | fixed: 1 known affected: 1 | 2026-07-09T14:38:55+00:00 | Vulnerability · Source |
| CVE-2026-53086 | microsoft_vex | net: bcmgenet: fix racing timeout handler | fixed: 1 known affected: 1 | 2026-07-09T14:38:48+00:00 | Vulnerability · Source |
| CVE-2026-37555 | microsoft_vex | An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065. | fixed: 1 known affected: 2 | 2026-07-09T14:38:36+00:00 | Vulnerability · Source |
| CVE-2026-43303 | redhat_vex | kernel: mm/page_alloc: clear page->private in free_pages_prepare() | fixed: 1658 known affected: 36 known not affected: 76 | 2026-07-09T13:55:08+00:00 | Vulnerability · Source |
| CVE-2026-32289 | redhat_vex | html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals | fixed: 29 known affected: 354 | 2026-07-09T13:42:21+00:00 | Vulnerability · Source |
| CVE-2026-44332 | redhat_vex | github.com/gofiber/fiber: GoFiber: Remote Username Enumeration via BasicAuth Middleware Short-Circuit Evaluation | known not affected: 1 | 2026-07-09T13:35:03+00:00 | Vulnerability · Source |
| CVE-2025-3110 | redhat_vex | OpenVPN Access Server: OpenVPN Access Server: HTTP request smuggling via bare line-feed sequences in HTTP headers | known not affected: 1 | 2026-07-09T12:55:22+00:00 | Vulnerability · Source |
| CVE-2026-54591 | redhat_vex | asyncssh: AsyncSSH: Arbitrary file write via path traversal in SCP client | known not affected: 1 | 2026-07-09T12:45:11+00:00 | Vulnerability · Source |
| CVE-2026-59928 | redhat_vex | mistune: Mistune: Denial of Service via crafted Markdown document with reference-link definitions | known affected: 25 | 2026-07-09T11:55:15+00:00 | Vulnerability · Source |
| CVE-2026-54267 | redhat_vex | @angular/core: Angular Client Hydration DOM Clobbering & Response-Cache Poisoning | known not affected: 81 | 2026-07-09T11:11:08+00:00 | Vulnerability · Source |
| CVE-2026-53262 | redhat_vex | kernel: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() | known affected: 274 | 2026-07-09T10:45:28+00:00 | Vulnerability · Source |
| CVE-2026-11827 | redhat_vex | gitlab-ee: GitLab EE: Information disclosure via improper authorization controls | known affected: 4 | 2026-07-09T09:35:35+00:00 | Vulnerability · Source |
| CVE-2026-54906 | redhat_vex | concurrent-ruby: rubygem-concurrent-ruby: concurrent-ruby: Synchronization flaw in ReadWriteLock allows unauthorized lock release and denial of service | known not affected: 20 | 2026-07-09T09:22:36+00:00 | Vulnerability · Source |
| CVE-2026-54753 | redhat_vex | Nx: Nx: `nx graph` dev server permissive CORS policy | known affected: 7 | 2026-07-09T09:22:21+00:00 | Vulnerability · Source |
| CVE-2026-45692 | redhat_vex | github.com/caddyserver/caddy/v2: Caddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization | known not affected: 1 | 2026-07-09T09:22:01+00:00 | Vulnerability · Source |
| CVE-2026-31554 | redhat_vex | kernel: futex: Require sys_futex_requeue() to have identical flags | known affected: 184 known not affected: 90 | 2026-07-09T07:53:29+00:00 | Vulnerability · Source |
| CVE-2026-54590 | redhat_vex | AsyncSSH: AsyncSSH: Unauthorized file modification via authorized-keys directory escape | known not affected: 1 | 2026-07-09T07:17:03+00:00 | Vulnerability · Source |
| CVE-2026-15174 | redhat_vex | wireshark: Wireshark: Denial of Service via Catapult DCT2000 protocol dissector crash | known affected: 20 | 2026-07-09T06:59:08+00:00 | Vulnerability · Source |
| CVE-2026-15171 | redhat_vex | wireshark: Wireshark: Denial of service via SSH protocol dissector crash | known affected: 20 | 2026-07-09T06:36:12+00:00 | Vulnerability · Source |
| CVE-2026-15173 | redhat_vex | Wireshark: Wireshark: Denial of Service via pcapng file parser crash | known affected: 20 | 2026-07-09T06:36:11+00:00 | Vulnerability · Source |
| CVE-2026-15170 | redhat_vex | wireshark: Wireshark: Denial of service via Z39.50 protocol dissector crash | known affected: 4 | 2026-07-09T03:59:33+00:00 | Vulnerability · Source |
| CVE-2007-4566 | suse_vex | SUSE CVE CVE-2007-4566 | known not affected: 188 | 2026-07-09T03:50:00+00:00 | Vulnerability · Source |
| CVE-2017-2591 | suse_vex | SUSE CVE CVE-2017-2591 | known not affected: 188 | 2026-07-09T03:47:23+00:00 | Vulnerability · Source |
| CVE-2019-17018 | suse_vex | SUSE CVE CVE-2019-17018 | known affected: 21 | 2026-07-09T03:45:34+00:00 | Vulnerability · Source |
| CVE-2019-17023 | suse_vex | SUSE CVE CVE-2019-17023 | known affected: 21 recommended: 34 | 2026-07-09T03:45:32+00:00 | Vulnerability · Source |
| CVE-2020-6810 | suse_vex | SUSE CVE CVE-2020-6810 | recommended: 9 | 2026-07-09T03:45:11+00:00 | Vulnerability · Source |
| CVE-2020-7753 | suse_vex | SUSE CVE CVE-2020-7753 | recommended: 278 | 2026-07-09T03:45:08+00:00 | Vulnerability · Source |
| CVE-2023-6200 | redhat_vex | kernel: ICMPv6 Router Advertisement packets, aka Linux TCP/IP Remote Code Execution Vulnerability | known not affected: 222 | 2026-07-09T03:44:32+00:00 | Vulnerability · Source |
| CVE-2021-23970 | suse_vex | SUSE CVE CVE-2021-23970 | recommended: 9 | 2026-07-09T03:44:19+00:00 | Vulnerability · Source |
| CVE-2025-1744 | suse_vex | SUSE CVE CVE-2025-1744 | recommended: 17 | 2026-07-09T03:36:56+00:00 | Vulnerability · Source |
| CVE-2026-4893 | suse_vex | SUSE CVE CVE-2026-4893 | known affected: 8 recommended: 42 | 2026-07-09T03:11:34+00:00 | Vulnerability · Source |
| CVE-2026-7017 | suse_vex | SUSE CVE CVE-2026-7017 | recommended: 1 | 2026-07-09T03:11:10+00:00 | Vulnerability · Source |
| CVE-2026-8388 | suse_vex | SUSE CVE CVE-2026-8388 | recommended: 120 | 2026-07-09T03:11:07+00:00 | Vulnerability · Source |
| CVE-2026-8391 | suse_vex | SUSE CVE CVE-2026-8391 | recommended: 120 | 2026-07-09T03:11:04+00:00 | Vulnerability · Source |
| CVE-2026-8401 | suse_vex | SUSE CVE CVE-2026-8401 | recommended: 120 | 2026-07-09T03:11:02+00:00 | Vulnerability · Source |