VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294458 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-53345 | redhat_vex | kernel: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying | known not affected: 274 | 2026-07-01T19:51:55+00:00 | Vulnerability · Source |
| CVE-2026-53343 | redhat_vex | kernel: ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow | known not affected: 274 | 2026-07-01T19:51:52+00:00 | Vulnerability · Source |
| CVE-2026-53328 | redhat_vex | kernel: sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task() | known not affected: 274 | 2026-07-01T19:51:46+00:00 | Vulnerability · Source |
| CVE-2026-53332 | redhat_vex | kernel: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd | known not affected: 274 | 2026-07-01T19:42:47+00:00 | Vulnerability · Source |
| CVE-2026-53335 | redhat_vex | kernel: mm/damon/lru_sort: handle ctx allocation failure | known not affected: 274 | 2026-07-01T19:42:37+00:00 | Vulnerability · Source |
| CVE-2026-53344 | redhat_vex | kernel: pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init | known not affected: 274 | 2026-07-01T19:41:16+00:00 | Vulnerability · Source |
| CVE-2026-7258 | redhat_vex | PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions | fixed: 1721 known affected: 56 | 2026-07-01T19:40:02+00:00 | Vulnerability · Source |
| CVE-2026-6735 | redhat_vex | PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation | fixed: 1721 known affected: 56 | 2026-07-01T19:40:01+00:00 | Vulnerability · Source |
| CVE-2026-53342 | redhat_vex | kernel: arm64: mm: call pagetable dtor when freeing hot-removed page tables | known not affected: 274 | 2026-07-01T19:21:36+00:00 | Vulnerability · Source |
| CVE-2026-58521 | redhat_vex | mediawiki-cargo-extension: Mediawiki - Cargo Extension: SQL Injection vulnerability allows information disclosure and data manipulation. | known not affected: 1 | 2026-07-01T19:17:11+00:00 | Vulnerability · Source |
| CVE-2026-7568 | redhat_vex | php: signed integer overflow in metaphone() | fixed: 1718 known not affected: 55 | 2026-07-01T18:57:21+00:00 | Vulnerability · Source |
| CVE-2026-7262 | redhat_vex | php: NULL pointer dereference in SOAP apache:Map decoder with missing <value> | fixed: 1718 known not affected: 55 | 2026-07-01T18:57:12+00:00 | Vulnerability · Source |
| CVE-2026-53336 | redhat_vex | kernel: nvmem: layouts: onie-tlv: fix hang on unknown types | known not affected: 274 | 2026-07-01T16:54:13+00:00 | Vulnerability · Source |
| CVE-2026-53331 | redhat_vex | kernel: slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock | known not affected: 274 | 2026-07-01T16:50:31+00:00 | Vulnerability · Source |
| CVE-2026-58031 | redhat_vex | MediaWiki: MediaWiki: Cross-site scripting vulnerability due to improper input neutralization | known not affected: 1 | 2026-07-01T15:46:24+00:00 | Vulnerability · Source |
| CVE-2026-41001 | redhat_vex | spring-boot: Spring Boot: Local attacker can manipulate data directory due to predictable path | known affected: 9 known not affected: 2 | 2026-07-01T15:46:14+00:00 | Vulnerability · Source |
| CVE-2026-41697 | redhat_vex | Spring Data Relational: Spring Data Relational: Information disclosure via improper input escaping in Query By Example | known affected: 1 | 2026-07-01T15:34:25+00:00 | Vulnerability · Source |
| CVE-2026-41721 | redhat_vex | Spring Data Commons: Spring Data Commons: Denial of Service via specially crafted HTTP request with @ProjectedPayload | known affected: 5 | 2026-07-01T15:32:27+00:00 | Vulnerability · Source |
| CVE-2026-41719 | redhat_vex | spring-data-keyvalue: spring-data-redis: Spring Data KeyValue: Information Disclosure via SpEL Injection | known affected: 5 | 2026-07-01T15:32:23+00:00 | Vulnerability · Source |
| CVE-2026-41711 | redhat_vex | Spring Data Commons: Spring Data Commons: Denial of Service via parsing Sort parameters | known affected: 5 | 2026-07-01T15:32:20+00:00 | Vulnerability · Source |
| CVE-2026-13083 | redhat_vex | pen-drive: pen-drive: stored XSS via unescaped cluster data in HTML report | known affected: 1 | 2026-07-01T15:32:01+00:00 | Vulnerability · Source |
| CVE-2026-23537 | redhat_vex | feast: Unauthenticated Arbitrary File Write | known not affected: 14 | 2026-07-01T15:24:04+00:00 | Vulnerability · Source |
| CVE-2026-56016 | redhat_vex | perl-CGI-Session: perl-CGI-Session: Authentication bypass via predictable session IDs | known affected: 2 | 2026-07-01T15:12:21+00:00 | Vulnerability · Source |
| CVE-2026-56377 | redhat_vex | Imagemagick: ImageMagick - Policy Bypass via Incorrect Path Validation | known affected: 14 | 2026-07-01T15:02:42+00:00 | Vulnerability · Source |
| CVE-2026-41992 | microsoft_vex | Global Buffer Overflow in GNU gzip | fixed: 2 known affected: 2 | 2026-07-01T14:48:18+00:00 | Vulnerability · Source |
| CVE-2026-54369 | microsoft_vex | acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions | known affected: 2 | 2026-07-01T14:47:53+00:00 | Vulnerability · Source |
| CVE-2026-48142 | microsoft_vex | NGINX ngx_http_charset_module vulnerability | fixed: 2 known affected: 3 | 2026-07-01T14:47:22+00:00 | Vulnerability · Source |
| CVE-2026-57062 | microsoft_vex | CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182. | fixed: 2 known affected: 2 | 2026-07-01T14:47:15+00:00 | Vulnerability · Source |
| CVE-2026-55203 | microsoft_vex | HAProxy - Integer Overflow in FCGI Demux Record Length Field | fixed: 2 known affected: 2 | 2026-07-01T14:44:40+00:00 | Vulnerability · Source |
| CVE-2021-33623 | redhat_vex | nodejs-trim-newlines: ReDoS in .end() method | fixed: 6 known affected: 14 known not affected: 134 | 2026-07-01T14:42:57+00:00 | Vulnerability · Source |
| CVE-2020-7753 | redhat_vex | nodejs-trim: Regular Expression Denial of Service (ReDoS) in trim function | fixed: 4 known affected: 1 known not affected: 93 | 2026-07-01T14:42:57+00:00 | Vulnerability · Source |
| CVE-2026-55204 | microsoft_vex | HAProxy - NULL Pointer Dereference in hpack_dht_insert Function | fixed: 2 known affected: 2 | 2026-07-01T14:42:43+00:00 | Vulnerability · Source |
| CVE-2026-48914 | microsoft_vex | Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling | fixed: 3 known affected: 3 | 2026-07-01T14:41:57+00:00 | Vulnerability · Source |
| CVE-2026-44967 | microsoft_vex | opentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response | fixed: 2 known affected: 2 known not affected: 1 | 2026-07-01T14:41:51+00:00 | Vulnerability · Source |
| CVE-2026-43894 | microsoft_vex | jq: Wild stack write via signed-integer overflow in decNumber D2U() macro | known affected: 3 | 2026-07-01T14:41:34+00:00 | Vulnerability · Source |
| CVE-2025-9403 | microsoft_vex | jqlang jq JSON jq_test.c run_jq_tests assertion | fixed: 4 known affected: 5 | 2026-07-01T14:41:28+00:00 | Vulnerability · Source |
| CVE-2025-1180 | microsoft_vex | GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption | fixed: 2 known affected: 21 | 2026-07-01T14:40:58+00:00 | Vulnerability · Source |
| CVE-2025-1150 | microsoft_vex | GNU Binutils ld libbfd.c bfd_malloc memory leak | known affected: 19 | 2026-07-01T14:40:52+00:00 | Vulnerability · Source |
| CVE-2025-1149 | microsoft_vex | GNU Binutils ld xmalloc.c xstrdup memory leak | known affected: 4 under investigation: 27 | 2026-07-01T14:40:40+00:00 | Vulnerability · Source |
| CVE-2025-1151 | microsoft_vex | GNU Binutils ld xmemdup.c xmemdup memory leak | known affected: 30 | 2026-07-01T14:40:31+00:00 | Vulnerability · Source |
| CVE-2023-50230 | redhat_vex | bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability | fixed: 134 known affected: 21 known not affected: 5 | 2026-07-01T14:39:46+00:00 | Vulnerability · Source |
| CVE-2026-13484 | redhat_vex | mlflow: MLflow: Unauthorized access and data manipulation via missing API authorization | known affected: 19 | 2026-07-01T14:20:39+00:00 | Vulnerability · Source |
| CVE-2026-56116 | redhat_vex | dhcpcd: dhcpcd: Denial of Service via IPv6 Router Advertisement memory leak | known affected: 1 | 2026-07-01T14:13:02+00:00 | Vulnerability · Source |
| CVE-2026-52956 | redhat_vex | kernel: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() | known affected: 260 known not affected: 14 | 2026-07-01T14:08:27+00:00 | Vulnerability · Source |
| CVE-2026-53194 | redhat_vex | kernel: USB: serial: kl5kusb105: fix bulk-out buffer overflow | known affected: 260 known not affected: 14 | 2026-07-01T14:08:18+00:00 | Vulnerability · Source |
| CVE-2026-52945 | redhat_vex | kernel: Revert "wireguard: device: enable threaded NAPI" | known affected: 184 known not affected: 90 | 2026-07-01T14:08:13+00:00 | Vulnerability · Source |
| CVE-2026-43958 | redhat_vex | rrdtool: rrdtool: Stack buffer overflow allows local code execution or denial of service | fixed: 299 known affected: 17 | 2026-07-01T14:07:17+00:00 | Vulnerability · Source |
| CVE-2026-23191 | redhat_vex | kernel: ALSA: aloop: Fix racy access at PCM trigger | fixed: 2084 known affected: 22 known not affected: 14 | 2026-07-01T14:06:06+00:00 | Vulnerability · Source |
| CVE-2025-21691 | redhat_vex | kernel: cachestat: fix page cache statistics permission checking | fixed: 917 known affected: 64 known not affected: 48 | 2026-07-01T14:06:02+00:00 | Vulnerability · Source |
| CVE-2025-21648 | redhat_vex | kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX | fixed: 608 known affected: 112 known not affected: 76 | 2026-07-01T14:06:02+00:00 | Vulnerability · Source |