VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
296691 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-43903 | redhat_vex | poppler: SignatureValue not checked within SignerInfo | known affected: 54 | 2026-06-30T03:06:24+00:00 | Vulnerability · Source |
| CVE-2025-43392 | redhat_vex | webkitgtk: A website may exfiltrate image data cross-origin | fixed: 482 known affected: 9 | 2026-06-30T03:06:20+00:00 | Vulnerability · Source |
| CVE-2025-43356 | redhat_vex | webkitgtk: A website may be able to access sensor information without user consent | fixed: 482 known affected: 4 known not affected: 5 | 2026-06-30T03:06:18+00:00 | Vulnerability · Source |
| CVE-2025-41254 | redhat_vex | org.springframework/spring-core: Spring Framework STOMP CSRF Vulnerability | known affected: 34 | 2026-06-30T03:06:16+00:00 | Vulnerability · Source |
| CVE-2025-41242 | redhat_vex | org.springframework/spring-webmvc: Spring Framework MVC path traversal vulnerability | known affected: 26 known not affected: 4 | 2026-06-30T03:06:15+00:00 | Vulnerability · Source |
| CVE-2025-41234 | redhat_vex | springframework: Reflected download attack in Spring Framework with non-ASCII headers | known affected: 37 | 2026-06-30T03:06:11+00:00 | Vulnerability · Source |
| CVE-2025-40928 | redhat_vex | JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON | fixed: 52 | 2026-06-30T03:06:07+00:00 | Vulnerability · Source |
| CVE-2025-40918 | redhat_vex | authen-sasl: Authen::SASL::Perl::DIGEST_MD5 insecure cnonce generation | known affected: 5 | 2026-06-30T03:06:06+00:00 | Vulnerability · Source |
| CVE-2025-14905 | redhat_vex | 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow | fixed: 586 known affected: 6 | 2026-06-30T03:05:16+00:00 | Vulnerability · Source |
| CVE-2025-14242 | redhat_vex | vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing | fixed: 148 known affected: 4 | 2026-06-30T03:05:08+00:00 | Vulnerability · Source |
| CVE-2025-13193 | redhat_vex | libvirt: Information disclosure via world-readable VM snapshots | known affected: 137 | 2026-06-30T03:04:59+00:00 | Vulnerability · Source |
| CVE-2025-12748 | redhat_vex | libvirt: Denial of service in XML parsing | fixed: 672 known affected: 70 | 2026-06-30T03:04:55+00:00 | Vulnerability · Source |
| CVE-2025-12105 | redhat_vex | libsoup: Heap Use-After-Free in libsoup message queue handling during HTTP/2 read completion | fixed: 36 known affected: 3 known not affected: 9 | 2026-06-30T03:04:50+00:00 | Vulnerability · Source |
| CVE-2025-11065 | redhat_vex | github.com/go-viper/mapstructure/v2: Go-viper's mapstructure May Leak Sensitive Information in Logs in github.com/go-viper/mapstructure | known affected: 80 known not affected: 2 | 2026-06-30T03:04:45+00:00 | Vulnerability · Source |
| CVE-2025-1057 | redhat_vex | keylime: Keylime Registrar DoS Due to Incompatible Database Entry Handling | known not affected: 17 | 2026-06-30T03:04:41+00:00 | Vulnerability · Source |
| CVE-2023-32255 | redhat_vex | kernel: Memory leak via ksmbd session setup request with unknown NTLMSSP message type | known not affected: 274 | 2026-06-30T03:04:31+00:00 | Vulnerability · Source |
| CVE-2023-32253 | redhat_vex | kernel: Deadlock in ksmbd_find_crypto_ctx() | known not affected: 274 | 2026-06-30T03:04:30+00:00 | Vulnerability · Source |
| CVE-2023-2593 | redhat_vex | kernel: ksmbd Memory Exhaustion Denial-of-Service Vulnerability | known not affected: 274 | 2026-06-30T03:04:28+00:00 | Vulnerability · Source |
| CVE-2026-44889 | redhat_vex | webob: python-webob: WebOb: Open Redirect vulnerability via HTTP Location header normalization | known affected: 1 known not affected: 11 | 2026-06-30T03:04:27+00:00 | Vulnerability · Source |
| CVE-2026-40962 | redhat_vex | FFmpeg: FFmpeg: Integer overflow and out-of-bounds write via CENC subsample data | known affected: 11 | 2026-06-30T03:04:21+00:00 | Vulnerability · Source |
| CVE-2024-10041 | redhat_vex | pam: libpam: Libpam vulnerable to read hashed password | fixed: 91 known affected: 3 known not affected: 4 | 2026-06-30T03:04:18+00:00 | Vulnerability · Source |
| CVE-2024-21978 | redhat_vex | linux-firmware: hw:amd: Improper input validation in SEV-SNP | known not affected: 60 | 2026-06-30T03:04:16+00:00 | Vulnerability · Source |
| CVE-2024-3661 | redhat_vex | DHCP: DHCP routing options can manipulate interface-based VPN traffic | fixed: 669 known affected: 24 known not affected: 37 | 2026-06-30T03:04:13+00:00 | Vulnerability · Source |
| CVE-2024-10976 | redhat_vex | postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes | fixed: 1045 known affected: 13 | 2026-06-30T03:04:11+00:00 | Vulnerability · Source |
| CVE-2024-10306 | redhat_vex | mod_proxy_cluster: mod_proxy_cluster unauthorized MCMP requests | fixed: 65 known affected: 2 | 2026-06-30T03:04:09+00:00 | Vulnerability · Source |
| CVE-2024-10524 | redhat_vex | wget: GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs | known affected: 7 known not affected: 2 | 2026-06-30T03:04:08+00:00 | Vulnerability · Source |
| CVE-2024-11079 | redhat_vex | ansible-core: Unsafe Tagging Bypass via hostvars Object in Ansible-Core | fixed: 57 known affected: 2 known not affected: 68 | 2026-06-30T03:04:00+00:00 | Vulnerability · Source |
| CVE-2024-10978 | redhat_vex | postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID | fixed: 1045 known affected: 13 | 2026-06-30T03:03:53+00:00 | Vulnerability · Source |
| CVE-2024-11233 | redhat_vex | php: Single byte overread with convert.quoted-printable-decode filter | fixed: 1303 known not affected: 73 | 2026-06-30T03:03:52+00:00 | Vulnerability · Source |
| CVE-2024-11236 | redhat_vex | php: Integer overflow in the firebird and dblib quoters causing OOB writes | known not affected: 245 | 2026-06-30T03:03:49+00:00 | Vulnerability · Source |
| CVE-2024-12747 | redhat_vex | rsync: Race Condition in rsync Handling Symbolic Links | fixed: 46 known affected: 5 known not affected: 2 | 2026-06-30T03:03:44+00:00 | Vulnerability · Source |
| CVE-2024-11234 | redhat_vex | php: Configuring a proxy in a stream context might allow for CRLF injection in URIs | fixed: 1303 known affected: 73 | 2026-06-30T03:03:36+00:00 | Vulnerability · Source |
| CVE-2024-12087 | redhat_vex | rsync: Path traversal vulnerability in rsync | fixed: 156 known affected: 1 known not affected: 2 | 2026-06-30T03:03:35+00:00 | Vulnerability · Source |
| CVE-2024-52616 | redhat_vex | avahi: Avahi Wide-Area DNS Predictable Transaction IDs | fixed: 259 known affected: 42 | 2026-06-30T03:03:28+00:00 | Vulnerability · Source |
| CVE-2024-45776 | redhat_vex | grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. | fixed: 80 known affected: 1 known not affected: 41 | 2026-06-30T03:03:25+00:00 | Vulnerability · Source |
| CVE-2024-5290 | redhat_vex | wpa_supplicant: wpa_supplicant loading arbitrary shared objects allowing privilege escalation | known affected: 5 known not affected: 4 | 2026-06-30T03:03:24+00:00 | Vulnerability · Source |
| CVE-2024-45774 | redhat_vex | grub2: reader/jpeg: Heap OOB Write during JPEG parsing | fixed: 40 known affected: 42 known not affected: 16 | 2026-06-30T03:03:20+00:00 | Vulnerability · Source |
| CVE-2024-53008 | redhat_vex | HAProxy: HTTP request smuggling in HAProxy | known affected: 6 known not affected: 8 | 2026-06-30T03:03:18+00:00 | Vulnerability · Source |
| CVE-2024-52615 | redhat_vex | avahi: Avahi Wide-Area DNS Uses Constant Source Port | fixed: 444 known affected: 42 | 2026-06-30T03:03:16+00:00 | Vulnerability · Source |
| CVE-2024-51741 | redhat_vex | redis: Redis allows denial-of-service due to malformed ACL selectors | fixed: 18 known not affected: 18 | 2026-06-30T03:03:15+00:00 | Vulnerability · Source |
| CVE-2024-56332 | redhat_vex | next.js: Next.js Vulnerable to Denial of Service (DoS) with Server Actions | fixed: 1 known affected: 19 known not affected: 10 | 2026-06-30T03:03:10+00:00 | Vulnerability · Source |
| CVE-2024-53382 | redhat_vex | prismjs: DOM Clobbering vulnerability within the Prism library's prism-autoloader plugin | fixed: 26 known affected: 46 known not affected: 25 | 2026-06-30T03:03:03+00:00 | Vulnerability · Source |
| CVE-2024-8418 | redhat_vex | containers/aardvark-dns: TCP Query Handling Flaw in Aardvark-dns Leading to Denial of Service | fixed: 13 known not affected: 11 | 2026-06-30T03:03:01+00:00 | Vulnerability · Source |
| CVE-2024-8932 | redhat_vex | php: OOB access in ldap_escape | known not affected: 245 | 2026-06-30T03:02:59+00:00 | Vulnerability · Source |
| CVE-2025-0577 | redhat_vex | glibc: vDSO getrandom acceleration may return predictable randomness | known not affected: 669 | 2026-06-30T03:02:54+00:00 | Vulnerability · Source |
| CVE-2024-8006 | redhat_vex | libpcap: NULL pointer derefence in pcap_findalldevs_ex() in pcap-new.c | known affected: 4 known not affected: 8 | 2026-06-30T03:02:53+00:00 | Vulnerability · Source |
| CVE-2025-0306 | redhat_vex | ruby: openssl: Ruby Marvin Attack | known affected: 141 known not affected: 141 | 2026-06-30T03:02:45+00:00 | Vulnerability · Source |
| CVE-2024-6485 | redhat_vex | bootstrap: Cross-Site Scripting via button plugin on bootstrap | fixed: 4 known affected: 107 known not affected: 123 | 2026-06-30T03:02:44+00:00 | Vulnerability · Source |
| CVE-2025-1272 | redhat_vex | kernel: Secure Boot does not automatically enable kernel lockdown | fixed: 305 known affected: 22 known not affected: 167 | 2026-06-30T03:02:39+00:00 | Vulnerability · Source |
| CVE-2024-8250 | redhat_vex | wireshark: NTLMSSP dissector crash | known affected: 4 known not affected: 16 | 2026-06-30T03:02:39+00:00 | Vulnerability · Source |