VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-23884 | redhat_vex | freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability | fixed: 667 known affected: 5 | 2026-06-30T04:15:54+00:00 | Vulnerability · Source |
| CVE-2026-23876 | redhat_vex | ImageMagick: ImageMagick: Arbitrary code execution via a crafted XBM image file | fixed: 51 known affected: 7 | 2026-06-30T04:15:49+00:00 | Vulnerability · Source |
| CVE-2026-23869 | redhat_vex | react-server-dom-parcel: react-server-dom-turbopack: react-server-dom-webpack: denial of service via specially crafted HTTP requests to Server Function endpoints | known not affected: 1 | 2026-06-30T04:15:45+00:00 | Vulnerability · Source |
| CVE-2026-23666 | redhat_vex | dotnet: .NET Framework: Denial of Service via Race Condition | known not affected: 133 | 2026-06-30T04:15:44+00:00 | Vulnerability · Source |
| CVE-2026-23534 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow | fixed: 390 known affected: 5 known not affected: 7 | 2026-06-30T04:15:40+00:00 | Vulnerability · Source |
| CVE-2026-23533 | redhat_vex | freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution | fixed: 667 known affected: 5 | 2026-06-30T04:15:35+00:00 | Vulnerability · Source |
| CVE-2026-23532 | redhat_vex | freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow | fixed: 667 known affected: 5 | 2026-06-30T04:15:31+00:00 | Vulnerability · Source |
| CVE-2026-23531 | redhat_vex | freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and potential code execution. | fixed: 667 known affected: 5 | 2026-06-30T04:15:26+00:00 | Vulnerability · Source |
| CVE-2026-23530 | redhat_vex | freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server. | fixed: 667 known affected: 5 | 2026-06-30T04:15:23+00:00 | Vulnerability · Source |
| CVE-2026-23185 | redhat_vex | kernel: wifi: iwlwifi: mld: cancel mlo_scan_start_wk | known affected: 184 known not affected: 90 | 2026-06-30T04:15:16+00:00 | Vulnerability · Source |
| CVE-2026-23074 | redhat_vex | kernel: Linux kernel: Use-after-free in teql queueing discipline can lead to privilege escalation | fixed: 604 known not affected: 184 | 2026-06-30T04:15:10+00:00 | Vulnerability · Source |
| CVE-2026-22860 | redhat_vex | rubygem-rack: Rack Directory Traversal via Rack:Directory | known affected: 25 known not affected: 21 | 2026-06-30T04:15:08+00:00 | Vulnerability · Source |
| CVE-2026-22822 | redhat_vex | external-secrets: External Secrets Operator: Cross-Namespace Secret Disclosure via `getSecretKey` Function | known affected: 4 known not affected: 4 | 2026-06-30T04:15:04+00:00 | Vulnerability · Source |
| CVE-2026-22754 | redhat_vex | Spring Security: Spring Security: Authorization bypass due to incorrect servlet path matching | known not affected: 18 | 2026-06-30T04:14:59+00:00 | Vulnerability · Source |
| CVE-2026-22747 | redhat_vex | Spring Security: Spring Security: User impersonation via malformed X.509 certificate Common Name (CN) values | known not affected: 18 | 2026-06-30T04:14:55+00:00 | Vulnerability · Source |
| CVE-2026-22016 | redhat_vex | openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04) | fixed: 3262 known affected: 39 | 2026-06-30T04:14:50+00:00 | Vulnerability · Source |
| CVE-2026-21884 | redhat_vex | react-router: @remix-run/react: React Router SSR XSS in ScrollRestoration | fixed: 26 known not affected: 1990 | 2026-06-30T04:14:49+00:00 | Vulnerability · Source |
| CVE-2026-21863 | redhat_vex | valkey: Valkey: Denial of Service via invalid clusterbus packet | fixed: 55 | 2026-06-30T04:14:45+00:00 | Vulnerability · Source |
| CVE-2026-21720 | redhat_vex | grafana: Grafana: Denial of Service via resource exhaustion from avatar requests | known not affected: 23 | 2026-06-30T04:14:39+00:00 | Vulnerability · Source |
| CVE-2026-21710 | redhat_vex | Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header | fixed: 440 | 2026-06-30T04:14:36+00:00 | Vulnerability · Source |
| CVE-2026-21413 | redhat_vex | LibRaw: LibRaw: Arbitrary code execution via heap-based buffer overflow in lossless JPEG loading | fixed: 270 known affected: 10 | 2026-06-30T04:14:34+00:00 | Vulnerability · Source |
| CVE-2026-20911 | redhat_vex | LibRaw: LibRaw: Arbitrary Code Execution via specially crafted file | known affected: 10 known not affected: 6 | 2026-06-30T04:14:31+00:00 | Vulnerability · Source |
| CVE-2026-20889 | redhat_vex | LibRaw: LibRaw: Arbitrary code execution via specially crafted image file | fixed: 96 known affected: 10 known not affected: 3 | 2026-06-30T04:14:30+00:00 | Vulnerability · Source |
| CVE-2026-20736 | redhat_vex | gitea: Gitea Web Attachment Deletion: Cross-Repository Unauthorized Deletion via Missing Repo Ownership Check | known not affected: 9 | 2026-06-30T04:14:27+00:00 | Vulnerability · Source |
| CVE-2026-20664 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:14:25+00:00 | Vulnerability · Source |
| CVE-2026-20636 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:14:22+00:00 | Vulnerability · Source |
| CVE-2026-20635 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:14:21+00:00 | Vulnerability · Source |
| CVE-2026-20608 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:14:19+00:00 | Vulnerability · Source |
| CVE-2026-12773 | redhat_vex | litellm: BerriAI litellm: Improper authentication in MCP Proxy via UserAPIKeyAuth function | known affected: 1 known not affected: 5 | 2026-06-30T04:14:08+00:00 | Vulnerability · Source |
| CVE-2026-11800 | redhat_vex | org.keycloak:keycloak-services: Keycloak: Authentication bypass via JWT algorithm confusion | fixed: 10 known affected: 1 known not affected: 4 | 2026-06-30T04:13:53+00:00 | Vulnerability · Source |
| CVE-2026-10843 | redhat_vex | cloud-credential-operator: CCO Mint-mode CredentialsRequest manifests grant account-wide IAM access beyond cluster scope on AWS | known affected: 2 | 2026-06-30T04:13:45+00:00 | Vulnerability · Source |
| CVE-2026-2492 | redhat_vex | tensorflow: TensorFlow: Local privilege escalation via uncontrolled search path for plugins | fixed: 4 known not affected: 210 | 2026-06-30T04:13:35+00:00 | Vulnerability · Source |
| CVE-2026-10118 | redhat_vex | poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication | fixed: 856 known not affected: 10 | 2026-06-30T04:13:34+00:00 | Vulnerability · Source |
| CVE-2026-2472 | redhat_vex | google-cloud-aiplatform: google-cloud-aiplatform: Arbitrary code execution via Stored Cross-Site Scripting (XSS) | fixed: 2 known not affected: 206 | 2026-06-30T04:13:30+00:00 | Vulnerability · Source |
| CVE-2026-2370 | redhat_vex | GitLab: GitLab: Improper authorization allows credential disclosure and GitLab app impersonation | known not affected: 3 | 2026-06-30T04:13:24+00:00 | Vulnerability · Source |
| CVE-2026-2359 | redhat_vex | multer: Multer: Denial of Service via dropped file upload connections | fixed: 2 known affected: 1 known not affected: 34 | 2026-06-30T04:13:24+00:00 | Vulnerability · Source |
| CVE-2026-2293 | redhat_vex | nestjs: NestJS: Authentication bypass via Fastify path-normalization | known not affected: 2 | 2026-06-30T04:13:20+00:00 | Vulnerability · Source |
| CVE-2026-2092 | redhat_vex | keycloak-services: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions | fixed: 20 | 2026-06-30T04:13:15+00:00 | Vulnerability · Source |
| CVE-2026-2049 | redhat_vex | gimp: gegl: GIMP: Remote Code Execution via HDR File Parsing Heap-based Buffer Overflow | known affected: 32 | 2026-06-30T04:13:10+00:00 | Vulnerability · Source |
| CVE-2026-2047 | redhat_vex | gimp: GIMP: Remote code execution via heap-based buffer overflow in ICNS file parsing | fixed: 24 known affected: 11 known not affected: 18 | 2026-06-30T04:13:07+00:00 | Vulnerability · Source |
| CVE-2026-2048 | redhat_vex | gimp: GIMP: Remote Code Execution via XWD file parsing vulnerability | fixed: 557 known affected: 11 | 2026-06-30T04:13:07+00:00 | Vulnerability · Source |
| CVE-2026-2045 | redhat_vex | gimp: GIMP: Remote Code Execution via out-of-bounds write in XWD file parsing | fixed: 557 known affected: 11 | 2026-06-30T04:13:03+00:00 | Vulnerability · Source |
| CVE-2026-2044 | redhat_vex | gimp: GIMP: Remote Code Execution via uninitialized memory in PGM file parsing | fixed: 557 known affected: 11 | 2026-06-30T04:13:02+00:00 | Vulnerability · Source |
| CVE-2026-2007 | redhat_vex | postgresql: PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory | fixed: 107 known affected: 1 known not affected: 3 | 2026-06-30T04:12:53+00:00 | Vulnerability · Source |
| CVE-2026-2006 | redhat_vex | postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code | fixed: 3674 known affected: 40 known not affected: 6 | 2026-06-30T04:12:50+00:00 | Vulnerability · Source |
| CVE-2026-2005 | redhat_vex | postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code | fixed: 3674 known affected: 40 known not affected: 6 | 2026-06-30T04:12:48+00:00 | Vulnerability · Source |
| CVE-2026-2004 | redhat_vex | postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code | fixed: 3674 known affected: 40 known not affected: 6 | 2026-06-30T04:12:46+00:00 | Vulnerability · Source |
| CVE-2026-1961 | redhat_vex | forman: Foreman: Remote Code Execution via command injection in WebSocket proxy | fixed: 149 known affected: 17 known not affected: 162 | 2026-06-30T04:12:41+00:00 | Vulnerability · Source |
| CVE-2026-1837 | redhat_vex | libjxl: libjxl: Out-of-bounds write in grayscale color transformation when using LCMS2 | known not affected: 15 | 2026-06-30T04:12:37+00:00 | Vulnerability · Source |
| CVE-2026-1761 | redhat_vex | libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response | fixed: 379 known affected: 3 known not affected: 41 | 2026-06-30T04:12:33+00:00 | Vulnerability · Source |