VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297518 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-1669 | redhat_vex | keras: Keras: Information disclosure via arbitrary file read in model loading mechanism | known affected: 10 | 2026-06-30T04:12:30+00:00 | Vulnerability · Source |
| CVE-2026-1531 | redhat_vex | foreman-kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification | fixed: 93 known affected: 1 known not affected: 218 | 2026-06-30T04:12:21+00:00 | Vulnerability · Source |
| CVE-2026-1530 | redhat_vex | fog-kubevirt: fog-kubevirt: Man-in-the-Middle vulnerability due to disabled certificate validation | fixed: 91 known affected: 1 known not affected: 155 | 2026-06-30T04:12:18+00:00 | Vulnerability · Source |
| CVE-2026-1529 | redhat_vex | org.keycloak.services.resources.organizations: Keycloak: Unauthorized organization registration via improper invitation token validation | fixed: 20 | 2026-06-30T04:12:16+00:00 | Vulnerability · Source |
| CVE-2026-1486 | redhat_vex | org.keycloak.protocol.oidc.grants: Disabled identity providers are still accepted for JWT Authorization Grant | fixed: 10 | 2026-06-30T04:12:04+00:00 | Vulnerability · Source |
| CVE-2026-1312 | redhat_vex | Django: Django: SQL injection via crafted column aliases in QuerySet.order_by() | fixed: 122 known affected: 6 known not affected: 4552 | 2026-06-30T04:11:56+00:00 | Vulnerability · Source |
| CVE-2026-1260 | redhat_vex | sentencepiece: Sentencepiece: Invalid memory access leading to potential arbitrary code execution via a crafted model file. | fixed: 6 known affected: 2 known not affected: 451 | 2026-06-30T04:11:50+00:00 | Vulnerability · Source |
| CVE-2026-0897 | redhat_vex | Keras: Keras: Denial of Service via crafted HDF5 weight loading file | fixed: 16 known affected: 1 known not affected: 429 | 2026-06-30T04:11:43+00:00 | Vulnerability · Source |
| CVE-2026-0879 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component | fixed: 320 known affected: 8 | 2026-06-30T04:11:36+00:00 | Vulnerability · Source |
| CVE-2026-0847 | redhat_vex | nltk: NLTK: Arbitrary file read via path traversal vulnerability | fixed: 4 known affected: 6 known not affected: 467 | 2026-06-30T04:11:31+00:00 | Vulnerability · Source |
| CVE-2026-0846 | redhat_vex | nltk: NLTK: Arbitrary file read via improper path validation in `filestring()` function | fixed: 4 known affected: 6 known not affected: 467 | 2026-06-30T04:11:28+00:00 | Vulnerability · Source |
| CVE-2026-0797 | redhat_vex | gimp: GIMP: Remote Code Execution via ICO File Parsing Vulnerability | fixed: 557 known affected: 11 | 2026-06-30T04:11:24+00:00 | Vulnerability · Source |
| CVE-2026-0775 | redhat_vex | npmcli: npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability | known not affected: 258 | 2026-06-30T04:11:21+00:00 | Vulnerability · Source |
| CVE-2026-0719 | redhat_vex | libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication | fixed: 361 known affected: 3 known not affected: 41 | 2026-06-30T04:11:18+00:00 | Vulnerability · Source |
| CVE-2025-70071 | redhat_vex | Assimp: Assimp: Denial of Service via FBXParser.cpp ParseVectorDataArray() function | known not affected: 8 | 2026-06-30T04:10:58+00:00 | Vulnerability · Source |
| CVE-2025-68616 | redhat_vex | WeasyPrint: WeasyPrint Server-Side Request Forgery (SSRF) | known affected: 1 | 2026-06-30T04:10:47+00:00 | Vulnerability · Source |
| CVE-2025-67733 | redhat_vex | Valkey: Valkey: Data tampering and denial of service via improper null character handling in Lua scripts | fixed: 51 | 2026-06-30T04:10:41+00:00 | Vulnerability · Source |
| CVE-2025-59465 | redhat_vex | nodejs: Nodejs denial of service | fixed: 456 | 2026-06-30T04:10:30+00:00 | Vulnerability · Source |
| CVE-2025-59032 | redhat_vex | dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command | fixed: 738 known affected: 6 | 2026-06-30T04:10:22+00:00 | Vulnerability · Source |
| CVE-2025-55131 | redhat_vex | nodejs: Nodejs uninitialized memory exposure | fixed: 456 | 2026-06-30T04:10:15+00:00 | Vulnerability · Source |
| CVE-2025-55130 | redhat_vex | nodejs: Nodejs file permissions bypass | fixed: 456 | 2026-06-30T04:10:14+00:00 | Vulnerability · Source |
| CVE-2025-54502 | redhat_vex | AMD Platform Configuration Blob: APCB SMM driver: kernel: linux-firmware: AMD APCB SMM driver: Arbitrary Code Execution via incorrect boot service use | known not affected: 275 | 2026-06-30T04:10:09+00:00 | Vulnerability · Source |
| CVE-2025-43511 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:10:06+00:00 | Vulnerability · Source |
| CVE-2025-43457 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:10:04+00:00 | Vulnerability · Source |
| CVE-2025-43214 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:09:58+00:00 | Vulnerability · Source |
| CVE-2025-35998 | redhat_vex | Intel (R): From CVEorg collector | fixed: 2 known affected: 3 known not affected: 6 | 2026-06-30T04:09:48+00:00 | Vulnerability · Source |
| CVE-2025-24293 | redhat_vex | activestorage: Code injection in Active Storage when used in conjunction with the image_processing gem | known not affected: 19 | 2026-06-30T04:09:47+00:00 | Vulnerability · Source |
| CVE-2025-15558 | redhat_vex | docker/cli: Docker CLI for Windows: Privilege escalation via malicious plugin binaries | known not affected: 143 | 2026-06-30T04:09:42+00:00 | Vulnerability · Source |
| CVE-2025-15381 | redhat_vex | mlflow/mlflow: mlflow/mlflow: Information disclosure and unauthorized data modification via unprotected tracing and assessment endpoints | known not affected: 2 | 2026-06-30T04:09:38+00:00 | Vulnerability · Source |
| CVE-2025-15059 | redhat_vex | gimp: heap-based buffer overflow via specially crafted PSP file | fixed: 144 known affected: 6 known not affected: 23 | 2026-06-30T04:09:34+00:00 | Vulnerability · Source |
| CVE-2025-15036 | redhat_vex | mlflow: mlflow: Path traversal vulnerability allows arbitrary file overwrite and privilege escalation | known affected: 1 known not affected: 1 | 2026-06-30T04:09:33+00:00 | Vulnerability · Source |
| CVE-2025-15031 | redhat_vex | mlflow/mlflow: Path Traversal Vulnerability in mlflow/mlflow | known affected: 1 | 2026-06-30T04:09:30+00:00 | Vulnerability · Source |
| CVE-2025-14576 | redhat_vex | qt: Qt SVG: Arbitrary QML/JavaScript code injection via malicious SVG file | fixed: 122 known affected: 3 known not affected: 57 | 2026-06-30T04:09:24+00:00 | Vulnerability · Source |
| CVE-2025-14287 | redhat_vex | mlflow: MLflow: Arbitrary command execution via unsanitized container image names | known affected: 1 known not affected: 1 | 2026-06-30T04:09:21+00:00 | Vulnerability · Source |
| CVE-2025-14179 | redhat_vex | php: SQL injection in pdo_firebird via NUL bytes in quoted strings | known affected: 26 known not affected: 253 | 2026-06-30T04:09:19+00:00 | Vulnerability · Source |
| CVE-2025-14009 | redhat_vex | nltk: Zip Slip Vulnerability in nltk Leading to Code Execution | fixed: 6 known affected: 5 known not affected: 202 | 2026-06-30T04:09:14+00:00 | Vulnerability · Source |
| CVE-2025-13772 | redhat_vex | gitlab: GitLab: Unauthorized access to AI model settings via namespace identifier manipulation | known not affected: 3 | 2026-06-30T04:09:11+00:00 | Vulnerability · Source |
| CVE-2025-13761 | redhat_vex | gitlab: GitLab: Cross-Site Scripting Vulnerability Leading to Arbitrary Code Execution | known not affected: 3 | 2026-06-30T04:09:08+00:00 | Vulnerability · Source |
| CVE-2025-11157 | redhat_vex | feast: Feast: Remote Code Execution via insecure YAML deserialization | fixed: 3 known affected: 13 known not affected: 205 | 2026-06-30T04:09:02+00:00 | Vulnerability · Source |
| CVE-2025-9222 | redhat_vex | gitlab: GitLab: Stored Cross-Site Scripting via GitLab Flavored Markdown | known not affected: 3 | 2026-06-30T04:08:56+00:00 | Vulnerability · Source |
| CVE-2019-25695 | redhat_vex | R: www.r-project.org: R: Arbitrary Code Execution via Local Buffer Overflow | known not affected: 1 | 2026-06-30T04:08:48+00:00 | Vulnerability · Source |
| CVE-2006-10003 | redhat_vex | perl-xml-parser: XML::Parser: Memory corruption via deeply nested XML files | fixed: 157 known affected: 1 | 2026-06-30T04:08:45+00:00 | Vulnerability · Source |
| CVE-2026-33908 | redhat_vex | ImageMagick: Magick.NET: ImageMagick: Denial of Service via deeply nested XML file processing | known affected: 14 | 2026-06-30T04:08:33+00:00 | Vulnerability · Source |
| CVE-2026-33901 | redhat_vex | ImageMagick: Magick.NET: ImageMagick: Denial of Service due to heap buffer overflow in MVG decoder | known affected: 14 | 2026-06-30T04:08:31+00:00 | Vulnerability · Source |
| CVE-2026-33806 | redhat_vex | fastify: Fastify: Schema validation bypass via malformed Content-Type header | known not affected: 9 | 2026-06-30T04:08:02+00:00 | Vulnerability · Source |
| CVE-2026-33805 | redhat_vex | @fastify/reply-from: @fastify/http-proxy: Fastify Reply From and HTTP Proxy: Security bypass via Connection header manipulation | fixed: 4 known affected: 4 known not affected: 58 | 2026-06-30T04:08:01+00:00 | Vulnerability · Source |
| CVE-2026-33758 | redhat_vex | OpenBao: reflected XSS in OpenBao OIDC authentication error message | known not affected: 1 | 2026-06-30T04:07:58+00:00 | Vulnerability · Source |
| CVE-2026-33757 | redhat_vex | OpenBao: lack of user confirmation for OpenBao OIDC direct callback mode | known not affected: 1 | 2026-06-30T04:07:57+00:00 | Vulnerability · Source |
| CVE-2026-33557 | redhat_vex | kafka: Apache Kafka: Authentication bypass via improper JWT validation | known affected: 3 known not affected: 29 | 2026-06-30T04:07:50+00:00 | Vulnerability · Source |
| CVE-2026-33526 | redhat_vex | squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling | fixed: 217 known affected: 4 known not affected: 16 | 2026-06-30T04:07:49+00:00 | Vulnerability · Source |