VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-41140 | microsoft_vex | Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4 | fixed: 2 known affected: 3 | 2026-06-28T14:01:43+00:00 | Vulnerability · Source |
| CVE-2026-31592 | microsoft_vex | KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock | known affected: 8 | 2026-06-28T14:01:28+00:00 | Vulnerability · Source |
| CVE-2026-31579 | microsoft_vex | wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit | known affected: 8 | 2026-06-28T14:01:20+00:00 | Vulnerability · Source |
| CVE-2026-44073 | redhat_vex | netatalk: Netatalk: Security bypass due to ignored seteuid failure in authentication modules | known not affected: 1 | 2026-06-28T12:05:40+00:00 | Vulnerability · Source |
| CVE-2026-44072 | redhat_vex | netatalk: Netatalk: Low impact to integrity and availability via unintended command execution after failed directory change | known not affected: 1 | 2026-06-28T12:05:37+00:00 | Vulnerability · Source |
| CVE-2026-44050 | redhat_vex | netatalk: Netatalk: Arbitrary code execution via heap buffer overflow in cnid daemon | known not affected: 1 | 2026-06-28T12:05:37+00:00 | Vulnerability · Source |
| CVE-2021-29657 | redhat_vex | kernel: KVM: double fetch in nested_svm_vmrun can lead to unrestricted MSR access | fixed: 120 known affected: 16 known not affected: 149 | 2026-06-28T12:05:37+00:00 | Vulnerability · Source |
| CVE-2026-44064 | redhat_vex | netatalk: ASP session ID out-of-bounds access | known not affected: 1 | 2026-06-28T12:05:35+00:00 | Vulnerability · Source |
| CVE-2020-36158 | redhat_vex | kernel: buffer overflow in mwifiex_cmd_802_11_ad_hoc_start function in drivers/net/wireless/marvell/mwifiex/join.c via a long SSID value | fixed: 150 known affected: 44 known not affected: 106 | 2026-06-28T12:05:35+00:00 | Vulnerability · Source |
| CVE-2021-29265 | redhat_vex | kernel: race conditions in usbip_sockfd_store function in drivers/usb/usbip/stub_dev.c can lead to DoS | known not affected: 197 | 2026-06-28T12:05:35+00:00 | Vulnerability · Source |
| CVE-2025-3573 | redhat_vex | jquery-validation: XSS Vulnerability in jquery-validation | known affected: 49 | 2026-06-28T12:05:34+00:00 | Vulnerability · Source |
| CVE-2026-44062 | redhat_vex | netatalk: Netatalk: Arbitrary code execution or denial of service due to missing bounds check | known not affected: 1 | 2026-06-28T12:05:33+00:00 | Vulnerability · Source |
| CVE-2021-29155 | redhat_vex | kernel: protection for sequences of pointer arithmetic operations against speculatively out-of-bounds loads can be bypassed to leak content of kernel memory | fixed: 150 known affected: 28 known not affected: 121 | 2026-06-28T12:05:33+00:00 | Vulnerability · Source |
| CVE-2020-13765 | redhat_vex | QEMU: loader: OOB access while loading registered ROM may lead to code execution | fixed: 24 known affected: 21 known not affected: 39 | 2026-06-28T12:05:33+00:00 | Vulnerability · Source |
| CVE-2015-6838 | redhat_vex | php: NULL pointer dereference in XSLTProcessor class | fixed: 240 known affected: 110 | 2026-06-28T12:05:33+00:00 | Vulnerability · Source |
| CVE-2026-44057 | redhat_vex | netatalk: Netatalk: Information disclosure via crafted Spotlight RPC requests | known not affected: 1 | 2026-06-28T12:05:33+00:00 | Vulnerability · Source |
| CVE-2021-29154 | redhat_vex | kernel: Local privilege escalation due to incorrect BPF JIT branch displacement computation | fixed: 335 known affected: 16 known not affected: 121 | 2026-06-28T12:05:30+00:00 | Vulnerability · Source |
| CVE-2026-44063 | redhat_vex | netatalk: Netatalk: Information disclosure and data modification via LDAP filter injection | known not affected: 1 | 2026-06-28T12:05:28+00:00 | Vulnerability · Source |
| CVE-2021-28950 | redhat_vex | kernel: fuse: stall on CPU can occur because a retry loop continually finds the same bad inode | fixed: 300 known affected: 14 known not affected: 135 | 2026-06-28T12:05:26+00:00 | Vulnerability · Source |
| CVE-2026-44060 | redhat_vex | netatalk: Netatalk: Denial of Service via integer underflow | known not affected: 1 | 2026-06-28T12:05:26+00:00 | Vulnerability · Source |
| CVE-2026-44055 | redhat_vex | netatalk: Netatalk: Arbitrary code execution via shell injection | known not affected: 1 | 2026-06-28T12:05:25+00:00 | Vulnerability · Source |
| CVE-2026-6363 | redhat_vex | chromium-browser: Type Confusion in V8 | known not affected: 1 | 2026-06-28T12:05:25+00:00 | Vulnerability · Source |
| CVE-2020-2901 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020) | fixed: 337 known affected: 3 known not affected: 98 | 2026-06-28T12:05:25+00:00 | Vulnerability · Source |
| CVE-2026-44049 | redhat_vex | netatalk: Netatalk: Arbitrary code execution via out-of-bounds write | known not affected: 1 | 2026-06-28T12:05:24+00:00 | Vulnerability · Source |
| CVE-2019-5851 | redhat_vex | chromium-browser: Use-after-poison in offline audio context | fixed: 14 | 2026-06-28T12:05:23+00:00 | Vulnerability · Source |
| CVE-2025-59538 | redhat_vex | github.com/argoproj/argo-cd: Argo CD unauthenticated Remote Denial of Service | fixed: 31 known affected: 4 known not affected: 93 | 2026-06-28T12:05:22+00:00 | Vulnerability · Source |
| CVE-2019-5824 | redhat_vex | chromium-browser: parameter passing error in media player leading to unauthorized access | fixed: 14 | 2026-06-28T12:05:21+00:00 | Vulnerability · Source |
| CVE-2026-31622 | redhat_vex | kernel: NFC: digital: Bounds check NFC-A cascade depth in SDD response handler | known not affected: 274 | 2026-06-28T12:05:20+00:00 | Vulnerability · Source |
| CVE-2026-33261 | redhat_vex | pdns-recursor: NULL pointer access in aggressive NSEC(3) cache | known not affected: 1 | 2026-06-28T12:05:20+00:00 | Vulnerability · Source |
| CVE-2020-28374 | redhat_vex | kernel: SCSI target (LIO) write to any block on ILO backstore | fixed: 1200 known affected: 28 known not affected: 15 | 2026-06-28T12:05:20+00:00 | Vulnerability · Source |
| CVE-2026-32889 | redhat_vex | tinytag: tinytag: Denial of Service via malicious MP3 file parsing | known affected: 1 | 2026-06-28T12:05:18+00:00 | Vulnerability · Source |
| CVE-2020-11080 | redhat_vex | nghttp2: overly large SETTINGS frames can lead to DoS | fixed: 539 known not affected: 14 | 2026-06-28T12:05:18+00:00 | Vulnerability · Source |
| CVE-2020-2897 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020) | fixed: 337 known affected: 3 known not affected: 98 | 2026-06-28T12:05:17+00:00 | Vulnerability · Source |
| CVE-2020-2896 | redhat_vex | mysql: Server: Information Schema unspecified vulnerability (CPU Apr 2020) | fixed: 337 known affected: 3 known not affected: 98 | 2026-06-28T12:05:17+00:00 | Vulnerability · Source |
| CVE-2019-5764 | redhat_vex | chromium-browser: Use after free in WebRTC | fixed: 12 | 2026-06-28T12:05:15+00:00 | Vulnerability · Source |
| CVE-2026-48103 | redhat_vex | 7-Zip: off-by-one heap-based buffer over-read in the WIM archive handler | known not affected: 1 | 2026-06-28T12:05:14+00:00 | Vulnerability · Source |
| CVE-2020-28588 | redhat_vex | kernel: information leak in the syscall implementation on 32-bit systems | known not affected: 197 | 2026-06-28T12:05:13+00:00 | Vulnerability · Source |
| CVE-2026-48112 | redhat_vex | 7-Zip: heap-based buffer over-read in the Ar handler BSD SYMDEF parser | known not affected: 1 | 2026-06-28T12:05:13+00:00 | Vulnerability · Source |
| CVE-2026-23212 | redhat_vex | kernel: bonding: annotate data-races around slave->last_rx | known affected: 274 | 2026-06-28T12:05:13+00:00 | Vulnerability · Source |
| CVE-2025-9136 | redhat_vex | RetroArch: libretro RetroArch file_stream.c filestream_vscanf out-of-bounds | known not affected: 1 | 2026-06-28T12:05:10+00:00 | Vulnerability · Source |
| CVE-2019-5489 | redhat_vex | Kernel: page cache side channel attacks | fixed: 1198 | 2026-06-28T12:05:08+00:00 | Vulnerability · Source |
| CVE-2025-59682 | redhat_vex | django: Potential partial directory-traversal via archive.extract() | fixed: 26 known affected: 7 known not affected: 512 | 2026-06-28T12:05:07+00:00 | Vulnerability · Source |
| CVE-2026-32837 | redhat_vex | miniaudio: miniaudio: Denial of Service via crafted WAV files due to heap out-of-bounds read | known not affected: 1 | 2026-06-28T12:05:06+00:00 | Vulnerability · Source |
| CVE-2019-10207 | redhat_vex | kernel: null-pointer dereference in hci_uart_set_flow_control | fixed: 361 known affected: 16 known not affected: 15 | 2026-06-28T12:05:05+00:00 | Vulnerability · Source |
| CVE-2013-1518 | redhat_vex | OpenJDK: JAXP missing security restrictions (JAXP, 6657673) | fixed: 243 | 2026-06-28T12:05:04+00:00 | Vulnerability · Source |
| CVE-2020-2804 | redhat_vex | mysql: Server: Memcached unspecified vulnerability (CPU Apr 2020) | fixed: 337 known affected: 3 known not affected: 98 | 2026-06-28T12:05:02+00:00 | Vulnerability · Source |
| CVE-2013-1488 | redhat_vex | OpenJDK: JDBC driver manager improper toString calls (CanSecWest 2013, Libraries, 8009814) | fixed: 272 known not affected: 13 | 2026-06-28T12:05:02+00:00 | Vulnerability · Source |
| CVE-2013-1484 | redhat_vex | OpenJDK: MethodHandleProxies insufficient privilege checks (Libraries, 8004937) | fixed: 202 known not affected: 37 | 2026-06-28T12:04:59+00:00 | Vulnerability · Source |
| CVE-2026-7962 | redhat_vex | chromium-browser: Insufficient policy enforcement in DirectSockets | known not affected: 1 | 2026-06-28T12:04:59+00:00 | Vulnerability · Source |
| CVE-2021-28092 | redhat_vex | nodejs-is-svg: ReDoS via malicious string | fixed: 7 known affected: 14 known not affected: 883 | 2026-06-28T12:04:52+00:00 | Vulnerability · Source |