VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299464 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-26743 | redhat_vex | kernel: RDMA/qedr: Fix qedr_create_user_qp error flow | fixed: 709 known affected: 50 known not affected: 22 | 2026-06-28T08:24:22+00:00 | Vulnerability · Source |
| CVE-2019-17267 | redhat_vex | jackson-databind: Serialization gadgets in classes of the ehcache package | fixed: 315 known affected: 23 known not affected: 6 | 2026-06-28T08:24:16+00:00 | Vulnerability · Source |
| CVE-2026-32236 | redhat_vex | @backstage/plugin-auth-backend: @backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch | known affected: 2 | 2026-06-28T08:24:13+00:00 | Vulnerability · Source |
| CVE-2025-57852 | redhat_vex | openshift-ai: privilege escalation via excessive /etc/passwd permissions | fixed: 5 known not affected: 146 | 2026-06-28T08:24:06+00:00 | Vulnerability · Source |
| CVE-2026-31959 | redhat_vex | github.com/anchore/quill: Quill: Sensitive data exfiltration via Server-Side Request Forgery (SSRF) | known not affected: 1 | 2026-06-28T08:24:04+00:00 | Vulnerability · Source |
| CVE-2025-46818 | redhat_vex | Redis: Redis: Authenticated users can execute LUA scripts as a different user | fixed: 147 known not affected: 147 | 2026-06-28T08:23:55+00:00 | Vulnerability · Source |
| CVE-2026-25882 | redhat_vex | github.com/gofiber/fiber/v2: Fiber: Denial of Service via excessive route parameters | known not affected: 1 | 2026-06-28T08:23:34+00:00 | Vulnerability · Source |
| CVE-2026-28208 | redhat_vex | com.github.junrar/junrar: Junrar: Remote code execution via path traversal when extracting crafted RAR archives | known affected: 3 | 2026-06-28T08:23:30+00:00 | Vulnerability · Source |
| CVE-2025-46819 | redhat_vex | Redis: Redis is vulnerable to DoS via specially crafted LUA scripts | fixed: 147 known not affected: 147 | 2026-06-28T08:23:21+00:00 | Vulnerability · Source |
| CVE-2025-64507 | redhat_vex | Incus: Incus vulnerable to local privilege escalation through custom storage volumes | known not affected: 1 | 2026-06-28T08:23:10+00:00 | Vulnerability · Source |
| CVE-2025-45691 | redhat_vex | ragas: arbitrary file read via improper URL validation in multimodal inputs | known not affected: 2 | 2026-06-28T08:23:09+00:00 | Vulnerability · Source |
| CVE-2025-26622 | redhat_vex | vyper: sqrt doesn't define rounding behavior in Vyper | known not affected: 1 | 2026-06-28T08:23:09+00:00 | Vulnerability · Source |
| CVE-2026-31870 | redhat_vex | cpp-httplib: cpp-httplib: Denial of Service via malformed Content-Length header | known not affected: 1 | 2026-06-28T08:23:08+00:00 | Vulnerability · Source |
| CVE-2026-3979 | redhat_vex | quickjs-ng: quickjs-ng: Use-after-free vulnerability via js_iterator_concat_return function manipulation | known not affected: 1 | 2026-06-28T08:21:12+00:00 | Vulnerability · Source |
| CVE-2026-2808 | redhat_vex | github.com/hashicorp/consul: HashiCorp Consul: Arbitrary file read via Kubernetes authentication configuration | known not affected: 37 | 2026-06-28T08:21:12+00:00 | Vulnerability · Source |
| CVE-2025-58767 | redhat_vex | rexml: REXML denial of service | fixed: 765 known affected: 142 | 2026-06-28T08:21:07+00:00 | Vulnerability · Source |
| CVE-2026-30226 | redhat_vex | devalue: Devalue: Denial of Service or type confusion via prototype pollution | known not affected: 2 | 2026-06-28T08:21:05+00:00 | Vulnerability · Source |
| CVE-2026-1471 | redhat_vex | neo4j: Neo4j: Authentication context inheritance via excessive caching in SSO UserInfo endpoint | known affected: 13 | 2026-06-28T08:20:59+00:00 | Vulnerability · Source |
| CVE-2026-3949 | redhat_vex | libheif: libheif: Out-of-bounds read via local argument manipulation | known not affected: 1 | 2026-06-28T08:20:58+00:00 | Vulnerability · Source |
| CVE-2026-26127 | redhat_vex | .net: .NET: Denial of Service via out-of-bounds read | fixed: 884 known not affected: 64 | 2026-06-28T08:20:58+00:00 | Vulnerability · Source |
| CVE-2026-2789 | redhat_vex | firefox: thunderbird: Use-after-free in the Graphics: ImageLib component | fixed: 320 known affected: 6 | 2026-06-28T08:20:55+00:00 | Vulnerability · Source |
| CVE-2026-2782 | redhat_vex | firefox: thunderbird: Privilege escalation in the Netmonitor component | fixed: 320 known affected: 6 | 2026-06-28T08:20:55+00:00 | Vulnerability · Source |
| CVE-2024-56604 | redhat_vex | kernel: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() | fixed: 305 known affected: 112 | 2026-06-28T08:20:55+00:00 | Vulnerability · Source |
| CVE-2026-2786 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript Engine component | fixed: 320 known affected: 6 | 2026-06-28T08:20:50+00:00 | Vulnerability · Source |
| CVE-2026-2785 | redhat_vex | firefox: thunderbird: Invalid pointer in the JavaScript Engine component | fixed: 320 known affected: 6 | 2026-06-28T08:20:48+00:00 | Vulnerability · Source |
| CVE-2026-2780 | redhat_vex | firefox: thunderbird: Privilege escalation in the Netmonitor component | fixed: 320 known affected: 6 | 2026-06-28T08:20:47+00:00 | Vulnerability · Source |
| CVE-2026-2779 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Networking: JAR component | fixed: 320 known affected: 8 | 2026-06-28T08:20:47+00:00 | Vulnerability · Source |
| CVE-2025-27414 | redhat_vex | minio: MinIO SFTP authentication bypass due to improperly trusted SSH key | known not affected: 1 | 2026-06-28T08:20:46+00:00 | Vulnerability · Source |
| CVE-2025-25474 | redhat_vex | dcmtk: Buffer Overflow in DCMTK's diinpxt.h Component | known not affected: 1 | 2026-06-28T08:20:44+00:00 | Vulnerability · Source |
| CVE-2026-2783 | redhat_vex | firefox: thunderbird: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component | fixed: 320 known affected: 6 | 2026-06-28T08:20:41+00:00 | Vulnerability · Source |
| CVE-2025-27795 | redhat_vex | GraphicsMagick: Lack of Image Dimension Resource Limits in JXL of GraphicsMagick | known not affected: 1 | 2026-06-28T08:20:41+00:00 | Vulnerability · Source |
| CVE-2025-27624 | redhat_vex | jenkins: CSRF vulnerability in jenkins | known not affected: 2 | 2026-06-28T08:20:40+00:00 | Vulnerability · Source |
| CVE-2025-27623 | redhat_vex | jenkins: Encrypted values of secrets stored in view configuration revealed to users with View/Read permission | known affected: 1 | 2026-06-28T08:20:39+00:00 | Vulnerability · Source |
| CVE-2025-27591 | redhat_vex | below: Privilege Escalation in Below via World-Writable Directory | known not affected: 1 | 2026-06-28T08:20:38+00:00 | Vulnerability · Source |
| CVE-2025-27622 | redhat_vex | jenkins: Encrypted values of secrets stored in agent configuration revealed to users with Agent/Extended Read permission | known affected: 1 | 2026-06-28T08:20:38+00:00 | Vulnerability · Source |
| CVE-2025-27407 | redhat_vex | graphql-ruby: Remote code execution when loading a crafted GraphQL schema | fixed: 10 known not affected: 2029 | 2026-06-28T08:20:37+00:00 | Vulnerability · Source |
| CVE-2025-26803 | redhat_vex | passenger: DoS while parsing a request with an invalid HTTP method | known not affected: 1 | 2026-06-28T08:20:33+00:00 | Vulnerability · Source |
| CVE-2025-27104 | redhat_vex | vyper: double eval in For List Iter in Vyper | known not affected: 1 | 2026-06-28T08:20:33+00:00 | Vulnerability · Source |
| CVE-2025-27105 | redhat_vex | vyper: AugAssign evaluation order causing OOB write within the object in Vyper | known not affected: 1 | 2026-06-28T08:20:33+00:00 | Vulnerability · Source |
| CVE-2025-26623 | redhat_vex | exiv2: Use After Free in Exiv2 | fixed: 38 known affected: 19 known not affected: 4 | 2026-06-28T08:20:29+00:00 | Vulnerability · Source |
| CVE-2025-26531 | redhat_vex | moodle: IDOR in badges allows disabling of arbitrary badges | known not affected: 1 | 2026-06-28T08:20:28+00:00 | Vulnerability · Source |
| CVE-2025-26519 | redhat_vex | musl-libc: input-controlled out-of-bounds write primitive in iconv() | known not affected: 1 | 2026-06-28T08:20:27+00:00 | Vulnerability · Source |
| CVE-2025-26529 | redhat_vex | moodle: Stored XSS risk in admin live log | known not affected: 1 | 2026-06-28T08:20:27+00:00 | Vulnerability · Source |
| CVE-2025-26520 | redhat_vex | cacti: SQL Injection in Cacti | known not affected: 1 | 2026-06-28T08:20:27+00:00 | Vulnerability · Source |
| CVE-2025-26530 | redhat_vex | moodle: Reflected XSS via question bank filter | known not affected: 1 | 2026-06-28T08:20:27+00:00 | Vulnerability · Source |
| CVE-2025-25975 | redhat_vex | parse-git-config: Prototype Pollution Vulneralbility in parse-git-config | known not affected: 1 | 2026-06-28T08:20:26+00:00 | Vulnerability · Source |
| CVE-2025-25469 | redhat_vex | ffmpeg: Memory Leak in libavutil/iamf.c in FFmpeg | known not affected: 1 | 2026-06-28T08:20:25+00:00 | Vulnerability · Source |
| CVE-2025-25294 | redhat_vex | envoyproxy/gateway: Envoy Gateway Log Injection Vulnerability | known affected: 2 | 2026-06-28T08:20:24+00:00 | Vulnerability · Source |
| CVE-2025-25204 | redhat_vex | gh: `gh attestation verify` returns incorrect exit code during verification if no attestations are present | known not affected: 1 | 2026-06-28T08:20:24+00:00 | Vulnerability · Source |
| CVE-2025-25472 | redhat_vex | dcmtk: Buffer Overflow in DCMTK Leading to DoS | known not affected: 1 | 2026-06-28T08:20:24+00:00 | Vulnerability · Source |