VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
301552 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-49214 | redhat_vex | guzzlehttp/psr7: `guzzlehttp/psr7`: Request Smuggling and Cache Poisoning via HTTP Header Injection | known not affected: 1 | 2026-06-28T07:43:06+00:00 | Vulnerability · Source |
| CVE-2024-38629 | redhat_vex | kernel: dmaengine: idxd: Avoid unnecessary destruction of file_ida | fixed: 280 known affected: 22 known not affected: 98 | 2026-06-28T07:43:05+00:00 | Vulnerability · Source |
| CVE-2026-48998 | redhat_vex | guzzlehttp/psr7: guzzlehttp/psr7: Information disclosure via improper Host header validation | known not affected: 1 | 2026-06-28T07:43:05+00:00 | Vulnerability · Source |
| CVE-2026-48920 | redhat_vex | jenkins-email-extension-plugin: Jenkins Email Extension Plugin: Information disclosure via arbitrary file read | known affected: 3 | 2026-06-28T07:43:04+00:00 | Vulnerability · Source |
| CVE-2026-48848 | redhat_vex | roundcubemail: CSS injection via an SVG document that has an animate element with the attributeName attribute | known not affected: 1 | 2026-06-28T07:43:03+00:00 | Vulnerability · Source |
| CVE-2026-48700 | redhat_vex | pcmanfm-qt: PCManFM-Qt: Arbitrary code execution via crafted URI | known not affected: 1 | 2026-06-28T07:43:03+00:00 | Vulnerability · Source |
| CVE-2026-48844 | redhat_vex | roundcubemail: code injection via insecure LDAP autovalues option | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48831 | redhat_vex | wine: Wine: Sandbox escape via blind execution of EXE files | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48840 | redhat_vex | exim: Exim: Information disclosure via mishandled short payloads in proxy configurations | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48827 | redhat_vex | org.apache.sshd/sshd-git: Apache MINA SSHD: Path Traversal Vulnerability Allows Access to Unauthorized Git Repositories | known affected: 2 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48842 | redhat_vex | roundcubemail: pre-auth SQL injection in the virtuser_query plugin via a preg_replace() backslash escape bypass | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48845 | redhat_vex | roundcubemail: privilege escalation via remote image blocking bypass | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48851 | redhat_vex | PuTTY: TELNET session data is marked with trust sigils after authenticating to a proxy | known not affected: 1 | 2026-06-28T07:43:02+00:00 | Vulnerability · Source |
| CVE-2026-48782 | redhat_vex | pydantic-ai: Pydantic AI: Information Disclosure via Cloud-Metadata Blocklist Bypass | known affected: 4 | 2026-06-28T07:43:01+00:00 | Vulnerability · Source |
| CVE-2026-48096 | redhat_vex | OpenFGA: OpenFGA: Incorrect authorization due to cache key collision in iterator caching | known affected: 9 | 2026-06-28T07:43:00+00:00 | Vulnerability · Source |
| CVE-2026-48682 | redhat_vex | fastnetmon: FastNetMon: Information disclosure and denial of service in IPv4 packet parser | known not affected: 1 | 2026-06-28T07:42:57+00:00 | Vulnerability · Source |
| CVE-2026-48692 | redhat_vex | fastnetmon: FastNetMon Community Edition: Denial of Service and arbitrary script execution via unauthenticated gRPC API | known not affected: 1 | 2026-06-28T07:42:57+00:00 | Vulnerability · Source |
| CVE-2026-48688 | redhat_vex | fastnetmon: FastNetMon: Out-of-bounds read vulnerability allows information disclosure or denial of service | known not affected: 1 | 2026-06-28T07:42:57+00:00 | Vulnerability · Source |
| CVE-2026-48102 | redhat_vex | 7-Zip: 7-Zip: Information disclosure and denial of service via crafted UDF image | known not affected: 1 | 2026-06-28T07:42:56+00:00 | Vulnerability · Source |
| CVE-2026-48104 | redhat_vex | 7-Zip: uninitialized heap read in the SquashFS archive handler | known not affected: 1 | 2026-06-28T07:42:56+00:00 | Vulnerability · Source |
| CVE-2024-38575 | redhat_vex | kernel: wifi: brcmfmac: pcie: handle randbuf allocation failure | fixed: 429 known affected: 50 known not affected: 22 | 2026-06-28T07:42:56+00:00 | Vulnerability · Source |
| CVE-2026-47760 | redhat_vex | TinyMCE: Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs | known not affected: 1 | 2026-06-28T07:42:55+00:00 | Vulnerability · Source |
| CVE-2026-48095 | redhat_vex | 7-Zip: 7-Zip: Arbitrary code execution via heap buffer overflow in NTFS handler | known not affected: 1 | 2026-06-28T07:42:55+00:00 | Vulnerability · Source |
| CVE-2021-2036 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:42:54+00:00 | Vulnerability · Source |
| CVE-2021-2042 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:42:54+00:00 | Vulnerability · Source |
| CVE-2026-47320 | redhat_vex | rlottie: From CVEorg collector | known not affected: 1 | 2026-06-28T07:42:53+00:00 | Vulnerability · Source |
| CVE-2021-20325 | redhat_vex | httpd: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in Red Hat Enterprise Linux 8.5 | fixed: 85 known not affected: 38 | 2026-06-28T07:42:53+00:00 | Vulnerability · Source |
| CVE-2026-4726 | redhat_vex | firefox: Denial-of-service in the XML component | known not affected: 12 | 2026-06-28T07:42:52+00:00 | Vulnerability · Source |
| CVE-2022-40898 | redhat_vex | python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli | fixed: 18 known affected: 37 known not affected: 65 | 2026-06-28T07:42:51+00:00 | Vulnerability · Source |
| CVE-2026-4739 | redhat_vex | InsightSoftwareConsortium/ITK: Expat: InsightSoftwareConsortium ITK: Arbitrary code execution or denial of service via integer overflow. | known not affected: 1 | 2026-06-28T07:42:50+00:00 | Vulnerability · Source |
| CVE-2026-47323 | redhat_vex | camel: camel-cxf-rest: camel-cxf-transport: camel-knative-http: camel-exec: camel-file: camel-undertow: Apache Camel: Remote Code Execution via header injection due to missing inbound filtering | known affected: 8 known not affected: 12 | 2026-06-28T07:42:50+00:00 | Vulnerability · Source |
| CVE-2026-47319 | redhat_vex | rlottie: rlottie: Denial of Service via excessive memory allocation | known not affected: 1 | 2026-06-28T07:42:50+00:00 | Vulnerability · Source |
| CVE-2026-47318 | redhat_vex | rlottie: rlottie: Denial of Service via stack-based buffer overflow | known not affected: 1 | 2026-06-28T07:42:50+00:00 | Vulnerability · Source |
| CVE-2026-4727 | redhat_vex | firefox: Denial-of-service in the Libraries component in NSS | known not affected: 12 | 2026-06-28T07:42:49+00:00 | Vulnerability · Source |
| CVE-2026-4728 | redhat_vex | firefox: Spoofing issue in the Privacy: Anti-Tracking component | known not affected: 12 | 2026-06-28T07:42:49+00:00 | Vulnerability · Source |
| CVE-2026-4725 | redhat_vex | firefox: Sandbox escape due to use-after-free in the Graphics: Canvas2D component | known not affected: 12 | 2026-06-28T07:42:48+00:00 | Vulnerability · Source |
| CVE-2026-4724 | redhat_vex | firefox: Undefined behavior in the Audio/Video component | known not affected: 12 | 2026-06-28T07:42:48+00:00 | Vulnerability · Source |
| CVE-2026-4723 | redhat_vex | firefox: Use-after-free in the JavaScript Engine component | known not affected: 12 | 2026-06-28T07:42:47+00:00 | Vulnerability · Source |
| CVE-2026-4721 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 | fixed: 320 known affected: 8 | 2026-06-28T07:42:47+00:00 | Vulnerability · Source |
| CVE-2026-4722 | redhat_vex | firefox: Privilege escalation in the IPC component | known not affected: 12 | 2026-06-28T07:42:47+00:00 | Vulnerability · Source |
| CVE-2026-4717 | redhat_vex | firefox: thunderbird: Privilege escalation in the Netmonitor component | fixed: 320 known affected: 8 | 2026-06-28T07:42:46+00:00 | Vulnerability · Source |
| CVE-2026-4718 | redhat_vex | firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component | fixed: 320 known affected: 8 | 2026-06-28T07:42:46+00:00 | Vulnerability · Source |
| CVE-2026-4715 | redhat_vex | firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component | fixed: 320 known affected: 8 | 2026-06-28T07:42:45+00:00 | Vulnerability · Source |
| CVE-2026-4716 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component | fixed: 320 known affected: 8 | 2026-06-28T07:42:45+00:00 | Vulnerability · Source |
| CVE-2021-2028 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Jan 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:42:43+00:00 | Vulnerability · Source |
| CVE-2021-20292 | redhat_vex | kernel: DRM Memory Management Double Free Privilege Escalation Vulnerability | known not affected: 92 | 2026-06-28T07:42:43+00:00 | Vulnerability · Source |
| CVE-2021-20286 | redhat_vex | libnbd: Assertion failure in nbd_unlocked_opt_go in lib/opt.c | known affected: 16 known not affected: 24 | 2026-06-28T07:42:43+00:00 | Vulnerability · Source |
| CVE-2021-20268 | redhat_vex | kernel: eBPF Improper Input Validation | known not affected: 197 | 2026-06-28T07:42:41+00:00 | Vulnerability · Source |
| CVE-2021-20265 | redhat_vex | kernel: increase slab leak leads to DoS | fixed: 241 known not affected: 170 | 2026-06-28T07:42:41+00:00 | Vulnerability · Source |
| CVE-2023-46998 | redhat_vex | bootbox: cross-site scripting vulnerability | known affected: 1 | 2026-06-28T07:42:41+00:00 | Vulnerability · Source |