VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
301607 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-42030 | redhat_vex | MapServer: OpenLayers: MapServer: Reflected Cross-Site Scripting (XSS) via unsanitized WMS parameter | known not affected: 1 | 2026-06-28T07:34:06+00:00 | Vulnerability · Source |
| CVE-2026-42146 | redhat_vex | CImg: CImg Library: Denial of Service via crafted BMP file | known not affected: 1 | 2026-06-28T07:34:06+00:00 | Vulnerability · Source |
| CVE-2020-24504 | redhat_vex | kernel: Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers | fixed: 150 known affected: 28 known not affected: 121 | 2026-06-28T07:34:05+00:00 | Vulnerability · Source |
| CVE-2020-24502 | redhat_vex | kernel: Improper input validation in some Intel(R) Ethernet E810 Adapter drivers | fixed: 150 known affected: 28 known not affected: 121 | 2026-06-28T07:34:04+00:00 | Vulnerability · Source |
| CVE-2026-42046 | redhat_vex | libcaca: libcaca: Remote Code Execution via crafted "caca" format file | known not affected: 1 | 2026-06-28T07:34:04+00:00 | Vulnerability · Source |
| CVE-2020-24503 | redhat_vex | kernel: Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers | fixed: 150 known affected: 28 known not affected: 121 | 2026-06-28T07:34:04+00:00 | Vulnerability · Source |
| CVE-2023-28755 | redhat_vex | ruby: ReDoS vulnerability in URI | fixed: 822 known affected: 95 | 2026-06-28T07:34:00+00:00 | Vulnerability · Source |
| CVE-2026-41888 | redhat_vex | github.com/distribution/distribution: Distribution: Security bypass allows unauthorized tag deletion | known affected: 6 | 2026-06-28T07:34:00+00:00 | Vulnerability · Source |
| CVE-2026-42000 | redhat_vex | pdns: PowerDNS: DNS record manipulation due to insufficient AXFR name validation | known not affected: 1 | 2026-06-28T07:33:59+00:00 | Vulnerability · Source |
| CVE-2026-42002 | redhat_vex | pdns-recursor: pdns-recursor: Denial of service via GSS-TSIG concurrency and locking defects | known not affected: 1 | 2026-06-28T07:33:59+00:00 | Vulnerability · Source |
| CVE-2026-4174 | redhat_vex | Radare2: Radare2: Local resource consumption via Mach-O File Parser | known not affected: 1 | 2026-06-28T07:33:59+00:00 | Vulnerability · Source |
| CVE-2020-22083 | redhat_vex | python-jsonpickle: deserialization of a malicious payload in the decode function can lead to RCE | known not affected: 2 | 2026-06-28T07:33:58+00:00 | Vulnerability · Source |
| CVE-2026-41681 | redhat_vex | rust-openssl: rust-openssl: Memory corruption due to buffer overflow in EVP_DigestFinal() | known not affected: 1 | 2026-06-28T07:33:58+00:00 | Vulnerability · Source |
| CVE-2026-41678 | redhat_vex | rust-openssl: rust-openssl: Arbitrary code execution via incorrect buffer validation in aes::unwrap_key() | known not affected: 1 | 2026-06-28T07:33:57+00:00 | Vulnerability · Source |
| CVE-2026-41564 | redhat_vex | perl-cryptx: CryptX: Private key recovery due to predictable pseudo-random number generation after forking | known not affected: 1 | 2026-06-28T07:33:53+00:00 | Vulnerability · Source |
| CVE-2026-41565 | redhat_vex | perl-CryptX: perl-CryptX: Stack buffer overflow allows arbitrary code execution via a crafted authentication tag. | known not affected: 1 | 2026-06-28T07:33:53+00:00 | Vulnerability · Source |
| CVE-2026-41476 | redhat_vex | deskflow: Deskflow: Information disclosure via malformed clipboard update | known not affected: 1 | 2026-06-28T07:33:52+00:00 | Vulnerability · Source |
| CVE-2026-41493 | redhat_vex | yard: YARD: Information Disclosure via Path Traversal in yard server | known affected: 3 known not affected: 7 | 2026-06-28T07:33:52+00:00 | Vulnerability · Source |
| CVE-2026-41525 | redhat_vex | dolphin: KDE Dolphin: Sandbox bypass allows potential arbitrary code execution via FileManager1 protocol | known not affected: 1 | 2026-06-28T07:33:52+00:00 | Vulnerability · Source |
| CVE-2026-41526 | redhat_vex | kcoreaddons: KDE KCoreAddons: Arbitrary code execution via improper shell argument quoting | known not affected: 1 | 2026-06-28T07:33:52+00:00 | Vulnerability · Source |
| CVE-2026-41425 | redhat_vex | authlib: Authlib: Cross-Site Request Forgery (CSRF) vulnerability in OAuth cache feature | known affected: 5 | 2026-06-28T07:33:51+00:00 | Vulnerability · Source |
| CVE-2026-41415 | redhat_vex | pjproject: PJSIP: Denial of service via malformed Content-ID URI in SIP multipart message | known not affected: 1 | 2026-06-28T07:33:51+00:00 | Vulnerability · Source |
| CVE-2026-41413 | redhat_vex | Istio: Istio: Information disclosure through unauthenticated internal service requests | known affected: 1 known not affected: 2 | 2026-06-28T07:33:51+00:00 | Vulnerability · Source |
| CVE-2026-41312 | redhat_vex | pypdf: pypdf: Denial of Service due to excessive memory consumption via specially crafted PDF | known affected: 10 | 2026-06-28T07:33:51+00:00 | Vulnerability · Source |
| CVE-2026-41416 | redhat_vex | pjproject: PJSIP: Memory corruption and denial of service via crafted SDP with asymmetric ptime configuration | known not affected: 1 | 2026-06-28T07:33:51+00:00 | Vulnerability · Source |
| CVE-2026-41313 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF with large trailer /Size value | known affected: 10 | 2026-06-28T07:33:49+00:00 | Vulnerability · Source |
| CVE-2020-1954 | redhat_vex | cxf: JMX integration is vulnerable to a MITM attack | fixed: 373 known affected: 8 | 2026-06-28T07:33:49+00:00 | Vulnerability · Source |
| CVE-2020-2895 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2020) | fixed: 337 known affected: 3 known not affected: 98 | 2026-06-28T07:33:47+00:00 | Vulnerability · Source |
| CVE-2026-41205 | redhat_vex | mako: Mako: Information disclosure via path traversal vulnerability | known affected: 11 | 2026-06-28T07:33:45+00:00 | Vulnerability · Source |
| CVE-2023-31084 | redhat_vex | kernel: blocking operation in dvb_frontend_get_event and wait_event_interruptible | fixed: 399 known affected: 30 known not affected: 120 | 2026-06-28T07:33:45+00:00 | Vulnerability · Source |
| CVE-2026-41196 | redhat_vex | luanti: minetest: luajit: Luanti (Minetest): Arbitrary code execution and full filesystem access via malicious mod sandbox escape | known not affected: 1 | 2026-06-28T07:33:45+00:00 | Vulnerability · Source |
| CVE-2026-41174 | redhat_vex | Traefik: github.com/traefik/traefik: Traefik: Cross-namespace isolation bypass via nested middleware references | known affected: 1 | 2026-06-28T07:33:44+00:00 | Vulnerability · Source |
| CVE-2020-2579 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020) | fixed: 337 known affected: 10 known not affected: 82 | 2026-06-28T07:33:44+00:00 | Vulnerability · Source |
| CVE-2026-4115 | redhat_vex | PuTTY: PuTTY: Improper cryptographic signature verification in Ed25519 Signature Handler | known not affected: 1 | 2026-06-28T07:33:43+00:00 | Vulnerability · Source |
| CVE-2026-41181 | redhat_vex | traefik: Traefik: Information disclosure via errors middleware exposing user credentials | known affected: 1 | 2026-06-28T07:33:40+00:00 | Vulnerability · Source |
| CVE-2025-61022 | redhat_vex | virtuoso-opensource: openlink virtuoso-opensource: Denial of Service via crafted SQL statements | known affected: 3 | 2026-06-28T07:33:39+00:00 | Vulnerability · Source |
| CVE-2020-1758 | redhat_vex | keycloak: improper verification of certificate with host mismatch could result in information disclosure | fixed: 10 known affected: 1 known not affected: 3 | 2026-06-28T07:33:38+00:00 | Vulnerability · Source |
| CVE-2025-71382 | redhat_vex | mupdf: MuPDF: Denial of Service via uncontrolled recursion in EPUB CSS rendering | known not affected: 1 | 2026-06-28T07:33:38+00:00 | Vulnerability · Source |
| CVE-2020-1753 | redhat_vex | Ansible: kubectl connection plugin leaks sensitive information | fixed: 22 known affected: 6 known not affected: 4 | 2026-06-28T07:33:38+00:00 | Vulnerability · Source |
| CVE-2026-41071 | redhat_vex | libheif: libheif: Information disclosure or denial of service via crafted HEIF file | known not affected: 1 | 2026-06-28T07:33:37+00:00 | Vulnerability · Source |
| CVE-2026-41076 | redhat_vex | rt: RT: Authentication bypass allows unauthorized access via specific LDAP configurations | known not affected: 1 | 2026-06-28T07:33:37+00:00 | Vulnerability · Source |
| CVE-2026-41054 | redhat_vex | haveged: haveged: Privilege escalation due to insufficient credential check | known not affected: 1 | 2026-06-28T07:33:36+00:00 | Vulnerability · Source |
| CVE-2021-2226 | redhat_vex | mysql: Server: Information Schema unspecified vulnerability (CPU Apr 2021) | fixed: 155 known not affected: 70 | 2026-06-28T07:33:34+00:00 | Vulnerability · Source |
| CVE-2020-1740 | redhat_vex | ansible: secrets readable after ansible-vault edit | fixed: 22 known affected: 10 known not affected: 7 | 2026-06-28T07:33:34+00:00 | Vulnerability · Source |
| CVE-2020-1739 | redhat_vex | ansible: svn module leaks password when specified as a parameter | fixed: 22 known affected: 10 known not affected: 7 | 2026-06-28T07:33:34+00:00 | Vulnerability · Source |
| CVE-2026-41015 | redhat_vex | radare2: radare2: Command injection via PDB name in rabin2 -PP allows arbitrary code execution | known not affected: 1 | 2026-06-28T07:33:34+00:00 | Vulnerability · Source |
| CVE-2020-17380 | redhat_vex | QEMU: heap buffer overflow in sdhci_sdma_transfer_multi_blocks() in hw/sd/sdhci.c | known not affected: 104 | 2026-06-28T07:33:34+00:00 | Vulnerability · Source |
| CVE-2026-41000 | redhat_vex | Spring Web Services: Spring Web Services: Replay protection bypass due to improper cache integration | known affected: 1 | 2026-06-28T07:33:33+00:00 | Vulnerability · Source |
| CVE-2020-1737 | redhat_vex | ansible: Extract-Zip function in win_unzip module does not check extracted path | fixed: 22 known affected: 10 known not affected: 7 | 2026-06-28T07:33:32+00:00 | Vulnerability · Source |
| CVE-2020-1736 | redhat_vex | ansible: atomic_move primitive sets permissive permissions | fixed: 8 known affected: 10 known not affected: 7 | 2026-06-28T07:33:32+00:00 | Vulnerability · Source |