VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
306222 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-13844 | redhat_vex | kernel: ARM straight-line speculation vulnerability | known affected: 139 known not affected: 60 | 2026-06-28T07:31:59+00:00 | Vulnerability · Source |
| CVE-2020-13631 | redhat_vex | sqlite: Virtual table can be renamed into the name of one of its shadow tables | fixed: 204 known affected: 13 known not affected: 13 | 2026-06-28T07:31:59+00:00 | Vulnerability · Source |
| CVE-2020-13754 | redhat_vex | QEMU: msix: OOB access during mmio operations may lead to DoS | fixed: 1756 known affected: 37 known not affected: 40 | 2026-06-28T07:31:58+00:00 | Vulnerability · Source |
| CVE-2026-3635 | redhat_vex | fastify: request.protocol and request.host spoofable via X-Forwarded-Proto/Host from untrusted connections when trustProxy uses restrictive trust function | known affected: 9 | 2026-06-28T07:31:58+00:00 | Vulnerability · Source |
| CVE-2020-13659 | redhat_vex | QEMU: exec: address_space_map returns NULL without setting length to zero may lead to DoS | known affected: 53 known not affected: 40 | 2026-06-28T07:31:56+00:00 | Vulnerability · Source |
| CVE-2020-13632 | redhat_vex | sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query | fixed: 204 known affected: 7 known not affected: 19 | 2026-06-28T07:31:55+00:00 | Vulnerability · Source |
| CVE-2026-35587 | redhat_vex | glances: Glances: Server-Side Request Forgery allows unauthorized access and credential leakage via public_api parameter | known not affected: 1 | 2026-06-28T07:31:54+00:00 | Vulnerability · Source |
| CVE-2020-13434 | redhat_vex | sqlite: integer overflow in sqlite3_str_vappendf function in printf.c | fixed: 204 known affected: 7 known not affected: 19 | 2026-06-28T07:31:54+00:00 | Vulnerability · Source |
| CVE-2026-3590 | redhat_vex | mattermost: race condition in guest magic link authentication allows token reuse | known not affected: 1 | 2026-06-28T07:31:54+00:00 | Vulnerability · Source |
| CVE-2020-13379 | redhat_vex | grafana: SSRF incorrect access control vulnerability allows unauthenticated users to make grafana send HTTP requests to any URL | fixed: 258 known affected: 4 known not affected: 17 | 2026-06-28T07:31:53+00:00 | Vulnerability · Source |
| CVE-2026-35541 | redhat_vex | roundcubemail: Roundcube Webmail: Unauthorized password change due to type confusion vulnerability | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35543 | redhat_vex | roundcubemail: Roundcube Webmail: Information disclosure and access-control bypass via animated SVG in email | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35538 | redhat_vex | Roundcube Webmail: Roundcube Webmail: IMAP injection and CSRF bypass due to unsanitized search arguments | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35537 | redhat_vex | roundcubemail: Roundcube Webmail: Arbitrary file write via unsafe deserialization in session handler | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35539 | redhat_vex | roundcubemail: Roundcube Webmail: Cross-Site Scripting via HTML attachment preview | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35544 | redhat_vex | roundcubemail: Roundcube Webmail: Security mitigation bypass via insufficient CSS sanitization | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35542 | redhat_vex | roundcubemail: Roundcube Webmail: Information disclosure or access-control bypass via crafted email background attribute | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35545 | redhat_vex | roundcubemail: Roundcube Webmail: Information disclosure and access-control bypass via SVG content in email. | known not affected: 1 | 2026-06-28T07:31:52+00:00 | Vulnerability · Source |
| CVE-2026-35444 | redhat_vex | SDL_image: SDL_image: Information disclosure via crafted XCF files | known not affected: 1 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2026-35515 | redhat_vex | @nestjs/core: Nest: Server-Sent Events (SSE) injection and spoofing via unsanitized newline characters | known affected: 2 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2026-3544 | redhat_vex | chromium-browser: Heap buffer overflow in WebCodecs | known not affected: 1 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2026-3545 | redhat_vex | chromium-browser: Insufficient data validation in Navigation | known not affected: 1 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2020-12829 | redhat_vex | qemu: OOB read and write due to integer overflow in sm501_2d_operation() in hw/display/sm501.c | known not affected: 70 | 2026-06-28T07:31:51+00:00 | Vulnerability · Source |
| CVE-2020-12826 | redhat_vex | kernel: possible to send arbitrary signals to a privileged (suidroot) parent process | fixed: 354 known affected: 43 | 2026-06-28T07:31:50+00:00 | Vulnerability · Source |
| CVE-2026-3540 | redhat_vex | chromium-browser: Inappropriate implementation in WebAudio | known not affected: 1 | 2026-06-28T07:31:48+00:00 | Vulnerability · Source |
| CVE-2020-12771 | redhat_vex | kernel: deadlock if a coalescing operation fails in btree_gc_coalesce function in drivers/md/bcache/btree.c | known not affected: 104 | 2026-06-28T07:31:48+00:00 | Vulnerability · Source |
| CVE-2020-12768 | redhat_vex | kernel: memory leak in svm_cpu_init function in arch/x86/kvm/svm.c | known affected: 48 known not affected: 56 | 2026-06-28T07:31:48+00:00 | Vulnerability · Source |
| CVE-2026-35381 | redhat_vex | rust-coreutils: cut: local logic error and data integrity issue in output filtering | known not affected: 1 | 2026-06-28T07:31:45+00:00 | Vulnerability · Source |
| CVE-2026-35346 | redhat_vex | rust-coreutils: comm: silent data corruption via lossy UTF-8 normalization | known not affected: 1 | 2026-06-28T07:31:45+00:00 | Vulnerability · Source |
| CVE-2023-22111 | redhat_vex | mysql: Server: UDF unspecified vulnerability (CPU Oct 2023) | fixed: 206 known not affected: 93 | 2026-06-28T07:31:44+00:00 | Vulnerability · Source |
| CVE-2026-35380 | redhat_vex | rust-coreutils: cut: local logic error and data integrity issue in delimiter parsing | known not affected: 1 | 2026-06-28T07:31:44+00:00 | Vulnerability · Source |
| CVE-2020-12659 | redhat_vex | kernel: xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write which could result in crash and data coruption | fixed: 150 known not affected: 56 | 2026-06-28T07:31:44+00:00 | Vulnerability · Source |
| CVE-2020-12657 | redhat_vex | kernel: use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body | fixed: 364 known not affected: 56 | 2026-06-28T07:31:44+00:00 | Vulnerability · Source |
| CVE-2020-12655 | redhat_vex | kernel: sync of excessive duration via an XFS v5 image with crafted metadata | fixed: 176 known affected: 55 | 2026-06-28T07:31:43+00:00 | Vulnerability · Source |
| CVE-2026-35379 | redhat_vex | rust-coreutils: uutils coreutils tr utility: Data modification due to incorrect character class definitions | known not affected: 1 | 2026-06-28T07:31:43+00:00 | Vulnerability · Source |
| CVE-2020-12653 | redhat_vex | kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in drivers/net/wireless/marvell/mwifiex/scan.c | fixed: 999 known affected: 16 known not affected: 23 | 2026-06-28T07:31:43+00:00 | Vulnerability · Source |
| CVE-2026-35369 | redhat_vex | rust-coreutils: kill: system-wide process termination and denial of service via argument misinterpretation | known not affected: 1 | 2026-06-28T07:31:42+00:00 | Vulnerability · Source |
| CVE-2026-35361 | redhat_vex | rust-coreutils: mknod: security label inconsistency and broken cleanup on SELinux systems | known not affected: 1 | 2026-06-28T07:31:42+00:00 | Vulnerability · Source |
| CVE-2020-12464 | redhat_vex | kernel: use-after-free in usb_sg_cancel function in drivers/usb/core/message.c | fixed: 150 known affected: 56 | 2026-06-28T07:31:42+00:00 | Vulnerability · Source |
| CVE-2026-35376 | redhat_vex | rust-coreutils: chcon: security bypass and mandatory access control (MAC) inconsistency via TOCTOU race condition | known not affected: 1 | 2026-06-28T07:31:42+00:00 | Vulnerability · Source |
| CVE-2026-35341 | redhat_vex | rust-coreutils: uutils coreutils mkfifo: Information disclosure via unauthorized file permission modification | known not affected: 1 | 2026-06-28T07:31:42+00:00 | Vulnerability · Source |
| CVE-2026-35364 | redhat_vex | rust-coreutils: uutils coreutils mv utility: Arbitrary File Overwrite via TOCTOU Race Condition | known not affected: 1 | 2026-06-28T07:31:42+00:00 | Vulnerability · Source |
| CVE-2026-35358 | redhat_vex | rust-coreutils: cp: semantic loss and potential denial of service with -R via device node stream reading | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35353 | redhat_vex | rust-coreutils: mkdir: permission exposure race condition with -m | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35348 | redhat_vex | rust-coreutils: sort: local denial of service via forced UTF-8 parsing | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35354 | redhat_vex | rust-coreutils: uutils coreutils mv utility: Privilege escalation via TOCTOU vulnerability during cross-device moves | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35363 | redhat_vex | rust-coreutils: rm: safeguard bypass via improper path normalization | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35351 | redhat_vex | rust-coreutils: mv: silent ownership loss in cross-device operations | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35360 | redhat_vex | rust-coreutils: touch: arbitrary file truncation via TOCTOU race condition | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |
| CVE-2026-35373 | redhat_vex | rust-coreutils: ln: local denial of service via improper handling of non-UTF-8 filenames | known not affected: 1 | 2026-06-28T07:31:41+00:00 | Vulnerability · Source |