VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
221769 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-23127 | redhat_vex | kernel: Linux kernel: Privilege escalation or denial of service in perf subsystem | known affected: 14 known not affected: 260 | 2026-07-08T12:19:45+00:00 | Vulnerability · Source |
| CVE-2023-54271 | redhat_vex | kernel: Linux kernel: Denial of Service via NULL pointer dereference in blk-cgroup | fixed: 280 known affected: 84 known not affected: 112 | 2026-07-08T12:19:44+00:00 | Vulnerability · Source |
| CVE-2023-54226 | redhat_vex | kernel: af_unix: Fix data races around sk->sk_shutdown | known affected: 198 known not affected: 76 | 2026-07-08T12:19:43+00:00 | Vulnerability · Source |
| CVE-2025-68312 | redhat_vex | kernel: usbnet: Prevents free active kevent | known affected: 198 known not affected: 76 | 2026-07-08T12:19:40+00:00 | Vulnerability · Source |
| CVE-2026-23209 | redhat_vex | kernel: macvlan: fix error recovery in macvlan_common_newlink() | fixed: 2311 known affected: 36 known not affected: 28 | 2026-07-08T12:19:30+00:00 | Vulnerability · Source |
| CVE-2023-54243 | redhat_vex | kernel: netfilter: ebtables: fix table blob use-after-free | known affected: 198 known not affected: 76 | 2026-07-08T12:19:29+00:00 | Vulnerability · Source |
| CVE-2026-31685 | redhat_vex | kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets | fixed: 2073 known affected: 47 | 2026-07-08T12:19:20+00:00 | Vulnerability · Source |
| CVE-2026-43116 | redhat_vex | kernel: netfilter: ctnetlink: ensure safe access to master conntrack | fixed: 1830 known affected: 112 | 2026-07-08T12:19:00+00:00 | Vulnerability · Source |
| CVE-2026-31786 | redhat_vex | kernel: Buffer overflow in drivers/xen/sys-hypervisor.c | fixed: 762 known affected: 64 | 2026-07-08T12:18:56+00:00 | Vulnerability · Source |
| CVE-2026-13122 | redhat_vex | openvpn: From CVEorg collector | known not affected: 1 | 2026-07-08T11:39:19+00:00 | Vulnerability · Source |
| CVE-2026-13698 | redhat_vex | openvpn: From CVEorg collector | known not affected: 1 | 2026-07-08T11:39:09+00:00 | Vulnerability · Source |
| CVE-2026-46155 | redhat_vex | kernel: smb/client: fix out-of-bounds read in smb2_compound_op() | fixed: 612 known affected: 22 known not affected: 90 | 2026-07-08T11:39:00+00:00 | Vulnerability · Source |
| CVE-2026-46259 | redhat_vex | kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() | fixed: 762 known affected: 64 | 2026-07-08T11:39:00+00:00 | Vulnerability · Source |
| CVE-2026-43276 | redhat_vex | kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path | fixed: 612 known affected: 22 known not affected: 90 | 2026-07-08T11:38:55+00:00 | Vulnerability · Source |
| CVE-2026-43341 | redhat_vex | kernel: net/ipv6: ioam6: prevent schema length wraparound in trace fill | fixed: 616 known not affected: 198 | 2026-07-08T11:38:55+00:00 | Vulnerability · Source |
| CVE-2026-33006 | redhat_vex | httpd: mod_auth_digest: timing attack allows a bypass of digest authentication | fixed: 79 known affected: 42 | 2026-07-08T11:37:38+00:00 | Vulnerability · Source |
| CVE-2026-24072 | redhat_vex | Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation | fixed: 79 known affected: 55 | 2026-07-08T11:37:37+00:00 | Vulnerability · Source |
| CVE-2026-40047 | redhat_vex | camel-docling: Apache Camel Docling: CLI argument injection and path traversal | known affected: 2 | 2026-07-08T11:29:24+00:00 | Vulnerability · Source |
| CVE-2026-15041 | redhat_vex | 389-ds-base: 389-ds-base: Non-constant-time comparison in PBKDF2-SHA256 password verification | known affected: 29 known not affected: 4 | 2026-07-08T11:06:55+00:00 | Vulnerability · Source |
| CVE-2026-59710 | redhat_vex | showdown: Showdown: Stored Cross-Site Scripting via unescaped table header ID attributes in markdown | known affected: 26 | 2026-07-08T11:01:35+00:00 | Vulnerability · Source |
| CVE-2025-29786 | redhat_vex | github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input | fixed: 71 known affected: 13 known not affected: 49 | 2026-07-08T11:01:21+00:00 | Vulnerability · Source |
| CVE-2026-55153 | redhat_vex | com.mchange/mchange-commons-java: mchange-commons-java: Remote code execution via JNDI injection | known affected: 4 known not affected: 7 | 2026-07-08T10:40:48+00:00 | Vulnerability · Source |
| CVE-2026-40938 | redhat_vex | github.com/tektoncd/pipeline: Tekton Pipelines: Arbitrary code execution and secret exfiltration via malicious git commands | fixed: 65 known affected: 27 known not affected: 205 | 2026-07-08T09:46:25+00:00 | Vulnerability · Source |
| CVE-2026-53434 | redhat_vex | tomcat: Apache Tomcat: Error condition not handled when configuring CRLs | fixed: 4 known affected: 80 | 2026-07-08T09:42:21+00:00 | Vulnerability · Source |
| CVE-2026-53404 | redhat_vex | Apache Tomcat: Apache Tomcat: Incorrect control flow in rewrite valve allows unexpected rule processing | fixed: 4 known affected: 80 | 2026-07-08T09:42:12+00:00 | Vulnerability · Source |
| CVE-2026-55276 | redhat_vex | tomcat: Apache Tomcat: Misleading security logs due to incorrect control flow | fixed: 4 known affected: 80 | 2026-07-08T09:37:14+00:00 | Vulnerability · Source |
| CVE-2024-27316 | redhat_vex | httpd: CONTINUATION frames DoS | fixed: 693 known affected: 47 known not affected: 82 | 2026-07-08T08:58:12+00:00 | Vulnerability · Source |
| CVE-2026-11837 | redhat_vex | ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown | known affected: 3 known not affected: 3 | 2026-07-08T08:36:18+00:00 | Vulnerability · Source |
| CVE-2026-56139 | redhat_vex | org.apache.camel/camel-undertow: Apache Camel Undertow: Information disclosure via error messages containing sensitive data | known affected: 2 | 2026-07-08T08:26:45+00:00 | Vulnerability · Source |
| CVE-2026-55688 | redhat_vex | async-http-client: AsyncHttpClient: Cookie injection allows planting cookies for unrelated domains | under investigation: 2 | 2026-07-08T08:21:38+00:00 | Vulnerability · Source |
| CVE-2026-54264 | redhat_vex | @angular/service-worker: @angular/service-worker: Information Disclosure via unstripped sensitive headers on cross-origin redirects | known not affected: 1 | 2026-07-08T08:16:47+00:00 | Vulnerability · Source |
| CVE-2026-50184 | redhat_vex | @angular/service-worker: @angular/service-worker: Security flaw leads to session leaks and cached private data | known not affected: 1 | 2026-07-08T08:16:40+00:00 | Vulnerability · Source |
| CVE-2026-34085 | redhat_vex | fontconfig: Fontconfig: Security flaw allows arbitrary code execution or system crash | fixed: 4 known affected: 5 known not affected: 13 | 2026-07-08T08:16:33+00:00 | Vulnerability · Source |
| CVE-2026-46625 | redhat_vex | js-cookie: JavaScript Cookie: Cookie attribute manipulation via prototype pollution | fixed: 12 known affected: 14 known not affected: 54 under investigation: 33 | 2026-07-08T08:12:26+00:00 | Vulnerability · Source |
| CVE-2026-9165 | redhat_vex | stackrox: stackrox: Unbounded GraphQL query depth allows authenticated denial of service | fixed: 12 known not affected: 127 | 2026-07-08T08:11:51+00:00 | Vulnerability · Source |
| CVE-2026-49232 | redhat_vex | rust-routinator: Routinator: Denial of Service via malicious HTTP or RTR connections | known not affected: 1 | 2026-07-08T08:10:57+00:00 | Vulnerability · Source |
| CVE-2026-49234 | redhat_vex | rust-routinator: Routinator: Denial of Service via crafted non-UTF-8 string | known not affected: 1 | 2026-07-08T08:10:53+00:00 | Vulnerability · Source |
| CVE-2026-49235 | redhat_vex | rust-routinator: Routinator: Denial of Service via crafted Document Type Definition in RRDP | known not affected: 1 | 2026-07-08T08:10:21+00:00 | Vulnerability · Source |
| CVE-2026-49233 | redhat_vex | rust-routinator: Routinator: Information disclosure via rsync URI path traversal | known not affected: 1 | 2026-07-08T08:10:19+00:00 | Vulnerability · Source |
| CVE-2026-49342 | redhat_vex | yard: YARD: Information disclosure via path traversal in static cache lookup | known not affected: 10 | 2026-07-08T07:57:39+00:00 | Vulnerability · Source |
| CVE-2026-42266 | redhat_vex | jupyterlab: JupyterLab: Arbitrary code execution due to improper enforcement of extension allow-list | known affected: 14 known not affected: 2 | 2026-07-08T07:55:45+00:00 | Vulnerability · Source |
| CVE-2026-12993 | redhat_vex | Apicurio/apicurio-registry: apicurio-registry: XML entity-expansion denial of service via internal DTD subset | known affected: 2 | 2026-07-08T07:51:31+00:00 | Vulnerability · Source |
| CVE-2026-42557 | redhat_vex | jupyterlab: JupyterLab: Arbitrary code execution via deceptive button in HTML output | known affected: 14 known not affected: 2 | 2026-07-08T07:51:00+00:00 | Vulnerability · Source |
| CVE-2026-33079 | redhat_vex | mistune: Mistune: Regular Expression Denial of Service (ReDoS) via crafted Markdown input | known affected: 21 known not affected: 3 | 2026-07-08T07:50:57+00:00 | Vulnerability · Source |
| CVE-2026-59711 | redhat_vex | showdown: Showdown: Cross-site scripting via unescaped metadata title allows arbitrary code execution | known affected: 26 under investigation: 4 | 2026-07-08T07:40:51+00:00 | Vulnerability · Source |
| CVE-2026-55699 | redhat_vex | pnpm: pnpm: Denial of Service due to improper handling of malicious package manifest bin keys | known affected: 4 | 2026-07-08T07:36:35+00:00 | Vulnerability · Source |
| CVE-2026-44513 | redhat_vex | Diffusers: Diffusers: Arbitrary remote code execution via `trust_remote_code` bypass | known affected: 13 known not affected: 3 | 2026-07-08T07:35:42+00:00 | Vulnerability · Source |
| CVE-2026-54786 | redhat_vex | Wasmtime: Wasmtime: Leak in WASIp1 `fd_renumber` implementation | known affected: 3 | 2026-07-08T07:30:20+00:00 | Vulnerability · Source |
| CVE-2026-43825 | redhat_vex | org.apache.opennlp/opennlp-tools: Apache OpenNLP SvmDoccatModel: Remote code execution via untrusted Java deserialization | known not affected: 2 under investigation: 2 | 2026-07-08T07:25:49+00:00 | Vulnerability · Source |
| CVE-2026-2393 | redhat_vex | mlflow: MLflow: Server-Side Request Forgery (SSRF) allows internal network access and data exfiltration. | known not affected: 19 | 2026-07-08T07:20:17+00:00 | Vulnerability · Source |