VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288036 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-47078 | redhat_vex | otp: Erlang OTP: Arbitrary file write via relative path traversal in zip module | known not affected: 42 | 2026-07-30T14:50:07+00:00 | Vulnerability · Source |
| CVE-2026-45309 | redhat_vex | asyncssh: AsyncSSH: Authentication bypass due to path traversal in username during pre-authentication | known affected: 3 | 2026-07-30T14:46:41+00:00 | Vulnerability · Source |
| CVE-2026-16631 | redhat_vex | publint: publint: Arbitrary Command Execution via OS Command Injection | known not affected: 5 | 2026-07-30T14:46:39+00:00 | Vulnerability · Source |
| CVE-2026-54249 | redhat_vex | pydantic-ai: Pydantic AI: Information disclosure through unvalidated file references. | known not affected: 5 | 2026-07-30T14:46:34+00:00 | Vulnerability · Source |
| CVE-2026-64389 | redhat_vex | kernel: ksmbd: validate NTLMv2 response before updating session key | known not affected: 275 | 2026-07-30T14:35:40+00:00 | Vulnerability · Source |
| CVE-2026-64413 | redhat_vex | kernel: netfilter: ebtables: zero chainstack array | known affected: 274 known not affected: 1 | 2026-07-30T14:35:33+00:00 | Vulnerability · Source |
| CVE-2026-25707 | redhat_vex | libzypp: libzypp: Privilege escalation via relative path traversal in repository metadata processing | known not affected: 1 | 2026-07-30T14:35:21+00:00 | Vulnerability · Source |
| CVE-2026-49835 | redhat_vex | timestamp-authority: Sigstore Timestamp Authority: Denial of Service via unbounded metric label cardinality | known not affected: 1 | 2026-07-30T14:25:40+00:00 | Vulnerability · Source |
| CVE-2026-59842 | redhat_vex | libssh: libssh: information disclosure via short GSSAPI Curve25519 public key | fixed: 4 known affected: 4 known not affected: 8 | 2026-07-30T14:02:39+00:00 | Vulnerability · Source |
| CVE-2026-54696 | redhat_vex | json: Ruby JSON: Denial of service via heap buffer overflow with oversized streamed objects | fixed: 8 known affected: 139 known not affected: 3 | 2026-07-30T14:02:37+00:00 | Vulnerability · Source |
| CVE-2024-21208 | redhat_vex | JDK: HTTP client improper handling of maxHeaderSize (8328286) | fixed: 2658 known affected: 45 known not affected: 24 | 2026-07-30T14:02:23+00:00 | Vulnerability · Source |
| CVE-2024-21217 | redhat_vex | JDK: Unbounded allocation leads to out-of-memory error (8331446) | fixed: 2658 known affected: 45 known not affected: 24 | 2026-07-30T14:02:18+00:00 | Vulnerability · Source |
| CVE-2024-21235 | redhat_vex | JDK: Integer conversion error leads to incorrect range check (8332644) | fixed: 2658 known affected: 45 known not affected: 24 | 2026-07-30T14:02:05+00:00 | Vulnerability · Source |
| CVE-2026-21925 | redhat_vex | openjdk: Improve JMX connections (Oracle CPU 2026-01) | fixed: 3198 known affected: 45 | 2026-07-30T14:02:05+00:00 | Vulnerability · Source |
| CVE-2024-21210 | redhat_vex | JDK: Array indexing integer overflow (8328544) | fixed: 2658 known affected: 45 known not affected: 24 | 2026-07-30T14:01:54+00:00 | Vulnerability · Source |
| CVE-2026-21933 | redhat_vex | openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01) | fixed: 3198 known affected: 45 | 2026-07-30T14:01:54+00:00 | Vulnerability · Source |
| CVE-2026-16473 | redhat_vex | sbc: sbc: heap out-of-bounds read via crafted SBC audio frame | known affected: 11 | 2026-07-30T14:01:19+00:00 | Vulnerability · Source |
| CVE-2026-15370 | redhat_vex | libssh: libssh: stack buffer overflow in SFTP server longname construction | fixed: 4 known affected: 4 known not affected: 8 | 2026-07-30T14:01:17+00:00 | Vulnerability · Source |
| CVE-2026-18382 | redhat_vex | project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url | known affected: 1 | 2026-07-30T14:01:14+00:00 | Vulnerability · Source |
| CVE-2026-59732 | redhat_vex | rclone: Rclone: File overwrite via path traversal during archive extraction | known affected: 1 | 2026-07-30T14:01:04+00:00 | Vulnerability · Source |
| CVE-2026-46584 | redhat_vex | org.apache.camel/camel-mail: Apache Camel Mail Component: Credential exposure and information disclosure via improper input validation of mail headers | fixed: 1 known affected: 2 known not affected: 1 | 2026-07-30T13:59:11+00:00 | Vulnerability · Source |
| CVE-2026-21932 | redhat_vex | openjdk: Enhance Handling of URIs (Oracle CPU 2026-01) | fixed: 5 known affected: 39 known not affected: 250 | 2026-07-30T13:50:28+00:00 | Vulnerability · Source |
| CVE-2026-21945 | redhat_vex | openjdk: Enhance Certificate Checking (Oracle CPU 2026-01) | fixed: 3198 known affected: 45 | 2026-07-30T13:50:21+00:00 | Vulnerability · Source |
| CVE-2023-40267 | redhat_vex | GitPython: Insecure non-multi options in clone and clone_from is not blocked | fixed: 22 known affected: 10 known not affected: 2042 | 2026-07-30T13:47:48+00:00 | Vulnerability · Source |
| CVE-2023-27561 | redhat_vex | runc: volume mount race condition (regression of CVE-2019-19921) | fixed: 556 known affected: 36 known not affected: 1666 | 2026-07-30T13:46:14+00:00 | Vulnerability · Source |
| CVE-2013-0270 | redhat_vex | keystone: OpenStack Keystone: Denial of Service via large HTTP request with long tenant name | fixed: 4 known affected: 10 | 2026-07-30T13:39:19+00:00 | Vulnerability · Source |
| CVE-2026-55470 | redhat_vex | ca.uhn.hapi.fhir/org.hl7.fhir.dstu2: ca.uhn.hapi.fhir/org.hl7.fhir.convertors: ca.uhn.hapi.fhir/org.hl7.fhir.validation: ca.uhn.hapi.fhir/org.hl7.fhir.validation.cli: HAPI FHIR: Denial of Service via Regular Expression Backtracking in DSTU2 Module | known affected: 1 known not affected: 1 | 2026-07-30T13:39:02+00:00 | Vulnerability · Source |
| CVE-2026-18381 | redhat_vex | project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled Prometheus service_address | known affected: 1 | 2026-07-30T13:36:07+00:00 | Vulnerability · Source |
| CVE-2026-18378 | redhat_vex | project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (SSRF / confused deputy) | known affected: 1 | 2026-07-30T13:35:43+00:00 | Vulnerability · Source |
| CVE-2026-54428 | redhat_vex | org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks | fixed: 2 known affected: 12 known not affected: 4 under investigation: 19 | 2026-07-30T13:24:08+00:00 | Vulnerability · Source |
| CVE-2026-46726 | redhat_vex | camel-vertx-websocket: Apache Camel Vertx Websocket: Server-Side Request Forgery and sensitive data exposure | fixed: 1 known affected: 2 | 2026-07-30T13:23:58+00:00 | Vulnerability · Source |
| CVE-2026-46592 | redhat_vex | org.apache.camel/camel-cxf: Apache Camel CXF SOAP: Remote attacker can execute unintended operations via header manipulation | fixed: 1 known affected: 2 known not affected: 1 | 2026-07-30T13:23:55+00:00 | Vulnerability · Source |
| CVE-2026-40859 | redhat_vex | org.apache.camel/camel-vertx-http: Apache Camel (camel-vertx-http): Remote Code Execution via Deserialization of Untrusted Data | fixed: 1 known affected: 2 known not affected: 1 | 2026-07-30T13:23:53+00:00 | Vulnerability · Source |
| CVE-2026-62995 | redhat_vex | joserfc: joserfc: JWT Malleability via Non-Standard Padding | fixed: 3 known affected: 7 known not affected: 1 | 2026-07-30T11:50:17+00:00 | Vulnerability · Source |
| CVE-2026-64785 | redhat_vex | swift-nio-http2: SwiftNIO HTTP/2: HTTP Request Smuggling and Response Splitting via Incomplete Header Validation | known not affected: 1 | 2026-07-30T11:46:02+00:00 | Vulnerability · Source |
| CVE-2026-18369 | redhat_vex | dogtag-pki: pki-core: redhat-pki: pki: ACME HTTP-01 validation SSRF via IP literal identifiers and unvalidated redirects | known affected: 89 | 2026-07-30T11:06:18+00:00 | Vulnerability · Source |
| CVE-2026-64193 | redhat_vex | Net::DNS: Net::DNS: Arbitrary code execution via EDNS EXTENDED ERROR handling | known not affected: 7 | 2026-07-30T11:01:02+00:00 | Vulnerability · Source |
| CVE-2026-52791 | redhat_vex | fuse-overlayfs: fuse-overlayfs: Privilege Escalation Vulnerability via SUID/SGID Bit Preservation | known affected: 7 | 2026-07-30T10:51:54+00:00 | Vulnerability · Source |
| CVE-2026-56390 | redhat_vex | bison: GNU Bison: Arbitrary file overwrite via grammar-defined output paths | known affected: 16 | 2026-07-30T10:31:38+00:00 | Vulnerability · Source |
| CVE-2026-42440 | redhat_vex | org.apache.opennlp/opennlp-tools: Apache OpenNLP: Denial of Service via unbounded array allocation in crafted model files | known affected: 2 known not affected: 2 under investigation: 3 | 2026-07-30T10:21:35+00:00 | Vulnerability · Source |
| CVE-2026-64685 | redhat_vex | ImageMagick: ImageMagick: Information Disclosure via Crafted Image File | known affected: 14 | 2026-07-30T10:17:48+00:00 | Vulnerability · Source |
| CVE-2025-13881 | redhat_vex | org.keycloak.services.resources.admin: Keycloak: Limited administrator can retrieve sensitive user attributes via Admin API | fixed: 10 | 2026-07-30T10:14:01+00:00 | Vulnerability · Source |
| CVE-2025-21701 | redhat_vex | kernel: net: avoid race between device unregistration and ethnl ops | known affected: 232 known not affected: 42 | 2026-07-30T10:14:00+00:00 | Vulnerability · Source |
| CVE-2025-21663 | redhat_vex | kernel: net: stmmac: dwmac-tegra: Read iommu stream id from device tree | fixed: 305 known affected: 22 known not affected: 166 | 2026-07-30T10:13:55+00:00 | Vulnerability · Source |
| CVE-2025-21638 | redhat_vex | kernel: sctp: sysctl: auth_enable: avoid using current->nsproxy | known affected: 274 | 2026-07-30T10:13:53+00:00 | Vulnerability · Source |
| CVE-2025-21637 | redhat_vex | kernel: sctp: sysctl: udp_port: avoid using current->nsproxy | known affected: 274 | 2026-07-30T10:13:50+00:00 | Vulnerability · Source |
| CVE-2025-21719 | redhat_vex | kernel: ipmr: do not call mr_mfc_uses_dev() for unres entries | known affected: 232 known not affected: 42 | 2026-07-30T10:13:48+00:00 | Vulnerability · Source |
| CVE-2025-21661 | redhat_vex | kernel: gpio: virtuser: fix missing lookup table cleanups | known not affected: 274 | 2026-07-30T10:13:45+00:00 | Vulnerability · Source |
| CVE-2025-21640 | redhat_vex | kernel: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy | known affected: 274 | 2026-07-30T10:13:42+00:00 | Vulnerability · Source |
| CVE-2025-21712 | redhat_vex | kernel: md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime | known affected: 274 | 2026-07-30T10:13:38+00:00 | Vulnerability · Source |