VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288054 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-59732 | redhat_vex | rclone: Rclone: File overwrite via path traversal during archive extraction | known affected: 1 | 2026-07-30T14:01:04+00:00 | Vulnerability · Source |
| CVE-2026-46584 | redhat_vex | org.apache.camel/camel-mail: Apache Camel Mail Component: Credential exposure and information disclosure via improper input validation of mail headers | fixed: 1 known affected: 2 known not affected: 1 | 2026-07-30T13:59:11+00:00 | Vulnerability · Source |
| CVE-2026-21932 | redhat_vex | openjdk: Enhance Handling of URIs (Oracle CPU 2026-01) | fixed: 5 known affected: 39 known not affected: 250 | 2026-07-30T13:50:28+00:00 | Vulnerability · Source |
| CVE-2026-21945 | redhat_vex | openjdk: Enhance Certificate Checking (Oracle CPU 2026-01) | fixed: 3198 known affected: 45 | 2026-07-30T13:50:21+00:00 | Vulnerability · Source |
| CVE-2023-40267 | redhat_vex | GitPython: Insecure non-multi options in clone and clone_from is not blocked | fixed: 22 known affected: 10 known not affected: 2042 | 2026-07-30T13:47:48+00:00 | Vulnerability · Source |
| CVE-2023-27561 | redhat_vex | runc: volume mount race condition (regression of CVE-2019-19921) | fixed: 556 known affected: 36 known not affected: 1666 | 2026-07-30T13:46:14+00:00 | Vulnerability · Source |
| CVE-2013-0270 | redhat_vex | keystone: OpenStack Keystone: Denial of Service via large HTTP request with long tenant name | fixed: 4 known affected: 10 | 2026-07-30T13:39:19+00:00 | Vulnerability · Source |
| CVE-2026-55470 | redhat_vex | ca.uhn.hapi.fhir/org.hl7.fhir.dstu2: ca.uhn.hapi.fhir/org.hl7.fhir.convertors: ca.uhn.hapi.fhir/org.hl7.fhir.validation: ca.uhn.hapi.fhir/org.hl7.fhir.validation.cli: HAPI FHIR: Denial of Service via Regular Expression Backtracking in DSTU2 Module | known affected: 1 known not affected: 1 | 2026-07-30T13:39:02+00:00 | Vulnerability · Source |
| CVE-2026-18381 | redhat_vex | project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled Prometheus service_address | known affected: 1 | 2026-07-30T13:36:07+00:00 | Vulnerability · Source |
| CVE-2026-18378 | redhat_vex | project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (SSRF / confused deputy) | known affected: 1 | 2026-07-30T13:35:43+00:00 | Vulnerability · Source |
| CVE-2026-54428 | redhat_vex | org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks | fixed: 2 known affected: 12 known not affected: 4 under investigation: 19 | 2026-07-30T13:24:08+00:00 | Vulnerability · Source |
| CVE-2026-46726 | redhat_vex | camel-vertx-websocket: Apache Camel Vertx Websocket: Server-Side Request Forgery and sensitive data exposure | fixed: 1 known affected: 2 | 2026-07-30T13:23:58+00:00 | Vulnerability · Source |
| CVE-2026-46592 | redhat_vex | org.apache.camel/camel-cxf: Apache Camel CXF SOAP: Remote attacker can execute unintended operations via header manipulation | fixed: 1 known affected: 2 known not affected: 1 | 2026-07-30T13:23:55+00:00 | Vulnerability · Source |
| CVE-2026-40859 | redhat_vex | org.apache.camel/camel-vertx-http: Apache Camel (camel-vertx-http): Remote Code Execution via Deserialization of Untrusted Data | fixed: 1 known affected: 2 known not affected: 1 | 2026-07-30T13:23:53+00:00 | Vulnerability · Source |
| CVE-2026-62995 | redhat_vex | joserfc: joserfc: JWT Malleability via Non-Standard Padding | fixed: 3 known affected: 7 known not affected: 1 | 2026-07-30T11:50:17+00:00 | Vulnerability · Source |
| CVE-2026-64785 | redhat_vex | swift-nio-http2: SwiftNIO HTTP/2: HTTP Request Smuggling and Response Splitting via Incomplete Header Validation | known not affected: 1 | 2026-07-30T11:46:02+00:00 | Vulnerability · Source |
| CVE-2026-18369 | redhat_vex | dogtag-pki: pki-core: redhat-pki: pki: ACME HTTP-01 validation SSRF via IP literal identifiers and unvalidated redirects | known affected: 89 | 2026-07-30T11:06:18+00:00 | Vulnerability · Source |
| CVE-2026-64193 | redhat_vex | Net::DNS: Net::DNS: Arbitrary code execution via EDNS EXTENDED ERROR handling | known not affected: 7 | 2026-07-30T11:01:02+00:00 | Vulnerability · Source |
| CVE-2026-52791 | redhat_vex | fuse-overlayfs: fuse-overlayfs: Privilege Escalation Vulnerability via SUID/SGID Bit Preservation | known affected: 7 | 2026-07-30T10:51:54+00:00 | Vulnerability · Source |
| CVE-2026-56390 | redhat_vex | bison: GNU Bison: Arbitrary file overwrite via grammar-defined output paths | known affected: 16 | 2026-07-30T10:31:38+00:00 | Vulnerability · Source |
| CVE-2026-42440 | redhat_vex | org.apache.opennlp/opennlp-tools: Apache OpenNLP: Denial of Service via unbounded array allocation in crafted model files | known affected: 2 known not affected: 2 under investigation: 3 | 2026-07-30T10:21:35+00:00 | Vulnerability · Source |
| CVE-2026-64685 | redhat_vex | ImageMagick: ImageMagick: Information Disclosure via Crafted Image File | known affected: 14 | 2026-07-30T10:17:48+00:00 | Vulnerability · Source |
| CVE-2025-13881 | redhat_vex | org.keycloak.services.resources.admin: Keycloak: Limited administrator can retrieve sensitive user attributes via Admin API | fixed: 10 | 2026-07-30T10:14:01+00:00 | Vulnerability · Source |
| CVE-2025-21701 | redhat_vex | kernel: net: avoid race between device unregistration and ethnl ops | known affected: 232 known not affected: 42 | 2026-07-30T10:14:00+00:00 | Vulnerability · Source |
| CVE-2025-21663 | redhat_vex | kernel: net: stmmac: dwmac-tegra: Read iommu stream id from device tree | fixed: 305 known affected: 22 known not affected: 166 | 2026-07-30T10:13:55+00:00 | Vulnerability · Source |
| CVE-2025-21638 | redhat_vex | kernel: sctp: sysctl: auth_enable: avoid using current->nsproxy | known affected: 274 | 2026-07-30T10:13:53+00:00 | Vulnerability · Source |
| CVE-2025-21637 | redhat_vex | kernel: sctp: sysctl: udp_port: avoid using current->nsproxy | known affected: 274 | 2026-07-30T10:13:50+00:00 | Vulnerability · Source |
| CVE-2025-21719 | redhat_vex | kernel: ipmr: do not call mr_mfc_uses_dev() for unres entries | known affected: 232 known not affected: 42 | 2026-07-30T10:13:48+00:00 | Vulnerability · Source |
| CVE-2025-21661 | redhat_vex | kernel: gpio: virtuser: fix missing lookup table cleanups | known not affected: 274 | 2026-07-30T10:13:45+00:00 | Vulnerability · Source |
| CVE-2025-21640 | redhat_vex | kernel: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy | known affected: 274 | 2026-07-30T10:13:42+00:00 | Vulnerability · Source |
| CVE-2025-21712 | redhat_vex | kernel: md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime | known affected: 274 | 2026-07-30T10:13:38+00:00 | Vulnerability · Source |
| CVE-2025-21804 | redhat_vex | kernel: PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() | known not affected: 274 | 2026-07-30T10:13:35+00:00 | Vulnerability · Source |
| CVE-2025-21851 | redhat_vex | kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel | fixed: 612 known affected: 22 known not affected: 90 | 2026-07-30T10:13:32+00:00 | Vulnerability · Source |
| CVE-2025-21832 | redhat_vex | kernel: block: don't revert iter for -EIOCBQUEUED | known affected: 184 known not affected: 90 | 2026-07-30T10:13:30+00:00 | Vulnerability · Source |
| CVE-2025-21810 | redhat_vex | kernel: driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() | known affected: 226 known not affected: 48 | 2026-07-30T10:13:28+00:00 | Vulnerability · Source |
| CVE-2025-21829 | redhat_vex | kernel: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" | fixed: 303 known affected: 98 known not affected: 90 | 2026-07-30T10:13:25+00:00 | Vulnerability · Source |
| CVE-2025-21766 | redhat_vex | kernel: ipv4: use RCU protection in __ip_rt_update_pmtu() | known affected: 274 | 2026-07-30T10:13:22+00:00 | Vulnerability · Source |
| CVE-2025-21827 | redhat_vex | kernel: Bluetooth: btusb: mediatek: Add locks for usb_driver_claim_interface() | known affected: 226 known not affected: 48 | 2026-07-30T10:13:20+00:00 | Vulnerability · Source |
| CVE-2025-21842 | redhat_vex | kernel: amdkfd: properly free gang_ctx_bo when failed to init user queue | known not affected: 274 | 2026-07-30T10:13:18+00:00 | Vulnerability · Source |
| CVE-2025-21830 | redhat_vex | kernel: landlock: Handle weird files | known affected: 184 known not affected: 90 | 2026-07-30T10:13:15+00:00 | Vulnerability · Source |
| CVE-2025-21825 | redhat_vex | kernel: bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT | known affected: 212 known not affected: 62 | 2026-07-30T10:13:12+00:00 | Vulnerability · Source |
| CVE-2025-21882 | redhat_vex | kernel: net/mlx5: Fix vport QoS cleanup on error | known not affected: 274 | 2026-07-30T10:13:11+00:00 | Vulnerability · Source |
| CVE-2025-21876 | redhat_vex | kernel: iommu/vt-d: Fix suspicious RCU usage | known affected: 184 known not affected: 90 | 2026-07-30T10:13:07+00:00 | Vulnerability · Source |
| CVE-2025-21889 | redhat_vex | kernel: perf/core: Add RCU read lock protection to perf_iterate_ctx() | known affected: 226 known not affected: 48 | 2026-07-30T10:13:06+00:00 | Vulnerability · Source |
| CVE-2025-21875 | redhat_vex | kernel: mptcp: always handle address removal under msk socket lock | known affected: 232 known not affected: 42 | 2026-07-30T10:13:04+00:00 | Vulnerability · Source |
| CVE-2025-21901 | redhat_vex | kernel: RDMA/bnxt_re: Add sanity checks on rdev validity | known affected: 212 known not affected: 62 | 2026-07-30T10:13:01+00:00 | Vulnerability · Source |
| CVE-2025-21924 | redhat_vex | kernel: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error | known affected: 184 known not affected: 90 | 2026-07-30T10:12:57+00:00 | Vulnerability · Source |
| CVE-2025-21884 | redhat_vex | kernel: net: better track kernel sockets lifetime | known affected: 226 known not affected: 48 | 2026-07-30T10:12:56+00:00 | Vulnerability · Source |
| CVE-2025-21890 | redhat_vex | kernel: idpf: fix checksums set in idpf_rx_rsc() | known affected: 232 known not affected: 42 | 2026-07-30T10:12:52+00:00 | Vulnerability · Source |
| CVE-2025-21906 | redhat_vex | kernel: wifi: iwlwifi: mvm: clean up ROC on failure | known affected: 212 known not affected: 62 | 2026-07-30T10:12:49+00:00 | Vulnerability · Source |