VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288117 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-35036 | redhat_vex | hibernate-validator: Hibernate Validator Expression Language Injection | fixed: 181 known affected: 4 known not affected: 15 | 2026-07-30T01:47:11+00:00 | Vulnerability · Source |
| CVE-2026-42403 | redhat_vex | org.apache.neethi: Apache Neethi: Denial of Service via circular policy references | fixed: 1 known affected: 8 | 2026-07-30T01:43:12+00:00 | Vulnerability · Source |
| CVE-2026-42404 | redhat_vex | Apache Neethi: Apache Neethi: Information disclosure and network access bypass via PolicyReference API | fixed: 1 known affected: 8 | 2026-07-30T01:42:20+00:00 | Vulnerability · Source |
| CVE-2025-1948 | redhat_vex | jetty-http2-common: Jetty HTTP/2 Header List Size Vulnerability | fixed: 30 | 2026-07-30T01:42:09+00:00 | Vulnerability · Source |
| CVE-2025-1634 | redhat_vex | io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout | fixed: 6 known affected: 1 | 2026-07-30T01:41:22+00:00 | Vulnerability · Source |
| CVE-2024-8447 | redhat_vex | narayana: deadlock via multiple join requests sent to LRA Coordinator | fixed: 62 known affected: 3 | 2026-07-30T01:30:14+00:00 | Vulnerability · Source |
| CVE-2026-64388 | redhat_vex | kernel: smb/client: fix chown/chgrp with SMB3 POSIX Extensions | known affected: 232 known not affected: 42 | 2026-07-30T00:23:29+00:00 | Vulnerability · Source |
| CVE-2026-64370 | redhat_vex | kernel: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path | known affected: 232 known not affected: 42 | 2026-07-30T00:23:25+00:00 | Vulnerability · Source |
| CVE-2026-64489 | redhat_vex | kernel: ALSA: ymfpci: check snd_ctl_new1() return value | known not affected: 274 | 2026-07-30T00:23:18+00:00 | Vulnerability · Source |
| CVE-2026-64358 | redhat_vex | kernel: media: mtk-jpeg: cancel workqueue on release for supported platforms only | known not affected: 274 | 2026-07-30T00:23:17+00:00 | Vulnerability · Source |
| CVE-2026-64320 | redhat_vex | kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page | known affected: 260 known not affected: 14 | 2026-07-30T00:22:43+00:00 | Vulnerability · Source |
| CVE-2026-31490 | redhat_vex | kernel: drm/xe/pf: Fix use-after-free in migration restore | known affected: 76 known not affected: 198 | 2026-07-30T00:22:38+00:00 | Vulnerability · Source |
| CVE-2026-64416 | redhat_vex | kernel: mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host | known affected: 76 known not affected: 198 | 2026-07-30T00:22:32+00:00 | Vulnerability · Source |
| CVE-2026-64360 | redhat_vex | kernel: hfs/hfsplus: zero-initialize buffer in hfs_bnode_read | known not affected: 274 | 2026-07-30T00:22:27+00:00 | Vulnerability · Source |
| CVE-2026-64463 | redhat_vex | kernel: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres | known affected: 48 known not affected: 226 | 2026-07-30T00:22:21+00:00 | Vulnerability · Source |
| CVE-2026-44172 | redhat_vex | mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string() | fixed: 130 known not affected: 135 | 2026-07-29T21:20:24+00:00 | Vulnerability · Source |
| CVE-2026-23350 | redhat_vex | kernel: drm/xe/queue: Call fini on exec queue creation fail | known affected: 76 known not affected: 198 | 2026-07-29T20:57:17+00:00 | Vulnerability · Source |
| CVE-2026-53393 | redhat_vex | kernel: nfsd: reset write verifier on deferred writeback errors | known affected: 198 known not affected: 77 | 2026-07-29T20:42:19+00:00 | Vulnerability · Source |
| CVE-2026-0685 | redhat_vex | genshi: Genshi Template Engine: Remote Code Execution via Server-Side Template Injection | known not affected: 1 | 2026-07-29T20:37:16+00:00 | Vulnerability · Source |
| CVE-2026-30892 | redhat_vex | crun: crun: Privilege escalation due to incorrect parsing of the `--user` option | fixed: 86 known affected: 1 known not affected: 2 | 2026-07-29T20:31:05+00:00 | Vulnerability · Source |
| CVE-2026-50642 | redhat_vex | diff-so-fancy: diff-so-fancy: Terminal escape injection allows command execution | known not affected: 1 | 2026-07-29T20:17:18+00:00 | Vulnerability · Source |
| CVE-2026-63804 | redhat_vex | kernel: gfs2: fix use-after-free in gfs2_qd_dealloc | known affected: 198 known not affected: 76 | 2026-07-29T20:17:18+00:00 | Vulnerability · Source |
| CVE-2026-53385 | redhat_vex | kernel: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write | known affected: 184 known not affected: 90 | 2026-07-29T19:42:32+00:00 | Vulnerability · Source |
| CVE-2026-59919 | redhat_vex | io.netty/netty-codec-haproxy: Netty: Improper CR/LF neutralization in netty-codec-haproxy | known affected: 39 | 2026-07-29T19:04:18+00:00 | Vulnerability · Source |
| CVE-2026-64497 | redhat_vex | kernel: iio: chemical: scd30: Cleanup initializations and fix sign-extension bug | known not affected: 274 | 2026-07-29T19:01:43+00:00 | Vulnerability · Source |
| CVE-2026-33245 | redhat_vex | react-router: React Router: Cross-Site Scripting vulnerability via untrusted React Server Component redirects | fixed: 49 known affected: 62 known not affected: 582 under investigation: 93 | 2026-07-29T18:40:25+00:00 | Vulnerability · Source |
| CVE-2026-64336 | redhat_vex | kernel: USB: serial: keyspan_pda: fix information leak | known affected: 246 known not affected: 28 | 2026-07-29T18:37:22+00:00 | Vulnerability · Source |
| CVE-2026-64323 | redhat_vex | kernel: udf: validate VAT header length against the VAT inode size | known affected: 274 known not affected: 1 | 2026-07-29T18:32:23+00:00 | Vulnerability · Source |
| CVE-2026-64484 | redhat_vex | kernel: ALSA: es1938: check snd_ctl_new1() return value | known not affected: 274 | 2026-07-29T18:22:19+00:00 | Vulnerability · Source |
| CVE-2026-64458 | redhat_vex | kernel: mm/damon/ops-common: handle extreme intervals in damon_hot_score() | known affected: 184 known not affected: 90 | 2026-07-29T18:17:18+00:00 | Vulnerability · Source |
| CVE-2026-64308 | redhat_vex | kernel: crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD) | known affected: 184 known not affected: 90 | 2026-07-29T18:12:45+00:00 | Vulnerability · Source |
| CVE-2026-64415 | redhat_vex | kernel: mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup | known affected: 90 known not affected: 185 | 2026-07-29T18:07:19+00:00 | Vulnerability · Source |
| CVE-2026-59920 | redhat_vex | io.netty/netty-codec-stomp: Netty: Improper CR/LF neutralization in netty-codec-stomp | known affected: 10 | 2026-07-29T18:02:44+00:00 | Vulnerability · Source |
| CVE-2026-49844 | redhat_vex | org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values | known affected: 66 | 2026-07-29T18:02:42+00:00 | Vulnerability · Source |
| CVE-2026-64391 | redhat_vex | kernel: ksmbd: use opener credentials for ADS I/O | known not affected: 275 | 2026-07-29T17:29:09+00:00 | Vulnerability · Source |
| CVE-2026-56392 | redhat_vex | coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values | fixed: 28 known affected: 12 under investigation: 1 | 2026-07-29T17:26:05+00:00 | Vulnerability · Source |
| CVE-2026-45695 | redhat_vex | github.com/kopia/kopia: Kopia: Arbitrary code execution via unauthenticated SFTP configuration in HTTP server. | known affected: 5 | 2026-07-29T17:12:52+00:00 | Vulnerability · Source |
| CVE-2026-53378 | redhat_vex | kernel: drm/colorop: Fix blob property reference tracking in state lifecycle | known affected: 184 known not affected: 90 | 2026-07-29T17:09:46+00:00 | Vulnerability · Source |
| CVE-2026-53367 | redhat_vex | kernel: selinux: fix avdcache auditing | known affected: 14 known not affected: 260 | 2026-07-29T17:09:42+00:00 | Vulnerability · Source |
| CVE-2026-53370 | redhat_vex | kernel: perf/x86/intel: Improve validation and configuration of ACR masks | known affected: 76 known not affected: 198 | 2026-07-29T17:09:41+00:00 | Vulnerability · Source |
| CVE-2026-53377 | redhat_vex | kernel: drm/msm: always recover the gpu | known not affected: 274 | 2026-07-29T17:09:38+00:00 | Vulnerability · Source |
| CVE-2026-29167 | redhat_vex | httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration | fixed: 4 known affected: 38 known not affected: 6 under investigation: 24 | 2026-07-29T17:09:35+00:00 | Vulnerability · Source |
| CVE-2026-64274 | redhat_vex | kernel: Input: goodix - clamp the device-reported contact count | known not affected: 274 | 2026-07-29T17:09:31+00:00 | Vulnerability · Source |
| CVE-2026-56764 | redhat_vex | hono: Hono - Timing Attack in basicAuth and bearerAuth Middleware | fixed: 6 known affected: 1 known not affected: 7 | 2026-07-29T17:09:29+00:00 | Vulnerability · Source |
| CVE-2026-53379 | redhat_vex | kernel: media: i2c: ov8856: free control handler on error in ov8856_init_controls() | known affected: 76 known not affected: 198 | 2026-07-29T17:09:26+00:00 | Vulnerability · Source |
| CVE-2026-64262 | redhat_vex | kernel: fuse-uring: end fuse_req on io-uring cancel task work | known not affected: 274 | 2026-07-29T17:09:25+00:00 | Vulnerability · Source |
| CVE-2026-64480 | redhat_vex | kernel: ALSA: ice1712: check snd_ctl_new1() return value | known affected: 246 known not affected: 28 | 2026-07-29T17:09:24+00:00 | Vulnerability · Source |
| CVE-2026-53371 | redhat_vex | kernel: RDMA/ionic: bound node_desc sysfs read with %.64s | known not affected: 274 | 2026-07-29T17:08:21+00:00 | Vulnerability · Source |
| CVE-2024-43204 | redhat_vex | httpd: SSRF in Apache HTTP Server with mod_proxy loaded | known affected: 54 | 2026-07-29T17:08:15+00:00 | Vulnerability · Source |
| CVE-2026-53372 | redhat_vex | kernel: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking | known affected: 184 known not affected: 90 | 2026-07-29T17:08:14+00:00 | Vulnerability · Source |