VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304379 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-98164 | redhat_vex | kernel: KVM: x86/mmu: Check write tracking in all address spaces | known affected: 234 known not affected: 42 | 2026-10-02T23:23:27+00:00 | Vulnerability · Source |
| CVE-2026-98162 | redhat_vex | kernel: smb/server: fix tree connection leak in smb2_tree_connect() | known not affected: 276 | 2026-10-02T23:23:23+00:00 | Vulnerability · Source |
| CVE-2026-98163 | redhat_vex | kernel: cgroup: Avoid iteration of dying tasks with zero refcount | known not affected: 274 | 2026-10-02T23:23:19+00:00 | Vulnerability · Source |
| CVE-2026-95359 | redhat_vex | chromium-browser: Uninitialized resource in GPU | known not affected: 1 | 2026-10-02T23:23:08+00:00 | Vulnerability · Source |
| CVE-2026-95294 | redhat_vex | chromium-browser: UI misrepresentation in Browser | known not affected: 1 | 2026-10-02T23:23:08+00:00 | Vulnerability · Source |
| CVE-2026-95376 | redhat_vex | chromium-browser: Externally controlled reference in DevTools | known not affected: 1 | 2026-10-02T23:23:08+00:00 | Vulnerability · Source |
| CVE-2026-96775 | redhat_vex | mlflow: MLflow dspy: Arbitrary code execution via crafted MLmodel artifact | known affected: 15 known not affected: 7 | 2026-10-02T23:23:08+00:00 | Vulnerability · Source |
| CVE-2026-98161 | redhat_vex | kernel: nvdimm: pmem: keep PREFLUSH before data writes | known affected: 234 known not affected: 42 | 2026-10-02T23:23:08+00:00 | Vulnerability · Source |
| CVE-2026-32281 | redhat_vex | crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation | fixed: 2325 known affected: 166 known not affected: 2210 | 2026-10-02T22:10:41+00:00 | Vulnerability · Source |
| CVE-2026-94638 | redhat_vex | thrift: Apache Thrift: Denial of Service via uncontrolled resource allocation in PHP bindings | fixed: 13 known affected: 12 | 2026-10-02T22:10:26+00:00 | Vulnerability · Source |
| CVE-2026-66331 | redhat_vex | thrift: thrift: Denial of Service via excessive resource allocation in Delphi buffered transport | fixed: 13 known affected: 12 | 2026-10-02T22:10:25+00:00 | Vulnerability · Source |
| CVE-2026-101908 | redhat_vex | axios: Axios: Outbound HTTP request manipulation via fetch adapter prototype pollution | fixed: 9 known not affected: 1 | 2026-10-02T22:10:18+00:00 | Vulnerability · Source |
| CVE-2026-101907 | redhat_vex | axios: Axios: Server-Side Request Forgery via bypassed redirect restrictions in fetch adapter | fixed: 9 known not affected: 1 | 2026-10-02T22:10:13+00:00 | Vulnerability · Source |
| CVE-2026-101904 | redhat_vex | axios: Axios: HTTP header injection via inherited prototype properties | fixed: 9 known not affected: 1 | 2026-10-02T22:10:12+00:00 | Vulnerability · Source |
| CVE-2026-101902 | redhat_vex | axios: axios: Unintended HTTP method override via prototype pollution gadget | fixed: 9 known not affected: 1 | 2026-10-02T22:10:10+00:00 | Vulnerability · Source |
| CVE-2026-101900 | redhat_vex | axios: Axios: Outbound HTTP header injection via prototype pollution in fetch adapter | fixed: 9 known not affected: 1 | 2026-10-02T22:10:06+00:00 | Vulnerability · Source |
| CVE-2026-101898 | redhat_vex | axios: axios: Security control bypass via unapplied HTTP/2 proxy and DNS settings | fixed: 9 known not affected: 1 | 2026-10-02T22:10:05+00:00 | Vulnerability · Source |
| CVE-2026-101909 | redhat_vex | axios: axios: Denial of Service via prototype pollution gadget in form serialization | fixed: 9 known not affected: 1 | 2026-10-02T22:06:45+00:00 | Vulnerability · Source |
| CVE-2026-101906 | redhat_vex | axios: axios: Denial of Service via crafted redirect hostname | fixed: 9 known not affected: 1 | 2026-10-02T22:06:45+00:00 | Vulnerability · Source |
| CVE-2026-101905 | redhat_vex | axios: axios: Request socket hijacking via inherited createConnection property | fixed: 9 known not affected: 1 | 2026-10-02T22:06:42+00:00 | Vulnerability · Source |
| CVE-2026-101901 | redhat_vex | axios: Axios: Denial of Service via unhandled error in HTTP/2 session initialization | fixed: 9 known not affected: 1 | 2026-10-02T22:06:39+00:00 | Vulnerability · Source |
| CVE-2026-96292 | redhat_vex | thrift: thrift: Denial of Service via inefficient regular expression evaluation in Lua bindings | fixed: 13 known affected: 12 | 2026-10-02T22:06:24+00:00 | Vulnerability · Source |
| CVE-2026-96277 | redhat_vex | thrift: thrift: Denial of Service via uncaught exception in Ruby bindings | fixed: 13 | 2026-10-02T22:06:23+00:00 | Vulnerability · Source |
| CVE-2026-94657 | redhat_vex | thrift: thrift: Denial of Service via improper resource allocation in JavaME bindings | fixed: 13 known affected: 12 | 2026-10-02T22:06:18+00:00 | Vulnerability · Source |
| CVE-2026-94650 | redhat_vex | thrift: thrift: Denial of Service via uncontrolled recursion in C GLib bindings | fixed: 13 known affected: 12 | 2026-10-02T22:06:17+00:00 | Vulnerability · Source |
| CVE-2026-94646 | redhat_vex | thrift: thrift: Denial of Service via prototype pollution in Node.js bindings | fixed: 13 | 2026-10-02T22:06:15+00:00 | Vulnerability · Source |
| CVE-2026-90440 | redhat_vex | thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer | fixed: 13 known affected: 12 | 2026-10-02T22:06:12+00:00 | Vulnerability · Source |
| CVE-2026-86535 | redhat_vex | thrift: thrift: Denial of Service via TJSONProtocol in Node.js bindings | fixed: 13 | 2026-10-02T22:06:11+00:00 | Vulnerability · Source |
| CVE-2026-86537 | redhat_vex | thrift: thrift: Denial of Service via infinite loop in D language bindings | fixed: 13 known affected: 12 | 2026-10-02T22:06:09+00:00 | Vulnerability · Source |
| CVE-2026-85088 | redhat_vex | thrift: thrift: Man-in-the-middle attacks via improper certificate validation | fixed: 13 known affected: 12 | 2026-10-02T22:06:06+00:00 | Vulnerability · Source |
| CVE-2026-83745 | redhat_vex | thrift: thrift: Denial of Service via excessive memory allocation in WebSocket transport | fixed: 13 known affected: 12 | 2026-10-02T22:06:02+00:00 | Vulnerability · Source |
| CVE-2026-66858 | redhat_vex | thrift: Apache Thrift: Denial of Service via deeply nested unknown fields | fixed: 13 known affected: 12 | 2026-10-02T22:05:59+00:00 | Vulnerability · Source |
| CVE-2026-66837 | redhat_vex | thrift: thrift: Denial of Service via buffer overflow in PHP bindings | fixed: 13 known affected: 12 | 2026-10-02T22:05:56+00:00 | Vulnerability · Source |
| CVE-2026-66081 | redhat_vex | thrift: thrift: Denial of Service via uninitialized pointer access in c_glib bindings | fixed: 13 known affected: 12 | 2026-10-02T22:05:54+00:00 | Vulnerability · Source |
| CVE-2026-66054 | redhat_vex | thrift: thrift: Denial of Service via improper handling of compressed data | fixed: 13 known affected: 12 | 2026-10-02T22:05:52+00:00 | Vulnerability · Source |
| CVE-2026-21729 | redhat_vex | Loki: Loki: Denial of Service via large limit queries | fixed: 7 | 2026-10-02T22:05:33+00:00 | Vulnerability · Source |
| CVE-2024-28180 | redhat_vex | jose-go: improper handling of highly compressed data | fixed: 1855 known affected: 94 known not affected: 14551 | 2026-10-02T22:00:08+00:00 | Vulnerability · Source |
| CVE-2022-41722 | redhat_vex | golang: path/filepath: path-filepath filepath.Clean path traversal | fixed: 226 known affected: 26 known not affected: 2340 under investigation: 1 | 2026-10-02T21:59:51+00:00 | Vulnerability · Source |
| CVE-2026-42507 | redhat_vex | net/textproto: golang: Golang net/textproto: Misleading error messages via input injection | fixed: 227 known affected: 381 known not affected: 182 | 2026-10-02T21:50:39+00:00 | Vulnerability · Source |
| CVE-2026-42505 | redhat_vex | crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello | fixed: 102 known affected: 366 known not affected: 6 | 2026-10-02T21:50:26+00:00 | Vulnerability · Source |
| CVE-2026-39825 | redhat_vex | net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls | fixed: 890 known affected: 332 known not affected: 321 | 2026-10-02T21:50:01+00:00 | Vulnerability · Source |
| CVE-2026-63912 | redhat_vex | kernel: xfrm: esp: restore combined single-frag length gate | fixed: 303 known affected: 160 known not affected: 29 | 2026-10-02T21:31:03+00:00 | Vulnerability · Source |
| CVE-2020-11023 | redhat_vex | jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods | fixed: 5510 known affected: 169 known not affected: 3184 | 2026-10-02T21:29:57+00:00 | Vulnerability · Source |
| CVE-2025-30156 | redhat_vex | kernel: ceph: kernel: Ceph: exploit of hardcoded IVECs, in a misuse of AES, resulting in authentication bypass | fixed: 1457 known affected: 90 known not affected: 32 | 2026-10-02T21:28:26+00:00 | Vulnerability · Source |
| CVE-2026-98160 | redhat_vex | kernel: staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() | known not affected: 276 | 2026-10-02T20:49:28+00:00 | Vulnerability · Source |
| CVE-2026-104873 | redhat_vex | langgraph-sdk: langgraph-sdk: Authorization bypass via improper resource handler registration | known affected: 8 | 2026-10-02T20:38:10+00:00 | Vulnerability · Source |
| CVE-2026-103877 | redhat_vex | org.apache.directory.api/api-ldap-client-api: Apache Directory LDAP API: Remote code execution via untrusted Java object deserialization | known affected: 1 | 2026-10-02T20:38:05+00:00 | Vulnerability · Source |
| CVE-2026-103885 | redhat_vex | org.apache.directory.api/api-ldap-model: Apache Directory LDAP API: Denial of Service via crafted telephone numbers | known affected: 1 | 2026-10-02T20:38:05+00:00 | Vulnerability · Source |
| CVE-2026-102731 | redhat_vex | org.apache.directory.api/api-asn1-ber: Apache Directory LDAP API: Denial of Service via excessive memory allocation | known affected: 1 | 2026-10-02T20:38:05+00:00 | Vulnerability · Source |
| CVE-2026-103552 | redhat_vex | org.apache.directory.api/api-ldap-codec-core: Apache Directory LDAP API: Denial of Service via deeply nested search filter | known affected: 1 | 2026-10-02T20:38:05+00:00 | Vulnerability · Source |