VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
221784 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-58058 | microsoft_vex | Nmap - Integer Underflow in IPv6 Extension Header Parsing | fixed: 2 known affected: 2 | 2026-07-06T14:43:46+00:00 | Vulnerability · Source |
| CVE-2026-58051 | microsoft_vex | libssh2 - Free of Uninitialized Pointer in publickey List Cleanup | known affected: 3 known not affected: 1 | 2026-07-06T14:43:39+00:00 | Vulnerability · Source |
| CVE-2026-3196 | microsoft_vex | Qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation | fixed: 2 known affected: 4 | 2026-07-06T14:43:33+00:00 | Vulnerability · Source |
| CVE-2025-15661 | microsoft_vex | libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c | fixed: 2 known affected: 4 known not affected: 1 | 2026-07-06T14:43:01+00:00 | Vulnerability · Source |
| CVE-2026-55199 | microsoft_vex | libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler | fixed: 2 known affected: 4 known not affected: 1 | 2026-07-06T14:42:54+00:00 | Vulnerability · Source |
| CVE-2026-56116 | microsoft_vex | dhcpcd Memory Leak DoS via IPv6 Router Advertisement Handling | fixed: 3 known affected: 3 | 2026-07-06T14:42:40+00:00 | Vulnerability · Source |
| CVE-2026-11623 | microsoft_vex | tmux image.c image_free use after free | fixed: 2 known affected: 2 | 2026-07-06T14:42:19+00:00 | Vulnerability · Source |
| CVE-2026-10028 | microsoft_vex | Glib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chain | fixed: 2 known affected: 2 | 2026-07-06T14:42:05+00:00 | Vulnerability · Source |
| CVE-2026-39835 | microsoft_vex | Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh | fixed: 16 known affected: 21 known not affected: 2 | 2026-07-06T14:41:50+00:00 | Vulnerability · Source |
| CVE-2026-39828 | microsoft_vex | Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh | fixed: 10 known affected: 17 known not affected: 2 | 2026-07-06T14:41:43+00:00 | Vulnerability · Source |
| CVE-2026-25680 | microsoft_vex | Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html | fixed: 35 known affected: 44 known not affected: 2 | 2026-07-06T14:41:36+00:00 | Vulnerability · Source |
| CVE-2026-42502 | microsoft_vex | Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html | fixed: 35 known affected: 44 known not affected: 2 | 2026-07-06T14:41:22+00:00 | Vulnerability · Source |
| CVE-2026-45803 | microsoft_vex | gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection | fixed: 2 known affected: 4 | 2026-07-06T14:41:11+00:00 | Vulnerability · Source |
| CVE-2026-41889 | microsoft_vex | pgx: SQL Injection via placeholder confusion with dollar quoted string literals | fixed: 3 known affected: 6 | 2026-07-06T14:41:00+00:00 | Vulnerability · Source |
| CVE-2025-58160 | microsoft_vex | Tracing logging user input may result in poisoning logs with ANSI escape sequences | fixed: 12 known affected: 30 | 2026-07-06T14:40:43+00:00 | Vulnerability · Source |
| CVE-2025-46327 | microsoft_vex | Go Snowflake Driver has race condition when checking access to Easy Logging configuration file | fixed: 1 known affected: 13 | 2026-07-06T14:40:35+00:00 | Vulnerability · Source |
| CVE-2025-29923 | microsoft_vex | go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment | fixed: 3 known affected: 10 | 2026-07-06T14:40:27+00:00 | Vulnerability · Source |
| CVE-2023-1386 | microsoft_vex | Qemu: 9pfs: suid/sgid bits not dropped on file write | known affected: 13 | 2026-07-06T14:40:19+00:00 | Vulnerability · Source |
| CVE-2026-53092 | redhat_vex | kernel: bpf: Fix linked reg delta tracking when src_reg == dst_reg | known affected: 184 known not affected: 90 | 2026-07-06T14:23:12+00:00 | Vulnerability · Source |
| CVE-2026-53090 | redhat_vex | kernel: bpf: Fix ld_{abs,ind} failure path analysis in subprogs | known affected: 232 known not affected: 42 | 2026-07-06T14:23:10+00:00 | Vulnerability · Source |
| CVE-2026-53085 | redhat_vex | kernel: bpf: fix mm lifecycle in open-coded task_vma iterator | known affected: 184 known not affected: 90 | 2026-07-06T14:23:03+00:00 | Vulnerability · Source |
| CVE-2026-53081 | redhat_vex | kernel: bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars | known affected: 184 known not affected: 90 | 2026-07-06T14:22:59+00:00 | Vulnerability · Source |
| CVE-2026-53033 | redhat_vex | kernel: bpf, sockmap: Take state lock for af_unix iter | known affected: 184 known not affected: 90 | 2026-07-06T14:22:58+00:00 | Vulnerability · Source |
| CVE-2026-52955 | redhat_vex | kernel: libceph: Fix potential out-of-bounds access in crush_decode() | known affected: 260 known not affected: 14 | 2026-07-06T14:22:49+00:00 | Vulnerability · Source |
| CVE-2026-14757 | redhat_vex | radare2: Radare2: Integer overflow allows local impact | known not affected: 1 | 2026-07-06T14:21:59+00:00 | Vulnerability · Source |
| CVE-2026-31236 | redhat_vex | llm: llm CLI tool: Arbitrary code execution via code injection in --functions argument | known not affected: 1 | 2026-07-06T14:21:59+00:00 | Vulnerability · Source |
| CVE-2026-14759 | redhat_vex | radare2: radare2: Denial of Service via heap-based buffer overflow | known not affected: 1 | 2026-07-06T14:01:38+00:00 | Vulnerability · Source |
| CVE-2026-50557 | redhat_vex | @angular/compiler: @angular/core: Angular: Template and Attribute Namespace Sanitization Bypass (XSS) | known affected: 2 known not affected: 49 | 2026-07-06T13:23:03+00:00 | Vulnerability · Source |
| CVE-2026-14788 | redhat_vex | radare2: radare2: Denial of Service via use-after-free in r_core_bin_load function | known not affected: 1 | 2026-07-06T13:15:10+00:00 | Vulnerability · Source |
| CVE-2026-53181 | redhat_vex | kernel: vsock/vmci: fix sk_ack_backlog leak on failed handshake | known affected: 260 known not affected: 14 | 2026-07-06T13:08:33+00:00 | Vulnerability · Source |
| CVE-2026-14760 | redhat_vex | radare2: radare2: Denial of Service via local use-after-free vulnerability | known not affected: 1 | 2026-07-06T13:08:04+00:00 | Vulnerability · Source |
| CVE-2026-53190 | redhat_vex | kernel: drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() | known affected: 184 known not affected: 90 | 2026-07-06T12:56:56+00:00 | Vulnerability · Source |
| CVE-2026-53196 | redhat_vex | kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() | known affected: 260 known not affected: 14 | 2026-07-06T12:55:50+00:00 | Vulnerability · Source |
| CVE-2025-67899 | redhat_vex | uriparser: uriparser: Unbounded recursion and stack consumption via large input | fixed: 4 known affected: 4 | 2026-07-06T12:55:46+00:00 | Vulnerability · Source |
| CVE-2026-42371 | redhat_vex | uriparser: uriparser: Denial of Service via numeric truncation with oversized URIs | fixed: 4 known affected: 4 | 2026-07-06T12:55:46+00:00 | Vulnerability · Source |
| CVE-2026-53195 | redhat_vex | kernel: USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() | known affected: 274 | 2026-07-06T12:55:46+00:00 | Vulnerability · Source |
| CVE-2026-35193 | redhat_vex | django: Django: Information disclosure due to improper caching of authenticated responses | known affected: 19 under investigation: 1 | 2026-07-06T12:26:49+00:00 | Vulnerability · Source |
| CVE-2026-8404 | redhat_vex | Django: Django: Information disclosure due to improper handling of Cache-Control directives | known affected: 19 under investigation: 1 | 2026-07-06T12:26:48+00:00 | Vulnerability · Source |
| CVE-2026-33033 | redhat_vex | Django: Django: Performance degradation via excessive whitespace in multipart uploads | known affected: 11 under investigation: 19 | 2026-07-06T12:25:45+00:00 | Vulnerability · Source |
| CVE-2026-6907 | redhat_vex | django: Django: Information Disclosure via erroneous caching of Vary header with asterisk | known affected: 27 under investigation: 9 | 2026-07-06T12:25:35+00:00 | Vulnerability · Source |
| CVE-2026-45831 | redhat_vex | ChromaDB: ChromaDB: Unauthorized cross-tenant actions due to improper authorization checks | known affected: 5 | 2026-07-06T12:15:18+00:00 | Vulnerability · Source |
| CVE-2026-44660 | redhat_vex | python-ujson: UltraJSON: Memory leak leading to Denial of Service | known affected: 18 known not affected: 4 | 2026-07-06T12:15:16+00:00 | Vulnerability · Source |
| CVE-2026-31467 | redhat_vex | kernel: Linux kernel: Denial of Service in erofs filesystem | fixed: 309 known not affected: 198 | 2026-07-06T12:15:14+00:00 | Vulnerability · Source |
| CVE-2026-45833 | redhat_vex | chromadb: ChromaDB: Arbitrary Code Execution via Code Injection | known affected: 5 | 2026-07-06T12:06:28+00:00 | Vulnerability · Source |
| CVE-2026-45832 | redhat_vex | chromadb: ChromaDB: Authorization bypass in V1 collection-level endpoints | known affected: 5 | 2026-07-06T12:06:27+00:00 | Vulnerability · Source |
| CVE-2026-45830 | redhat_vex | chromadb: ChromaDB: Unauthorized data manipulation due to improper authorization validation | known affected: 5 | 2026-07-06T12:06:24+00:00 | Vulnerability · Source |
| CVE-2026-14631 | redhat_vex | webpack-dev-server: webpack-dev-server: Denial of Service via malformed headers | known not affected: 80 | 2026-07-06T10:47:08+00:00 | Vulnerability · Source |
| CVE-2026-43868 | redhat_vex | Apache Thrift: Apache Thrift: Denial of Service via excessive memory allocation | fixed: 1 known affected: 7 known not affected: 51 | 2026-07-06T10:33:53+00:00 | Vulnerability · Source |
| CVE-2026-2033 | redhat_vex | mlflow: MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability | known not affected: 19 | 2026-07-06T10:11:35+00:00 | Vulnerability · Source |
| CVE-2026-2635 | redhat_vex | mlflow: MLflow Use of Default Password Authentication Bypass Vulnerability | known not affected: 19 | 2026-07-06T10:11:35+00:00 | Vulnerability · Source |