VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304380 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-94483 | redhat_vex | next: Next.js: Information disclosure via SSRF in Image Optimization | known affected: 20 | 2026-10-02T17:46:05+00:00 | Vulnerability · Source |
| CVE-2026-75593 | redhat_vex | github.com/moby/buildkit: BuildKit: File escape vulnerability allows unauthorized file modification | fixed: 30 known affected: 86 known not affected: 199 | 2026-10-02T17:45:58+00:00 | Vulnerability · Source |
| CVE-2026-95297 | redhat_vex | chromium-browser: Missing authorization in Contextual Tasks | known not affected: 1 | 2026-10-02T17:45:57+00:00 | Vulnerability · Source |
| CVE-2026-15792 | redhat_vex | github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request | fixed: 44 known affected: 54 known not affected: 368 | 2026-10-02T17:45:25+00:00 | Vulnerability · Source |
| CVE-2026-95302 | redhat_vex | chromium-browser: Incorrect authorization in WebAPKs | known not affected: 1 | 2026-10-02T17:45:24+00:00 | Vulnerability · Source |
| CVE-2026-95375 | redhat_vex | chromium-browser: Incorrect authorization in BrowserTag | known not affected: 1 | 2026-10-02T17:45:22+00:00 | Vulnerability · Source |
| CVE-2026-95362 | redhat_vex | chromium-browser: Cross-site request forgery in DevTools | known not affected: 1 | 2026-10-02T17:45:22+00:00 | Vulnerability · Source |
| CVE-2025-68121 | redhat_vex | crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption | fixed: 8230 known affected: 186 known not affected: 9015 under investigation: 42 | 2026-10-02T17:42:50+00:00 | Vulnerability · Source |
| CVE-2026-95381 | redhat_vex | chromium-browser: Improper input validation in Printing | known not affected: 1 | 2026-10-02T17:42:43+00:00 | Vulnerability · Source |
| CVE-2026-104721 | redhat_vex | ch.qos.logback/logback-classic: logback-classic: Arbitrary file write via path traversal in MDC discriminator | known affected: 195 known not affected: 1 | 2026-10-02T17:40:45+00:00 | Vulnerability · Source |
| CVE-2026-102993 | redhat_vex | pypdf: pypdf: Denial of Service via crafted Roman page labels | known affected: 15 | 2026-10-02T17:40:42+00:00 | Vulnerability · Source |
| CVE-2026-100077 | redhat_vex | kernel: drm/msm: Recover HW before retire hung submit | known not affected: 276 | 2026-10-02T17:40:38+00:00 | Vulnerability · Source |
| CVE-2026-100076 | redhat_vex | kernel: staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths | known not affected: 276 | 2026-10-02T17:40:35+00:00 | Vulnerability · Source |
| CVE-2026-69243 | redhat_vex | aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade | fixed: 226 known affected: 78 known not affected: 1801 | 2026-10-02T17:40:29+00:00 | Vulnerability · Source |
| CVE-2026-69097 | redhat_vex | gitpython: GitPython: Remote Code Execution via Config Injection in Submodule Names | known affected: 41 known not affected: 37 | 2026-10-02T17:40:27+00:00 | Vulnerability · Source |
| CVE-2026-59280 | redhat_vex | org.springframework/spring-webmvc: Spring Framework: Path Traversal via untrusted input in FreeMarker integration | known affected: 15 known not affected: 1 | 2026-10-02T17:40:26+00:00 | Vulnerability · Source |
| CVE-2026-59275 | redhat_vex | org.springframework.amqp/spring-amqp: Spring AMQP: Remote JVM termination via hostile AMQP message | known not affected: 2 | 2026-10-02T17:40:22+00:00 | Vulnerability · Source |
| CVE-2026-49919 | redhat_vex | freetype: Integer overflow in FreeType tt_face_colr_blend_layer() leads to heap buffer overflow during COLR font rendering | known affected: 279 known not affected: 1 | 2026-10-02T17:40:20+00:00 | Vulnerability · Source |
| CVE-2026-32791 | redhat_vex | Intel Performance Counter Monitor: Intel Performance Counter Monitor: Escalation of Privilege via Untrusted Search Path | known affected: 3 | 2026-10-02T17:40:18+00:00 | Vulnerability · Source |
| CVE-2026-23937 | redhat_vex | zabbix: Data integrity loss via PSK key extraction | known not affected: 1 | 2026-10-02T17:40:16+00:00 | Vulnerability · Source |
| CVE-2026-23922 | redhat_vex | zabbix: Zabbix: OAuth client secret leak via malicious token endpoint | known not affected: 1 | 2026-10-02T17:40:15+00:00 | Vulnerability · Source |
| CVE-2026-23931 | redhat_vex | zabbix: Zabbix: Information disclosure of user macro values | known not affected: 1 | 2026-10-02T17:40:15+00:00 | Vulnerability · Source |
| CVE-2026-23930 | redhat_vex | zabbix: Zabbix: Denial of Service via Frontend popup.testtriggerexpr action | known not affected: 1 | 2026-10-02T17:40:15+00:00 | Vulnerability · Source |
| CVE-2026-73501 | redhat_vex | github.com/getkin/kin-openapi: kin-openapi: kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default | fixed: 12 known affected: 89 known not affected: 38 | 2026-10-02T17:40:02+00:00 | Vulnerability · Source |
| CVE-2026-104851 | redhat_vex | fsspec: fsspec: Arbitrary code execution via crafted reference documents | known affected: 90 | 2026-10-02T17:39:57+00:00 | Vulnerability · Source |
| CVE-2026-59645 | redhat_vex | org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcutil-fips: Bouncy Castle for Java: Denial of Service via OER parser unbounded recursion | known affected: 9 known not affected: 8 | 2026-10-02T17:39:54+00:00 | Vulnerability · Source |
| CVE-2026-59642 | redhat_vex | org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Data integrity bypass due to improper cryptographic binding in CMS AuthenticatedData | known affected: 35 known not affected: 7 | 2026-10-02T17:39:50+00:00 | Vulnerability · Source |
| CVE-2026-59639 | redhat_vex | org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Cryptographic signature bypass | known affected: 35 known not affected: 7 | 2026-10-02T17:39:47+00:00 | Vulnerability · Source |
| CVE-2026-58063 | redhat_vex | org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Denial of Service via unbounded KDF cost in BCFKS keystore load | known affected: 9 known not affected: 8 | 2026-10-02T17:39:44+00:00 | Vulnerability · Source |
| CVE-2026-12003 | redhat_vex | python: Python: Privilege escalation due to insecure VPATH handling in Windows legacy installers | fixed: 80 known affected: 1 known not affected: 131 | 2026-10-02T17:39:40+00:00 | Vulnerability · Source |
| CVE-2024-7532 | redhat_vex | chromium-browser: angle: Out of bounds memory access in ANGLE | fixed: 92 known affected: 11 known not affected: 23 | 2026-10-02T17:39:38+00:00 | Vulnerability · Source |
| CVE-2026-92599 | redhat_vex | joi: joi: Denial of Service via `isoDate` validation regular expression | fixed: 9 known affected: 13 known not affected: 23 | 2026-10-02T17:39:18+00:00 | Vulnerability · Source |
| CVE-2026-96760 | redhat_vex | authlib: authlib: Signature verification bypass via deserialize_json | known affected: 10 known not affected: 3 | 2026-10-02T17:39:08+00:00 | Vulnerability · Source |
| CVE-2026-93599 | redhat_vex | rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List | fixed: 59 known affected: 113 known not affected: 182 | 2026-10-02T17:38:49+00:00 | Vulnerability · Source |
| CVE-2026-19953 | redhat_vex | URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization | known affected: 10 known not affected: 1 | 2026-10-02T17:37:19+00:00 | Vulnerability · Source |
| CVE-2026-1199 | redhat_vex | zabbix: Zabbix: Login lockout bypass allows increased password guessing | known not affected: 1 | 2026-10-02T17:37:18+00:00 | Vulnerability · Source |
| CVE-2022-29968 | redhat_vex | kernel: io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private | known not affected: 198 | 2026-10-02T17:37:17+00:00 | Vulnerability · Source |
| CVE-2026-33154 | redhat_vex | dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection | fixed: 54 known affected: 6 known not affected: 785 under investigation: 14 | 2026-10-02T17:37:02+00:00 | Vulnerability · Source |
| CVE-2026-12545 | redhat_vex | rubygem-hammer_cli: command injection via insecure editor invocation | fixed: 20 known affected: 1 known not affected: 305 | 2026-10-02T17:37:02+00:00 | Vulnerability · Source |
| CVE-2026-12542 | redhat_vex | foreman: command injection in foreman-tail | fixed: 103 known affected: 17 known not affected: 222 | 2026-10-02T17:36:57+00:00 | Vulnerability · Source |
| CVE-2026-79654 | redhat_vex | ketello: Katello Content View History API Cross-Organization Authorization Bypass | fixed: 10 known affected: 1 known not affected: 318 | 2026-10-02T17:36:36+00:00 | Vulnerability · Source |
| CVE-2026-78679 | redhat_vex | GitPython: GitPython: Arbitrary file read via TagReference.create() | fixed: 56 known affected: 45 known not affected: 890 | 2026-10-02T17:36:35+00:00 | Vulnerability · Source |
| CVE-2026-56097 | redhat_vex | rubygem-katello: SQL injection in Registry Proxy via labels | fixed: 10 known affected: 8 known not affected: 315 | 2026-10-02T17:36:30+00:00 | Vulnerability · Source |
| CVE-2026-56098 | redhat_vex | rubygem-katello: improper authorization logic allows resource enumeration | fixed: 10 known affected: 8 known not affected: 315 | 2026-10-02T17:36:30+00:00 | Vulnerability · Source |
| CVE-2026-42499 | redhat_vex | net/mail: golang: net/mail: Denial of Service via pathological email address parsing | fixed: 1901 known affected: 95 known not affected: 8896 | 2026-10-02T17:36:09+00:00 | Vulnerability · Source |
| CVE-2026-40994 | redhat_vex | org.springframework.ws/spring-ws-security: Spring Web Services: Weakening of WS-Security protocol checks due to disabled BSP enforcement | known affected: 1 | 2026-10-02T17:36:08+00:00 | Vulnerability · Source |
| CVE-2026-98152 | redhat_vex | kernel: nvmet-rdma: fix queue leak when connect backlog is exceeded | known not affected: 276 | 2026-10-02T17:35:40+00:00 | Vulnerability · Source |
| CVE-2026-95382 | redhat_vex | chromium-browser: Improper input validation in Auth | known not affected: 1 | 2026-10-02T17:35:35+00:00 | Vulnerability · Source |
| CVE-2026-98109 | redhat_vex | kernel: Bluetooth: hci_core: Fix race condition during device registration | known affected: 197 known not affected: 79 | 2026-10-02T17:35:35+00:00 | Vulnerability · Source |
| CVE-2026-95366 | redhat_vex | chromium-browser: Use of released resource in Core | known not affected: 1 | 2026-10-02T17:35:35+00:00 | Vulnerability · Source |