VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291934 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64438 | redhat_vex | kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() | known affected: 184 known not affected: 91 | 2026-08-03T15:34:41+00:00 | Vulnerability · Source |
| CVE-2023-52355 | redhat_vex | libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM | fixed: 168 known affected: 17 known not affected: 2 | 2026-08-03T14:42:53+00:00 | Vulnerability · Source |
| CVE-2026-37460 | redhat_vex | frr: FRRouting: Denial of Service via crafted BGP UPDATE message | fixed: 56 | 2026-08-03T14:26:59+00:00 | Vulnerability · Source |
| CVE-2026-33870 | redhat_vex | io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values | fixed: 67 known affected: 34 known not affected: 459 | 2026-08-03T14:14:31+00:00 | Vulnerability · Source |
| CVE-2022-3277 | redhat_vex | openstack-neutron: unrestricted creation of security groups | fixed: 24 known affected: 11 known not affected: 11 | 2026-08-03T14:10:50+00:00 | Vulnerability · Source |
| CVE-2026-17347 | redhat_vex | pgadmin4: OS command injection in MASTER_PASSWORD_HOOK via untrusted username substitution | known not affected: 1 | 2026-08-03T14:10:26+00:00 | Vulnerability · Source |
| CVE-2026-17351 | redhat_vex | pgadmin4: AI Assistant read-only transaction bypass via sqlparse/PostgreSQL lexer disagreement (incomplete fix for CVE-2026-12045) | known not affected: 1 | 2026-08-03T14:09:57+00:00 | Vulnerability · Source |
| CVE-2026-53669 | redhat_vex | react-router: React Router: Open Redirect vulnerability via backslashes in navigation components | fixed: 6 known affected: 146 known not affected: 2 | 2026-08-03T14:06:39+00:00 | Vulnerability · Source |
| CVE-2024-29156 | redhat_vex | YAQL: OpenStack Murano Component Information Leakage | fixed: 18 known affected: 18 | 2026-08-03T13:09:13+00:00 | Vulnerability · Source |
| CVE-2026-8632 | redhat_vex | HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection | fixed: 48 known affected: 13 known not affected: 333 | 2026-08-03T13:06:51+00:00 | Vulnerability · Source |
| CVE-2026-8631 | redhat_vex | HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups | fixed: 48 known affected: 7 known not affected: 339 | 2026-08-03T13:06:49+00:00 | Vulnerability · Source |
| CVE-2026-12892 | redhat_vex | gstreamer1-plugins-bad: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser | known affected: 20 | 2026-08-03T12:39:43+00:00 | Vulnerability · Source |
| CVE-2026-12891 | redhat_vex | gstreamer1-plugins-bad: gstreamer1-plugins-bad: global buffer overflow (OOB read) in H.266/VVC VUI parameter parser | known affected: 11 | 2026-08-03T12:39:40+00:00 | Vulnerability · Source |
| CVE-2026-53078 | redhat_vex | kernel: bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops | known affected: 246 known not affected: 28 | 2026-08-03T11:05:52+00:00 | Vulnerability · Source |
| CVE-2026-63923 | redhat_vex | kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify | known affected: 184 known not affected: 91 | 2026-08-03T11:05:52+00:00 | Vulnerability · Source |
| CVE-2026-68742 | redhat_vex | sssd: sssd: NSS responder out-of-bounds read via unchecked addrlen in GETHOSTBYADDR | known affected: 134 known not affected: 31 | 2026-08-03T11:05:49+00:00 | Vulnerability · Source |
| CVE-2026-9087 | redhat_vex | keycloak: Cross-Session Email Verification Proof Not Bound to Upstream Identity in First-Broker-Login | fixed: 20 | 2026-08-03T10:41:18+00:00 | Vulnerability · Source |
| CVE-2026-44171 | redhat_vex | mariadb: mbstream: Unauthorized file creation via path traversal | fixed: 630 known not affected: 37 | 2026-08-03T10:36:40+00:00 | Vulnerability · Source |
| CVE-2021-28876 | redhat_vex | rust: panic safety issue in Zip implementation | fixed: 140 known not affected: 16 | 2026-08-03T10:04:05+00:00 | Vulnerability · Source |
| CVE-2026-67292 | redhat_vex | FreeRDP: FreeRDP: Information Disclosure and Denial of Service via WebSocket Ping | known affected: 31 | 2026-08-03T10:04:00+00:00 | Vulnerability · Source |
| CVE-2026-66402 | redhat_vex | FreeRDP: FreeRDP: Server Identity Verification Bypass via TLS Certificate Validation Weaknesses | known affected: 31 | 2026-08-03T10:03:54+00:00 | Vulnerability · Source |
| CVE-2026-67293 | redhat_vex | FreeRDP: FreeRDP: Weakens TLS server authentication due to improper wildcard certificate hostname validation | known affected: 31 | 2026-08-03T10:03:38+00:00 | Vulnerability · Source |
| CVE-2026-67300 | redhat_vex | FreeRDP: FreeRDP: Use-After-Free vulnerability leading to denial of service | known affected: 31 | 2026-08-03T10:03:29+00:00 | Vulnerability · Source |
| CVE-2026-67295 | redhat_vex | FreeRDP: FreeRDP: Unauthorized File Access via Drive Redirection Vulnerability | known affected: 31 | 2026-08-03T09:58:34+00:00 | Vulnerability · Source |
| CVE-2026-67306 | redhat_vex | FreeRDP: FreeRDP: Out-of-bounds read vulnerability via crafted RDP messages | known affected: 31 | 2026-08-03T09:52:49+00:00 | Vulnerability · Source |
| CVE-2026-52722 | redhat_vex | gstreamer1-plugins-bad-free: GStreamer: Signed integer overflow in VMnc decoder cursor payload handling | fixed: 343 known affected: 5 | 2026-08-03T09:33:12+00:00 | Vulnerability · Source |
| CVE-2026-52720 | redhat_vex | gstreamer1-plugins-bad-free: GStreamer: Heap buffer overflow via crafted VNC server rectangle in librfb | fixed: 343 known affected: 5 | 2026-08-03T09:33:08+00:00 | Vulnerability · Source |
| CVE-2026-53705 | redhat_vex | gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow | fixed: 286 | 2026-08-03T09:32:06+00:00 | Vulnerability · Source |
| CVE-2026-48165 | redhat_vex | mariadb: Arbitrary code execution via global system variable manipulation by a high-privileged user | fixed: 630 known not affected: 37 | 2026-08-03T09:29:29+00:00 | Vulnerability · Source |
| CVE-2026-48163 | redhat_vex | mariadb: Arbitrary code execution via improper parameter validation during SST | fixed: 630 known not affected: 37 | 2026-08-03T09:29:23+00:00 | Vulnerability · Source |
| CVE-2026-44173 | redhat_vex | mariadb: MariaDB: Privilege bypass allows unauthorized file write via subqueries | fixed: 630 known not affected: 37 | 2026-08-03T09:29:19+00:00 | Vulnerability · Source |
| CVE-2026-44170 | redhat_vex | mariadb: Arbitrary shell command execution via improper sanitization in CONNECT engine | fixed: 630 known not affected: 37 | 2026-08-03T09:29:14+00:00 | Vulnerability · Source |
| CVE-2026-44168 | redhat_vex | mariadb: Arbitrary Code Execution via improper parameter validation during State Snapshot Transfer | fixed: 630 known not affected: 37 | 2026-08-03T09:29:04+00:00 | Vulnerability · Source |
| CVE-2026-67302 | redhat_vex | FreeRDP: FreeRDP: Denial of service in camera redirection due to divide-by-zero | known affected: 31 | 2026-08-03T08:16:58+00:00 | Vulnerability · Source |
| CVE-2025-38050 | redhat_vex | kernel: mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios | known affected: 42 known not affected: 232 | 2026-08-03T07:20:20+00:00 | Vulnerability · Source |
| CVE-2025-38031 | redhat_vex | kernel: padata: do not leak refcount in reorder_work | known affected: 274 | 2026-08-03T07:20:16+00:00 | Vulnerability · Source |
| CVE-2025-38158 | redhat_vex | kernel: hisi_acc_vfio_pci: fix XQE dma address error | known not affected: 274 | 2026-08-03T07:20:13+00:00 | Vulnerability · Source |
| CVE-2025-38122 | redhat_vex | kernel: gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO | known affected: 232 known not affected: 42 | 2026-08-03T07:20:10+00:00 | Vulnerability · Source |
| CVE-2025-37992 | redhat_vex | kernel: net_sched: Flush gso_skb list too during ->change() | known affected: 260 known not affected: 14 | 2026-08-03T07:17:30+00:00 | Vulnerability · Source |
| CVE-2023-53146 | redhat_vex | kernel: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() | known affected: 76 known not affected: 198 | 2026-08-03T07:17:26+00:00 | Vulnerability · Source |
| CVE-2025-38047 | redhat_vex | kernel: x86/fred: Fix system hang during S4 resume with FRED enabled | known affected: 260 known not affected: 14 | 2026-08-03T07:17:26+00:00 | Vulnerability · Source |
| CVE-2025-37871 | redhat_vex | kernel: nfsd: decrease sc_count directly if fail to queue dl_recall | known affected: 42 known not affected: 232 | 2026-08-03T07:16:21+00:00 | Vulnerability · Source |
| CVE-2025-37883 | redhat_vex | kernel: s390/sclp: Add check for get_zeroed_page() | known affected: 184 known not affected: 90 | 2026-08-03T07:16:19+00:00 | Vulnerability · Source |
| CVE-2025-37868 | redhat_vex | kernel: drm/xe/userptr: fix notifier vs folio deadlock | known not affected: 274 | 2026-08-03T07:16:14+00:00 | Vulnerability · Source |
| CVE-2024-57886 | redhat_vex | kernel: mm/damon/core: fix new damon_target objects leaks on damon_commit_targets() | known affected: 76 known not affected: 198 | 2026-08-03T07:16:10+00:00 | Vulnerability · Source |
| CVE-2025-37862 | redhat_vex | kernel: HID: pidff: Fix null pointer dereference in pidff_find_fields | known affected: 274 | 2026-08-03T07:16:06+00:00 | Vulnerability · Source |
| CVE-2026-6694 | redhat_vex | gimp: GIMP file-png plugin: Denial of Service via oversized APNG tRNS chunk | known affected: 32 | 2026-08-03T06:42:31+00:00 | Vulnerability · Source |
| CVE-2026-9538 | redhat_vex | perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size | fixed: 800 known affected: 2 | 2026-08-03T04:22:07+00:00 | Vulnerability · Source |
| CVE-2026-42006 | redhat_vex | dovecot: Dovecot: Denial of Service via excessive IMAP bracing | fixed: 239 known affected: 6 known not affected: 265 | 2026-08-03T03:31:27+00:00 | Vulnerability · Source |
| CVE-2026-5056 | redhat_vex | gstreamer: GStreamer: Arbitrary code execution via stack-based buffer overflow in qtdemux | fixed: 25 known not affected: 20 | 2026-08-03T03:30:28+00:00 | Vulnerability · Source |