VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
282992 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64159 | redhat_vex | kernel: netfs: Fix zeropoint update where i_size > remote_i_size | known affected: 76 known not affected: 199 | 2026-07-20T10:59:39+00:00 | Vulnerability · Source |
| CVE-2026-44119 | redhat_vex | httpd: Apache HTTP Server: Local .htaccess authors can read files with httpd user privileges | fixed: 154 known affected: 29 | 2026-07-20T10:44:04+00:00 | Vulnerability · Source |
| CVE-2026-42535 | redhat_vex | httpd: Apache httpd mod_dav_fs: Denial of Service due to path handling issue | fixed: 154 known affected: 29 | 2026-07-20T10:43:56+00:00 | Vulnerability · Source |
| CVE-2026-33006 | redhat_vex | httpd: mod_auth_digest: timing attack allows a bypass of digest authentication | fixed: 154 known affected: 30 | 2026-07-20T10:43:43+00:00 | Vulnerability · Source |
| CVE-2026-24072 | redhat_vex | Apache HTTP Server: mod_rewrite: Apache HTTP Server: Privilege Escalation via .htaccess file manipulation | fixed: 154 known affected: 43 | 2026-07-20T10:43:39+00:00 | Vulnerability · Source |
| CVE-2026-64062 | redhat_vex | kernel: netfs: Fix potential deadlock in write-through mode | known affected: 76 known not affected: 198 | 2026-07-20T10:42:28+00:00 | Vulnerability · Source |
| CVE-2026-59999 | redhat_vex | openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options | fixed: 3 known affected: 41 | 2026-07-20T10:42:10+00:00 | Vulnerability · Source |
| CVE-2026-64170 | redhat_vex | kernel: spi: qup: fix error pointer deref after DMA setup failure | known affected: 260 known not affected: 14 | 2026-07-20T10:41:48+00:00 | Vulnerability · Source |
| CVE-2026-64174 | redhat_vex | kernel: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() | known affected: 198 known not affected: 76 | 2026-07-20T10:36:13+00:00 | Vulnerability · Source |
| CVE-2026-64049 | redhat_vex | kernel: drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx | known not affected: 274 | 2026-07-20T10:35:55+00:00 | Vulnerability · Source |
| CVE-2026-64071 | redhat_vex | kernel: nvme-pci: fix use-after-free in nvme_free_host_mem() | known affected: 184 known not affected: 90 | 2026-07-20T10:35:48+00:00 | Vulnerability · Source |
| CVE-2025-64329 | redhat_vex | github.com/containerd/containerd: containerd: Memory exhaustion via CRI Attach implementation goroutine leaks | fixed: 112 known affected: 372 known not affected: 47 under investigation: 1 | 2026-07-20T10:34:16+00:00 | Vulnerability · Source |
| CVE-2026-26960 | redhat_vex | node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation | fixed: 13 known affected: 15 known not affected: 220 | 2026-07-20T10:34:11+00:00 | Vulnerability · Source |
| CVE-2026-34481 | redhat_vex | org.apache.logging.log4j: Apache Log4j JsonTemplateLayout: Denial of Service via invalid JSON output | fixed: 4 known affected: 9 known not affected: 3 | 2026-07-20T10:29:47+00:00 | Vulnerability · Source |
| CVE-2026-34479 | redhat_vex | org.apache.logging.log4j/log4j-1.2-api: Apache Log4j 1-to-Log4j 2 bridge: Log processing denial of service due to improper XML escaping | fixed: 2 known affected: 16 | 2026-07-20T10:29:40+00:00 | Vulnerability · Source |
| CVE-2026-34477 | redhat_vex | org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification | fixed: 2 known affected: 59 | 2026-07-20T10:29:23+00:00 | Vulnerability · Source |
| CVE-2026-27571 | redhat_vex | nats-server: WebSockets pre-auth memory DoS | fixed: 8 known affected: 3 known not affected: 35 | 2026-07-20T10:29:02+00:00 | Vulnerability · Source |
| CVE-2025-22871 | redhat_vex | net/http: Request smuggling due to acceptance of invalid chunked data in net/http | fixed: 6754 known affected: 62 known not affected: 4564 | 2026-07-20T10:26:18+00:00 | Vulnerability · Source |
| CVE-2026-41636 | redhat_vex | apache.com/apache/thrift: Apache Thrift: Node.js skip() recursion | fixed: 20 known affected: 17 known not affected: 253 | 2026-07-20T10:26:07+00:00 | Vulnerability · Source |
| CVE-2026-33215 | redhat_vex | nats-server: NATS-Server: Session and message hijacking via MQTT Client ID malfeasance | fixed: 12 known not affected: 52 | 2026-07-20T10:26:00+00:00 | Vulnerability · Source |
| CVE-2026-40890 | redhat_vex | github.com/gomarkdown/markdown: github.com/gomarkdown/markdown: Denial of Service via malformed Markdown input | fixed: 20 known not affected: 249 | 2026-07-20T10:25:50+00:00 | Vulnerability · Source |
| CVE-2026-34040 | redhat_vex | Moby: Moby: Authorization bypass vulnerability | fixed: 16 known affected: 5 known not affected: 77 | 2026-07-20T10:25:47+00:00 | Vulnerability · Source |
| CVE-2025-55753 | redhat_vex | mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals | fixed: 463 known not affected: 113 | 2026-07-20T10:22:06+00:00 | Vulnerability · Source |
| CVE-2025-68973 | redhat_vex | GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write | fixed: 394 known affected: 3 known not affected: 149 | 2026-07-20T10:18:03+00:00 | Vulnerability · Source |
| CVE-2025-8941 | redhat_vex | linux-pam: Incomplete fix for CVE-2025-6020 | fixed: 324 known not affected: 27 | 2026-07-20T10:13:05+00:00 | Vulnerability · Source |
| CVE-2025-6020 | redhat_vex | linux-pam: Linux-pam directory Traversal | fixed: 492 known not affected: 31 | 2026-07-20T10:12:57+00:00 | Vulnerability · Source |
| CVE-2024-12085 | redhat_vex | rsync: Info Leak via Uninitialized Stack Contents | fixed: 293 known not affected: 1782 | 2026-07-20T10:12:53+00:00 | Vulnerability · Source |
| CVE-2026-4137 | redhat_vex | mlflow/mlflow: mlflow/mlflow: Arbitrary code execution via insecure temporary directory permissions | known not affected: 17 | 2026-07-20T10:03:08+00:00 | Vulnerability · Source |
| CVE-2025-6965 | redhat_vex | sqlite: Integer Truncation in SQLite | fixed: 1147 known affected: 8 known not affected: 140 | 2026-07-20T10:02:17+00:00 | Vulnerability · Source |
| CVE-2025-66564 | redhat_vex | github.com/sigstore/timestamp-authority: Sigstore Timestamp Authority: Denial of Service via excessive OID or Content-Type header parsing | fixed: 41 known affected: 18 known not affected: 358 | 2026-07-20T10:01:56+00:00 | Vulnerability · Source |
| CVE-2024-48949 | redhat_vex | elliptic: Missing Validation in Elliptic's EDDSA Signature Verification | fixed: 750 known affected: 28 known not affected: 912 | 2026-07-20T09:54:21+00:00 | Vulnerability · Source |
| CVE-2025-55163 | redhat_vex | netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability | fixed: 476 known affected: 32 known not affected: 2765 | 2026-07-20T09:50:08+00:00 | Vulnerability · Source |
| CVE-2026-53994 | redhat_vex | proftpd: ProFTPD mod_sftp: Remote Denial of Service via heap-based buffer overflow | known not affected: 1 | 2026-07-20T09:25:48+00:00 | Vulnerability · Source |
| CVE-2026-64156 | redhat_vex | kernel: netfs, afs: Fix write skipping in dir/link writepages | known affected: 76 known not affected: 198 | 2026-07-20T09:18:04+00:00 | Vulnerability · Source |
| CVE-2026-42533 | redhat_vex | nginx: NGINX: Arbitrary code execution via crafted HTTP requests | known affected: 56 known not affected: 1 | 2026-07-20T08:58:02+00:00 | Vulnerability · Source |
| CVE-2026-43499 | redhat_vex | kernel: rtmutex: Use waiter::task instead of current in remove_waiter() | fixed: 2188 known affected: 22 | 2026-07-20T08:37:08+00:00 | Vulnerability · Source |
| CVE-2026-42009 | redhat_vex | gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability | fixed: 825 known affected: 1 known not affected: 67 | 2026-07-20T08:36:39+00:00 | Vulnerability · Source |
| CVE-2026-33846 | redhat_vex | gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly | fixed: 813 known affected: 1 known not affected: 67 under investigation: 1 | 2026-07-20T08:36:35+00:00 | Vulnerability · Source |
| CVE-2026-33845 | redhat_vex | gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment | fixed: 813 known affected: 1 known not affected: 67 under investigation: 1 | 2026-07-20T08:36:31+00:00 | Vulnerability · Source |
| CVE-2026-64127 | redhat_vex | kernel: Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer | known affected: 184 known not affected: 91 | 2026-07-20T08:22:48+00:00 | Vulnerability · Source |
| CVE-2026-56000 | redhat_vex | X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() | fixed: 54 known affected: 30 known not affected: 9 | 2026-07-20T08:12:04+00:00 | Vulnerability · Source |
| CVE-2026-24842 | redhat_vex | node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check | fixed: 57 known affected: 25 known not affected: 243 | 2026-07-20T07:42:55+00:00 | Vulnerability · Source |
| CVE-2025-5115 | redhat_vex | jetty: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to "MadeYouReset" DoS attack through HTTP/2 control frames | fixed: 36 known affected: 8 known not affected: 16 | 2026-07-20T07:36:41+00:00 | Vulnerability · Source |
| CVE-2026-5795 | redhat_vex | org.eclipse.jetty.ee10/jetty-ee10: early return from the JASPIAuthenticator class without clearing ThreadLocal variables | fixed: 4 known affected: 1 known not affected: 36 | 2026-07-20T07:32:26+00:00 | Vulnerability · Source |
| CVE-2026-2332 | redhat_vex | org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing | fixed: 16 known affected: 17 known not affected: 60 | 2026-07-20T07:32:02+00:00 | Vulnerability · Source |
| CVE-2026-33997 | redhat_vex | moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation | fixed: 12 known affected: 2 known not affected: 56 under investigation: 1 | 2026-07-20T07:22:50+00:00 | Vulnerability · Source |
| CVE-2026-33487 | redhat_vex | github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue | fixed: 32 known not affected: 523 | 2026-07-20T07:22:47+00:00 | Vulnerability · Source |
| CVE-2026-33247 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Information disclosure of credentials via monitoring port and command-line arguments | fixed: 12 known not affected: 52 | 2026-07-20T07:22:46+00:00 | Vulnerability · Source |
| CVE-2026-33219 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Denial of Service via unbounded memory use in WebSockets | fixed: 12 known not affected: 52 | 2026-07-20T07:22:43+00:00 | Vulnerability · Source |
| CVE-2026-33217 | redhat_vex | nats-server: github.com/nats-io/nats-server: NATS-Server: Access control bypass via unapplied ACLs in MQTT namespace | fixed: 12 known not affected: 52 | 2026-07-20T07:22:41+00:00 | Vulnerability · Source |