VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
282993 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-33219 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Denial of Service via unbounded memory use in WebSockets | fixed: 12 known not affected: 52 | 2026-07-20T07:22:43+00:00 | Vulnerability · Source |
| CVE-2026-33217 | redhat_vex | nats-server: github.com/nats-io/nats-server: NATS-Server: Access control bypass via unapplied ACLs in MQTT namespace | fixed: 12 known not affected: 52 | 2026-07-20T07:22:41+00:00 | Vulnerability · Source |
| CVE-2026-33218 | redhat_vex | nats-server: github.com/nats-io/nats-server: NATS-Server: Denial of Service via malformed message pre-authentication on leafnode port | fixed: 12 known not affected: 52 | 2026-07-20T07:22:40+00:00 | Vulnerability · Source |
| CVE-2026-33216 | redhat_vex | nats-server: github.com/nats-io/nats-server: NATS-Server: Information disclosure of MQTT passwords through monitoring endpoints | fixed: 12 known not affected: 52 | 2026-07-20T07:22:33+00:00 | Vulnerability · Source |
| CVE-2026-29785 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Denial of Service via leafnode compression | fixed: 12 known not affected: 52 | 2026-07-20T07:22:28+00:00 | Vulnerability · Source |
| CVE-2026-27889 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Denial of Service via malformed WebSockets frame | fixed: 12 known not affected: 52 | 2026-07-20T07:22:24+00:00 | Vulnerability · Source |
| CVE-2026-21728 | redhat_vex | grafana/tempo: Tempo: Denial of Service via large queries | fixed: 20 known affected: 4 known not affected: 97 | 2026-07-20T07:22:18+00:00 | Vulnerability · Source |
| CVE-2025-68429 | redhat_vex | Storybook: Storybook: Information disclosure via unexpected bundling of environment variables | fixed: 12 known affected: 2 known not affected: 65 | 2026-07-20T07:22:00+00:00 | Vulnerability · Source |
| CVE-2026-33211 | redhat_vex | Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver | fixed: 32 known affected: 27 known not affected: 457 | 2026-07-20T07:19:30+00:00 | Vulnerability · Source |
| CVE-2025-22874 | redhat_vex | crypto/x509: Usage of ExtKeyUsageAny disables policy validation in crypto/x509 | fixed: 880 known affected: 57 known not affected: 219 | 2026-07-20T07:19:18+00:00 | Vulnerability · Source |
| CVE-2026-40192 | redhat_vex | Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing | fixed: 150 known affected: 25 known not affected: 1573 | 2026-07-20T07:01:30+00:00 | Vulnerability · Source |
| CVE-2026-2377 | redhat_vex | mirror-registry: quay: quay: Server-Side Request Forgery via log export functionality | fixed: 21 known affected: 2 known not affected: 123 | 2026-07-20T07:00:50+00:00 | Vulnerability · Source |
| CVE-2022-0536 | redhat_vex | follow-redirects: Exposure of Sensitive Information via Authorization Header leak | fixed: 502 known affected: 84 known not affected: 201 under investigation: 1 | 2026-07-20T06:39:43+00:00 | Vulnerability · Source |
| CVE-2022-0155 | redhat_vex | follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor | fixed: 496 known affected: 10 known not affected: 106 | 2026-07-20T06:39:38+00:00 | Vulnerability · Source |
| CVE-2026-47423 | redhat_vex | dompurify: DOMPurify: Cross-site scripting vulnerability allows information disclosure | fixed: 4 known affected: 2 known not affected: 48 | 2026-07-20T05:31:04+00:00 | Vulnerability · Source |
| CVE-2024-45775 | redhat_vex | grub2: commands/extcmd: Missing check for failed allocation | fixed: 40 known affected: 42 known not affected: 16 | 2026-07-20T05:25:49+00:00 | Vulnerability · Source |
| CVE-2014-4607 | redhat_vex | lzo: lzo1x_decompress_safe() integer overflow | fixed: 132 known affected: 31 known not affected: 1 under investigation: 20 | 2026-07-20T05:16:05+00:00 | Vulnerability · Source |
| CVE-2025-2786 | redhat_vex | tempo-operator: ServiceAccount Token Exposure Leading to Token and Subject Access Reviews in OpenShift Tempo Operator | fixed: 8 known affected: 5 known not affected: 42 | 2026-07-20T05:06:09+00:00 | Vulnerability · Source |
| CVE-2025-2842 | redhat_vex | tempo-operator: Tempo Operator Token Exposition lead to read sensitive data | fixed: 8 known affected: 5 known not affected: 42 | 2026-07-20T05:06:01+00:00 | Vulnerability · Source |
| CVE-2025-64718 | redhat_vex | js-yaml: js-yaml prototype pollution in merge | fixed: 8 known affected: 230 known not affected: 48 | 2026-07-20T04:23:55+00:00 | Vulnerability · Source |
| CVE-2024-34397 | redhat_vex | glib2: Signal subscription vulnerabilities | fixed: 504 known affected: 17 known not affected: 11 | 2026-07-20T04:01:31+00:00 | Vulnerability · Source |
| CVE-2025-4673 | redhat_vex | net/http: Sensitive headers not cleared on cross-origin redirect in net/http | fixed: 121 known affected: 394 known not affected: 2 | 2026-07-20T03:56:22+00:00 | Vulnerability · Source |
| CVE-2026-50012 | redhat_vex | squid: memory corruption in cache_digest reply handling | known affected: 22 | 2026-07-20T03:33:17+00:00 | Vulnerability · Source |
| CVE-2026-22028 | redhat_vex | preact: Preact: Arbitrary script execution via JSON serialization protection bypass | fixed: 1 known affected: 7 known not affected: 700 | 2026-07-20T03:03:04+00:00 | Vulnerability · Source |
| CVE-2025-2240 | redhat_vex | smallrye-fault-tolerance: SmallRye Fault Tolerance | fixed: 3 known affected: 5 known not affected: 4 | 2026-07-20T02:15:07+00:00 | Vulnerability · Source |
| CVE-2026-40293 | redhat_vex | OpenFGA: github.com/openfga/openfga: OpenFGA: Information disclosure of preshared API key via playground endpoint | fixed: 12 known affected: 2 known not affected: 369 | 2026-07-20T01:56:22+00:00 | Vulnerability · Source |
| CVE-2026-62389 | microsoft_vex | ws < 8.21.1 Default maxFragments Allows Memory Exhaustion DoS | known affected: 1 | 2026-07-20T01:40:45+00:00 | Vulnerability · Source |
| CVE-2026-45784 | microsoft_vex | rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers | known affected: 6 | 2026-07-20T01:40:39+00:00 | Vulnerability · Source |
| CVE-2026-1519 | redhat_vex | bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone | fixed: 1140 known not affected: 434 | 2026-07-20T01:37:43+00:00 | Vulnerability · Source |
| CVE-2025-61731 | redhat_vex | cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive | fixed: 5320 known affected: 10 known not affected: 761 | 2026-07-20T01:27:05+00:00 | Vulnerability · Source |
| CVE-2025-61732 | redhat_vex | cmd/cgo: Go cgo: Code smuggling due to comment parsing discrepancy | fixed: 5141 known affected: 3 known not affected: 985 | 2026-07-20T01:15:07+00:00 | Vulnerability · Source |
| CVE-2004-2541 | suse_vex | SUSE CVE CVE-2004-2541 | known not affected: 24 recommended: 7 | 2026-07-19T18:51:03+00:00 | Vulnerability · Source |
| CVE-2004-2771 | suse_vex | SUSE CVE CVE-2004-2771 | known affected: 394 known not affected: 5 recommended: 87 | 2026-07-19T18:51:02+00:00 | Vulnerability · Source |
| CVE-2005-2349 | suse_vex | SUSE CVE CVE-2005-2349 | known not affected: 31 | 2026-07-19T18:51:01+00:00 | Vulnerability · Source |
| CVE-2005-2475 | suse_vex | SUSE CVE CVE-2005-2475 | recommended: 10 | 2026-07-19T18:50:59+00:00 | Vulnerability · Source |
| CVE-2005-3193 | suse_vex | SUSE CVE CVE-2005-3193 | known not affected: 40 recommended: 28 | 2026-07-19T18:50:58+00:00 | Vulnerability · Source |
| CVE-2005-4900 | suse_vex | SUSE CVE CVE-2005-4900 | known affected: 103 known not affected: 131 recommended: 937 | 2026-07-19T18:50:57+00:00 | Vulnerability · Source |
| CVE-2006-0225 | suse_vex | SUSE CVE CVE-2006-0225 | recommended: 43 | 2026-07-19T18:50:56+00:00 | Vulnerability · Source |
| CVE-2006-1614 | suse_vex | SUSE CVE CVE-2006-1614 | recommended: 19 | 2026-07-19T18:50:54+00:00 | Vulnerability · Source |
| CVE-2006-1940 | suse_vex | SUSE CVE CVE-2006-1940 | recommended: 12 | 2026-07-19T18:50:53+00:00 | Vulnerability · Source |
| CVE-2006-3738 | suse_vex | SUSE CVE CVE-2006-3738 | known not affected: 378 recommended: 64 | 2026-07-19T18:50:52+00:00 | Vulnerability · Source |
| CVE-2006-4182 | suse_vex | SUSE CVE CVE-2006-4182 | recommended: 23 | 2026-07-19T18:50:51+00:00 | Vulnerability · Source |
| CVE-2006-4262 | suse_vex | SUSE CVE CVE-2006-4262 | known not affected: 24 recommended: 7 | 2026-07-19T18:50:49+00:00 | Vulnerability · Source |
| CVE-2006-4343 | suse_vex | SUSE CVE CVE-2006-4343 | known not affected: 378 recommended: 64 | 2026-07-19T18:50:48+00:00 | Vulnerability · Source |
| CVE-2006-5468 | suse_vex | SUSE CVE CVE-2006-5468 | recommended: 29 | 2026-07-19T18:50:47+00:00 | Vulnerability · Source |
| CVE-2006-5680 | suse_vex | SUSE CVE CVE-2006-5680 | recommended: 20 | 2026-07-19T18:50:46+00:00 | Vulnerability · Source |
| CVE-2006-6097 | suse_vex | SUSE CVE CVE-2006-6097 | known affected: 1 known not affected: 55 recommended: 22 | 2026-07-19T18:50:45+00:00 | Vulnerability · Source |
| CVE-2006-7246 | suse_vex | SUSE CVE CVE-2006-7246 | known affected: 394 known not affected: 119 recommended: 387 | 2026-07-19T18:50:43+00:00 | Vulnerability · Source |
| CVE-2006-20001 | suse_vex | SUSE CVE CVE-2006-20001 | known affected: 395 recommended: 412 | 2026-07-19T18:50:42+00:00 | Vulnerability · Source |
| CVE-2007-0079 | suse_vex | SUSE CVE CVE-2007-0079 | recommended: 29 | 2026-07-19T18:50:41+00:00 | Vulnerability · Source |