VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
222955 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-49356 | redhat_vex | @babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment | known not affected: 110 | 2026-07-02T08:22:16+00:00 | Vulnerability · Source |
| CVE-2026-11820 | redhat_vex | community.general: community.general nexmo — API credentials exposed in GET URL query string[SECURITY] community.general nexmo — API credentials exposed in GET URL query string | under investigation: 4 | 2026-07-02T08:00:58+00:00 | Vulnerability · Source |
| CVE-2026-10805 | redhat_vex | NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend | known affected: 122 | 2026-07-02T07:18:15+00:00 | Vulnerability · Source |
| CVE-2026-41635 | redhat_vex | Apache MINA: Apache MINA: Arbitrary code execution via classname allowlist bypass | fixed: 1 known affected: 4 known not affected: 22 | 2026-07-02T05:43:40+00:00 | Vulnerability · Source |
| CVE-2026-47214 | redhat_vex | docling: Docling: Unsafe URI and Path Handling in HTML Backend | known affected: 1 | 2026-07-02T05:34:27+00:00 | Vulnerability · Source |
| CVE-2026-43827 | redhat_vex | apache-shiro: Apache Shiro: Session fixation vulnerability due to improper session invalidation upon login | known affected: 2 | 2026-07-02T00:50:42+00:00 | Vulnerability · Source |
| CVE-2026-14101 | redhat_vex | chromium-browser: Insufficient policy enforcement in Sandbox | known not affected: 1 | 2026-07-02T00:14:58+00:00 | Vulnerability · Source |
| CVE-2026-5135 | redhat_vex | foreman: Foreman: Unauthorized modification of host configurations via broken access control | fixed: 103 known affected: 17 known not affected: 132 | 2026-07-01T23:53:14+00:00 | Vulnerability · Source |
| CVE-2026-5142 | redhat_vex | foreman: foreman: Cross-tenant private SSH key disclosure via taxonomy scoping bypass | fixed: 103 known affected: 17 known not affected: 132 | 2026-07-01T23:53:12+00:00 | Vulnerability · Source |
| CVE-2026-5138 | redhat_vex | foreman: Foreman: Information disclosure via improper validation of nested request parameters | fixed: 103 known affected: 17 known not affected: 132 | 2026-07-01T23:53:11+00:00 | Vulnerability · Source |
| CVE-2026-46483 | redhat_vex | vim: command injection when decompressing .tgz archives | fixed: 393 known affected: 33 | 2026-07-01T23:53:01+00:00 | Vulnerability · Source |
| CVE-2026-41411 | redhat_vex | vim: Vim: Command injection allows arbitrary code execution via malicious tag files | fixed: 436 known affected: 13 known not affected: 166 | 2026-07-01T23:52:59+00:00 | Vulnerability · Source |
| CVE-2026-35177 | redhat_vex | vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass | fixed: 414 known affected: 13 known not affected: 189 | 2026-07-01T23:52:58+00:00 | Vulnerability · Source |
| CVE-2026-27727 | redhat_vex | com.mchange/mchange-commons-java: mchange-commons-java: Arbitrary code execution via JNDI dereferencing of crafted objects | fixed: 23 known affected: 8 known not affected: 466 | 2026-07-01T23:40:34+00:00 | Vulnerability · Source |
| CVE-2026-5136 | redhat_vex | foreman: Foreman: Privilege escalation to administrator-level access via usergroup role assignment manipulation | fixed: 103 known affected: 17 known not affected: 132 | 2026-07-01T23:40:26+00:00 | Vulnerability · Source |
| CVE-2026-55577 | redhat_vex | ImageMagick: ImageMagick: Heap buffer overflow in MVG decoder allows out-of-bounds write | known affected: 14 | 2026-07-01T23:08:56+00:00 | Vulnerability · Source |
| CVE-2026-55628 | redhat_vex | ImageMagick: ImageMagick: Unauthorized file access due to missing policy checks in concatenate operation | known affected: 14 | 2026-07-01T23:08:56+00:00 | Vulnerability · Source |
| CVE-2026-53466 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via integer overflow in XCF decoder | known affected: 14 | 2026-07-01T23:08:56+00:00 | Vulnerability · Source |
| CVE-2026-55594 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted image in MVG decoder | known affected: 14 | 2026-07-01T23:01:49+00:00 | Vulnerability · Source |
| CVE-2026-55595 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via invalid arguments to connected-components option | known affected: 14 | 2026-07-01T22:25:25+00:00 | Vulnerability · Source |
| CVE-2026-53467 | redhat_vex | ImageMagick: ImageMagick: Information disclosure vulnerability in MNG decoder | known affected: 14 | 2026-07-01T22:25:25+00:00 | Vulnerability · Source |
| CVE-2026-55510 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted 8BIM profile | known affected: 14 | 2026-07-01T22:20:58+00:00 | Vulnerability · Source |
| CVE-2026-55597 | redhat_vex | ImageMagick: ImageMagick: Heap buffer overwrite via incorrect argument handling in JP2 encoder | known affected: 14 | 2026-07-01T22:09:47+00:00 | Vulnerability · Source |
| CVE-2026-2291 | redhat_vex | dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion | fixed: 84 known affected: 7 | 2026-07-01T21:22:15+00:00 | Vulnerability · Source |
| CVE-2026-45491 | redhat_vex | dotnet: .NET: Local file tampering via link following vulnerability | fixed: 1441 known not affected: 2 | 2026-07-01T21:04:35+00:00 | Vulnerability · Source |
| CVE-2026-5051 | redhat_vex | Vault: Vault Enterprise: HashiCorp Vault: Audit device validation bypass via legacy file audit path option | known not affected: 6 | 2026-07-01T20:33:40+00:00 | Vulnerability · Source |
| CVE-2026-53346 | redhat_vex | kernel: rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES | known not affected: 274 | 2026-07-01T20:25:20+00:00 | Vulnerability · Source |
| CVE-2026-53333 | redhat_vex | kernel: mm/mincore: handle non-swap entries before !CONFIG_SWAP guard | known affected: 14 known not affected: 260 | 2026-07-01T20:16:12+00:00 | Vulnerability · Source |
| CVE-2026-53334 | redhat_vex | kernel: mm/damon/reclaim: handle ctx allocation failure | known not affected: 274 | 2026-07-01T19:52:12+00:00 | Vulnerability · Source |
| CVE-2026-53338 | redhat_vex | kernel: net: airoha: Add NULL check for of_reserved_mem_lookup() in airoha_qdma_init_hfwd_queues() | known not affected: 274 | 2026-07-01T19:52:00+00:00 | Vulnerability · Source |
| CVE-2026-53345 | redhat_vex | kernel: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying | known not affected: 274 | 2026-07-01T19:51:55+00:00 | Vulnerability · Source |
| CVE-2026-53343 | redhat_vex | kernel: ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow | known not affected: 274 | 2026-07-01T19:51:52+00:00 | Vulnerability · Source |
| CVE-2026-53328 | redhat_vex | kernel: sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task() | known not affected: 274 | 2026-07-01T19:51:46+00:00 | Vulnerability · Source |
| CVE-2026-53332 | redhat_vex | kernel: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd | known not affected: 274 | 2026-07-01T19:42:47+00:00 | Vulnerability · Source |
| CVE-2026-53335 | redhat_vex | kernel: mm/damon/lru_sort: handle ctx allocation failure | known not affected: 274 | 2026-07-01T19:42:37+00:00 | Vulnerability · Source |
| CVE-2026-53344 | redhat_vex | kernel: pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init | known not affected: 274 | 2026-07-01T19:41:16+00:00 | Vulnerability · Source |
| CVE-2026-57455 | redhat_vex | vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() | fixed: 4 known affected: 33 | 2026-07-01T19:41:07+00:00 | Vulnerability · Source |
| CVE-2026-57452 | redhat_vex | vim: Vim: Out-of-bounds Read with libsodium-encrypted Files | fixed: 4 known affected: 33 | 2026-07-01T19:41:07+00:00 | Vulnerability · Source |
| CVE-2026-7258 | redhat_vex | PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions | fixed: 1721 known affected: 56 | 2026-07-01T19:40:02+00:00 | Vulnerability · Source |
| CVE-2026-6735 | redhat_vex | PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation | fixed: 1721 known affected: 56 | 2026-07-01T19:40:01+00:00 | Vulnerability · Source |
| CVE-2023-26054 | redhat_vex | buildkit: Data disclosure in provenance attestation describing a build | fixed: 40 known not affected: 169 | 2026-07-01T19:25:37+00:00 | Vulnerability · Source |
| CVE-2023-0842 | redhat_vex | node-xml2js: xml2js is vulnerable to prototype pollution | known affected: 16 known not affected: 11 | 2026-07-01T19:25:36+00:00 | Vulnerability · Source |
| CVE-2022-37598 | redhat_vex | uglify-js: Prototype pollution vulnerability in function DEFNODE in ast.js | known affected: 26 known not affected: 69 | 2026-07-01T19:25:14+00:00 | Vulnerability · Source |
| CVE-2021-44906 | redhat_vex | minimist: prototype pollution | fixed: 937 known affected: 27 known not affected: 832 | 2026-07-01T19:24:11+00:00 | Vulnerability · Source |
| CVE-2021-43138 | redhat_vex | async: Prototype Pollution in async | fixed: 4 known affected: 61 known not affected: 62 | 2026-07-01T19:24:07+00:00 | Vulnerability · Source |
| CVE-2026-53342 | redhat_vex | kernel: arm64: mm: call pagetable dtor when freeing hot-removed page tables | known not affected: 274 | 2026-07-01T19:21:36+00:00 | Vulnerability · Source |
| CVE-2021-35065 | redhat_vex | glob-parent: Regular Expression Denial of Service | fixed: 268 known affected: 40 known not affected: 173 | 2026-07-01T19:20:38+00:00 | Vulnerability · Source |
| CVE-2026-58521 | redhat_vex | mediawiki-cargo-extension: Mediawiki - Cargo Extension: SQL Injection vulnerability allows information disclosure and data manipulation. | known not affected: 1 | 2026-07-01T19:17:11+00:00 | Vulnerability · Source |
| CVE-2026-7568 | redhat_vex | php: signed integer overflow in metaphone() | fixed: 1718 known not affected: 55 | 2026-07-01T18:57:21+00:00 | Vulnerability · Source |
| CVE-2026-7262 | redhat_vex | php: NULL pointer dereference in SOAP apache:Map decoder with missing <value> | fixed: 1718 known not affected: 55 | 2026-07-01T18:57:12+00:00 | Vulnerability · Source |