VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
222956 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-7262 | redhat_vex | php: NULL pointer dereference in SOAP apache:Map decoder with missing <value> | fixed: 1718 known not affected: 55 | 2026-07-01T18:57:12+00:00 | Vulnerability · Source |
| CVE-2022-38900 | redhat_vex | decode-uri-component: improper input validation resulting in DoS | fixed: 149 known affected: 40 known not affected: 148 | 2026-07-01T17:44:44+00:00 | Vulnerability · Source |
| CVE-2026-53326 | redhat_vex | kernel: debugobjects: Don't call fill_pool() in early boot hardirq context | known affected: 14 known not affected: 260 | 2026-07-01T17:13:36+00:00 | Vulnerability · Source |
| CVE-2026-53339 | redhat_vex | kernel: i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() | known affected: 76 known not affected: 198 | 2026-07-01T17:08:24+00:00 | Vulnerability · Source |
| CVE-2026-53356 | redhat_vex | kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset | known not affected: 274 | 2026-07-01T16:57:56+00:00 | Vulnerability · Source |
| CVE-2026-53327 | redhat_vex | kernel: debugobjects: Do not fill_pool() if pi_blocked_on | known affected: 198 known not affected: 76 | 2026-07-01T16:54:13+00:00 | Vulnerability · Source |
| CVE-2026-53336 | redhat_vex | kernel: nvmem: layouts: onie-tlv: fix hang on unknown types | known not affected: 274 | 2026-07-01T16:54:13+00:00 | Vulnerability · Source |
| CVE-2026-53331 | redhat_vex | kernel: slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock | known not affected: 274 | 2026-07-01T16:50:31+00:00 | Vulnerability · Source |
| CVE-2026-33154 | redhat_vex | dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection | fixed: 34 known affected: 4 known not affected: 479 | 2026-07-01T16:42:04+00:00 | Vulnerability · Source |
| CVE-2026-53185 | redhat_vex | kernel: zram: fix use-after-free in zram_bvec_write_partial() | known affected: 232 known not affected: 42 | 2026-07-01T16:38:18+00:00 | Vulnerability · Source |
| CVE-2026-53340 | redhat_vex | kernel: i2c: imx: fix clock and pinctrl state inconsistency in runtime PM | known affected: 76 known not affected: 198 | 2026-07-01T16:24:09+00:00 | Vulnerability · Source |
| CVE-2026-53337 | redhat_vex | kernel: net: bonding: fix NULL pointer dereference in bond_do_ioctl() | known affected: 246 known not affected: 28 | 2026-07-01T16:07:00+00:00 | Vulnerability · Source |
| CVE-2026-53330 | redhat_vex | kernel: drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() | known not affected: 274 | 2026-07-01T16:06:59+00:00 | Vulnerability · Source |
| CVE-2026-58031 | redhat_vex | MediaWiki: MediaWiki: Cross-site scripting vulnerability due to improper input neutralization | known not affected: 1 | 2026-07-01T15:46:24+00:00 | Vulnerability · Source |
| CVE-2026-41001 | redhat_vex | spring-boot: Spring Boot: Local attacker can manipulate data directory due to predictable path | known affected: 9 known not affected: 2 | 2026-07-01T15:46:14+00:00 | Vulnerability · Source |
| CVE-2026-11819 | redhat_vex | community.general: community.general keyring_info — OS keyring passphrase returned in plaintext | known affected: 2 under investigation: 2 | 2026-07-01T15:46:10+00:00 | Vulnerability · Source |
| CVE-2026-41697 | redhat_vex | Spring Data Relational: Spring Data Relational: Information disclosure via improper input escaping in Query By Example | known affected: 1 | 2026-07-01T15:34:25+00:00 | Vulnerability · Source |
| CVE-2026-41721 | redhat_vex | Spring Data Commons: Spring Data Commons: Denial of Service via specially crafted HTTP request with @ProjectedPayload | known affected: 5 | 2026-07-01T15:32:27+00:00 | Vulnerability · Source |
| CVE-2026-41719 | redhat_vex | spring-data-keyvalue: spring-data-redis: Spring Data KeyValue: Information Disclosure via SpEL Injection | known affected: 5 | 2026-07-01T15:32:23+00:00 | Vulnerability · Source |
| CVE-2026-41711 | redhat_vex | Spring Data Commons: Spring Data Commons: Denial of Service via parsing Sort parameters | known affected: 5 | 2026-07-01T15:32:20+00:00 | Vulnerability · Source |
| CVE-2026-13083 | redhat_vex | pen-drive: pen-drive: stored XSS via unescaped cluster data in HTML report | known affected: 1 | 2026-07-01T15:32:01+00:00 | Vulnerability · Source |
| CVE-2026-23537 | redhat_vex | feast: Unauthenticated Arbitrary File Write | known not affected: 14 | 2026-07-01T15:24:04+00:00 | Vulnerability · Source |
| CVE-2026-56016 | redhat_vex | perl-CGI-Session: perl-CGI-Session: Authentication bypass via predictable session IDs | known affected: 2 | 2026-07-01T15:12:21+00:00 | Vulnerability · Source |
| CVE-2026-14330 | redhat_vex | pipewire: Pulse Server alloca Stack Overflow | under investigation: 33 | 2026-07-01T15:12:16+00:00 | Vulnerability · Source |
| CVE-2026-56377 | redhat_vex | Imagemagick: ImageMagick - Policy Bypass via Incorrect Path Validation | known affected: 14 | 2026-07-01T15:02:42+00:00 | Vulnerability · Source |
| CVE-2026-41992 | microsoft_vex | Global Buffer Overflow in GNU gzip | fixed: 2 known affected: 2 | 2026-07-01T14:48:18+00:00 | Vulnerability · Source |
| CVE-2026-54371 | microsoft_vex | attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr | fixed: 1 known affected: 3 | 2026-07-01T14:48:05+00:00 | Vulnerability · Source |
| CVE-2026-54369 | microsoft_vex | acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions | known affected: 2 | 2026-07-01T14:47:53+00:00 | Vulnerability · Source |
| CVE-2026-48142 | microsoft_vex | NGINX ngx_http_charset_module vulnerability | fixed: 2 known affected: 3 | 2026-07-01T14:47:22+00:00 | Vulnerability · Source |
| CVE-2026-57062 | microsoft_vex | CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182. | fixed: 2 known affected: 2 | 2026-07-01T14:47:15+00:00 | Vulnerability · Source |
| CVE-2026-56115 | microsoft_vex | Bootimus 0.1.70 Broken Access Control via JWTMiddleware Authorization Bypass | known affected: 2 | 2026-07-01T14:47:07+00:00 | Vulnerability · Source |
| CVE-2026-33941 | redhat_vex | handlebars.js: Handlebars: Arbitrary code execution via CLI precompiler input sanitization flaw | fixed: 16 known affected: 18 known not affected: 175 | 2026-07-01T14:44:57+00:00 | Vulnerability · Source |
| CVE-2026-33940 | redhat_vex | handlebars.js: Handlebars.js: Arbitrary code execution via crafted template context | fixed: 16 known affected: 19 known not affected: 174 | 2026-07-01T14:44:52+00:00 | Vulnerability · Source |
| CVE-2026-33939 | redhat_vex | handlebars.js: Handlebars.js: Denial of Service via malformed decorator syntax in template compilation | fixed: 16 known affected: 20 known not affected: 173 | 2026-07-01T14:44:52+00:00 | Vulnerability · Source |
| CVE-2026-33938 | redhat_vex | handlebars: Handlebars: Arbitrary code execution via @partial-block overwrite | fixed: 16 known affected: 14 known not affected: 179 | 2026-07-01T14:44:43+00:00 | Vulnerability · Source |
| CVE-2026-55203 | microsoft_vex | HAProxy - Integer Overflow in FCGI Demux Record Length Field | fixed: 2 known affected: 2 | 2026-07-01T14:44:40+00:00 | Vulnerability · Source |
| CVE-2026-33937 | redhat_vex | handlebars.js: Handlebars: Remote Code Execution via crafted Abstract Syntax Tree object in compile() | fixed: 16 known affected: 20 known not affected: 173 | 2026-07-01T14:44:39+00:00 | Vulnerability · Source |
| CVE-2026-33896 | redhat_vex | node-forge: Forge (node-forge): Certificate validation bypass allows unauthorized certificate issuance | fixed: 8 known affected: 19 known not affected: 344 | 2026-07-01T14:44:39+00:00 | Vulnerability · Source |
| CVE-2026-33895 | redhat_vex | node-forge: Forge: Authentication bypass via forged Ed25519 cryptographic signatures | fixed: 8 known affected: 13 known not affected: 350 | 2026-07-01T14:44:36+00:00 | Vulnerability · Source |
| CVE-2026-33891 | redhat_vex | node-forge: node-forge: Denial of Service via infinite loop in BigInteger.modInverse() | fixed: 10 known affected: 14 known not affected: 595 | 2026-07-01T14:44:26+00:00 | Vulnerability · Source |
| CVE-2026-2229 | redhat_vex | undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter | fixed: 343 known affected: 6 known not affected: 345 | 2026-07-01T14:43:21+00:00 | Vulnerability · Source |
| CVE-2026-1526 | redhat_vex | undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression | fixed: 343 known affected: 7 known not affected: 344 | 2026-07-01T14:43:17+00:00 | Vulnerability · Source |
| CVE-2026-1528 | redhat_vex | undici: undici: Denial of Service via crafted WebSocket frame with large length | fixed: 343 known affected: 6 known not affected: 345 | 2026-07-01T14:43:15+00:00 | Vulnerability · Source |
| CVE-2024-52011 | redhat_vex | launch-editor: vite: launch-editor: Arbitrary command execution via insufficient file argument sanitization | fixed: 8 known not affected: 145 | 2026-07-01T14:43:02+00:00 | Vulnerability · Source |
| CVE-2020-7753 | redhat_vex | nodejs-trim: Regular Expression Denial of Service (ReDoS) in trim function | fixed: 4 known affected: 1 known not affected: 93 | 2026-07-01T14:42:57+00:00 | Vulnerability · Source |
| CVE-2021-33623 | redhat_vex | nodejs-trim-newlines: ReDoS in .end() method | fixed: 6 known affected: 14 known not affected: 134 | 2026-07-01T14:42:57+00:00 | Vulnerability · Source |
| CVE-2026-55204 | microsoft_vex | HAProxy - NULL Pointer Dereference in hpack_dht_insert Function | fixed: 2 known affected: 2 | 2026-07-01T14:42:43+00:00 | Vulnerability · Source |
| CVE-2026-48914 | microsoft_vex | Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling | fixed: 3 known affected: 3 | 2026-07-01T14:41:57+00:00 | Vulnerability · Source |
| CVE-2026-44967 | microsoft_vex | opentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response | fixed: 2 known affected: 2 known not affected: 1 | 2026-07-01T14:41:51+00:00 | Vulnerability · Source |
| CVE-2026-43894 | microsoft_vex | jq: Wild stack write via signed-integer overflow in decNumber D2U() macro | known affected: 3 | 2026-07-01T14:41:34+00:00 | Vulnerability · Source |