VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
223005 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-1528 | redhat_vex | undici: undici: Denial of Service via crafted WebSocket frame with large length | fixed: 343 known affected: 6 known not affected: 345 | 2026-07-01T14:43:15+00:00 | Vulnerability · Source |
| CVE-2024-52011 | redhat_vex | launch-editor: vite: launch-editor: Arbitrary command execution via insufficient file argument sanitization | fixed: 8 known not affected: 145 | 2026-07-01T14:43:02+00:00 | Vulnerability · Source |
| CVE-2020-7753 | redhat_vex | nodejs-trim: Regular Expression Denial of Service (ReDoS) in trim function | fixed: 4 known affected: 1 known not affected: 93 | 2026-07-01T14:42:57+00:00 | Vulnerability · Source |
| CVE-2021-33623 | redhat_vex | nodejs-trim-newlines: ReDoS in .end() method | fixed: 6 known affected: 14 known not affected: 134 | 2026-07-01T14:42:57+00:00 | Vulnerability · Source |
| CVE-2026-55204 | microsoft_vex | HAProxy - NULL Pointer Dereference in hpack_dht_insert Function | fixed: 2 known affected: 2 | 2026-07-01T14:42:43+00:00 | Vulnerability · Source |
| CVE-2026-48914 | microsoft_vex | Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling | fixed: 3 known affected: 3 | 2026-07-01T14:41:57+00:00 | Vulnerability · Source |
| CVE-2026-44967 | microsoft_vex | opentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response | fixed: 2 known affected: 2 known not affected: 1 | 2026-07-01T14:41:51+00:00 | Vulnerability · Source |
| CVE-2026-43894 | microsoft_vex | jq: Wild stack write via signed-integer overflow in decNumber D2U() macro | known affected: 3 | 2026-07-01T14:41:34+00:00 | Vulnerability · Source |
| CVE-2025-9403 | microsoft_vex | jqlang jq JSON jq_test.c run_jq_tests assertion | fixed: 4 known affected: 5 | 2026-07-01T14:41:28+00:00 | Vulnerability · Source |
| CVE-2025-11083 | microsoft_vex | GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow | fixed: 10 known affected: 14 | 2026-07-01T14:41:20+00:00 | Vulnerability · Source |
| CVE-2025-1180 | microsoft_vex | GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption | fixed: 2 known affected: 21 | 2026-07-01T14:40:58+00:00 | Vulnerability · Source |
| CVE-2025-1150 | microsoft_vex | GNU Binutils ld libbfd.c bfd_malloc memory leak | known affected: 19 | 2026-07-01T14:40:52+00:00 | Vulnerability · Source |
| CVE-2025-1149 | microsoft_vex | GNU Binutils ld xmalloc.c xstrdup memory leak | known affected: 4 under investigation: 27 | 2026-07-01T14:40:40+00:00 | Vulnerability · Source |
| CVE-2025-1151 | microsoft_vex | GNU Binutils ld xmemdup.c xmemdup memory leak | known affected: 30 | 2026-07-01T14:40:31+00:00 | Vulnerability · Source |
| CVE-2023-50230 | redhat_vex | bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability | fixed: 134 known affected: 21 known not affected: 5 | 2026-07-01T14:39:46+00:00 | Vulnerability · Source |
| CVE-2026-41991 | redhat_vex | gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility | fixed: 3 known affected: 10 | 2026-07-01T14:20:51+00:00 | Vulnerability · Source |
| CVE-2026-13484 | redhat_vex | mlflow: MLflow: Unauthorized access and data manipulation via missing API authorization | known affected: 19 | 2026-07-01T14:20:39+00:00 | Vulnerability · Source |
| CVE-2026-23002 | redhat_vex | kernel: lib/buildid: use __kernel_read() for sleepable context | fixed: 309 known affected: 108 known not affected: 90 | 2026-07-01T14:14:03+00:00 | Vulnerability · Source |
| CVE-2026-56116 | redhat_vex | dhcpcd: dhcpcd: Denial of Service via IPv6 Router Advertisement memory leak | known affected: 1 | 2026-07-01T14:13:02+00:00 | Vulnerability · Source |
| CVE-2026-52956 | redhat_vex | kernel: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() | known affected: 260 known not affected: 14 | 2026-07-01T14:08:27+00:00 | Vulnerability · Source |
| CVE-2026-53194 | redhat_vex | kernel: USB: serial: kl5kusb105: fix bulk-out buffer overflow | known affected: 260 known not affected: 14 | 2026-07-01T14:08:18+00:00 | Vulnerability · Source |
| CVE-2026-52945 | redhat_vex | kernel: Revert "wireguard: device: enable threaded NAPI" | known affected: 184 known not affected: 90 | 2026-07-01T14:08:13+00:00 | Vulnerability · Source |
| CVE-2026-54673 | redhat_vex | electron-updater: electron-builder: Electron-updater: Information disclosure via unstripped credential headers during HTTP redirects | known affected: 3 | 2026-07-01T14:08:13+00:00 | Vulnerability · Source |
| CVE-2026-43958 | redhat_vex | rrdtool: rrdtool: Stack buffer overflow allows local code execution or denial of service | fixed: 299 known affected: 17 | 2026-07-01T14:07:17+00:00 | Vulnerability · Source |
| CVE-2026-23191 | redhat_vex | kernel: ALSA: aloop: Fix racy access at PCM trigger | fixed: 2084 known affected: 22 known not affected: 14 | 2026-07-01T14:06:06+00:00 | Vulnerability · Source |
| CVE-2025-21691 | redhat_vex | kernel: cachestat: fix page cache statistics permission checking | fixed: 917 known affected: 64 known not affected: 48 | 2026-07-01T14:06:02+00:00 | Vulnerability · Source |
| CVE-2025-21648 | redhat_vex | kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX | fixed: 608 known affected: 112 known not affected: 76 | 2026-07-01T14:06:02+00:00 | Vulnerability · Source |
| CVE-2026-43128 | redhat_vex | kernel: RDMA/umem: Fix double dma_buf_unpin in failure path | fixed: 1658 known affected: 22 known not affected: 90 | 2026-07-01T14:05:57+00:00 | Vulnerability · Source |
| CVE-2023-5954 | redhat_vex | vault: inbound client requests can trigger a denial of service | fixed: 8 known affected: 1 known not affected: 743 | 2026-07-01T13:57:29+00:00 | Vulnerability · Source |
| CVE-2023-3775 | redhat_vex | hashicorp/vault: vault enterprise’s sentinel RGP policies allowed for cross-namespace denial of service | fixed: 4 known not affected: 677 | 2026-07-01T13:57:28+00:00 | Vulnerability · Source |
| CVE-2024-21094 | redhat_vex | OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) | fixed: 3506 known affected: 47 known not affected: 44 | 2026-07-01T13:55:50+00:00 | Vulnerability · Source |
| CVE-2022-41717 | redhat_vex | golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests | fixed: 2081 known affected: 145 known not affected: 7593 | 2026-07-01T13:50:59+00:00 | Vulnerability · Source |
| CVE-2023-0475 | redhat_vex | go-getter: go-getter vulnerable to denial of service via malicious compressed archive | fixed: 4 known affected: 4 known not affected: 629 | 2026-07-01T13:35:59+00:00 | Vulnerability · Source |
| CVE-2021-36157 | redhat_vex | cortex: Grafana Cortex directory traversal | fixed: 8 known affected: 3 known not affected: 830 | 2026-07-01T13:35:56+00:00 | Vulnerability · Source |
| CVE-2023-5077 | redhat_vex | hashicorp/vault: Google Cloud Secrets Engine Removed Existing IAM Conditions When Creating / Updating Rolesets | fixed: 8 known affected: 5 known not affected: 746 | 2026-07-01T13:34:51+00:00 | Vulnerability · Source |
| CVE-2023-2121 | redhat_vex | hashicorp: html injection into web ui | fixed: 4 known affected: 11 known not affected: 88 | 2026-07-01T13:34:36+00:00 | Vulnerability · Source |
| CVE-2026-47102 | redhat_vex | litellm: LiteLLM: Privilege escalation through user role modification | known affected: 1 known not affected: 5 | 2026-07-01T13:31:13+00:00 | Vulnerability · Source |
| CVE-2026-54672 | redhat_vex | electron-updater: app-builder-lib: Electron-updater: Arbitrary code execution through AppImage library loading vulnerability | known not affected: 3 | 2026-07-01T13:29:49+00:00 | Vulnerability · Source |
| CVE-2026-43501 | redhat_vex | kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows | fixed: 1658 known affected: 22 known not affected: 90 | 2026-07-01T13:23:17+00:00 | Vulnerability · Source |
| CVE-2026-46176 | redhat_vex | kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() | fixed: 1224 known affected: 22 known not affected: 76 under investigation: 14 | 2026-07-01T13:23:06+00:00 | Vulnerability · Source |
| CVE-2026-50003 | redhat_vex | DCMTK: DCMTK: Arbitrary file write due to directory traversal vulnerability | known not affected: 1 | 2026-07-01T11:14:45+00:00 | Vulnerability · Source |
| CVE-2026-14258 | redhat_vex | dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length IPv6 ND option in Router Advertisement handling | known affected: 1 | 2026-07-01T11:04:21+00:00 | Vulnerability · Source |
| CVE-2024-3183 | redhat_vex | freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force | fixed: 880 known not affected: 65 | 2026-07-01T11:04:21+00:00 | Vulnerability · Source |
| CVE-2026-13316 | redhat_vex | Foreman: SSRF to cloud metada service through unvalidated test_url parameters in Foreman config | known affected: 34 | 2026-07-01T10:11:09+00:00 | Vulnerability · Source |
| CVE-2025-21739 | redhat_vex | kernel: scsi: ufs: core: Fix use-after free in init error and remove paths | fixed: 303 known affected: 98 known not affected: 90 | 2026-07-01T10:04:47+00:00 | Vulnerability · Source |
| CVE-2024-57998 | redhat_vex | kernel: OPP: add index check to assert to avoid buffer overflow in _read_freq() | fixed: 303 known affected: 98 known not affected: 90 | 2026-07-01T10:00:34+00:00 | Vulnerability · Source |
| CVE-2026-57451 | redhat_vex | vim: Vim: Denial of service via crafted undo file | known affected: 15 known not affected: 18 | 2026-07-01T09:48:31+00:00 | Vulnerability · Source |
| CVE-2026-45446 | redhat_vex | openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes | fixed: 100 known affected: 51 known not affected: 1 | 2026-07-01T09:38:25+00:00 | Vulnerability · Source |
| CVE-2026-42770 | redhat_vex | openssl: FFC-DH Peer Validation Uses Attacker-Supplied q | fixed: 100 known affected: 51 known not affected: 1 | 2026-07-01T09:38:21+00:00 | Vulnerability · Source |
| CVE-2026-42769 | redhat_vex | openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate | fixed: 100 known affected: 51 known not affected: 1 | 2026-07-01T09:38:21+00:00 | Vulnerability · Source |