VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
223005 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-6747 | redhat_vex | firefox: thunderbird: Use-after-free in the WebRTC component | fixed: 368 known affected: 8 | 2026-06-30T13:36:21+00:00 | Vulnerability · Source |
| CVE-2026-6746 | redhat_vex | firefox: thunderbird: Use-after-free in the DOM: Core & HTML component | fixed: 368 known affected: 8 | 2026-06-30T13:36:21+00:00 | Vulnerability · Source |
| CVE-2022-46751 | redhat_vex | apache-ivy: XML External Entity vulnerability | fixed: 9 known affected: 7 known not affected: 12 | 2026-06-30T12:47:04+00:00 | Vulnerability · Source |
| CVE-2025-23266 | redhat_vex | nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit | fixed: 42 known not affected: 13 under investigation: 3 | 2026-06-30T12:37:30+00:00 | Vulnerability · Source |
| CVE-2026-45834 | redhat_vex | kernel: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() | known affected: 260 known not affected: 14 | 2026-06-30T12:21:03+00:00 | Vulnerability · Source |
| CVE-2025-4476 | redhat_vex | libsoup: Null pointer dereference in libsoup may lead to Denial Of Service | known affected: 16 | 2026-06-30T11:53:09+00:00 | Vulnerability · Source |
| CVE-2025-4056 | redhat_vex | glib: glib crash after long command line | known not affected: 61 | 2026-06-30T11:53:06+00:00 | Vulnerability · Source |
| CVE-2026-33762 | redhat_vex | github.com/go-git/go-git/v5: go-git: Denial of Service via crafted Git index file | known affected: 198 | 2026-06-30T11:53:05+00:00 | Vulnerability · Source |
| CVE-2026-33535 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via out-of-bounds write in X11 display interaction path | known affected: 14 | 2026-06-30T11:53:03+00:00 | Vulnerability · Source |
| CVE-2026-31401 | redhat_vex | kernel: HID: bpf: prevent buffer overflow in hid_hw_request | known affected: 184 known not affected: 90 | 2026-06-30T11:53:00+00:00 | Vulnerability · Source |
| CVE-2026-27860 | redhat_vex | dovecot: Dovecot: Authentication bypass and information disclosure via LDAP filter injection | known affected: 30 | 2026-06-30T11:52:57+00:00 | Vulnerability · Source |
| CVE-2026-26961 | redhat_vex | github.com/rack/rack: Rack: Content smuggling via multipart boundary parsing mismatch | known not affected: 6 | 2026-06-30T11:52:57+00:00 | Vulnerability · Source |
| CVE-2026-23434 | redhat_vex | kernel: mtd: rawnand: serialize lock/unlock against other NAND operations | known affected: 108 known not affected: 166 | 2026-06-30T11:52:53+00:00 | Vulnerability · Source |
| CVE-2026-23458 | redhat_vex | kernel: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() | known affected: 274 | 2026-06-30T11:52:53+00:00 | Vulnerability · Source |
| CVE-2026-21716 | redhat_vex | nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership via incomplete security fix. | fixed: 127 known affected: 47 | 2026-06-30T11:52:50+00:00 | Vulnerability · Source |
| CVE-2026-21715 | redhat_vex | Node.js: Node.js: Information disclosure due to `fs.realpathSync.native()` bypassing filesystem read restrictions | fixed: 111 known affected: 47 | 2026-06-30T11:52:48+00:00 | Vulnerability · Source |
| CVE-2025-66215 | redhat_vex | OpenSC: OpenSC: Stack-buffer-overflow with physical access via crafted smart card or USB device | known affected: 8 | 2026-06-30T11:52:45+00:00 | Vulnerability · Source |
| CVE-2025-66038 | redhat_vex | OpenSC: OpenSC: Memory corruption via improper compact-TLV length validation | known affected: 8 | 2026-06-30T11:52:43+00:00 | Vulnerability · Source |
| CVE-2025-66037 | redhat_vex | OpenSC: OpenSC: Out-of-bounds read via crafted input | known affected: 8 | 2026-06-30T11:52:42+00:00 | Vulnerability · Source |
| CVE-2025-49010 | redhat_vex | OpenSC: OpenSC: Stack-buffer-overflow via crafted smart card or USB device responses | known affected: 8 | 2026-06-30T11:52:40+00:00 | Vulnerability · Source |
| CVE-2018-5380 | redhat_vex | quagga: bgpd can overrun internal BGP code-to-string conversion tables potentially allowing crash | known affected: 9 known not affected: 3 | 2026-06-30T11:52:36+00:00 | Vulnerability · Source |
| CVE-2026-37977 | redhat_vex | keycloak: org.keycloak.protocol.oidc.grants.ciba: Keycloak: Information disclosure via CORS header injection due to unvalidated JWT azp claim | fixed: 20 | 2026-06-30T11:52:32+00:00 | Vulnerability · Source |
| CVE-2026-35388 | redhat_vex | OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions | fixed: 962 known affected: 18 known not affected: 158 | 2026-06-30T11:52:30+00:00 | Vulnerability · Source |
| CVE-2026-35387 | redhat_vex | OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage | fixed: 965 known affected: 18 known not affected: 155 | 2026-06-30T11:52:26+00:00 | Vulnerability · Source |
| CVE-2026-35386 | redhat_vex | OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username | fixed: 960 known affected: 18 known not affected: 160 | 2026-06-30T11:52:25+00:00 | Vulnerability · Source |
| CVE-2026-34768 | redhat_vex | electron: Electron: Arbitrary code execution via unquoted path in Run registry key | known not affected: 3 | 2026-06-30T11:52:23+00:00 | Vulnerability · Source |
| CVE-2026-34766 | redhat_vex | Electron: Electron: Unauthorized USB device access via select-usb-device event callback validation bypass | known affected: 3 | 2026-06-30T11:52:22+00:00 | Vulnerability · Source |
| CVE-2026-34764 | redhat_vex | Electron: Electron: Memory corruption or crash due to use-after-free in offscreen rendering with shared textures. | known affected: 3 | 2026-06-30T11:52:20+00:00 | Vulnerability · Source |
| CVE-2017-15113 | redhat_vex | ovirt-engine: DEBUG logging includes unmasked passwords | fixed: 21 known affected: 1 | 2026-06-30T11:52:16+00:00 | Vulnerability · Source |
| CVE-2017-12165 | redhat_vex | undertow: improper whitespace parsing leading to potential HTTP request smuggling | fixed: 985 known affected: 1 known not affected: 4 | 2026-06-30T11:52:14+00:00 | Vulnerability · Source |
| CVE-2017-2837 | redhat_vex | freerdp: Rdp Client GCC Read Server Security Data Denial of Service | known affected: 12 | 2026-06-30T11:52:12+00:00 | Vulnerability · Source |
| CVE-2017-2836 | redhat_vex | freerdp: Rdp Client Read Server Proprietary Certificate Denial of Service | known affected: 12 | 2026-06-30T11:52:10+00:00 | Vulnerability · Source |
| CVE-2017-2810 | redhat_vex | python-tablib: Databook loading functionality allows command execution | known affected: 4 known not affected: 1 | 2026-06-30T11:52:08+00:00 | Vulnerability · Source |
| CVE-2017-2669 | redhat_vex | dovecot: Dovecot DoS when passdb dict was used for authentication | known not affected: 13 | 2026-06-30T11:52:06+00:00 | Vulnerability · Source |
| CVE-2017-2662 | redhat_vex | foreman: Managing repositories with their id via hammer does not respect the role filters | fixed: 17 known affected: 1 known not affected: 1428 | 2026-06-30T11:52:02+00:00 | Vulnerability · Source |
| CVE-2017-2658 | redhat_vex | Dashbuilder: Lack of clickjacking protection on the login page | fixed: 2 known affected: 1 | 2026-06-30T11:52:00+00:00 | Vulnerability · Source |
| CVE-2017-2626 | redhat_vex | libICE: weak entropy usage in session keys | fixed: 1793 known affected: 3 | 2026-06-30T11:51:55+00:00 | Vulnerability · Source |
| CVE-2017-2603 | redhat_vex | jenkins: User data leak in disconnected agents' config.xml API (SECURITY-362) | known affected: 3 | 2026-06-30T11:51:54+00:00 | Vulnerability · Source |
| CVE-2017-2624 | redhat_vex | xorg-x11-server: timing attack against MIT Cookie | known affected: 20 known not affected: 9 | 2026-06-30T11:51:54+00:00 | Vulnerability · Source |
| CVE-2017-2591 | redhat_vex | 389-ds-base: Heap buffer overflow in uiduniq.c | known affected: 5 known not affected: 4 | 2026-06-30T11:51:53+00:00 | Vulnerability · Source |
| CVE-2017-2602 | redhat_vex | jenkins: Pipeline metadata files not blacklisted in agent-to-master security subsystem (SECURITY-358) | under investigation: 3 | 2026-06-30T11:51:50+00:00 | Vulnerability · Source |
| CVE-2017-2587 | redhat_vex | netpbm: Insufficient size check of memory allocation in createCanvas() function | known affected: 8 | 2026-06-30T11:51:46+00:00 | Vulnerability · Source |
| CVE-2017-2579 | redhat_vex | netpbm: Out-of-bounds read in expandCodeOntoStack() | known affected: 3 known not affected: 5 | 2026-06-30T11:51:45+00:00 | Vulnerability · Source |
| CVE-2017-2586 | redhat_vex | netpbm: Null pointer dereference in stringToUint function | known affected: 8 | 2026-06-30T11:51:44+00:00 | Vulnerability · Source |
| CVE-2016-9604 | redhat_vex | kernel: security: The built-in keyrings for security tokens can be joined as a session and then modified by the root user | fixed: 201 known affected: 14 known not affected: 8 | 2026-06-30T11:51:40+00:00 | Vulnerability · Source |
| CVE-2016-9593 | redhat_vex | foreman-debug: missing obfuscation of sensitive information | fixed: 276 | 2026-06-30T11:51:37+00:00 | Vulnerability · Source |
| CVE-2016-9601 | redhat_vex | ghostscript: Heap-buffer overflow due to Integer overflow in jbig2_image_new function | known affected: 8 known not affected: 6 under investigation: 1 | 2026-06-30T11:51:36+00:00 | Vulnerability · Source |
| CVE-2016-9586 | redhat_vex | curl: printf floating point buffer overflow | fixed: 336 known affected: 18 known not affected: 1 | 2026-06-30T11:51:33+00:00 | Vulnerability · Source |
| CVE-2016-9583 | redhat_vex | jasper: integer overflows leading to out of bounds read in packet iterators in JPC decoder | fixed: 146 known affected: 4 | 2026-06-30T11:51:31+00:00 | Vulnerability · Source |
| CVE-2016-9581 | redhat_vex | openjpeg2: Infinite loop in tiftoimage resulting into heap buffer overflow in convert_32s_C1P1 | known not affected: 8 | 2026-06-30T11:51:29+00:00 | Vulnerability · Source |