VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
223004 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-23461 | redhat_vex | kernel: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user | known affected: 184 known not affected: 90 | 2026-06-30T11:46:08+00:00 | Vulnerability · Source |
| CVE-2026-23457 | redhat_vex | kernel: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() | known affected: 274 | 2026-06-30T11:46:08+00:00 | Vulnerability · Source |
| CVE-2026-23456 | redhat_vex | kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case | known affected: 274 | 2026-06-30T11:46:06+00:00 | Vulnerability · Source |
| CVE-2026-23451 | redhat_vex | kernel: bonding: prevent potential infinite loop in bond_header_parse() | known affected: 14 known not affected: 260 | 2026-06-30T11:46:03+00:00 | Vulnerability · Source |
| CVE-2026-23450 | redhat_vex | kernel: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() | known affected: 232 known not affected: 42 | 2026-06-30T11:46:02+00:00 | Vulnerability · Source |
| CVE-2026-23449 | redhat_vex | kernel: net/sched: teql: Fix double-free in teql_master_xmit | known affected: 246 known not affected: 28 | 2026-06-30T11:45:58+00:00 | Vulnerability · Source |
| CVE-2026-23445 | redhat_vex | kernel: igc: fix page fault in XDP TX timestamps handling | known affected: 184 known not affected: 90 | 2026-06-30T11:45:57+00:00 | Vulnerability · Source |
| CVE-2026-23444 | redhat_vex | kernel: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure | known affected: 246 known not affected: 28 | 2026-06-30T11:45:55+00:00 | Vulnerability · Source |
| CVE-2026-23440 | redhat_vex | kernel: net/mlx5e: Fix race condition during IPSec ESN update | known affected: 198 known not affected: 76 | 2026-06-30T11:45:53+00:00 | Vulnerability · Source |
| CVE-2026-23437 | redhat_vex | kernel: net: shaper: protect late read accesses to the hierarchy | known affected: 184 known not affected: 90 | 2026-06-30T11:45:52+00:00 | Vulnerability · Source |
| CVE-2026-23419 | redhat_vex | kernel: net/rds: Fix circular locking dependency in rds_tcp_tune | known affected: 14 known not affected: 260 | 2026-06-30T11:45:48+00:00 | Vulnerability · Source |
| CVE-2026-23414 | redhat_vex | kernel: tls: Purge async_hold in tls_decrypt_async_wait() | known affected: 184 known not affected: 90 | 2026-06-30T11:45:45+00:00 | Vulnerability · Source |
| CVE-2026-23413 | redhat_vex | kernel: clsact: Fix use-after-free in init/destroy rollback asymmetry | known affected: 184 known not affected: 90 | 2026-06-30T11:45:43+00:00 | Vulnerability · Source |
| CVE-2026-23412 | redhat_vex | kernel: netfilter: bpf: defer hook memory release until rcu readers are done | known affected: 184 known not affected: 90 | 2026-06-30T11:45:42+00:00 | Vulnerability · Source |
| CVE-2026-21724 | redhat_vex | Grafana OSS: Grafana OSS: Authorization bypass allows modification of protected webhook URLs | known not affected: 21 | 2026-06-30T11:45:41+00:00 | Vulnerability · Source |
| CVE-2026-21714 | redhat_vex | Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames | fixed: 111 known affected: 47 | 2026-06-30T11:45:40+00:00 | Vulnerability · Source |
| CVE-2026-21717 | redhat_vex | nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash collisions | fixed: 127 known affected: 47 | 2026-06-30T11:45:37+00:00 | Vulnerability · Source |
| CVE-2026-21713 | redhat_vex | Node.js: Node.js: Information disclosure via timing oracle in HMAC verification | fixed: 111 known affected: 47 | 2026-06-30T11:45:34+00:00 | Vulnerability · Source |
| CVE-2026-21712 | redhat_vex | Node.js: Node.js: Denial of Service via malformed Internationalized Domain Name processing | fixed: 111 known affected: 47 | 2026-06-30T11:45:32+00:00 | Vulnerability · Source |
| CVE-2026-21711 | redhat_vex | Node.js: Node.js: Unauthorized inter-process communication due to missing Unix Domain Socket permission checks | fixed: 111 known not affected: 47 | 2026-06-30T11:45:31+00:00 | Vulnerability · Source |
| CVE-2026-20884 | redhat_vex | LibRaw: LibRaw: Arbitrary code execution via integer overflow in deflate_dng_load_raw | known affected: 7 known not affected: 3 | 2026-06-30T11:45:26+00:00 | Vulnerability · Source |
| CVE-2026-20709 | redhat_vex | microcode_ctl: Intel Processors: Escalation of privilege due to default cryptographic key | known affected: 9 | 2026-06-30T11:45:24+00:00 | Vulnerability · Source |
| CVE-2026-1839 | redhat_vex | transformers: HuggingFace Transformers: Arbitrary code execution via malicious checkpoint file | known affected: 53 | 2026-06-30T11:45:21+00:00 | Vulnerability · Source |
| CVE-2026-0394 | redhat_vex | dovecot: Dovecot: Information disclosure and authentication bypass via path traversal | known affected: 12 known not affected: 18 | 2026-06-30T11:45:16+00:00 | Vulnerability · Source |
| CVE-2025-59031 | redhat_vex | dovecot: Dovecot: Information disclosure via specially crafted OOXML documents | known affected: 12 known not affected: 18 | 2026-06-30T11:45:15+00:00 | Vulnerability · Source |
| CVE-2025-59028 | redhat_vex | dovecot: Dovecot: Denial of Service via invalid SASL data | known affected: 30 | 2026-06-30T11:45:12+00:00 | Vulnerability · Source |
| CVE-2018-5741 | redhat_vex | bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies | fixed: 187 known affected: 7 known not affected: 21 | 2026-06-30T11:45:11+00:00 | Vulnerability · Source |
| CVE-2018-5738 | redhat_vex | bind: Improper handling of configuration allows all clients to perform recursive queries | known not affected: 44 | 2026-06-30T11:45:09+00:00 | Vulnerability · Source |
| CVE-2018-5737 | redhat_vex | bind: Interaction between NSEC aggresive negative caching and the serve-stale feature can cause a denial of service | known not affected: 44 | 2026-06-30T11:45:08+00:00 | Vulnerability · Source |
| CVE-2018-5733 | redhat_vex | dhcp: Reference count overflow in dhcpd allows denial of service | fixed: 156 known affected: 1 known not affected: 6 | 2026-06-30T11:45:07+00:00 | Vulnerability · Source |
| CVE-2018-5381 | redhat_vex | quagga: Infinite loop issue triggered by invalid OPEN message allows denial-of-service | known affected: 9 known not affected: 3 | 2026-06-30T11:45:06+00:00 | Vulnerability · Source |
| CVE-2018-5378 | redhat_vex | quagga: bgpd does not properly bounds check the data sent with a NOTIFY allowing leak of sensitive data or crash | known not affected: 12 | 2026-06-30T11:45:06+00:00 | Vulnerability · Source |
| CVE-2026-39881 | redhat_vex | vim: Vim: Arbitrary code execution via command injection in NetBeans interface | known affected: 33 | 2026-06-30T11:44:06+00:00 | Vulnerability · Source |
| CVE-2026-39865 | redhat_vex | axios: Axios: Denial of Service via HTTP/2 session cleanup logic state corruption | known affected: 118 | 2026-06-30T11:44:05+00:00 | Vulnerability · Source |
| CVE-2026-39395 | redhat_vex | github.com/sigstore/cosign: Cosign: Incorrect attestation verification due to malformed payloads or mismatched predicate types | known affected: 32 | 2026-06-30T11:44:03+00:00 | Vulnerability · Source |
| CVE-2026-39316 | redhat_vex | cups: CUPS: Denial of Service and potential arbitrary code execution via use-after-free vulnerability when deleting temporary printers. | fixed: 4 known affected: 41 | 2026-06-30T11:44:01+00:00 | Vulnerability · Source |
| CVE-2026-39314 | redhat_vex | cups: CUPS: Denial of Service via integer underflow in IPP attribute handling | fixed: 4 known affected: 41 | 2026-06-30T11:43:59+00:00 | Vulnerability · Source |
| CVE-2026-37982 | redhat_vex | keycloak: org.keycloak.authentication: Keycloak: Unauthorized account takeover via WebAuthn token replay | fixed: 10 | 2026-06-30T11:43:54+00:00 | Vulnerability · Source |
| CVE-2026-37981 | redhat_vex | keycloak: org.keycloak.authorization: Keycloak: Information disclosure via broken access control in user lookup endpoint | fixed: 10 | 2026-06-30T11:43:52+00:00 | Vulnerability · Source |
| CVE-2026-37980 | redhat_vex | org.keycloak.forms.login: keycloak: Keycloak: Arbitrary code execution via Stored Cross-Site Scripting (XSS) in organization selection login page | known affected: 1 | 2026-06-30T11:43:49+00:00 | Vulnerability · Source |
| CVE-2026-37979 | redhat_vex | keycloak: Keycloak: Information disclosure via OIDC token introspection endpoint audience bypass | fixed: 10 | 2026-06-30T11:43:47+00:00 | Vulnerability · Source |
| CVE-2026-37978 | redhat_vex | keycloak: org.keycloak.services: Keycloak: Information Disclosure via evaluate-scopes Admin API | fixed: 10 | 2026-06-30T11:43:45+00:00 | Vulnerability · Source |
| CVE-2026-35611 | redhat_vex | addressable: Addressable: Denial of Service via crafted URI templates | known affected: 12 | 2026-06-30T11:43:44+00:00 | Vulnerability · Source |
| CVE-2026-35094 | redhat_vex | libinput: libinput: Information disclosure via dangling pointer in Lua plugin handling | known not affected: 14 | 2026-06-30T11:43:40+00:00 | Vulnerability · Source |
| CVE-2026-35549 | redhat_vex | MariaDB Server: MariaDB Server: Denial of Service via large packet with caching_sha2_password authentication plugin | known affected: 143 | 2026-06-30T11:43:40+00:00 | Vulnerability · Source |
| CVE-2026-35414 | redhat_vex | OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option | fixed: 960 known affected: 18 known not affected: 160 | 2026-06-30T11:43:39+00:00 | Vulnerability · Source |
| CVE-2026-35092 | redhat_vex | corosync: Corosync: Denial of Service via integer overflow in join message validation | fixed: 1090 known not affected: 1 | 2026-06-30T11:43:33+00:00 | Vulnerability · Source |
| CVE-2026-34979 | redhat_vex | cups: OpenPrinting CUPS: Denial of Service via heap-based buffer overflow in job attribute processing | fixed: 4 known affected: 41 | 2026-06-30T11:43:30+00:00 | Vulnerability · Source |
| CVE-2026-35091 | redhat_vex | corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet | fixed: 1090 known not affected: 1 | 2026-06-30T11:43:30+00:00 | Vulnerability · Source |
| CVE-2026-34978 | redhat_vex | cups: OpenPrinting CUPS: Denial of Service via path traversal in RSS notifier | fixed: 4 known affected: 41 | 2026-06-30T11:43:26+00:00 | Vulnerability · Source |