VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
223004 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-34972 | redhat_vex | github.com/openfga/openfga: OpenFGA: Improper policy enforcement via specific BatchCheck calls | known affected: 2 known not affected: 1 | 2026-06-30T11:43:25+00:00 | Vulnerability · Source |
| CVE-2026-34956 | redhat_vex | openvswitch: Open vSwitch: Denial of Service via malformed FTP EPASV command | known affected: 195 | 2026-06-30T11:43:23+00:00 | Vulnerability · Source |
| CVE-2026-34933 | redhat_vex | avahi: avahi-daemon: Avahi: Denial of Service via D-Bus method call | fixed: 3 known affected: 89 | 2026-06-30T11:43:19+00:00 | Vulnerability · Source |
| CVE-2026-34835 | redhat_vex | rack: Rack: Host header poisoning due to malformed Host header bypasses validation | known affected: 50 | 2026-06-30T11:43:18+00:00 | Vulnerability · Source |
| CVE-2026-34831 | redhat_vex | rack: Rack: HTTP response desynchronization via incorrect Content-Length calculation with UTF-8 characters | known affected: 50 | 2026-06-30T11:43:17+00:00 | Vulnerability · Source |
| CVE-2026-34830 | redhat_vex | rack: Rack: Information disclosure via regular expression injection in X-Accel-Mapping header | known affected: 50 | 2026-06-30T11:43:14+00:00 | Vulnerability · Source |
| CVE-2026-34826 | redhat_vex | rack: Rack: Denial of Service via malicious HTTP Range header | known affected: 50 | 2026-06-30T11:43:10+00:00 | Vulnerability · Source |
| CVE-2026-34786 | redhat_vex | rack: Rack: Security header bypass via URL-encoded static path requests | known affected: 50 | 2026-06-30T11:43:09+00:00 | Vulnerability · Source |
| CVE-2026-34781 | redhat_vex | Electron: Electron: Denial of Service via malformed clipboard image data | known affected: 6 | 2026-06-30T11:43:08+00:00 | Vulnerability · Source |
| CVE-2026-34778 | redhat_vex | Electron: Electron: Integrity issue due to IPC channel spoofing by a service worker | known affected: 3 | 2026-06-30T11:43:07+00:00 | Vulnerability · Source |
| CVE-2026-34776 | redhat_vex | Electron: Electron: Information disclosure via crafted second-instance message | known affected: 3 | 2026-06-30T11:43:05+00:00 | Vulnerability · Source |
| CVE-2026-34777 | redhat_vex | Electron: Electron: Unauthorized permission granting and information disclosure via incorrect iframe origin | known affected: 3 | 2026-06-30T11:43:04+00:00 | Vulnerability · Source |
| CVE-2026-34775 | redhat_vex | Electron: Electron: Arbitrary code execution and information disclosure due to incorrect Node.js integration scoping | known affected: 3 | 2026-06-30T11:42:59+00:00 | Vulnerability · Source |
| CVE-2026-34773 | redhat_vex | electron: Electron: Protocol handler hijacking via improper validation of protocol names | known not affected: 3 | 2026-06-30T11:42:56+00:00 | Vulnerability · Source |
| CVE-2026-34772 | redhat_vex | Electron: Electron: Use-after-free vulnerability leads to memory corruption or crash | known affected: 3 | 2026-06-30T11:42:55+00:00 | Vulnerability · Source |
| CVE-2026-34767 | redhat_vex | electron: Electron: HTTP Response Header Injection via attacker-controlled input | known affected: 3 | 2026-06-30T11:42:52+00:00 | Vulnerability · Source |
| CVE-2026-34765 | redhat_vex | electron: Electron: Arbitrary code execution or information disclosure via incorrect window handling | known affected: 6 | 2026-06-30T11:42:51+00:00 | Vulnerability · Source |
| CVE-2026-34763 | redhat_vex | rack: Rack: Information disclosure via regular expression metacharacters in root path | known affected: 50 | 2026-06-30T11:42:50+00:00 | Vulnerability · Source |
| CVE-2026-34760 | redhat_vex | vLLM: Librosa: numpy: Librosa: AI model data integrity impact due to audio processing discrepancy | known affected: 21 | 2026-06-30T11:42:48+00:00 | Vulnerability · Source |
| CVE-2026-34757 | redhat_vex | libpng: libpng: Information disclosure and data corruption via use-after-free vulnerability | fixed: 3 known affected: 281 | 2026-06-30T11:42:46+00:00 | Vulnerability · Source |
| CVE-2026-34753 | redhat_vex | vllm: vLLM: Server-Side Request Forgery allows access to internal services via controlled batch input | known affected: 21 | 2026-06-30T11:42:45+00:00 | Vulnerability · Source |
| CVE-2026-34475 | redhat_vex | Varnish Cache: Varnish Cache and Varnish Enterprise: Cache poisoning and authentication bypass via unchecked URL handling | known affected: 12 known not affected: 9 | 2026-06-30T11:42:42+00:00 | Vulnerability · Source |
| CVE-2026-5745 | redhat_vex | libarchive: A NULL pointer dereference vulnerability exists in the ACL parser of libarchive | fixed: 3 known affected: 21 | 2026-06-30T11:42:41+00:00 | Vulnerability · Source |
| CVE-2026-5704 | redhat_vex | tar: tar: Hidden file injection via crafted archives | known affected: 9 | 2026-06-30T11:42:38+00:00 | Vulnerability · Source |
| CVE-2026-5673 | redhat_vex | libtheora: libtheora: Denial of Service or Information Disclosure via malformed AVI file processing | known affected: 17 | 2026-06-30T11:42:37+00:00 | Vulnerability · Source |
| CVE-2026-5318 | redhat_vex | LibRaw: LibRaw: Denial of Service via out-of-bounds write in JPEG DHT Parser | known affected: 16 | 2026-06-30T11:42:36+00:00 | Vulnerability · Source |
| CVE-2026-5530 | redhat_vex | ollama: Ollama: Server-Side Request Forgery via Model Pull API manipulation | known affected: 11 | 2026-06-30T11:42:35+00:00 | Vulnerability · Source |
| CVE-2026-5342 | redhat_vex | LibRaw: LibRaw: Out-of-bounds read via `load_flags/raw_width` argument manipulation | known affected: 16 | 2026-06-30T11:42:33+00:00 | Vulnerability · Source |
| CVE-2026-5265 | redhat_vex | ovn: ovn: Heap Over-Read in ICMP Error Response Generation | fixed: 333 known affected: 83 | 2026-06-30T11:42:29+00:00 | Vulnerability · Source |
| CVE-2026-5164 | redhat_vex | virtio-win: virtio-win: Denial of Service via unvalidated descriptor count in unmap request | known affected: 3 known not affected: 1 | 2026-06-30T11:42:26+00:00 | Vulnerability · Source |
| CVE-2026-5165 | redhat_vex | virtio-win: virtio-win: Memory corruption via use-after-free in VirtIO BLK device reset | known affected: 3 known not affected: 1 | 2026-06-30T11:42:26+00:00 | Vulnerability · Source |
| CVE-2026-5119 | redhat_vex | libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment | fixed: 317 known affected: 3 | 2026-06-30T11:42:19+00:00 | Vulnerability · Source |
| CVE-2026-5107 | redhat_vex | FRRouting FRR: frr: FRRouting FRR: Improper access controls in EVPN Type-2 Route Handler | known affected: 13 | 2026-06-30T11:42:17+00:00 | Vulnerability · Source |
| CVE-2026-4980 | redhat_vex | Inkscape: Inkscape: Information disclosure via crafted SVG file with malicious XInclude tags | known affected: 3 known not affected: 13 | 2026-06-30T11:42:16+00:00 | Vulnerability · Source |
| CVE-2026-4948 | redhat_vex | firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization | known affected: 6 under investigation: 16 | 2026-06-30T11:42:13+00:00 | Vulnerability · Source |
| CVE-2026-4923 | redhat_vex | path-to-regexp: path-to-regexp: Denial of Service via specially crafted paths with multiple wildcards | fixed: 1 known affected: 105 known not affected: 2 | 2026-06-30T11:42:12+00:00 | Vulnerability · Source |
| CVE-2017-1002102 | redhat_vex | kubernetes: Malicious containers can delete any file from the node | fixed: 72 known affected: 1 known not affected: 4 | 2026-06-30T11:41:09+00:00 | Vulnerability · Source |
| CVE-2017-15139 | redhat_vex | openstack-cinder: Data retained after deletion of a ScaleIO volume | fixed: 7 known affected: 10 known not affected: 10 | 2026-06-30T11:41:03+00:00 | Vulnerability · Source |
| CVE-2017-15138 | redhat_vex | atomic-openshift: cluster-reader can escalate to creating builds via webhooks in any project | fixed: 986 known affected: 31 | 2026-06-30T11:41:00+00:00 | Vulnerability · Source |
| CVE-2017-15125 | redhat_vex | cloudforms: XSS in self-service UI snapshot feature | fixed: 179 | 2026-06-30T11:40:56+00:00 | Vulnerability · Source |
| CVE-2017-15137 | redhat_vex | atomic-openshift: image import whitelist can be bypassed by creating an imagestream or using oc tag | fixed: 986 known affected: 17 known not affected: 14 | 2026-06-30T11:40:55+00:00 | Vulnerability · Source |
| CVE-2017-15123 | redhat_vex | CloudForms: RSS links are accessible without any authentication | known not affected: 2 | 2026-06-30T11:40:52+00:00 | Vulnerability · Source |
| CVE-2017-15119 | redhat_vex | qemu: DoS via large option request | fixed: 46 known affected: 19 known not affected: 19 | 2026-06-30T11:40:50+00:00 | Vulnerability · Source |
| CVE-2017-15101 | redhat_vex | liblouis: incomplete fix for CVE-2014-8184 | fixed: 72 | 2026-06-30T11:40:47+00:00 | Vulnerability · Source |
| CVE-2017-15097 | redhat_vex | postgresql: Start scripts permit database administrator to modify root-owned files | fixed: 586 known affected: 13 under investigation: 3 | 2026-06-30T11:40:44+00:00 | Vulnerability · Source |
| CVE-2017-14461 | redhat_vex | dovecot: Information Leak Vulnerability in rfc822_parse_domain leading to denial-of-service | known affected: 12 known not affected: 7 | 2026-06-30T11:40:43+00:00 | Vulnerability · Source |
| CVE-2017-13098 | redhat_vex | bouncycastle: TLS server vulnerable to Adaptive Chosen Ciphertext attack when using JCE allowing plaintext recovery or MITM attack | known affected: 2 known not affected: 7 | 2026-06-30T11:40:41+00:00 | Vulnerability · Source |
| CVE-2017-12196 | redhat_vex | undertow: Client can use bogus uri in Digest authentication | fixed: 324 known affected: 2 known not affected: 1 | 2026-06-30T11:40:37+00:00 | Vulnerability · Source |
| CVE-2017-12195 | redhat_vex | 3: authentication bypass for elasticsearch with external routes | fixed: 995 | 2026-06-30T11:40:34+00:00 | Vulnerability · Source |
| CVE-2017-12175 | redhat_vex | 6: XSS in discovery rule filter autocomplete functionality | fixed: 1110 | 2026-06-30T11:40:33+00:00 | Vulnerability · Source |