VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
223081 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-31392 | redhat_vex | kernel: smb: client: fix krb5 mount with username option | known affected: 232 known not affected: 42 | 2026-06-30T11:46:40+00:00 | Vulnerability · Source |
| CVE-2026-31393 | redhat_vex | kernel: Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access | known affected: 260 known not affected: 14 | 2026-06-30T11:46:39+00:00 | Vulnerability · Source |
| CVE-2026-31389 | redhat_vex | kernel: spi: fix use-after-free on controller registration failure | known affected: 184 known not affected: 90 | 2026-06-30T11:46:36+00:00 | Vulnerability · Source |
| CVE-2026-28377 | redhat_vex | Grafana Tempo: Grafana Tempo: Information disclosure of S3 encryption key via status config endpoint | known affected: 21 | 2026-06-30T11:46:34+00:00 | Vulnerability · Source |
| CVE-2026-28375 | redhat_vex | grafana: Grafana: Denial of Service via testdata data-source | known affected: 21 | 2026-06-30T11:46:31+00:00 | Vulnerability · Source |
| CVE-2026-27879 | redhat_vex | Grafana: Grafana: Denial of Service via resample query | known affected: 21 | 2026-06-30T11:46:30+00:00 | Vulnerability · Source |
| CVE-2026-27855 | redhat_vex | dovecot: Dovecot: Replay attack allows unauthorized login via observed One-Time Password (OTP) exchange | known affected: 12 known not affected: 18 | 2026-06-30T11:46:29+00:00 | Vulnerability · Source |
| CVE-2026-27859 | redhat_vex | dovecot: Dovecot: Denial of Service via excessive RFC 2231 MIME parameters | known affected: 30 | 2026-06-30T11:46:26+00:00 | Vulnerability · Source |
| CVE-2026-27456 | redhat_vex | util-linux: TOCTOU in the mount program when setting up loop devices | fixed: 3 known affected: 47 known not affected: 16 | 2026-06-30T11:46:24+00:00 | Vulnerability · Source |
| CVE-2026-27447 | redhat_vex | cups: OpenPrinting CUPS: Authorization bypass via case-insensitive username comparison | fixed: 4 known affected: 41 | 2026-06-30T11:46:22+00:00 | Vulnerability · Source |
| CVE-2026-26962 | redhat_vex | rack: Rack: Header injection and response splitting via incorrect multipart header parsing | known affected: 50 | 2026-06-30T11:46:17+00:00 | Vulnerability · Source |
| CVE-2026-24450 | redhat_vex | LibRaw: LibRaw: Arbitrary code execution via a specially crafted malicious file | fixed: 132 known affected: 7 | 2026-06-30T11:46:16+00:00 | Vulnerability · Source |
| CVE-2026-23466 | redhat_vex | kernel: drm/xe: Open-code GGTT MMIO access protection | known affected: 184 known not affected: 90 | 2026-06-30T11:46:13+00:00 | Vulnerability · Source |
| CVE-2026-23462 | redhat_vex | kernel: Bluetooth: HIDP: Fix possible UAF | known affected: 274 | 2026-06-30T11:46:12+00:00 | Vulnerability · Source |
| CVE-2026-23461 | redhat_vex | kernel: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user | known affected: 184 known not affected: 90 | 2026-06-30T11:46:08+00:00 | Vulnerability · Source |
| CVE-2026-23457 | redhat_vex | kernel: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() | known affected: 274 | 2026-06-30T11:46:08+00:00 | Vulnerability · Source |
| CVE-2026-23456 | redhat_vex | kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case | known affected: 274 | 2026-06-30T11:46:06+00:00 | Vulnerability · Source |
| CVE-2026-23451 | redhat_vex | kernel: bonding: prevent potential infinite loop in bond_header_parse() | known affected: 14 known not affected: 260 | 2026-06-30T11:46:03+00:00 | Vulnerability · Source |
| CVE-2026-23450 | redhat_vex | kernel: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() | known affected: 232 known not affected: 42 | 2026-06-30T11:46:02+00:00 | Vulnerability · Source |
| CVE-2026-23449 | redhat_vex | kernel: net/sched: teql: Fix double-free in teql_master_xmit | known affected: 246 known not affected: 28 | 2026-06-30T11:45:58+00:00 | Vulnerability · Source |
| CVE-2026-23445 | redhat_vex | kernel: igc: fix page fault in XDP TX timestamps handling | known affected: 184 known not affected: 90 | 2026-06-30T11:45:57+00:00 | Vulnerability · Source |
| CVE-2026-23444 | redhat_vex | kernel: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure | known affected: 246 known not affected: 28 | 2026-06-30T11:45:55+00:00 | Vulnerability · Source |
| CVE-2026-23440 | redhat_vex | kernel: net/mlx5e: Fix race condition during IPSec ESN update | known affected: 198 known not affected: 76 | 2026-06-30T11:45:53+00:00 | Vulnerability · Source |
| CVE-2026-23437 | redhat_vex | kernel: net: shaper: protect late read accesses to the hierarchy | known affected: 184 known not affected: 90 | 2026-06-30T11:45:52+00:00 | Vulnerability · Source |
| CVE-2026-23419 | redhat_vex | kernel: net/rds: Fix circular locking dependency in rds_tcp_tune | known affected: 14 known not affected: 260 | 2026-06-30T11:45:48+00:00 | Vulnerability · Source |
| CVE-2026-23414 | redhat_vex | kernel: tls: Purge async_hold in tls_decrypt_async_wait() | known affected: 184 known not affected: 90 | 2026-06-30T11:45:45+00:00 | Vulnerability · Source |
| CVE-2026-23413 | redhat_vex | kernel: clsact: Fix use-after-free in init/destroy rollback asymmetry | known affected: 184 known not affected: 90 | 2026-06-30T11:45:43+00:00 | Vulnerability · Source |
| CVE-2026-23412 | redhat_vex | kernel: netfilter: bpf: defer hook memory release until rcu readers are done | known affected: 184 known not affected: 90 | 2026-06-30T11:45:42+00:00 | Vulnerability · Source |
| CVE-2026-21724 | redhat_vex | Grafana OSS: Grafana OSS: Authorization bypass allows modification of protected webhook URLs | known not affected: 21 | 2026-06-30T11:45:41+00:00 | Vulnerability · Source |
| CVE-2026-21714 | redhat_vex | Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames | fixed: 111 known affected: 47 | 2026-06-30T11:45:40+00:00 | Vulnerability · Source |
| CVE-2026-21717 | redhat_vex | nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash collisions | fixed: 127 known affected: 47 | 2026-06-30T11:45:37+00:00 | Vulnerability · Source |
| CVE-2026-21713 | redhat_vex | Node.js: Node.js: Information disclosure via timing oracle in HMAC verification | fixed: 111 known affected: 47 | 2026-06-30T11:45:34+00:00 | Vulnerability · Source |
| CVE-2026-21712 | redhat_vex | Node.js: Node.js: Denial of Service via malformed Internationalized Domain Name processing | fixed: 111 known affected: 47 | 2026-06-30T11:45:32+00:00 | Vulnerability · Source |
| CVE-2026-21711 | redhat_vex | Node.js: Node.js: Unauthorized inter-process communication due to missing Unix Domain Socket permission checks | fixed: 111 known not affected: 47 | 2026-06-30T11:45:31+00:00 | Vulnerability · Source |
| CVE-2026-20884 | redhat_vex | LibRaw: LibRaw: Arbitrary code execution via integer overflow in deflate_dng_load_raw | known affected: 7 known not affected: 3 | 2026-06-30T11:45:26+00:00 | Vulnerability · Source |
| CVE-2026-20709 | redhat_vex | microcode_ctl: Intel Processors: Escalation of privilege due to default cryptographic key | known affected: 9 | 2026-06-30T11:45:24+00:00 | Vulnerability · Source |
| CVE-2026-1839 | redhat_vex | transformers: HuggingFace Transformers: Arbitrary code execution via malicious checkpoint file | known affected: 53 | 2026-06-30T11:45:21+00:00 | Vulnerability · Source |
| CVE-2026-0394 | redhat_vex | dovecot: Dovecot: Information disclosure and authentication bypass via path traversal | known affected: 12 known not affected: 18 | 2026-06-30T11:45:16+00:00 | Vulnerability · Source |
| CVE-2025-59031 | redhat_vex | dovecot: Dovecot: Information disclosure via specially crafted OOXML documents | known affected: 12 known not affected: 18 | 2026-06-30T11:45:15+00:00 | Vulnerability · Source |
| CVE-2025-59028 | redhat_vex | dovecot: Dovecot: Denial of Service via invalid SASL data | known affected: 30 | 2026-06-30T11:45:12+00:00 | Vulnerability · Source |
| CVE-2018-5741 | redhat_vex | bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies | fixed: 187 known affected: 7 known not affected: 21 | 2026-06-30T11:45:11+00:00 | Vulnerability · Source |
| CVE-2018-5738 | redhat_vex | bind: Improper handling of configuration allows all clients to perform recursive queries | known not affected: 44 | 2026-06-30T11:45:09+00:00 | Vulnerability · Source |
| CVE-2018-5737 | redhat_vex | bind: Interaction between NSEC aggresive negative caching and the serve-stale feature can cause a denial of service | known not affected: 44 | 2026-06-30T11:45:08+00:00 | Vulnerability · Source |
| CVE-2018-5733 | redhat_vex | dhcp: Reference count overflow in dhcpd allows denial of service | fixed: 156 known affected: 1 known not affected: 6 | 2026-06-30T11:45:07+00:00 | Vulnerability · Source |
| CVE-2018-5381 | redhat_vex | quagga: Infinite loop issue triggered by invalid OPEN message allows denial-of-service | known affected: 9 known not affected: 3 | 2026-06-30T11:45:06+00:00 | Vulnerability · Source |
| CVE-2018-5378 | redhat_vex | quagga: bgpd does not properly bounds check the data sent with a NOTIFY allowing leak of sensitive data or crash | known not affected: 12 | 2026-06-30T11:45:06+00:00 | Vulnerability · Source |
| CVE-2026-39881 | redhat_vex | vim: Vim: Arbitrary code execution via command injection in NetBeans interface | known affected: 33 | 2026-06-30T11:44:06+00:00 | Vulnerability · Source |
| CVE-2026-39865 | redhat_vex | axios: Axios: Denial of Service via HTTP/2 session cleanup logic state corruption | known affected: 118 | 2026-06-30T11:44:05+00:00 | Vulnerability · Source |
| CVE-2026-39395 | redhat_vex | github.com/sigstore/cosign: Cosign: Incorrect attestation verification due to malformed payloads or mismatched predicate types | known affected: 32 | 2026-06-30T11:44:03+00:00 | Vulnerability · Source |
| CVE-2026-39316 | redhat_vex | cups: CUPS: Denial of Service and potential arbitrary code execution via use-after-free vulnerability when deleting temporary printers. | fixed: 4 known affected: 41 | 2026-06-30T11:44:01+00:00 | Vulnerability · Source |