VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
222203 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-15605 | redhat_vex | wandb: wandb: Information disclosure due to weak hash in artifact integrity validation | known affected: 3 | 2026-07-14T14:14:12+00:00 | Vulnerability · Source |
| CVE-2025-66382 | redhat_vex | libexpat: libexpat: Denial of service via crafted file processing | known affected: 44 | 2026-07-14T14:14:03+00:00 | Vulnerability · Source |
| CVE-2025-8224 | redhat_vex | binutils: Binutils BFD Null Pointer Dereference | known affected: 10 known not affected: 67 | 2026-07-14T14:14:03+00:00 | Vulnerability · Source |
| CVE-2025-26465 | redhat_vex | openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled | fixed: 285 known affected: 18 known not affected: 9 | 2026-07-14T14:13:58+00:00 | Vulnerability · Source |
| CVE-2025-46836 | redhat_vex | net-tools: net-tools Stack Buffer Overflow | known affected: 4 known not affected: 2 | 2026-07-14T14:13:56+00:00 | Vulnerability · Source |
| CVE-2025-7545 | redhat_vex | binutils: Binutils: Heap Buffer Overflow | known affected: 53 known not affected: 24 | 2026-07-14T14:13:05+00:00 | Vulnerability · Source |
| CVE-2026-23103 | redhat_vex | kernel: ipvlan: Make the addrs_lock be per port | known affected: 232 known not affected: 42 | 2026-07-14T14:13:03+00:00 | Vulnerability · Source |
| CVE-2026-22992 | redhat_vex | kernel: libceph: return the handler error from mon_handle_auth_done() | known affected: 232 known not affected: 42 | 2026-07-14T14:13:02+00:00 | Vulnerability · Source |
| CVE-2026-22980 | redhat_vex | kernel: nfsd: provide locking for v4_end_grace | known affected: 274 | 2026-07-14T14:12:58+00:00 | Vulnerability · Source |
| CVE-2026-41080 | redhat_vex | libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML | fixed: 3 known affected: 21 | 2026-07-14T14:07:47+00:00 | Vulnerability · Source |
| CVE-2026-23273 | redhat_vex | kernel: macvlan: observe an RCU grace period in macvlan_common_newlink() error path | known affected: 14 known not affected: 260 | 2026-07-14T14:07:45+00:00 | Vulnerability · Source |
| CVE-2026-46174 | redhat_vex | kernel: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache | known affected: 260 known not affected: 14 | 2026-07-14T14:07:44+00:00 | Vulnerability · Source |
| CVE-2026-43057 | redhat_vex | kernel: net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback | known affected: 14 known not affected: 260 | 2026-07-14T14:07:40+00:00 | Vulnerability · Source |
| CVE-2026-51537 | redhat_vex | OpENer: OpENer: Out-of-bounds read via malformed ForwardOpen requests | known affected: 2 | 2026-07-14T14:06:01+00:00 | Vulnerability · Source |
| CVE-2026-15416 | redhat_vex | argo-cd: Argo CD unauthenticated remote code execution in repo-server via GenerateManifest gRPC endpoint | known affected: 7 known not affected: 5 | 2026-07-14T14:00:52+00:00 | Vulnerability · Source |
| CVE-2026-58472 | redhat_vex | wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute | known affected: 9 | 2026-07-14T13:56:09+00:00 | Vulnerability · Source |
| CVE-2026-25500 | redhat_vex | rubygem-rack: Rack stored XSS in Rack::Directory | known affected: 54 | 2026-07-14T13:36:02+00:00 | Vulnerability · Source |
| CVE-2026-40356 | redhat_vex | krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read | fixed: 632 known affected: 17 under investigation: 1 | 2026-07-14T13:31:48+00:00 | Vulnerability · Source |
| CVE-2026-39823 | redhat_vex | html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content | fixed: 8 known affected: 370 under investigation: 17 | 2026-07-14T13:31:41+00:00 | Vulnerability · Source |
| CVE-2024-24855 | redhat_vex | kernel: Race condition in lpfc_unregister_fcf_rescan() in scsi/lpfc/lpfc_hbadisc.c | known affected: 198 | 2026-07-14T13:25:30+00:00 | Vulnerability · Source |
| CVE-2025-3198 | redhat_vex | binutils: GNU Binutils objdump bucomm.c display_info memory leak | known affected: 67 | 2026-07-14T13:25:27+00:00 | Vulnerability · Source |
| CVE-2023-6780 | redhat_vex | glibc: integer overflow in __vsyslog_internal() | known not affected: 452 | 2026-07-14T13:25:26+00:00 | Vulnerability · Source |
| CVE-2026-42507 | redhat_vex | net/textproto: golang: Golang net/textproto: Misleading error messages via input injection | fixed: 75 known affected: 376 under investigation: 17 | 2026-07-14T13:25:21+00:00 | Vulnerability · Source |
| CVE-2026-39825 | redhat_vex | net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls | fixed: 8 known affected: 349 under investigation: 17 | 2026-07-14T13:25:17+00:00 | Vulnerability · Source |
| CVE-2025-5245 | redhat_vex | binutils: GNU Binutils objdump debug.c debug_type_samep memory corruption | known affected: 77 | 2026-07-14T13:23:16+00:00 | Vulnerability · Source |
| CVE-2023-4527 | redhat_vex | glibc: Stack read overflow in getaddrinfo in no-aaaa mode | fixed: 2031 known not affected: 21 | 2026-07-14T13:23:13+00:00 | Vulnerability · Source |
| CVE-2023-4806 | redhat_vex | glibc: potential use-after-free in getaddrinfo() | fixed: 3046 known affected: 21 | 2026-07-14T13:23:03+00:00 | Vulnerability · Source |
| CVE-2024-12243 | redhat_vex | gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS | fixed: 304 known affected: 19 | 2026-07-14T13:22:54+00:00 | Vulnerability · Source |
| CVE-2026-59674 | redhat_vex | suricata: Suricata: Privilege escalation via symbolic link following | known not affected: 1 | 2026-07-14T13:17:29+00:00 | Vulnerability · Source |
| CVE-2026-42502 | redhat_vex | golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering | fixed: 108 known affected: 569 known not affected: 16 under investigation: 2 | 2026-07-14T13:14:26+00:00 | Vulnerability · Source |
| CVE-2026-39826 | redhat_vex | html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping | fixed: 8 known affected: 361 under investigation: 17 | 2026-07-14T13:13:58+00:00 | Vulnerability · Source |
| CVE-2026-33814 | redhat_vex | net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame | fixed: 216 known affected: 100 known not affected: 118 under investigation: 17 | 2026-07-14T13:13:42+00:00 | Vulnerability · Source |
| CVE-2023-6779 | redhat_vex | glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() | known not affected: 452 | 2026-07-14T13:13:24+00:00 | Vulnerability · Source |
| CVE-2023-6246 | redhat_vex | glibc: heap-based buffer overflow in __vsyslog_internal() | known not affected: 452 | 2026-07-14T13:12:54+00:00 | Vulnerability · Source |
| CVE-2024-6387 | redhat_vex | openssh: regreSSHion - race condition in SSH allows RCE/DoS | fixed: 275 known not affected: 1985 | 2026-07-14T13:11:55+00:00 | Vulnerability · Source |
| CVE-2026-40372 | redhat_vex | ASP.NET Core: ASP.NET: ASP.NET Core: Privilege escalation via improper cryptographic signature verification | known not affected: 47 | 2026-07-14T13:07:30+00:00 | Vulnerability · Source |
| CVE-2025-47911 | redhat_vex | golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html | fixed: 140 known affected: 577 known not affected: 95 under investigation: 1 | 2026-07-14T13:01:55+00:00 | Vulnerability · Source |
| CVE-2026-46598 | redhat_vex | golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input | fixed: 108 known affected: 165 known not affected: 16 under investigation: 3 | 2026-07-14T13:01:36+00:00 | Vulnerability · Source |
| CVE-2026-39827 | redhat_vex | golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings | fixed: 108 known affected: 8 known not affected: 16 under investigation: 318 | 2026-07-14T13:01:33+00:00 | Vulnerability · Source |
| CVE-2026-42506 | redhat_vex | golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing | fixed: 144 known affected: 611 known not affected: 103 under investigation: 2 | 2026-07-14T12:57:18+00:00 | Vulnerability · Source |
| CVE-2026-39817 | redhat_vex | cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction | under investigation: 17 | 2026-07-14T12:57:17+00:00 | Vulnerability · Source |
| CVE-2025-58190 | redhat_vex | golang.org/x/net/html: Infinite parsing loop in golang.org/x/net | fixed: 36 known affected: 326 known not affected: 189 under investigation: 1 | 2026-07-14T12:52:44+00:00 | Vulnerability · Source |
| CVE-2026-13325 | redhat_vex | virt-handler-rhel9: kubevirt: kubevirt: DisableTLS migration setting removes authentication, exposing unauthenticated virtqemud proxy on all interfaces | known affected: 1 known not affected: 1 | 2026-07-14T12:46:33+00:00 | Vulnerability · Source |
| CVE-2026-12482 | redhat_vex | keras: Keras: Arbitrary File Operations via Malicious Tar Archive Processing | known affected: 9 | 2026-07-14T12:32:03+00:00 | Vulnerability · Source |
| CVE-2026-58470 | redhat_vex | wget: GNU Wget: Integer overflow in Content-Range header parsing causes download desynchronization | known affected: 9 | 2026-07-14T11:58:12+00:00 | Vulnerability · Source |
| CVE-2026-43304 | redhat_vex | kernel: libceph: define and enforce CEPH_MAX_KEY_LEN | known affected: 260 known not affected: 14 | 2026-07-14T11:37:43+00:00 | Vulnerability · Source |
| CVE-2024-12224 | redhat_vex | idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded | known affected: 88 known not affected: 84 | 2026-07-14T11:37:35+00:00 | Vulnerability · Source |
| CVE-2026-59857 | redhat_vex | vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding | fixed: 4 known affected: 33 | 2026-07-14T11:37:31+00:00 | Vulnerability · Source |
| CVE-2026-59858 | redhat_vex | vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion | fixed: 4 known affected: 33 | 2026-07-14T11:37:25+00:00 | Vulnerability · Source |
| CVE-2026-59856 | redhat_vex | vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion | fixed: 4 known affected: 33 | 2026-07-14T11:35:29+00:00 | Vulnerability · Source |