VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224265 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-6753 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the WebRTC component | fixed: 368 known affected: 8 | 2026-06-30T09:06:55+00:00 | Vulnerability · Source |
| CVE-2026-6751 | redhat_vex | firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component | fixed: 368 known affected: 8 | 2026-06-30T09:06:48+00:00 | Vulnerability · Source |
| CVE-2026-6750 | redhat_vex | firefox: thunderbird: Privilege escalation in the Graphics: WebRender component | fixed: 368 known affected: 8 | 2026-06-30T09:06:44+00:00 | Vulnerability · Source |
| CVE-2025-11234 | redhat_vex | qemu-kvm: VNC WebSocket handshake use-after-free | fixed: 1629 known affected: 5 known not affected: 15 | 2026-06-30T08:26:55+00:00 | Vulnerability · Source |
| CVE-2026-41989 | redhat_vex | Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext | fixed: 3 known affected: 15 known not affected: 6 | 2026-06-30T08:21:59+00:00 | Vulnerability · Source |
| CVE-2026-40080 | redhat_vex | cacti: open redirect via HTTP_REFERER substring check in auth_login_redirect | known not affected: 1 | 2026-06-30T08:18:22+00:00 | Vulnerability · Source |
| CVE-2026-11786 | redhat_vex | 389-ds-base: 389-ds-base: heap out-of-bounds read in LDIF parser str2entry_state_information_from_type() | known affected: 33 | 2026-06-30T07:57:45+00:00 | Vulnerability · Source |
| CVE-2024-7592 | redhat_vex | cpython: python: Uncontrolled CPU resource consumption when in http.cookies module | fixed: 179 known affected: 227 | 2026-06-30T07:57:26+00:00 | Vulnerability · Source |
| CVE-2025-23184 | redhat_vex | org.apache.cxf: Apache CXF: Denial of Service vulnerability with temporary files | fixed: 342 known affected: 14 known not affected: 36 | 2026-06-30T07:57:25+00:00 | Vulnerability · Source |
| CVE-2022-1733 | redhat_vex | vim: Heap-based Buffer Overflow in cindent.c | known not affected: 30 | 2026-06-30T07:57:19+00:00 | Vulnerability · Source |
| CVE-2022-1623 | redhat_vex | libtiff: out-of-bounds read in LZWDecode | known not affected: 21 | 2026-06-30T07:57:12+00:00 | Vulnerability · Source |
| CVE-2022-1769 | redhat_vex | vim: buffer over-read in scriptfile.c | known not affected: 30 | 2026-06-30T07:57:10+00:00 | Vulnerability · Source |
| CVE-2022-1622 | redhat_vex | libtiff: out-of-bounds read in LZWDecode | known not affected: 21 | 2026-06-30T07:57:06+00:00 | Vulnerability · Source |
| CVE-2023-25815 | redhat_vex | git: malicious placement of crafted messages when git was compiled with runtime prefix | fixed: 356 known affected: 32 | 2026-06-30T07:57:02+00:00 | Vulnerability · Source |
| CVE-2025-58160 | redhat_vex | tracing-subscriber: Tracing log pollution | known affected: 203 | 2026-06-30T07:56:45+00:00 | Vulnerability · Source |
| CVE-2025-55304 | redhat_vex | exiv2: Exiv2 has quadratic performance in ICC profile parsing | known affected: 28 | 2026-06-30T07:56:39+00:00 | Vulnerability · Source |
| CVE-2025-55158 | redhat_vex | vim: Vim double-free vulnerability during Vim9 script import operations | known not affected: 33 | 2026-06-30T07:56:38+00:00 | Vulnerability · Source |
| CVE-2025-55157 | redhat_vex | vim: Vim heap use-after-free vulnerability when processing recursive tuple data types | known not affected: 33 | 2026-06-30T07:56:33+00:00 | Vulnerability · Source |
| CVE-2025-54350 | redhat_vex | iperf3: iperf Authentication Decode Failure | known affected: 9 | 2026-06-30T07:56:26+00:00 | Vulnerability · Source |
| CVE-2025-54080 | redhat_vex | exiv2: Exiv2 Segmentation Faults | known affected: 28 | 2026-06-30T07:56:24+00:00 | Vulnerability · Source |
| CVE-2025-52968 | redhat_vex | xdg-utils: xdg-open bypassing SameSite=Strict | known affected: 12 | 2026-06-30T07:56:18+00:00 | Vulnerability · Source |
| CVE-2025-52520 | redhat_vex | tomcat: Apache Tomcat denial of service | fixed: 142 known affected: 28 | 2026-06-30T07:56:16+00:00 | Vulnerability · Source |
| CVE-2025-49125 | redhat_vex | tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources | fixed: 142 known affected: 48 | 2026-06-30T07:56:15+00:00 | Vulnerability · Source |
| CVE-2025-50422 | redhat_vex | poppler: Poppler crash on malformed input | known affected: 59 | 2026-06-30T07:56:13+00:00 | Vulnerability · Source |
| CVE-2025-49005 | redhat_vex | nextjs: Next.js cache poisoning | known affected: 56 | 2026-06-30T07:56:07+00:00 | Vulnerability · Source |
| CVE-2025-48924 | redhat_vex | commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang | fixed: 5 known affected: 417 | 2026-06-30T07:56:05+00:00 | Vulnerability · Source |
| CVE-2025-48708 | redhat_vex | Ghostscript: Ghostscript Argument Sanitization Vulnerability | known affected: 39 | 2026-06-30T07:56:02+00:00 | Vulnerability · Source |
| CVE-2025-48074 | redhat_vex | openexr: OpenEXR memory exhaustion | known not affected: 24 | 2026-06-30T07:56:00+00:00 | Vulnerability · Source |
| CVE-2025-48073 | redhat_vex | openexr: OpenEXR NULL pointer dereference | known not affected: 24 | 2026-06-30T07:55:57+00:00 | Vulnerability · Source |
| CVE-2025-46835 | redhat_vex | git: Git GUI can create and overwrite files for which the user has write permission | fixed: 150 known affected: 34 | 2026-06-30T07:55:56+00:00 | Vulnerability · Source |
| CVE-2025-43964 | redhat_vex | LibRaw: Improper Validation of Specified Quantity in Input in LibRaw | known affected: 16 | 2026-06-30T07:55:52+00:00 | Vulnerability · Source |
| CVE-2025-43963 | redhat_vex | LibRaw: out-of-buffer access | known affected: 16 | 2026-06-30T07:55:49+00:00 | Vulnerability · Source |
| CVE-2025-43962 | redhat_vex | LibRaw: Out-of-Bounds Read in LibRaw's phase_one_correct Function | known affected: 16 | 2026-06-30T07:55:48+00:00 | Vulnerability · Source |
| CVE-2025-43961 | redhat_vex | LibRaw: Out-of-Bounds Read in Fujifilm 0xf00c Tag Parser in LibRaw | known affected: 16 | 2026-06-30T07:52:03+00:00 | Vulnerability · Source |
| CVE-2024-10977 | redhat_vex | postgresql: PostgreSQL libpq retains an error message from man-in-the-middle | known affected: 149 | 2026-06-30T07:52:00+00:00 | Vulnerability · Source |
| CVE-2024-43802 | redhat_vex | vim: Heap Buffer Overflow in Vim's Typeahead Buffer Handling | known affected: 33 | 2026-06-30T07:51:58+00:00 | Vulnerability · Source |
| CVE-2024-45619 | redhat_vex | libopensc: Incorrect handling length of buffers or files in libopensc | known affected: 8 | 2026-06-30T07:51:52+00:00 | Vulnerability · Source |
| CVE-2024-46901 | redhat_vex | Subversion: Apache Subversion: mod_dav_svn denial-of-service via control characters in paths | known affected: 73 | 2026-06-30T07:51:48+00:00 | Vulnerability · Source |
| CVE-2024-45306 | redhat_vex | vim: heap-buffer-overflow in Vim | known affected: 33 | 2026-06-30T07:51:46+00:00 | Vulnerability · Source |
| CVE-2024-56433 | redhat_vex | shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise | fixed: 103 known affected: 7 known not affected: 24 | 2026-06-30T07:49:28+00:00 | Vulnerability · Source |
| CVE-2024-9506 | redhat_vex | vue: Regular Expression Denial of Service (ReDoS) | known affected: 30 | 2026-06-30T07:49:26+00:00 | Vulnerability · Source |
| CVE-2024-9026 | redhat_vex | php: PHP-FPM Log Manipulation Vulnerability | fixed: 1303 known affected: 99 | 2026-06-30T07:49:26+00:00 | Vulnerability · Source |
| CVE-2026-58058 | redhat_vex | nmap: Nmap: Denial of Service via crafted IPv6 response | known affected: 12 | 2026-06-30T07:48:54+00:00 | Vulnerability · Source |
| CVE-2026-11611 | redhat_vex | 389-ds-base: 389-ds-base: Content Sync plugin unbounded queue growth and race conditions | known affected: 29 known not affected: 4 | 2026-06-30T07:48:49+00:00 | Vulnerability · Source |
| CVE-2026-11787 | redhat_vex | 389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing | known affected: 33 | 2026-06-30T07:48:49+00:00 | Vulnerability · Source |
| CVE-2026-11785 | redhat_vex | 389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in SSO token handler | known affected: 15 known not affected: 18 | 2026-06-30T07:44:31+00:00 | Vulnerability · Source |
| CVE-2026-53267 | redhat_vex | kernel: netfilter: nft_ct: bail out on template ct in get eval | known affected: 260 known not affected: 14 | 2026-06-30T07:25:04+00:00 | Vulnerability · Source |
| CVE-2026-53265 | redhat_vex | kernel: dm cache policy smq: check allocation under invalidate lock | known affected: 274 | 2026-06-30T07:25:00+00:00 | Vulnerability · Source |
| CVE-2026-34445 | redhat_vex | ONNX: ONNX: Denial of Service and potential information disclosure via malicious model metadata | known affected: 15 | 2026-06-30T07:24:59+00:00 | Vulnerability · Source |
| CVE-2026-1525 | redhat_vex | undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers | fixed: 326 known affected: 10 known not affected: 96 | 2026-06-30T07:24:49+00:00 | Vulnerability · Source |