VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224336 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-48074 | redhat_vex | openexr: OpenEXR memory exhaustion | known not affected: 24 | 2026-06-30T07:56:00+00:00 | Vulnerability · Source |
| CVE-2025-48073 | redhat_vex | openexr: OpenEXR NULL pointer dereference | known not affected: 24 | 2026-06-30T07:55:57+00:00 | Vulnerability · Source |
| CVE-2025-46835 | redhat_vex | git: Git GUI can create and overwrite files for which the user has write permission | fixed: 150 known affected: 34 | 2026-06-30T07:55:56+00:00 | Vulnerability · Source |
| CVE-2025-43964 | redhat_vex | LibRaw: Improper Validation of Specified Quantity in Input in LibRaw | known affected: 16 | 2026-06-30T07:55:52+00:00 | Vulnerability · Source |
| CVE-2025-43963 | redhat_vex | LibRaw: out-of-buffer access | known affected: 16 | 2026-06-30T07:55:49+00:00 | Vulnerability · Source |
| CVE-2025-43962 | redhat_vex | LibRaw: Out-of-Bounds Read in LibRaw's phase_one_correct Function | known affected: 16 | 2026-06-30T07:55:48+00:00 | Vulnerability · Source |
| CVE-2025-43961 | redhat_vex | LibRaw: Out-of-Bounds Read in Fujifilm 0xf00c Tag Parser in LibRaw | known affected: 16 | 2026-06-30T07:52:03+00:00 | Vulnerability · Source |
| CVE-2024-10977 | redhat_vex | postgresql: PostgreSQL libpq retains an error message from man-in-the-middle | known affected: 149 | 2026-06-30T07:52:00+00:00 | Vulnerability · Source |
| CVE-2024-43802 | redhat_vex | vim: Heap Buffer Overflow in Vim's Typeahead Buffer Handling | known affected: 33 | 2026-06-30T07:51:58+00:00 | Vulnerability · Source |
| CVE-2024-45619 | redhat_vex | libopensc: Incorrect handling length of buffers or files in libopensc | known affected: 8 | 2026-06-30T07:51:52+00:00 | Vulnerability · Source |
| CVE-2024-46901 | redhat_vex | Subversion: Apache Subversion: mod_dav_svn denial-of-service via control characters in paths | known affected: 73 | 2026-06-30T07:51:48+00:00 | Vulnerability · Source |
| CVE-2024-45306 | redhat_vex | vim: heap-buffer-overflow in Vim | known affected: 33 | 2026-06-30T07:51:46+00:00 | Vulnerability · Source |
| CVE-2024-56433 | redhat_vex | shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise | fixed: 103 known affected: 7 known not affected: 24 | 2026-06-30T07:49:28+00:00 | Vulnerability · Source |
| CVE-2024-9506 | redhat_vex | vue: Regular Expression Denial of Service (ReDoS) | known affected: 30 | 2026-06-30T07:49:26+00:00 | Vulnerability · Source |
| CVE-2024-9026 | redhat_vex | php: PHP-FPM Log Manipulation Vulnerability | fixed: 1303 known affected: 99 | 2026-06-30T07:49:26+00:00 | Vulnerability · Source |
| CVE-2026-58058 | redhat_vex | nmap: Nmap: Denial of Service via crafted IPv6 response | known affected: 12 | 2026-06-30T07:48:54+00:00 | Vulnerability · Source |
| CVE-2026-11611 | redhat_vex | 389-ds-base: 389-ds-base: Content Sync plugin unbounded queue growth and race conditions | known affected: 29 known not affected: 4 | 2026-06-30T07:48:49+00:00 | Vulnerability · Source |
| CVE-2026-11787 | redhat_vex | 389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing | known affected: 33 | 2026-06-30T07:48:49+00:00 | Vulnerability · Source |
| CVE-2026-11785 | redhat_vex | 389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in SSO token handler | known affected: 15 known not affected: 18 | 2026-06-30T07:44:31+00:00 | Vulnerability · Source |
| CVE-2026-53267 | redhat_vex | kernel: netfilter: nft_ct: bail out on template ct in get eval | known affected: 260 known not affected: 14 | 2026-06-30T07:25:04+00:00 | Vulnerability · Source |
| CVE-2026-53265 | redhat_vex | kernel: dm cache policy smq: check allocation under invalidate lock | known affected: 274 | 2026-06-30T07:25:00+00:00 | Vulnerability · Source |
| CVE-2026-34445 | redhat_vex | ONNX: ONNX: Denial of Service and potential information disclosure via malicious model metadata | known affected: 15 | 2026-06-30T07:24:59+00:00 | Vulnerability · Source |
| CVE-2026-1525 | redhat_vex | undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers | fixed: 326 known affected: 10 known not affected: 96 | 2026-06-30T07:24:49+00:00 | Vulnerability · Source |
| CVE-2025-62164 | redhat_vex | vllm: VLLM deserialization vulnerability leading to DoS and potential RCE | fixed: 30 known affected: 4 known not affected: 669 | 2026-06-30T07:24:16+00:00 | Vulnerability · Source |
| CVE-2025-14925 | redhat_vex | accelerate: Hugging Face Accelerate: Remote Code Execution via Deserialization of Untrusted Data | fixed: 35 known affected: 23 known not affected: 501 | 2026-06-30T06:58:13+00:00 | Vulnerability · Source |
| CVE-2026-49271 | redhat_vex | libheif: libheif: Denial of Service via crafted HEIF file due to integer wrap-around | known not affected: 1 | 2026-06-30T06:45:01+00:00 | Vulnerability · Source |
| CVE-2026-13503 | redhat_vex | antlr: ANTLR4: antlr ANTLR4: Path traversal via manipulation of getImportedVocabFile function | known affected: 35 | 2026-06-30T06:23:31+00:00 | Vulnerability · Source |
| CVE-2025-61664 | redhat_vex | grub2: Missing unregister call for normal_exit command may lead to use-after-free | known affected: 74 | 2026-06-30T06:01:50+00:00 | Vulnerability · Source |
| CVE-2025-61663 | redhat_vex | grub2: Missing unregister call for normal commands may lead to use-after-free | known affected: 74 | 2026-06-30T06:01:48+00:00 | Vulnerability · Source |
| CVE-2025-61662 | redhat_vex | grub2: Missing unregister call for gettext command may lead to use-after-free | fixed: 516 known not affected: 71 | 2026-06-30T06:01:45+00:00 | Vulnerability · Source |
| CVE-2025-61661 | redhat_vex | grub2: grub2: Out-of-bounds write via malicious USB device | known affected: 74 | 2026-06-30T06:01:43+00:00 | Vulnerability · Source |
| CVE-2025-59089 | redhat_vex | python-kdcproxy: Remote DoS via unbounded TCP upstream buffering | fixed: 713 | 2026-06-30T06:01:40+00:00 | Vulnerability · Source |
| CVE-2025-54771 | redhat_vex | grub2: Use-after-free in grub_file_close() | known affected: 74 | 2026-06-30T06:01:37+00:00 | Vulnerability · Source |
| CVE-2025-54770 | redhat_vex | grub2: Use-after-free in net_set_vlan | known affected: 74 | 2026-06-30T06:01:35+00:00 | Vulnerability · Source |
| CVE-2025-47712 | redhat_vex | nbd: nbdkit: Integer overflow triggers an assertion resulting in Denial of Service | known affected: 120 | 2026-06-30T06:01:33+00:00 | Vulnerability · Source |
| CVE-2025-47711 | redhat_vex | nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a Denial of Service | known affected: 120 | 2026-06-30T06:01:33+00:00 | Vulnerability · Source |
| CVE-2025-46421 | redhat_vex | libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host when being redirected by a server | fixed: 279 known affected: 6 | 2026-06-30T06:01:27+00:00 | Vulnerability · Source |
| CVE-2025-46420 | redhat_vex | libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c | fixed: 261 known affected: 6 known not affected: 4 | 2026-06-30T06:01:24+00:00 | Vulnerability · Source |
| CVE-2025-46400 | redhat_vex | xfig: fig2dev segmentation fault in read_arcobject | known affected: 6 | 2026-06-30T06:01:20+00:00 | Vulnerability · Source |
| CVE-2025-46399 | redhat_vex | xfig: transfig: Fig2dev Segmentation Fault Vulnerability | known affected: 6 | 2026-06-30T06:01:18+00:00 | Vulnerability · Source |
| CVE-2025-46398 | redhat_vex | xfig: fig2dev stack-overflow via read_objects | known affected: 6 | 2026-06-30T06:01:15+00:00 | Vulnerability · Source |
| CVE-2025-46397 | redhat_vex | xfig: xfig: Stack-overflow allows possible code execution via local input manipulation | fixed: 52 known affected: 2 | 2026-06-30T06:01:14+00:00 | Vulnerability · Source |
| CVE-2026-20644 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T05:56:19+00:00 | Vulnerability · Source |
| CVE-2026-0891 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 | fixed: 320 known affected: 7 | 2026-06-30T05:56:04+00:00 | Vulnerability · Source |
| CVE-2026-0878 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component | fixed: 320 known affected: 7 | 2026-06-30T05:55:52+00:00 | Vulnerability · Source |
| CVE-2025-69534 | redhat_vex | python-markdown: denial of service via malformed HTML-like sequences | fixed: 52 known affected: 7 known not affected: 1337 | 2026-06-30T05:55:42+00:00 | Vulnerability · Source |
| CVE-2026-31228 | redhat_vex | adversarial-robustness-toolbox: kubeflow: Adversarial Robustness Toolbox (ART) Kubeflow: Remote code execution via unsanitized user input | known affected: 4 | 2026-06-30T05:52:55+00:00 | Vulnerability · Source |
| CVE-2026-2793 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 | fixed: 320 known affected: 8 | 2026-06-30T05:52:42+00:00 | Vulnerability · Source |
| CVE-2026-2773 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Web Audio component | fixed: 320 known affected: 8 | 2026-06-30T05:52:34+00:00 | Vulnerability · Source |
| CVE-2026-2771 | redhat_vex | firefox: thunderbird: Undefined behavior in the DOM: Core & HTML component | fixed: 320 known affected: 6 | 2026-06-30T05:52:33+00:00 | Vulnerability · Source |