VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224337 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-2793 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 | fixed: 320 known affected: 8 | 2026-06-30T05:52:42+00:00 | Vulnerability · Source |
| CVE-2026-2773 | redhat_vex | firefox: thunderbird: Incorrect boundary conditions in the Web Audio component | fixed: 320 known affected: 8 | 2026-06-30T05:52:34+00:00 | Vulnerability · Source |
| CVE-2026-2771 | redhat_vex | firefox: thunderbird: Undefined behavior in the DOM: Core & HTML component | fixed: 320 known affected: 6 | 2026-06-30T05:52:33+00:00 | Vulnerability · Source |
| CVE-2026-2763 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript Engine component | fixed: 320 known affected: 6 | 2026-06-30T05:52:20+00:00 | Vulnerability · Source |
| CVE-2026-2758 | redhat_vex | firefox: thunderbird: Use-after-free in the JavaScript: GC component | fixed: 320 known affected: 8 | 2026-06-30T05:52:15+00:00 | Vulnerability · Source |
| CVE-2025-29087 | redhat_vex | sqlite: Integer Overflow in SQLite concat_ws Function | known affected: 50 known not affected: 36 | 2026-06-30T05:22:05+00:00 | Vulnerability · Source |
| CVE-2025-3580 | redhat_vex | grafana: Improper access control in the /api/org/users/ API endpoint | known affected: 21 | 2026-06-30T05:22:04+00:00 | Vulnerability · Source |
| CVE-2026-6658 | redhat_vex | nbconvert: nbconvert: Cross-site Scripting via unsanitized Mermaid output in HTML exports | known affected: 24 | 2026-06-30T05:21:50+00:00 | Vulnerability · Source |
| CVE-2026-4691 | redhat_vex | firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component | fixed: 320 known affected: 8 | 2026-06-30T05:19:39+00:00 | Vulnerability · Source |
| CVE-2026-4690 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component | fixed: 320 known affected: 8 | 2026-06-30T05:12:19+00:00 | Vulnerability · Source |
| CVE-2025-9901 | redhat_vex | libsoup: Improper Handling of HTTP Vary Header in libsoup Caching | known affected: 16 | 2026-06-30T04:35:12+00:00 | Vulnerability · Source |
| CVE-2024-12133 | redhat_vex | libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS | fixed: 470 known affected: 13 known not affected: 26 | 2026-06-30T04:35:11+00:00 | Vulnerability · Source |
| CVE-2026-52902 | redhat_vex | awxkit: path traversal via YAML !include directive | known affected: 2 under investigation: 10 | 2026-06-30T04:35:06+00:00 | Vulnerability · Source |
| CVE-2026-23536 | redhat_vex | feast: Unauthenticated Arbitrary File Read | known not affected: 14 | 2026-06-30T04:32:26+00:00 | Vulnerability · Source |
| CVE-2026-22859 | redhat_vex | freerdp: FreeRDP heap-buffer-overflow | fixed: 732 known affected: 5 | 2026-06-30T04:32:16+00:00 | Vulnerability · Source |
| CVE-2026-22858 | redhat_vex | freerdp: FreeRDP global-buffer-overflow | fixed: 732 known affected: 5 | 2026-06-30T04:32:15+00:00 | Vulnerability · Source |
| CVE-2026-22855 | redhat_vex | freerdp: FreeRDP heap-buffer-overflow | fixed: 716 known affected: 5 | 2026-06-30T04:32:07+00:00 | Vulnerability · Source |
| CVE-2026-22853 | redhat_vex | freerdp: FreeRDP heap-buffer-overflow | fixed: 195 known affected: 5 known not affected: 19 | 2026-06-30T04:32:06+00:00 | Vulnerability · Source |
| CVE-2026-22775 | redhat_vex | devalue: devalue: Denial of Service due to improper input validation | fixed: 2 known affected: 1 known not affected: 18 | 2026-06-30T04:32:04+00:00 | Vulnerability · Source |
| CVE-2026-22774 | redhat_vex | devalue: devalue: Denial of Service due to excessive resource consumption from untrusted input | fixed: 2 known affected: 1 known not affected: 18 | 2026-06-30T04:31:57+00:00 | Vulnerability · Source |
| CVE-2026-22771 | redhat_vex | envoyproxy/gateway: Envoy Gateway: Unauthorized access to secrets via Lua script credential leakage | known not affected: 2 | 2026-06-30T04:31:53+00:00 | Vulnerability · Source |
| CVE-2026-21945 | redhat_vex | openjdk: Enhance Certificate Checking (Oracle CPU 2026-01) | fixed: 3198 known affected: 45 | 2026-06-30T04:31:42+00:00 | Vulnerability · Source |
| CVE-2026-21932 | redhat_vex | openjdk: Enhance Handling of URIs (Oracle CPU 2026-01) | fixed: 5 known affected: 39 known not affected: 250 | 2026-06-30T04:31:38+00:00 | Vulnerability · Source |
| CVE-2026-0882 | redhat_vex | firefox: thunderbird: Use-after-free in the IPC component | fixed: 320 known affected: 7 | 2026-06-30T04:31:19+00:00 | Vulnerability · Source |
| CVE-2026-0881 | redhat_vex | firefox: Sandbox escape in the Messaging System component | known not affected: 12 | 2026-06-30T04:31:12+00:00 | Vulnerability · Source |
| CVE-2026-0532 | redhat_vex | Kibana: Kibana: Arbitrary file disclosure via specially crafted connector configuration | known affected: 1 known not affected: 6 | 2026-06-30T04:31:10+00:00 | Vulnerability · Source |
| CVE-2025-69264 | redhat_vex | pnpm: pnpm code execution | known not affected: 2 | 2026-06-30T04:31:07+00:00 | Vulnerability · Source |
| CVE-2025-68493 | redhat_vex | org.apache.struts: Apache Struts: Information disclosure and denial of service via missing XML validation | known affected: 1 known not affected: 16 | 2026-06-30T04:30:58+00:00 | Vulnerability · Source |
| CVE-2025-67268 | redhat_vex | gpsd: gpsd: Arbitrary code execution via heap-based out-of-bounds write in NMEA2000 packet handling | fixed: 79 | 2026-06-30T04:30:48+00:00 | Vulnerability · Source |
| CVE-2025-59057 | redhat_vex | react-router: @remix-run/router: React Router XSS Vulnerability | fixed: 26 known not affected: 1990 | 2026-06-30T04:30:48+00:00 | Vulnerability · Source |
| CVE-2025-23368 | redhat_vex | org.wildfly.core:wildfly-elytron-integration: Wildfly Elytron Brute Force Attack via CLI | fixed: 17 known affected: 5 known not affected: 245 | 2026-06-30T04:30:39+00:00 | Vulnerability · Source |
| CVE-2025-15514 | redhat_vex | Ollama: Ollama: Denial of Service via malformed image processing | known affected: 1 known not affected: 34 | 2026-06-30T04:30:37+00:00 | Vulnerability · Source |
| CVE-2025-14459 | redhat_vex | virt-cdi-controller: Unauthorized PVC Cloning via DataImportCron | fixed: 162 known not affected: 1 | 2026-06-30T04:30:35+00:00 | Vulnerability · Source |
| CVE-2024-4027 | redhat_vex | undertow: OutOfMemoryError in HttpServletRequestImpl.getParameterNames() can cause remote DoS attacks | known affected: 7 known not affected: 5 under investigation: 8 | 2026-06-30T04:30:31+00:00 | Vulnerability · Source |
| CVE-2026-25747 | redhat_vex | org.apache.camel/camel-leveldb: Apache Camel LevelDB: Arbitrary code execution via deserialization of untrusted data | known affected: 2 known not affected: 2 | 2026-06-30T04:17:18+00:00 | Vulnerability · Source |
| CVE-2026-25640 | redhat_vex | Pydantic AI: Pydantic AI: Arbitrary code execution and information disclosure via path traversal in web UI | known affected: 2 | 2026-06-30T04:17:10+00:00 | Vulnerability · Source |
| CVE-2026-25580 | redhat_vex | Pydantic AI: Pydantic AI: Information disclosure via Server-Side Request Forgery (SSRF) through malicious URLs in message history. | known affected: 2 | 2026-06-30T04:17:04+00:00 | Vulnerability · Source |
| CVE-2026-25536 | redhat_vex | @modelcontextprotocol/sdk: @modelcontextprotocol/sdk cross-client data leak | fixed: 4 known not affected: 102 | 2026-06-30T04:17:02+00:00 | Vulnerability · Source |
| CVE-2026-25506 | redhat_vex | MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery | fixed: 407 | 2026-06-30T04:16:57+00:00 | Vulnerability · Source |
| CVE-2026-25223 | redhat_vex | Fastify: Fastify: Validation bypass due to malformed Content-Type header leading to integrity impact | fixed: 13 known affected: 3 known not affected: 283 | 2026-06-30T04:16:51+00:00 | Vulnerability · Source |
| CVE-2026-25153 | redhat_vex | @backstage/plugin-techdocs-node: @backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks | fixed: 2 known affected: 1 known not affected: 4 | 2026-06-30T04:16:49+00:00 | Vulnerability · Source |
| CVE-2026-24882 | redhat_vex | GnuPG: GnuPG: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution | fixed: 66 known not affected: 12 | 2026-06-30T04:16:45+00:00 | Vulnerability · Source |
| CVE-2026-24881 | redhat_vex | GnuPG: GnuPG: Remote code execution and denial of service via crafted CMS EnvelopedData message | known affected: 3 known not affected: 12 | 2026-06-30T04:16:43+00:00 | Vulnerability · Source |
| CVE-2026-24834 | redhat_vex | containerd-shim-kata-v2: Kata Containers: Arbitrary code execution in guest virtual machine via file system modification | known affected: 2 known not affected: 1 | 2026-06-30T04:16:39+00:00 | Vulnerability · Source |
| CVE-2026-24747 | redhat_vex | pytorch: PyTorch: Arbitrary code execution via malicious checkpoint file loading | fixed: 1 known not affected: 214 | 2026-06-30T04:16:30+00:00 | Vulnerability · Source |
| CVE-2026-24708 | redhat_vex | openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova | fixed: 12 known affected: 30 known not affected: 5 | 2026-06-30T04:16:25+00:00 | Vulnerability · Source |
| CVE-2026-24678 | redhat_vex | freerdp: FreeRDP: Denial of Service via use after free in ecam_channel_write | fixed: 195 known affected: 5 known not affected: 19 | 2026-06-30T04:16:22+00:00 | Vulnerability · Source |
| CVE-2026-24660 | redhat_vex | LibRaw: LibRaw: Memory Corruption via Malicious File Processing | fixed: 96 known affected: 10 known not affected: 3 | 2026-06-30T04:16:20+00:00 | Vulnerability · Source |
| CVE-2026-24120 | redhat_vex | vm2: vm2: Arbitrary code execution due to sandbox escape vulnerability | known not affected: 2 | 2026-06-30T04:16:12+00:00 | Vulnerability · Source |
| CVE-2026-24118 | redhat_vex | vm2: vm2: Arbitrary code execution due to sandbox breakout | known affected: 1 known not affected: 1 | 2026-06-30T04:16:08+00:00 | Vulnerability · Source |