VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224337 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-24046 | redhat_vex | backstage/backend-defaults: backstage/plugin-scaffolder-backend: backstage/plugin-scaffolder-node: possible symlink path traversal in scaffolder actions | fixed: 2 known not affected: 4 | 2026-06-30T04:16:05+00:00 | Vulnerability · Source |
| CVE-2026-24031 | redhat_vex | dovecot: Dovecot: Authentication bypass and user enumeration due to cleared auth_username_chars configuration | known affected: 6 known not affected: 24 | 2026-06-30T04:16:02+00:00 | Vulnerability · Source |
| CVE-2026-24001 | redhat_vex | jsdiff: denial of service vulnerability in parsePatch and applyPatch | known affected: 1 | 2026-06-30T04:16:00+00:00 | Vulnerability · Source |
| CVE-2026-23960 | redhat_vex | argo-workflows: Argo Workflows: Privilege escalation and information disclosure via stored Cross-Site Scripting (XSS) | known affected: 14 | 2026-06-30T04:15:58+00:00 | Vulnerability · Source |
| CVE-2026-23883 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server | fixed: 460 known affected: 5 known not affected: 7 | 2026-06-30T04:15:55+00:00 | Vulnerability · Source |
| CVE-2026-23950 | redhat_vex | node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition | fixed: 40 known affected: 28 known not affected: 198 | 2026-06-30T04:15:55+00:00 | Vulnerability · Source |
| CVE-2026-23884 | redhat_vex | freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability | fixed: 667 known affected: 5 | 2026-06-30T04:15:54+00:00 | Vulnerability · Source |
| CVE-2026-23876 | redhat_vex | ImageMagick: ImageMagick: Arbitrary code execution via a crafted XBM image file | fixed: 51 known affected: 7 | 2026-06-30T04:15:49+00:00 | Vulnerability · Source |
| CVE-2026-23869 | redhat_vex | react-server-dom-parcel: react-server-dom-turbopack: react-server-dom-webpack: denial of service via specially crafted HTTP requests to Server Function endpoints | known not affected: 1 | 2026-06-30T04:15:45+00:00 | Vulnerability · Source |
| CVE-2026-23666 | redhat_vex | dotnet: .NET Framework: Denial of Service via Race Condition | known not affected: 133 | 2026-06-30T04:15:44+00:00 | Vulnerability · Source |
| CVE-2026-23534 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow | fixed: 390 known affected: 5 known not affected: 7 | 2026-06-30T04:15:40+00:00 | Vulnerability · Source |
| CVE-2026-23533 | redhat_vex | freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution | fixed: 667 known affected: 5 | 2026-06-30T04:15:35+00:00 | Vulnerability · Source |
| CVE-2026-23532 | redhat_vex | freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow | fixed: 667 known affected: 5 | 2026-06-30T04:15:31+00:00 | Vulnerability · Source |
| CVE-2026-23531 | redhat_vex | freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and potential code execution. | fixed: 667 known affected: 5 | 2026-06-30T04:15:26+00:00 | Vulnerability · Source |
| CVE-2026-23530 | redhat_vex | freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server. | fixed: 667 known affected: 5 | 2026-06-30T04:15:23+00:00 | Vulnerability · Source |
| CVE-2026-23111 | redhat_vex | kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check | fixed: 1503 known affected: 22 known not affected: 90 | 2026-06-30T04:15:16+00:00 | Vulnerability · Source |
| CVE-2026-23185 | redhat_vex | kernel: wifi: iwlwifi: mld: cancel mlo_scan_start_wk | known affected: 184 known not affected: 90 | 2026-06-30T04:15:16+00:00 | Vulnerability · Source |
| CVE-2026-23074 | redhat_vex | kernel: Linux kernel: Use-after-free in teql queueing discipline can lead to privilege escalation | fixed: 604 known not affected: 184 | 2026-06-30T04:15:10+00:00 | Vulnerability · Source |
| CVE-2026-22860 | redhat_vex | rubygem-rack: Rack Directory Traversal via Rack:Directory | known affected: 25 known not affected: 21 | 2026-06-30T04:15:08+00:00 | Vulnerability · Source |
| CVE-2026-22822 | redhat_vex | external-secrets: External Secrets Operator: Cross-Namespace Secret Disclosure via `getSecretKey` Function | known affected: 4 known not affected: 4 | 2026-06-30T04:15:04+00:00 | Vulnerability · Source |
| CVE-2026-22754 | redhat_vex | Spring Security: Spring Security: Authorization bypass due to incorrect servlet path matching | known not affected: 18 | 2026-06-30T04:14:59+00:00 | Vulnerability · Source |
| CVE-2026-22747 | redhat_vex | Spring Security: Spring Security: User impersonation via malformed X.509 certificate Common Name (CN) values | known not affected: 18 | 2026-06-30T04:14:55+00:00 | Vulnerability · Source |
| CVE-2026-22184 | redhat_vex | zlib: zlib: Arbitrary code execution via buffer overflow in untgz utility | known affected: 21 known not affected: 423 | 2026-06-30T04:14:51+00:00 | Vulnerability · Source |
| CVE-2026-22016 | redhat_vex | openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04) | fixed: 3262 known affected: 39 | 2026-06-30T04:14:50+00:00 | Vulnerability · Source |
| CVE-2026-21884 | redhat_vex | react-router: @remix-run/react: React Router SSR XSS in ScrollRestoration | fixed: 26 known not affected: 1990 | 2026-06-30T04:14:49+00:00 | Vulnerability · Source |
| CVE-2026-21863 | redhat_vex | valkey: Valkey: Denial of Service via invalid clusterbus packet | fixed: 55 | 2026-06-30T04:14:45+00:00 | Vulnerability · Source |
| CVE-2026-21720 | redhat_vex | grafana: Grafana: Denial of Service via resource exhaustion from avatar requests | known not affected: 23 | 2026-06-30T04:14:39+00:00 | Vulnerability · Source |
| CVE-2026-21710 | redhat_vex | Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header | fixed: 440 | 2026-06-30T04:14:36+00:00 | Vulnerability · Source |
| CVE-2026-21413 | redhat_vex | LibRaw: LibRaw: Arbitrary code execution via heap-based buffer overflow in lossless JPEG loading | fixed: 270 known affected: 10 | 2026-06-30T04:14:34+00:00 | Vulnerability · Source |
| CVE-2026-20911 | redhat_vex | LibRaw: LibRaw: Arbitrary Code Execution via specially crafted file | known affected: 10 known not affected: 6 | 2026-06-30T04:14:31+00:00 | Vulnerability · Source |
| CVE-2026-20889 | redhat_vex | LibRaw: LibRaw: Arbitrary code execution via specially crafted image file | fixed: 96 known affected: 10 known not affected: 3 | 2026-06-30T04:14:30+00:00 | Vulnerability · Source |
| CVE-2026-20736 | redhat_vex | gitea: Gitea Web Attachment Deletion: Cross-Repository Unauthorized Deletion via Missing Repo Ownership Check | known not affected: 9 | 2026-06-30T04:14:27+00:00 | Vulnerability · Source |
| CVE-2026-20664 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:14:25+00:00 | Vulnerability · Source |
| CVE-2026-20636 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:14:22+00:00 | Vulnerability · Source |
| CVE-2026-20635 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:14:21+00:00 | Vulnerability · Source |
| CVE-2026-20608 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:14:19+00:00 | Vulnerability · Source |
| CVE-2026-12992 | redhat_vex | Apicurio/apicurio-registry: apicurio-registry: SSRF via wsdl4j import dereference in WSDL FULL validation | known affected: 2 | 2026-06-30T04:14:17+00:00 | Vulnerability · Source |
| CVE-2026-12975 | redhat_vex | Apicurio/apicurio-registry: apicurio-registry: Unhardened SAXParser in content-type detection leads to blind XXE / SSRF / billion-laughs DoS | known affected: 2 | 2026-06-30T04:14:14+00:00 | Vulnerability · Source |
| CVE-2026-12773 | redhat_vex | litellm: BerriAI litellm: Improper authentication in MCP Proxy via UserAPIKeyAuth function | known affected: 1 known not affected: 5 | 2026-06-30T04:14:08+00:00 | Vulnerability · Source |
| CVE-2026-11800 | redhat_vex | org.keycloak:keycloak-services: Keycloak: Authentication bypass via JWT algorithm confusion | fixed: 10 known affected: 1 known not affected: 4 | 2026-06-30T04:13:53+00:00 | Vulnerability · Source |
| CVE-2026-10843 | redhat_vex | cloud-credential-operator: CCO Mint-mode CredentialsRequest manifests grant account-wide IAM access beyond cluster scope on AWS | known affected: 2 | 2026-06-30T04:13:45+00:00 | Vulnerability · Source |
| CVE-2026-2492 | redhat_vex | tensorflow: TensorFlow: Local privilege escalation via uncontrolled search path for plugins | fixed: 4 known not affected: 210 | 2026-06-30T04:13:35+00:00 | Vulnerability · Source |
| CVE-2026-10118 | redhat_vex | poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication | fixed: 856 known not affected: 10 | 2026-06-30T04:13:34+00:00 | Vulnerability · Source |
| CVE-2026-2472 | redhat_vex | google-cloud-aiplatform: google-cloud-aiplatform: Arbitrary code execution via Stored Cross-Site Scripting (XSS) | fixed: 2 known not affected: 206 | 2026-06-30T04:13:30+00:00 | Vulnerability · Source |
| CVE-2026-2370 | redhat_vex | GitLab: GitLab: Improper authorization allows credential disclosure and GitLab app impersonation | known not affected: 3 | 2026-06-30T04:13:24+00:00 | Vulnerability · Source |
| CVE-2026-2359 | redhat_vex | multer: Multer: Denial of Service via dropped file upload connections | fixed: 2 known affected: 1 known not affected: 34 | 2026-06-30T04:13:24+00:00 | Vulnerability · Source |
| CVE-2026-2293 | redhat_vex | nestjs: NestJS: Authentication bypass via Fastify path-normalization | known not affected: 2 | 2026-06-30T04:13:20+00:00 | Vulnerability · Source |
| CVE-2026-2092 | redhat_vex | keycloak-services: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions | fixed: 20 | 2026-06-30T04:13:15+00:00 | Vulnerability · Source |
| CVE-2026-2049 | redhat_vex | gimp: gegl: GIMP: Remote Code Execution via HDR File Parsing Heap-based Buffer Overflow | known affected: 32 | 2026-06-30T04:13:10+00:00 | Vulnerability · Source |
| CVE-2026-2047 | redhat_vex | gimp: GIMP: Remote code execution via heap-based buffer overflow in ICNS file parsing | fixed: 24 known affected: 11 known not affected: 18 | 2026-06-30T04:13:07+00:00 | Vulnerability · Source |