VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224345 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-32146 | redhat_vex | gleam: Gleam compiler: Arbitrary file system modification and potential code execution via improper path validation in git dependency handling. | known not affected: 22 | 2026-06-30T04:06:02+00:00 | Vulnerability · Source |
| CVE-2026-32144 | redhat_vex | Erlang OTP: Erlang OTP public_key: OCSP authorization bypass and information disclosure due to missing signature verification | known affected: 41 | 2026-06-30T04:06:00+00:00 | Vulnerability · Source |
| CVE-2026-31892 | redhat_vex | github.com/argoproj/argo-workflows: Argo Workflows: Security bypass allows privilege escalation via podSpecPatch field | fixed: 21 known not affected: 192 | 2026-06-30T04:05:51+00:00 | Vulnerability · Source |
| CVE-2026-31806 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages | fixed: 732 known not affected: 5 | 2026-06-30T04:05:41+00:00 | Vulnerability · Source |
| CVE-2026-31709 | redhat_vex | kernel: smb: client: validate the whole DACL before rewriting it in cifsacl | fixed: 1808 known affected: 22 known not affected: 42 | 2026-06-30T04:05:40+00:00 | Vulnerability · Source |
| CVE-2026-31663 | redhat_vex | kernel: xfrm: hold dev ref until after transport_finish NF_HOOK | known affected: 260 under investigation: 14 | 2026-06-30T04:05:36+00:00 | Vulnerability · Source |
| CVE-2026-31703 | redhat_vex | kernel: writeback: Fix use after free in inode_switch_wbs_work_fn() | known not affected: 274 | 2026-06-30T04:05:36+00:00 | Vulnerability · Source |
| CVE-2026-31641 | redhat_vex | kernel: rxrpc: Fix RxGK token loading to check bounds | fixed: 309 known not affected: 198 | 2026-06-30T04:05:32+00:00 | Vulnerability · Source |
| CVE-2026-31617 | redhat_vex | kernel: usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() | known affected: 76 known not affected: 198 | 2026-06-30T04:05:29+00:00 | Vulnerability · Source |
| CVE-2026-31474 | redhat_vex | kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() | fixed: 919 known affected: 22 known not affected: 90 | 2026-06-30T04:05:19+00:00 | Vulnerability · Source |
| CVE-2026-30951 | redhat_vex | sequelize: Sequelize: Data exfiltration via SQL injection in JSON/JSONB where clause processing | fixed: 1 known affected: 1 known not affected: 16 | 2026-06-30T04:05:03+00:00 | Vulnerability · Source |
| CVE-2026-29786 | redhat_vex | node-tar: hardlink path traversal via drive-relative linkpath | known not affected: 164 | 2026-06-30T04:05:02+00:00 | Vulnerability · Source |
| CVE-2026-29518 | redhat_vex | rsync: TOCTOU symlink race condition allowing local privilege escalation in daemon mode without chroot. | fixed: 46 known affected: 5 known not affected: 2 | 2026-06-30T04:04:54+00:00 | Vulnerability · Source |
| CVE-2026-29186 | redhat_vex | backstage/plugin-techdocs-node: TechDocs Mkdocs configuration key enables arbitrary code execution | fixed: 2 known affected: 1 known not affected: 4 | 2026-06-30T04:04:52+00:00 | Vulnerability · Source |
| CVE-2026-29091 | redhat_vex | locutus: Locutus: Remote Code Execution via insecure callback function implementation | known affected: 6 | 2026-06-30T04:04:47+00:00 | Vulnerability · Source |
| CVE-2026-29062 | redhat_vex | jackson-core: jackson-core: Denial of Service via excessive JSON nesting | known not affected: 14 | 2026-06-30T04:04:39+00:00 | Vulnerability · Source |
| CVE-2026-29054 | redhat_vex | github.com/traefik/traefik: Traefik: Information disclosure due to case-insensitive Connection header processing | fixed: 4 known not affected: 57 | 2026-06-30T04:04:36+00:00 | Vulnerability · Source |
| CVE-2026-29004 | redhat_vex | BusyBox: BusyBox: Arbitrary Code Execution via DHCPv6 Client Heap Buffer Overflow | fixed: 3 known not affected: 3 | 2026-06-30T04:04:34+00:00 | Vulnerability · Source |
| CVE-2026-28955 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:32+00:00 | Vulnerability · Source |
| CVE-2026-28953 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:30+00:00 | Vulnerability · Source |
| CVE-2026-28947 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:27+00:00 | Vulnerability · Source |
| CVE-2026-28905 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:22+00:00 | Vulnerability · Source |
| CVE-2026-28904 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:20+00:00 | Vulnerability · Source |
| CVE-2026-28903 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:17+00:00 | Vulnerability · Source |
| CVE-2026-28902 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:15+00:00 | Vulnerability · Source |
| CVE-2026-28901 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:12+00:00 | Vulnerability · Source |
| CVE-2026-28883 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:11+00:00 | Vulnerability · Source |
| CVE-2026-28859 | redhat_vex | webkitgtk: A malicious website may be able to process restricted web content outside the sandbox | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:04:09+00:00 | Vulnerability · Source |
| CVE-2026-28847 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:08+00:00 | Vulnerability · Source |
| CVE-2026-28808 | redhat_vex | erlang/otp: inets: Erlang OTP inets modules: Unauthenticated access to protected CGI scripts via incorrect authorization | known affected: 40 known not affected: 1 | 2026-06-30T04:03:59+00:00 | Vulnerability · Source |
| CVE-2026-28693 | redhat_vex | ImageMagick: ImageMagick: Out-of-bounds read or write due to integer overflow in DIB coder | fixed: 51 known affected: 7 | 2026-06-30T04:03:53+00:00 | Vulnerability · Source |
| CVE-2026-28691 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via uninitialized pointer dereference in JBIG decoder | fixed: 51 known affected: 7 | 2026-06-30T04:03:51+00:00 | Vulnerability · Source |
| CVE-2026-28406 | redhat_vex | kaniko: kaniko: Arbitrary code execution via path traversal in build context archive unpacking | under investigation: 3 | 2026-06-30T04:03:48+00:00 | Vulnerability · Source |
| CVE-2026-28500 | redhat_vex | onnx: ONNX: Untrusted Model Repository Warnings Suppressed | fixed: 26 known affected: 1 known not affected: 182 | 2026-06-30T04:03:48+00:00 | Vulnerability · Source |
| CVE-2026-28364 | redhat_vex | ocaml: OCaml: Remote code execution via buffer over-read in Marshal deserialization | known affected: 50 known not affected: 1 | 2026-06-30T04:03:38+00:00 | Vulnerability · Source |
| CVE-2026-28292 | redhat_vex | simple-git: simple-git: Remote Code Execution via bypass of prior security fixes | known affected: 6 known not affected: 21 | 2026-06-30T04:03:35+00:00 | Vulnerability · Source |
| CVE-2026-28291 | redhat_vex | simple-git: simple-git: Command Execution via Option-Parsing Bypass in simple-git | known affected: 2 known not affected: 20 | 2026-06-30T04:03:34+00:00 | Vulnerability · Source |
| CVE-2026-28229 | redhat_vex | argo-workflows: Argo Workflows has unauthorized access to Argo Workflows Template | fixed: 21 known not affected: 194 | 2026-06-30T04:03:28+00:00 | Vulnerability · Source |
| CVE-2026-27970 | redhat_vex | @angular/core: Angular: Cross-site scripting via compromised translation files | known affected: 18 known not affected: 31 | 2026-06-30T04:03:27+00:00 | Vulnerability · Source |
| CVE-2026-27959 | redhat_vex | koa: Koa: Host header injection vulnerability due to malformed HTTP Host header parsing | fixed: 12 known affected: 3 known not affected: 855 | 2026-06-30T04:03:23+00:00 | Vulnerability · Source |
| CVE-2026-27896 | redhat_vex | modelcontextprotocol/go-sdk: improper handling of case sensitivity | known affected: 11 | 2026-06-30T04:03:19+00:00 | Vulnerability · Source |
| CVE-2026-27880 | redhat_vex | Grafana: Grafana: Denial of Service via unbounded memory read in feature toggle evaluation | known affected: 6 known not affected: 15 | 2026-06-30T04:03:12+00:00 | Vulnerability · Source |
| CVE-2026-27877 | redhat_vex | grafana: Grafana: Information disclosure of data-source passwords via public dashboards | fixed: 102 known not affected: 15 | 2026-06-30T04:03:10+00:00 | Vulnerability · Source |
| CVE-2026-27858 | redhat_vex | dovecot: denial of service via crafted message before authentication | fixed: 738 known affected: 6 | 2026-06-30T04:03:06+00:00 | Vulnerability · Source |
| CVE-2026-27857 | redhat_vex | dovecot: denial of service via specially crafted NOOP command | fixed: 738 known affected: 6 | 2026-06-30T04:03:05+00:00 | Vulnerability · Source |
| CVE-2026-27856 | redhat_vex | dovecot: Doveadm: Full access via timing oracle attack in credential verification | fixed: 35 known affected: 6 known not affected: 18 | 2026-06-30T04:03:04+00:00 | Vulnerability · Source |
| CVE-2026-27830 | redhat_vex | c3p0: c3p0: Arbitrary Code Execution via deserialization of crafted objects | fixed: 14 known affected: 10 known not affected: 277 | 2026-06-30T04:02:58+00:00 | Vulnerability · Source |
| CVE-2026-27784 | redhat_vex | NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file | fixed: 825 known not affected: 190 | 2026-06-30T04:02:55+00:00 | Vulnerability · Source |
| CVE-2026-27654 | redhat_vex | NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module | fixed: 825 known not affected: 190 | 2026-06-30T04:02:51+00:00 | Vulnerability · Source |
| CVE-2026-27651 | redhat_vex | NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled | fixed: 825 known not affected: 190 | 2026-06-30T04:02:49+00:00 | Vulnerability · Source |