VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224504 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-14287 | redhat_vex | mlflow: MLflow: Arbitrary command execution via unsanitized container image names | known affected: 1 known not affected: 1 | 2026-06-30T04:09:21+00:00 | Vulnerability · Source |
| CVE-2025-14179 | redhat_vex | php: SQL injection in pdo_firebird via NUL bytes in quoted strings | known affected: 26 known not affected: 253 | 2026-06-30T04:09:19+00:00 | Vulnerability · Source |
| CVE-2025-14009 | redhat_vex | nltk: Zip Slip Vulnerability in nltk Leading to Code Execution | fixed: 6 known affected: 5 known not affected: 202 | 2026-06-30T04:09:14+00:00 | Vulnerability · Source |
| CVE-2025-13878 | redhat_vex | bind: bind: Denial of Service via corrupt or malicious record | fixed: 4 known not affected: 86 | 2026-06-30T04:09:13+00:00 | Vulnerability · Source |
| CVE-2025-13772 | redhat_vex | gitlab: GitLab: Unauthorized access to AI model settings via namespace identifier manipulation | known not affected: 3 | 2026-06-30T04:09:11+00:00 | Vulnerability · Source |
| CVE-2025-13761 | redhat_vex | gitlab: GitLab: Cross-Site Scripting Vulnerability Leading to Arbitrary Code Execution | known not affected: 3 | 2026-06-30T04:09:08+00:00 | Vulnerability · Source |
| CVE-2025-11157 | redhat_vex | feast: Feast: Remote Code Execution via insecure YAML deserialization | fixed: 3 known affected: 13 known not affected: 205 | 2026-06-30T04:09:02+00:00 | Vulnerability · Source |
| CVE-2025-9222 | redhat_vex | gitlab: GitLab: Stored Cross-Site Scripting via GitLab Flavored Markdown | known not affected: 3 | 2026-06-30T04:08:56+00:00 | Vulnerability · Source |
| CVE-2023-43010 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to memory corruption | fixed: 458 known affected: 4 known not affected: 5 | 2026-06-30T04:08:50+00:00 | Vulnerability · Source |
| CVE-2019-25695 | redhat_vex | R: www.r-project.org: R: Arbitrary Code Execution via Local Buffer Overflow | known not affected: 1 | 2026-06-30T04:08:48+00:00 | Vulnerability · Source |
| CVE-2006-10003 | redhat_vex | perl-xml-parser: XML::Parser: Memory corruption via deeply nested XML files | fixed: 157 known affected: 1 | 2026-06-30T04:08:45+00:00 | Vulnerability · Source |
| CVE-2026-33908 | redhat_vex | ImageMagick: Magick.NET: ImageMagick: Denial of Service via deeply nested XML file processing | known affected: 14 | 2026-06-30T04:08:33+00:00 | Vulnerability · Source |
| CVE-2026-33901 | redhat_vex | ImageMagick: Magick.NET: ImageMagick: Denial of Service due to heap buffer overflow in MVG decoder | known affected: 14 | 2026-06-30T04:08:31+00:00 | Vulnerability · Source |
| CVE-2026-33806 | redhat_vex | fastify: Fastify: Schema validation bypass via malformed Content-Type header | known not affected: 9 | 2026-06-30T04:08:02+00:00 | Vulnerability · Source |
| CVE-2026-33805 | redhat_vex | @fastify/reply-from: @fastify/http-proxy: Fastify Reply From and HTTP Proxy: Security bypass via Connection header manipulation | fixed: 4 known affected: 4 known not affected: 58 | 2026-06-30T04:08:01+00:00 | Vulnerability · Source |
| CVE-2026-33758 | redhat_vex | OpenBao: reflected XSS in OpenBao OIDC authentication error message | known not affected: 1 | 2026-06-30T04:07:58+00:00 | Vulnerability · Source |
| CVE-2026-33757 | redhat_vex | OpenBao: lack of user confirmation for OpenBao OIDC direct callback mode | known not affected: 1 | 2026-06-30T04:07:57+00:00 | Vulnerability · Source |
| CVE-2026-33701 | redhat_vex | io.opentelemetry.javaagent/opentelemetry-javaagent: OpenTelemetry Java Instrumentation: Remote code execution via deserialization vulnerability in RMI | known not affected: 2 | 2026-06-30T04:07:55+00:00 | Vulnerability · Source |
| CVE-2026-33557 | redhat_vex | kafka: Apache Kafka: Authentication bypass via improper JWT validation | known affected: 3 known not affected: 29 | 2026-06-30T04:07:50+00:00 | Vulnerability · Source |
| CVE-2026-33526 | redhat_vex | squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling | fixed: 217 known affected: 4 known not affected: 16 | 2026-06-30T04:07:49+00:00 | Vulnerability · Source |
| CVE-2026-33412 | redhat_vex | vim: Vim: Arbitrary code execution via command injection in glob() function | fixed: 667 known not affected: 168 | 2026-06-30T04:07:42+00:00 | Vulnerability · Source |
| CVE-2026-33414 | redhat_vex | podman: github.com/containers/podman: Podman: Arbitrary code execution via command injection in HyperV backend | fixed: 4 known not affected: 32 | 2026-06-30T04:07:42+00:00 | Vulnerability · Source |
| CVE-2026-33278 | redhat_vex | unbound: Unbound DNSSEC Validator Use-After-Free via Deep Copy Pointer Overwrite Leading to DoS and Possible Remote Code Execution | fixed: 144 known affected: 6 known not affected: 10 | 2026-06-30T04:07:40+00:00 | Vulnerability · Source |
| CVE-2026-33195 | redhat_vex | Rails: Active Storage: Active Storage (Rails): Arbitrary file access via path traversal in blob keys | known affected: 17 | 2026-06-30T04:07:10+00:00 | Vulnerability · Source |
| CVE-2026-33180 | redhat_vex | HAPI FHIR: hapifhir/org.hl7.fhir.core: HAPI FHIR: Information disclosure and potential impersonation via HTTP redirects sending sensitive headers | known affected: 4 | 2026-06-30T04:07:09+00:00 | Vulnerability · Source |
| CVE-2026-33116 | redhat_vex | dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform | fixed: 1469 known not affected: 6 | 2026-06-30T04:07:03+00:00 | Vulnerability · Source |
| CVE-2026-33150 | redhat_vex | libfuse: libfuse: Arbitrary code execution via use-after-free in io_uring subsystem | known affected: 1 known not affected: 4 | 2026-06-30T04:07:03+00:00 | Vulnerability · Source |
| CVE-2026-33001 | redhat_vex | jenkins: Jenkins: Arbitrary file write and potential code execution through crafted archives | fixed: 34 known affected: 1 known not affected: 40 | 2026-06-30T04:06:56+00:00 | Vulnerability · Source |
| CVE-2026-32882 | redhat_vex | libheif: libheif: Denial of Service and Information Disclosure vulnerability | known not affected: 1 | 2026-06-30T04:06:53+00:00 | Vulnerability · Source |
| CVE-2026-32875 | redhat_vex | ultrajson: UltraJSON: Denial of Service via large indent parameter in JSON serialization | known not affected: 4 | 2026-06-30T04:06:50+00:00 | Vulnerability · Source |
| CVE-2026-32874 | redhat_vex | UltraJSON: UltraJSON: Denial of Service due to memory leak when parsing large integers | known not affected: 4 | 2026-06-30T04:06:49+00:00 | Vulnerability · Source |
| CVE-2026-32748 | redhat_vex | Squid: Squid: Denial of Service via crafted ICP traffic | fixed: 217 known affected: 4 known not affected: 16 | 2026-06-30T04:06:41+00:00 | Vulnerability · Source |
| CVE-2026-32741 | redhat_vex | libheif: libheif: Heap buffer overflow vulnerability in image decoding | known not affected: 1 | 2026-06-30T04:06:38+00:00 | Vulnerability · Source |
| CVE-2026-32740 | redhat_vex | libheif: libheif: Arbitrary code execution or denial of service via crafted HEIF/AVIF file | known not affected: 1 | 2026-06-30T04:06:36+00:00 | Vulnerability · Source |
| CVE-2026-32695 | redhat_vex | github.com/traefik/traefik: Traefik: Cross-tenant traffic exposure and host restriction bypass via rule-syntax injection in Knative provider | fixed: 4 known not affected: 57 | 2026-06-30T04:06:33+00:00 | Vulnerability · Source |
| CVE-2026-32647 | redhat_vex | nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files | fixed: 825 known affected: 1 known not affected: 190 | 2026-06-30T04:06:31+00:00 | Vulnerability · Source |
| CVE-2026-32305 | redhat_vex | Traefik: github.com/traefik/traefik: Traefik: mTLS bypass allows unauthorized service access via fragmented ClientHello. | fixed: 8 known affected: 1 known not affected: 114 | 2026-06-30T04:06:17+00:00 | Vulnerability · Source |
| CVE-2026-32304 | redhat_vex | locutusjs: Locutus: Arbitrary code execution via unsanitized parameters in create_function | known affected: 6 | 2026-06-30T04:06:15+00:00 | Vulnerability · Source |
| CVE-2026-32274 | redhat_vex | black: Black: Arbitrary file writes from unsanitized user input in cache file name | fixed: 41 known affected: 7 known not affected: 390 | 2026-06-30T04:06:13+00:00 | Vulnerability · Source |
| CVE-2026-32178 | redhat_vex | dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw | fixed: 1469 known not affected: 6 | 2026-06-30T04:06:08+00:00 | Vulnerability · Source |
| CVE-2026-32203 | redhat_vex | dotnet: .NET: Denial of Service via stack overflow | fixed: 1469 known not affected: 6 | 2026-06-30T04:06:08+00:00 | Vulnerability · Source |
| CVE-2026-32177 | redhat_vex | dotnet: .NET: heap-based buffer overflow allows an attacker to elevate privileges locally | known not affected: 133 | 2026-06-30T04:06:04+00:00 | Vulnerability · Source |
| CVE-2026-32146 | redhat_vex | gleam: Gleam compiler: Arbitrary file system modification and potential code execution via improper path validation in git dependency handling. | known not affected: 22 | 2026-06-30T04:06:02+00:00 | Vulnerability · Source |
| CVE-2026-32144 | redhat_vex | Erlang OTP: Erlang OTP public_key: OCSP authorization bypass and information disclosure due to missing signature verification | known affected: 41 | 2026-06-30T04:06:00+00:00 | Vulnerability · Source |
| CVE-2026-31892 | redhat_vex | github.com/argoproj/argo-workflows: Argo Workflows: Security bypass allows privilege escalation via podSpecPatch field | fixed: 21 known not affected: 192 | 2026-06-30T04:05:51+00:00 | Vulnerability · Source |
| CVE-2026-31806 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages | fixed: 732 known not affected: 5 | 2026-06-30T04:05:41+00:00 | Vulnerability · Source |
| CVE-2026-31709 | redhat_vex | kernel: smb: client: validate the whole DACL before rewriting it in cifsacl | fixed: 1808 known affected: 22 known not affected: 42 | 2026-06-30T04:05:40+00:00 | Vulnerability · Source |
| CVE-2026-31663 | redhat_vex | kernel: xfrm: hold dev ref until after transport_finish NF_HOOK | known affected: 260 under investigation: 14 | 2026-06-30T04:05:36+00:00 | Vulnerability · Source |
| CVE-2026-31703 | redhat_vex | kernel: writeback: Fix use after free in inode_switch_wbs_work_fn() | known not affected: 274 | 2026-06-30T04:05:36+00:00 | Vulnerability · Source |
| CVE-2026-31641 | redhat_vex | kernel: rxrpc: Fix RxGK token loading to check bounds | fixed: 309 known not affected: 198 | 2026-06-30T04:05:32+00:00 | Vulnerability · Source |