VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224759 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-10843 | redhat_vex | cloud-credential-operator: CCO Mint-mode CredentialsRequest manifests grant account-wide IAM access beyond cluster scope on AWS | known affected: 2 | 2026-06-30T04:13:45+00:00 | Vulnerability · Source |
| CVE-2026-2492 | redhat_vex | tensorflow: TensorFlow: Local privilege escalation via uncontrolled search path for plugins | fixed: 4 known not affected: 210 | 2026-06-30T04:13:35+00:00 | Vulnerability · Source |
| CVE-2026-10118 | redhat_vex | poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication | fixed: 856 known not affected: 10 | 2026-06-30T04:13:34+00:00 | Vulnerability · Source |
| CVE-2026-2472 | redhat_vex | google-cloud-aiplatform: google-cloud-aiplatform: Arbitrary code execution via Stored Cross-Site Scripting (XSS) | fixed: 2 known not affected: 206 | 2026-06-30T04:13:30+00:00 | Vulnerability · Source |
| CVE-2026-2370 | redhat_vex | GitLab: GitLab: Improper authorization allows credential disclosure and GitLab app impersonation | known not affected: 3 | 2026-06-30T04:13:24+00:00 | Vulnerability · Source |
| CVE-2026-2359 | redhat_vex | multer: Multer: Denial of Service via dropped file upload connections | fixed: 2 known affected: 1 known not affected: 34 | 2026-06-30T04:13:24+00:00 | Vulnerability · Source |
| CVE-2026-2293 | redhat_vex | nestjs: NestJS: Authentication bypass via Fastify path-normalization | known not affected: 2 | 2026-06-30T04:13:20+00:00 | Vulnerability · Source |
| CVE-2026-2092 | redhat_vex | keycloak-services: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions | fixed: 20 | 2026-06-30T04:13:15+00:00 | Vulnerability · Source |
| CVE-2026-2049 | redhat_vex | gimp: gegl: GIMP: Remote Code Execution via HDR File Parsing Heap-based Buffer Overflow | known affected: 32 | 2026-06-30T04:13:10+00:00 | Vulnerability · Source |
| CVE-2026-2047 | redhat_vex | gimp: GIMP: Remote code execution via heap-based buffer overflow in ICNS file parsing | fixed: 24 known affected: 11 known not affected: 18 | 2026-06-30T04:13:07+00:00 | Vulnerability · Source |
| CVE-2026-2048 | redhat_vex | gimp: GIMP: Remote Code Execution via XWD file parsing vulnerability | fixed: 557 known affected: 11 | 2026-06-30T04:13:07+00:00 | Vulnerability · Source |
| CVE-2026-2045 | redhat_vex | gimp: GIMP: Remote Code Execution via out-of-bounds write in XWD file parsing | fixed: 557 known affected: 11 | 2026-06-30T04:13:03+00:00 | Vulnerability · Source |
| CVE-2026-2044 | redhat_vex | gimp: GIMP: Remote Code Execution via uninitialized memory in PGM file parsing | fixed: 557 known affected: 11 | 2026-06-30T04:13:02+00:00 | Vulnerability · Source |
| CVE-2026-2007 | redhat_vex | postgresql: PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory | fixed: 107 known affected: 1 known not affected: 3 | 2026-06-30T04:12:53+00:00 | Vulnerability · Source |
| CVE-2026-2006 | redhat_vex | postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code | fixed: 3674 known affected: 40 known not affected: 6 | 2026-06-30T04:12:50+00:00 | Vulnerability · Source |
| CVE-2026-2005 | redhat_vex | postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code | fixed: 3674 known affected: 40 known not affected: 6 | 2026-06-30T04:12:48+00:00 | Vulnerability · Source |
| CVE-2026-2004 | redhat_vex | postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code | fixed: 3674 known affected: 40 known not affected: 6 | 2026-06-30T04:12:46+00:00 | Vulnerability · Source |
| CVE-2026-1961 | redhat_vex | forman: Foreman: Remote Code Execution via command injection in WebSocket proxy | fixed: 149 known affected: 17 known not affected: 162 | 2026-06-30T04:12:41+00:00 | Vulnerability · Source |
| CVE-2026-1837 | redhat_vex | libjxl: libjxl: Out-of-bounds write in grayscale color transformation when using LCMS2 | known not affected: 15 | 2026-06-30T04:12:37+00:00 | Vulnerability · Source |
| CVE-2026-1761 | redhat_vex | libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response | fixed: 379 known affected: 3 known not affected: 41 | 2026-06-30T04:12:33+00:00 | Vulnerability · Source |
| CVE-2026-1669 | redhat_vex | keras: Keras: Information disclosure via arbitrary file read in model loading mechanism | known affected: 10 | 2026-06-30T04:12:30+00:00 | Vulnerability · Source |
| CVE-2026-1615 | redhat_vex | jsonpath: jsonpath: Arbitrary Code Execution via unsafe JSON Path expression evaluation | fixed: 9 known affected: 10 known not affected: 213 | 2026-06-30T04:12:28+00:00 | Vulnerability · Source |
| CVE-2026-1605 | redhat_vex | org.eclipse.jetty/jetty-server: Eclipse Jetty: Denial of Service due to unreleased JDK Inflater from compressed HTTP requests | fixed: 63 known affected: 3 known not affected: 89 | 2026-06-30T04:12:24+00:00 | Vulnerability · Source |
| CVE-2026-1584 | redhat_vex | gnutls: gnutls: Remote Denial of Service via crafted ClientHello with invalid PSK binder | fixed: 4 known not affected: 31 | 2026-06-30T04:12:22+00:00 | Vulnerability · Source |
| CVE-2026-1531 | redhat_vex | foreman-kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification | fixed: 93 known affected: 1 known not affected: 218 | 2026-06-30T04:12:21+00:00 | Vulnerability · Source |
| CVE-2026-1530 | redhat_vex | fog-kubevirt: fog-kubevirt: Man-in-the-Middle vulnerability due to disabled certificate validation | fixed: 91 known affected: 1 known not affected: 155 | 2026-06-30T04:12:18+00:00 | Vulnerability · Source |
| CVE-2026-1529 | redhat_vex | org.keycloak.services.resources.organizations: Keycloak: Unauthorized organization registration via improper invitation token validation | fixed: 20 | 2026-06-30T04:12:16+00:00 | Vulnerability · Source |
| CVE-2026-1486 | redhat_vex | org.keycloak.protocol.oidc.grants: Disabled identity providers are still accepted for JWT Authorization Grant | fixed: 10 | 2026-06-30T04:12:04+00:00 | Vulnerability · Source |
| CVE-2026-1312 | redhat_vex | Django: Django: SQL injection via crafted column aliases in QuerySet.order_by() | fixed: 122 known affected: 6 known not affected: 4552 | 2026-06-30T04:11:56+00:00 | Vulnerability · Source |
| CVE-2026-1260 | redhat_vex | sentencepiece: Sentencepiece: Invalid memory access leading to potential arbitrary code execution via a crafted model file. | fixed: 6 known affected: 2 known not affected: 451 | 2026-06-30T04:11:50+00:00 | Vulnerability · Source |
| CVE-2026-0994 | redhat_vex | python: protobuf: Protobuf: Denial of Service due to recursion depth bypass | fixed: 445 known not affected: 4072 | 2026-06-30T04:11:49+00:00 | Vulnerability · Source |
| CVE-2026-0897 | redhat_vex | Keras: Keras: Denial of Service via crafted HDF5 weight loading file | fixed: 16 known affected: 1 known not affected: 429 | 2026-06-30T04:11:43+00:00 | Vulnerability · Source |
| CVE-2026-0879 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component | fixed: 320 known affected: 8 | 2026-06-30T04:11:36+00:00 | Vulnerability · Source |
| CVE-2026-0847 | redhat_vex | nltk: NLTK: Arbitrary file read via path traversal vulnerability | fixed: 4 known affected: 6 known not affected: 467 | 2026-06-30T04:11:31+00:00 | Vulnerability · Source |
| CVE-2026-0846 | redhat_vex | nltk: NLTK: Arbitrary file read via improper path validation in `filestring()` function | fixed: 4 known affected: 6 known not affected: 467 | 2026-06-30T04:11:28+00:00 | Vulnerability · Source |
| CVE-2026-0797 | redhat_vex | gimp: GIMP: Remote Code Execution via ICO File Parsing Vulnerability | fixed: 557 known affected: 11 | 2026-06-30T04:11:24+00:00 | Vulnerability · Source |
| CVE-2026-0775 | redhat_vex | npmcli: npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability | known not affected: 258 | 2026-06-30T04:11:21+00:00 | Vulnerability · Source |
| CVE-2026-0719 | redhat_vex | libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication | fixed: 361 known affected: 3 known not affected: 41 | 2026-06-30T04:11:18+00:00 | Vulnerability · Source |
| CVE-2025-70071 | redhat_vex | Assimp: Assimp: Denial of Service via FBXParser.cpp ParseVectorDataArray() function | known not affected: 8 | 2026-06-30T04:10:58+00:00 | Vulnerability · Source |
| CVE-2025-69263 | redhat_vex | pnpm: pnpm Lockfile Integrity Bypass | known not affected: 2 | 2026-06-30T04:10:53+00:00 | Vulnerability · Source |
| CVE-2025-68616 | redhat_vex | WeasyPrint: WeasyPrint Server-Side Request Forgery (SSRF) | known affected: 1 | 2026-06-30T04:10:47+00:00 | Vulnerability · Source |
| CVE-2025-67733 | redhat_vex | Valkey: Valkey: Data tampering and denial of service via improper null character handling in Lua scripts | fixed: 51 | 2026-06-30T04:10:41+00:00 | Vulnerability · Source |
| CVE-2025-59465 | redhat_vex | nodejs: Nodejs denial of service | fixed: 456 | 2026-06-30T04:10:30+00:00 | Vulnerability · Source |
| CVE-2025-59032 | redhat_vex | dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command | fixed: 738 known affected: 6 | 2026-06-30T04:10:22+00:00 | Vulnerability · Source |
| CVE-2025-55131 | redhat_vex | nodejs: Nodejs uninitialized memory exposure | fixed: 456 | 2026-06-30T04:10:15+00:00 | Vulnerability · Source |
| CVE-2025-55130 | redhat_vex | nodejs: Nodejs file permissions bypass | fixed: 456 | 2026-06-30T04:10:14+00:00 | Vulnerability · Source |
| CVE-2025-54502 | redhat_vex | AMD Platform Configuration Blob: APCB SMM driver: kernel: linux-firmware: AMD APCB SMM driver: Arbitrary Code Execution via incorrect boot service use | known not affected: 275 | 2026-06-30T04:10:09+00:00 | Vulnerability · Source |
| CVE-2025-43511 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:10:06+00:00 | Vulnerability · Source |
| CVE-2025-43457 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:10:04+00:00 | Vulnerability · Source |
| CVE-2025-43438 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 482 known affected: 4 known not affected: 5 | 2026-06-30T04:09:58+00:00 | Vulnerability · Source |