VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224773 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-33150 | redhat_vex | libfuse: libfuse: Arbitrary code execution via use-after-free in io_uring subsystem | known affected: 1 known not affected: 4 | 2026-06-30T04:07:03+00:00 | Vulnerability · Source |
| CVE-2026-33001 | redhat_vex | jenkins: Jenkins: Arbitrary file write and potential code execution through crafted archives | fixed: 34 known affected: 1 known not affected: 40 | 2026-06-30T04:06:56+00:00 | Vulnerability · Source |
| CVE-2026-32882 | redhat_vex | libheif: libheif: Denial of Service and Information Disclosure vulnerability | known not affected: 1 | 2026-06-30T04:06:53+00:00 | Vulnerability · Source |
| CVE-2026-32875 | redhat_vex | ultrajson: UltraJSON: Denial of Service via large indent parameter in JSON serialization | known not affected: 4 | 2026-06-30T04:06:50+00:00 | Vulnerability · Source |
| CVE-2026-32874 | redhat_vex | UltraJSON: UltraJSON: Denial of Service due to memory leak when parsing large integers | known not affected: 4 | 2026-06-30T04:06:49+00:00 | Vulnerability · Source |
| CVE-2026-32748 | redhat_vex | Squid: Squid: Denial of Service via crafted ICP traffic | fixed: 217 known affected: 4 known not affected: 16 | 2026-06-30T04:06:41+00:00 | Vulnerability · Source |
| CVE-2026-32741 | redhat_vex | libheif: libheif: Heap buffer overflow vulnerability in image decoding | known not affected: 1 | 2026-06-30T04:06:38+00:00 | Vulnerability · Source |
| CVE-2026-32740 | redhat_vex | libheif: libheif: Arbitrary code execution or denial of service via crafted HEIF/AVIF file | known not affected: 1 | 2026-06-30T04:06:36+00:00 | Vulnerability · Source |
| CVE-2026-32695 | redhat_vex | github.com/traefik/traefik: Traefik: Cross-tenant traffic exposure and host restriction bypass via rule-syntax injection in Knative provider | fixed: 4 known not affected: 57 | 2026-06-30T04:06:33+00:00 | Vulnerability · Source |
| CVE-2026-32647 | redhat_vex | nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files | fixed: 825 known affected: 1 known not affected: 190 | 2026-06-30T04:06:31+00:00 | Vulnerability · Source |
| CVE-2026-32305 | redhat_vex | Traefik: github.com/traefik/traefik: Traefik: mTLS bypass allows unauthorized service access via fragmented ClientHello. | fixed: 8 known affected: 1 known not affected: 114 | 2026-06-30T04:06:17+00:00 | Vulnerability · Source |
| CVE-2026-32304 | redhat_vex | locutusjs: Locutus: Arbitrary code execution via unsanitized parameters in create_function | known affected: 6 | 2026-06-30T04:06:15+00:00 | Vulnerability · Source |
| CVE-2026-32274 | redhat_vex | black: Black: Arbitrary file writes from unsanitized user input in cache file name | fixed: 41 known affected: 7 known not affected: 390 | 2026-06-30T04:06:13+00:00 | Vulnerability · Source |
| CVE-2026-32178 | redhat_vex | dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw | fixed: 1469 known not affected: 6 | 2026-06-30T04:06:08+00:00 | Vulnerability · Source |
| CVE-2026-32203 | redhat_vex | dotnet: .NET: Denial of Service via stack overflow | fixed: 1469 known not affected: 6 | 2026-06-30T04:06:08+00:00 | Vulnerability · Source |
| CVE-2026-32177 | redhat_vex | dotnet: .NET: heap-based buffer overflow allows an attacker to elevate privileges locally | known not affected: 133 | 2026-06-30T04:06:04+00:00 | Vulnerability · Source |
| CVE-2026-32146 | redhat_vex | gleam: Gleam compiler: Arbitrary file system modification and potential code execution via improper path validation in git dependency handling. | known not affected: 22 | 2026-06-30T04:06:02+00:00 | Vulnerability · Source |
| CVE-2026-32144 | redhat_vex | Erlang OTP: Erlang OTP public_key: OCSP authorization bypass and information disclosure due to missing signature verification | known affected: 41 | 2026-06-30T04:06:00+00:00 | Vulnerability · Source |
| CVE-2026-31892 | redhat_vex | github.com/argoproj/argo-workflows: Argo Workflows: Security bypass allows privilege escalation via podSpecPatch field | fixed: 21 known not affected: 192 | 2026-06-30T04:05:51+00:00 | Vulnerability · Source |
| CVE-2026-31806 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages | fixed: 732 known not affected: 5 | 2026-06-30T04:05:41+00:00 | Vulnerability · Source |
| CVE-2026-31709 | redhat_vex | kernel: smb: client: validate the whole DACL before rewriting it in cifsacl | fixed: 1808 known affected: 22 known not affected: 42 | 2026-06-30T04:05:40+00:00 | Vulnerability · Source |
| CVE-2026-31663 | redhat_vex | kernel: xfrm: hold dev ref until after transport_finish NF_HOOK | known affected: 260 under investigation: 14 | 2026-06-30T04:05:36+00:00 | Vulnerability · Source |
| CVE-2026-31703 | redhat_vex | kernel: writeback: Fix use after free in inode_switch_wbs_work_fn() | known not affected: 274 | 2026-06-30T04:05:36+00:00 | Vulnerability · Source |
| CVE-2026-31641 | redhat_vex | kernel: rxrpc: Fix RxGK token loading to check bounds | fixed: 309 known not affected: 198 | 2026-06-30T04:05:32+00:00 | Vulnerability · Source |
| CVE-2026-31617 | redhat_vex | kernel: usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() | known affected: 76 known not affected: 198 | 2026-06-30T04:05:29+00:00 | Vulnerability · Source |
| CVE-2026-31474 | redhat_vex | kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() | fixed: 919 known affected: 22 known not affected: 90 | 2026-06-30T04:05:19+00:00 | Vulnerability · Source |
| CVE-2026-30951 | redhat_vex | sequelize: Sequelize: Data exfiltration via SQL injection in JSON/JSONB where clause processing | fixed: 1 known affected: 1 known not affected: 16 | 2026-06-30T04:05:03+00:00 | Vulnerability · Source |
| CVE-2026-29786 | redhat_vex | node-tar: hardlink path traversal via drive-relative linkpath | known not affected: 164 | 2026-06-30T04:05:02+00:00 | Vulnerability · Source |
| CVE-2026-29518 | redhat_vex | rsync: TOCTOU symlink race condition allowing local privilege escalation in daemon mode without chroot. | fixed: 46 known affected: 5 known not affected: 2 | 2026-06-30T04:04:54+00:00 | Vulnerability · Source |
| CVE-2026-29186 | redhat_vex | backstage/plugin-techdocs-node: TechDocs Mkdocs configuration key enables arbitrary code execution | fixed: 2 known affected: 1 known not affected: 4 | 2026-06-30T04:04:52+00:00 | Vulnerability · Source |
| CVE-2026-29091 | redhat_vex | locutus: Locutus: Remote Code Execution via insecure callback function implementation | known affected: 6 | 2026-06-30T04:04:47+00:00 | Vulnerability · Source |
| CVE-2026-29062 | redhat_vex | jackson-core: jackson-core: Denial of Service via excessive JSON nesting | known not affected: 14 | 2026-06-30T04:04:39+00:00 | Vulnerability · Source |
| CVE-2026-29054 | redhat_vex | github.com/traefik/traefik: Traefik: Information disclosure due to case-insensitive Connection header processing | fixed: 4 known not affected: 57 | 2026-06-30T04:04:36+00:00 | Vulnerability · Source |
| CVE-2026-29004 | redhat_vex | BusyBox: BusyBox: Arbitrary Code Execution via DHCPv6 Client Heap Buffer Overflow | fixed: 3 known not affected: 3 | 2026-06-30T04:04:34+00:00 | Vulnerability · Source |
| CVE-2026-28955 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:32+00:00 | Vulnerability · Source |
| CVE-2026-28953 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:30+00:00 | Vulnerability · Source |
| CVE-2026-28947 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:27+00:00 | Vulnerability · Source |
| CVE-2026-28905 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:22+00:00 | Vulnerability · Source |
| CVE-2026-28904 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:20+00:00 | Vulnerability · Source |
| CVE-2026-28903 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:17+00:00 | Vulnerability · Source |
| CVE-2026-28902 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:15+00:00 | Vulnerability · Source |
| CVE-2026-28901 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:12+00:00 | Vulnerability · Source |
| CVE-2026-28883 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:11+00:00 | Vulnerability · Source |
| CVE-2026-28859 | redhat_vex | webkitgtk: A malicious website may be able to process restricted web content outside the sandbox | fixed: 509 known affected: 4 known not affected: 5 | 2026-06-30T04:04:09+00:00 | Vulnerability · Source |
| CVE-2026-28847 | redhat_vex | webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash | fixed: 371 known affected: 4 known not affected: 5 | 2026-06-30T04:04:08+00:00 | Vulnerability · Source |
| CVE-2026-28808 | redhat_vex | erlang/otp: inets: Erlang OTP inets modules: Unauthenticated access to protected CGI scripts via incorrect authorization | known affected: 40 known not affected: 1 | 2026-06-30T04:03:59+00:00 | Vulnerability · Source |
| CVE-2026-28693 | redhat_vex | ImageMagick: ImageMagick: Out-of-bounds read or write due to integer overflow in DIB coder | fixed: 51 known affected: 7 | 2026-06-30T04:03:53+00:00 | Vulnerability · Source |
| CVE-2026-28691 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via uninitialized pointer dereference in JBIG decoder | fixed: 51 known affected: 7 | 2026-06-30T04:03:51+00:00 | Vulnerability · Source |
| CVE-2026-28406 | redhat_vex | kaniko: kaniko: Arbitrary code execution via path traversal in build context archive unpacking | under investigation: 3 | 2026-06-30T04:03:48+00:00 | Vulnerability · Source |
| CVE-2026-28500 | redhat_vex | onnx: ONNX: Untrusted Model Repository Warnings Suppressed | fixed: 26 known affected: 1 known not affected: 182 | 2026-06-30T04:03:48+00:00 | Vulnerability · Source |