VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224773 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-28364 | redhat_vex | ocaml: OCaml: Remote code execution via buffer over-read in Marshal deserialization | known affected: 50 known not affected: 1 | 2026-06-30T04:03:38+00:00 | Vulnerability · Source |
| CVE-2026-28292 | redhat_vex | simple-git: simple-git: Remote Code Execution via bypass of prior security fixes | known affected: 6 known not affected: 21 | 2026-06-30T04:03:35+00:00 | Vulnerability · Source |
| CVE-2026-28291 | redhat_vex | simple-git: simple-git: Command Execution via Option-Parsing Bypass in simple-git | known affected: 2 known not affected: 20 | 2026-06-30T04:03:34+00:00 | Vulnerability · Source |
| CVE-2026-28229 | redhat_vex | argo-workflows: Argo Workflows has unauthorized access to Argo Workflows Template | fixed: 21 known not affected: 194 | 2026-06-30T04:03:28+00:00 | Vulnerability · Source |
| CVE-2026-27970 | redhat_vex | @angular/core: Angular: Cross-site scripting via compromised translation files | known affected: 18 known not affected: 31 | 2026-06-30T04:03:27+00:00 | Vulnerability · Source |
| CVE-2026-27959 | redhat_vex | koa: Koa: Host header injection vulnerability due to malformed HTTP Host header parsing | fixed: 12 known affected: 3 known not affected: 855 | 2026-06-30T04:03:23+00:00 | Vulnerability · Source |
| CVE-2026-27896 | redhat_vex | modelcontextprotocol/go-sdk: improper handling of case sensitivity | known affected: 11 | 2026-06-30T04:03:19+00:00 | Vulnerability · Source |
| CVE-2026-27880 | redhat_vex | Grafana: Grafana: Denial of Service via unbounded memory read in feature toggle evaluation | known affected: 6 known not affected: 15 | 2026-06-30T04:03:12+00:00 | Vulnerability · Source |
| CVE-2026-27877 | redhat_vex | grafana: Grafana: Information disclosure of data-source passwords via public dashboards | fixed: 102 known not affected: 15 | 2026-06-30T04:03:10+00:00 | Vulnerability · Source |
| CVE-2026-27858 | redhat_vex | dovecot: denial of service via crafted message before authentication | fixed: 738 known affected: 6 | 2026-06-30T04:03:06+00:00 | Vulnerability · Source |
| CVE-2026-27857 | redhat_vex | dovecot: denial of service via specially crafted NOOP command | fixed: 738 known affected: 6 | 2026-06-30T04:03:05+00:00 | Vulnerability · Source |
| CVE-2026-27856 | redhat_vex | dovecot: Doveadm: Full access via timing oracle attack in credential verification | fixed: 35 known affected: 6 known not affected: 18 | 2026-06-30T04:03:04+00:00 | Vulnerability · Source |
| CVE-2026-27830 | redhat_vex | c3p0: c3p0: Arbitrary Code Execution via deserialization of crafted objects | fixed: 14 known affected: 10 known not affected: 277 | 2026-06-30T04:02:58+00:00 | Vulnerability · Source |
| CVE-2026-27784 | redhat_vex | NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file | fixed: 825 known not affected: 190 | 2026-06-30T04:02:55+00:00 | Vulnerability · Source |
| CVE-2026-27654 | redhat_vex | NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module | fixed: 825 known not affected: 190 | 2026-06-30T04:02:51+00:00 | Vulnerability · Source |
| CVE-2026-27651 | redhat_vex | NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled | fixed: 825 known not affected: 190 | 2026-06-30T04:02:49+00:00 | Vulnerability · Source |
| CVE-2026-27623 | redhat_vex | Valkey: Valkey: Denial of Service via specially crafted network requests | known not affected: 6 | 2026-06-30T04:02:47+00:00 | Vulnerability · Source |
| CVE-2026-27622 | redhat_vex | openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing | fixed: 368 known affected: 3 known not affected: 32 | 2026-06-30T04:02:45+00:00 | Vulnerability · Source |
| CVE-2026-27489 | redhat_vex | onnx: ONNX: Information Disclosure via Path Traversal Vulnerability | fixed: 26 known affected: 1 known not affected: 182 | 2026-06-30T04:02:38+00:00 | Vulnerability · Source |
| CVE-2026-27446 | redhat_vex | org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication | fixed: 36 known affected: 4 known not affected: 197 | 2026-06-30T04:02:33+00:00 | Vulnerability · Source |
| CVE-2026-27148 | redhat_vex | storybook: Storybook: Remote Code Execution via WebSocket Hijacking | known affected: 1 known not affected: 7 | 2026-06-30T04:02:32+00:00 | Vulnerability · Source |
| CVE-2026-27135 | redhat_vex | nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination | fixed: 919 known not affected: 58 | 2026-06-30T04:02:24+00:00 | Vulnerability · Source |
| CVE-2026-27134 | redhat_vex | strimzi-kafka-operator: Strimzi: Unauthorized authentication via misconfigured mTLS CA chain | known affected: 2 known not affected: 2 | 2026-06-30T04:02:20+00:00 | Vulnerability · Source |
| CVE-2026-26999 | redhat_vex | github.com/traefik/traefik: Traefik: Denial of Service due to incomplete TLS handshake | fixed: 4 known not affected: 57 | 2026-06-30T04:02:19+00:00 | Vulnerability · Source |
| CVE-2026-26965 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path | fixed: 732 known not affected: 5 | 2026-06-30T04:02:16+00:00 | Vulnerability · Source |
| CVE-2026-26956 | redhat_vex | vm2: Node.js: vm2: Arbitrary code execution via sandbox escape | known not affected: 3 | 2026-06-30T04:02:15+00:00 | Vulnerability · Source |
| CVE-2026-26955 | redhat_vex | freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline | fixed: 732 known not affected: 5 | 2026-06-30T04:02:11+00:00 | Vulnerability · Source |
| CVE-2026-26332 | redhat_vex | vm2: vm2: Arbitrary code execution via SuppressedError sandbox escape | known affected: 1 known not affected: 1 | 2026-06-30T04:02:06+00:00 | Vulnerability · Source |
| CVE-2026-26318 | redhat_vex | systeminformation: systeminformation: Arbitrary code execution via unsanitized `locate` output | known affected: 1 | 2026-06-30T04:02:06+00:00 | Vulnerability · Source |
| CVE-2026-26280 | redhat_vex | systeminformation: systeminformation: Arbitrary command execution via unsanitized network interface parameter | known affected: 1 | 2026-06-30T04:02:03+00:00 | Vulnerability · Source |
| CVE-2026-26200 | redhat_vex | hdf5: HDF5: Denial of Service due to heap buffer overflow when parsing a crafted h5 file | known affected: 1 | 2026-06-30T04:01:58+00:00 | Vulnerability · Source |
| CVE-2026-26171 | redhat_vex | dotnet: .NET: Security Bypass and Denial of Service Vulnerability | fixed: 1469 known not affected: 6 | 2026-06-30T04:01:54+00:00 | Vulnerability · Source |
| CVE-2026-26158 | redhat_vex | busybox: BusyBox: Arbitrary file modification and privilege escalation via unvalidated tar archive entries | fixed: 3 known affected: 3 | 2026-06-30T04:01:53+00:00 | Vulnerability · Source |
| CVE-2026-26157 | redhat_vex | busybox: BusyBox: Arbitrary file overwrite and potential code execution via incomplete path sanitization | fixed: 3 known affected: 3 | 2026-06-30T04:01:52+00:00 | Vulnerability · Source |
| CVE-2026-26130 | redhat_vex | asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation | fixed: 1466 known not affected: 22 | 2026-06-30T04:01:48+00:00 | Vulnerability · Source |
| CVE-2026-26103 | redhat_vex | udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API | fixed: 146 known not affected: 25 | 2026-06-30T04:01:44+00:00 | Vulnerability · Source |
| CVE-2026-25985 | redhat_vex | ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder | fixed: 33 known affected: 7 known not affected: 18 | 2026-06-30T04:01:30+00:00 | Vulnerability · Source |
| CVE-2026-25965 | redhat_vex | ImageMagick: ImageMagick: Local File Disclosure via Path Traversal | fixed: 33 known affected: 7 known not affected: 18 | 2026-06-30T04:01:28+00:00 | Vulnerability · Source |
| CVE-2026-25949 | redhat_vex | github.com/traefik/traefik: Traefik: Denial of Service via stalled STARTTLS requests | fixed: 4 known not affected: 57 | 2026-06-30T04:01:23+00:00 | Vulnerability · Source |
| CVE-2026-25794 | redhat_vex | ImageMagick: ImageMagick: Denial of service and potential arbitrary code execution via integer overflow in image processing | known affected: 7 known not affected: 7 | 2026-06-30T04:01:15+00:00 | Vulnerability · Source |
| CVE-2026-3338 | redhat_vex | aws-lc: AWS-LC: Signature bypass due to improper validation in PKCS7_verify() | fixed: 2 known affected: 7 known not affected: 6 | 2026-06-30T04:01:14+00:00 | Vulnerability · Source |
| CVE-2026-3336 | redhat_vex | aws-lc: aws-lc: Certificate validation bypass via improper handling of PKCS7 objects | fixed: 2 known affected: 7 known not affected: 6 | 2026-06-30T04:01:11+00:00 | Vulnerability · Source |
| CVE-2026-3304 | redhat_vex | multer: Multer: Denial of Service via malformed requests | fixed: 2 known affected: 1 known not affected: 34 | 2026-06-30T04:01:10+00:00 | Vulnerability · Source |
| CVE-2026-3195 | redhat_vex | qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for CVE-2024-7730) | known not affected: 82 | 2026-06-30T04:01:09+00:00 | Vulnerability · Source |
| CVE-2026-3238 | redhat_vex | samba: Denial of service against AD DC WINS server | known not affected: 174 | 2026-06-30T04:01:06+00:00 | Vulnerability · Source |
| CVE-2026-3104 | redhat_vex | bind: BIND: Denial of Service via specially crafted domain query causing a memory leak | fixed: 4 known not affected: 86 | 2026-06-30T04:00:59+00:00 | Vulnerability · Source |
| CVE-2026-3086 | redhat_vex | GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in H.266 Codec Parser | known affected: 6 known not affected: 16 | 2026-06-30T04:00:57+00:00 | Vulnerability · Source |
| CVE-2026-3084 | redhat_vex | GStreamer: GStreamer: Remote Code Execution via integer underflow in H.266 Codec Parser | known affected: 6 known not affected: 16 | 2026-06-30T04:00:53+00:00 | Vulnerability · Source |
| CVE-2026-3081 | redhat_vex | GStreamer: GStreamer: Arbitrary code execution via H.266 codec parsing stack-based buffer overflow | known not affected: 22 | 2026-06-30T04:00:47+00:00 | Vulnerability · Source |
| CVE-2026-3047 | redhat_vex | org.keycloak.broker.saml: Keycloak SAML broker: Authentication bypass due to disabled SAML client completing IdP-initiated login | fixed: 20 | 2026-06-30T04:00:42+00:00 | Vulnerability · Source |