VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224786 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-6266 | redhat_vex | aap-controller: aap-gateway: Account hijacking and unauthorized access via unverified email linking | fixed: 60 known not affected: 888 | 2026-06-30T03:39:50+00:00 | Vulnerability · Source |
| CVE-2026-6104 | redhat_vex | php: global buffer over-read in mb_convert_encoding() with attacker-supplied encoding | fixed: 201 known not affected: 253 | 2026-06-30T03:39:47+00:00 | Vulnerability · Source |
| CVE-2026-5947 | redhat_vex | bind: SIG(0) validation during query flood may lead to undefined behavior | fixed: 4 known not affected: 86 | 2026-06-30T03:39:36+00:00 | Vulnerability · Source |
| CVE-2026-5946 | redhat_vex | bind: BIND: Denial of Service via specially crafted DNS messages | fixed: 466 known affected: 25 known not affected: 5 | 2026-06-30T03:39:31+00:00 | Vulnerability · Source |
| CVE-2026-5807 | redhat_vex | Vault: Vault: Denial of Service via unauthenticated root token generation or rekey operations | known affected: 6 known not affected: 7 | 2026-06-30T03:39:27+00:00 | Vulnerability · Source |
| CVE-2026-5735 | redhat_vex | thunderbird: firefox: Memory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.2 | known not affected: 12 | 2026-06-30T03:39:20+00:00 | Vulnerability · Source |
| CVE-2026-5734 | redhat_vex | thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 | fixed: 316 known affected: 8 | 2026-06-30T03:39:15+00:00 | Vulnerability · Source |
| CVE-2026-5731 | redhat_vex | thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 | fixed: 316 known affected: 8 | 2026-06-30T03:39:12+00:00 | Vulnerability · Source |
| CVE-2026-5656 | redhat_vex | wireshark: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark | fixed: 74 known not affected: 16 | 2026-06-30T03:39:11+00:00 | Vulnerability · Source |
| CVE-2026-5483 | redhat_vex | odh-dashboard: ODH Dashboard Kubernetes Service Account Exposure | fixed: 13 known not affected: 7 | 2026-06-30T03:38:50+00:00 | Vulnerability · Source |
| CVE-2026-5405 | redhat_vex | wireshark: Heap-based Buffer Overflow in Wireshark | fixed: 74 known not affected: 16 | 2026-06-30T03:38:48+00:00 | Vulnerability · Source |
| CVE-2026-5403 | redhat_vex | wireshark: Heap-based Buffer Overflow in Wireshark | known affected: 4 known not affected: 16 | 2026-06-30T03:38:41+00:00 | Vulnerability · Source |
| CVE-2026-5402 | redhat_vex | wireshark: Heap-based Buffer Overflow in Wireshark | known not affected: 20 | 2026-06-30T03:38:37+00:00 | Vulnerability · Source |
| CVE-2023-29400 | redhat_vex | golang: html/template: improper handling of empty HTML attributes | fixed: 1674 known affected: 43 known not affected: 1086 under investigation: 2 | 2026-06-30T03:22:29+00:00 | Vulnerability · Source |
| CVE-2023-24537 | redhat_vex | golang: go/parser: Infinite loop in parsing | fixed: 2031 known affected: 81 known not affected: 1021 | 2026-06-30T03:22:04+00:00 | Vulnerability · Source |
| CVE-2023-24534 | redhat_vex | golang: net/http, net/textproto: denial of service from excessive memory allocation | fixed: 2028 known affected: 108 known not affected: 1248 | 2026-06-30T03:21:50+00:00 | Vulnerability · Source |
| CVE-2021-44521 | redhat_vex | cassandra: RCE for scripted UDFs | known affected: 26 known not affected: 27 | 2026-06-30T03:21:10+00:00 | Vulnerability · Source |
| CVE-2021-41771 | redhat_vex | golang: debug/macho: invalid dynamic symbol table command can cause panic | fixed: 140 known affected: 22 known not affected: 91 | 2026-06-30T03:20:57+00:00 | Vulnerability · Source |
| CVE-2021-41772 | redhat_vex | golang: archive/zip: Reader.Open panics on empty string | fixed: 208 known affected: 47 known not affected: 1145 | 2026-06-30T03:20:56+00:00 | Vulnerability · Source |
| CVE-2021-38297 | redhat_vex | golang: Command-line arguments may overwrite global data | fixed: 127 known affected: 23 known not affected: 179 | 2026-06-30T03:20:50+00:00 | Vulnerability · Source |
| CVE-2024-34155 | redhat_vex | go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion | fixed: 4813 known affected: 62 known not affected: 2308 | 2026-06-30T03:18:53+00:00 | Vulnerability · Source |
| CVE-2021-29923 | redhat_vex | golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet | fixed: 860 known affected: 169 known not affected: 119 | 2026-06-30T03:17:42+00:00 | Vulnerability · Source |
| CVE-2019-25067 | redhat_vex | podman: Privilege escalation in API component | known affected: 19 known not affected: 37 | 2026-06-30T03:17:20+00:00 | Vulnerability · Source |
| CVE-2022-0696 | redhat_vex | vim: NULL Pointer Dereference in vim prior to 8.2 | known not affected: 30 | 2026-06-30T03:17:17+00:00 | Vulnerability · Source |
| CVE-2022-0629 | redhat_vex | vim: Stack-based Buffer Overflow in vim prior to 8.2. | known not affected: 30 | 2026-06-30T03:17:14+00:00 | Vulnerability · Source |
| CVE-2022-30580 | redhat_vex | golang: os/exec: Code injection in Cmd.Start | known not affected: 319 | 2026-06-30T03:17:08+00:00 | Vulnerability · Source |
| CVE-2022-25844 | redhat_vex | angular: Regular Expression Denial of Service (ReDoS) in angular | known affected: 12 known not affected: 59 | 2026-06-30T03:17:05+00:00 | Vulnerability · Source |
| CVE-2022-3599 | redhat_vex | libtiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c | fixed: 42 known affected: 17 | 2026-06-30T03:17:03+00:00 | Vulnerability · Source |
| CVE-2022-49043 | redhat_vex | libxml: use-after-free in xmlXIncludeAddNode | fixed: 277 known affected: 11 known not affected: 2469 | 2026-06-30T03:16:55+00:00 | Vulnerability · Source |
| CVE-2022-3627 | redhat_vex | libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c | fixed: 84 known affected: 13 | 2026-06-30T03:16:53+00:00 | Vulnerability · Source |
| CVE-2022-3598 | redhat_vex | libtiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c | fixed: 42 known affected: 17 | 2026-06-30T03:16:52+00:00 | Vulnerability · Source |
| CVE-2022-3970 | redhat_vex | libtiff: integer overflow in function TIFFReadRGBATileExt of the file | fixed: 84 known affected: 13 | 2026-06-30T03:16:49+00:00 | Vulnerability · Source |
| CVE-2022-3626 | redhat_vex | libtiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c | fixed: 42 known affected: 11 known not affected: 6 | 2026-06-30T03:16:48+00:00 | Vulnerability · Source |
| CVE-2022-46175 | redhat_vex | json5: Prototype Pollution in JSON5 via Parse Method | fixed: 30 known affected: 51 known not affected: 288 | 2026-06-30T03:16:41+00:00 | Vulnerability · Source |
| CVE-2022-3570 | redhat_vex | libtiff: heap Buffer overflows in tiffcrop.c | fixed: 42 known affected: 17 | 2026-06-30T03:16:40+00:00 | Vulnerability · Source |
| CVE-2022-3597 | redhat_vex | libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix | fixed: 42 known affected: 11 known not affected: 6 | 2026-06-30T03:16:40+00:00 | Vulnerability · Source |
| CVE-2025-32990 | redhat_vex | gnutls: Vulnerability in GnuTLS certtool template parsing | fixed: 371 known affected: 12 known not affected: 23 | 2026-06-30T03:16:16+00:00 | Vulnerability · Source |
| CVE-2025-32989 | redhat_vex | gnutls: Vulnerability in GnuTLS SCT extension parsing | fixed: 296 known affected: 12 known not affected: 29 | 2026-06-30T03:16:14+00:00 | Vulnerability · Source |
| CVE-2025-32988 | redhat_vex | gnutls: Vulnerability in GnuTLS otherName SAN export | fixed: 371 known affected: 12 known not affected: 23 | 2026-06-30T03:16:13+00:00 | Vulnerability · Source |
| CVE-2025-32914 | redhat_vex | libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process | fixed: 285 known affected: 3 | 2026-06-30T03:16:11+00:00 | Vulnerability · Source |
| CVE-2025-32912 | redhat_vex | libsoup: NULL pointer dereference in client when server omits the "nonce" parameter in an Unauthorized response with Digest authentication | fixed: 18 known affected: 12 | 2026-06-30T03:16:09+00:00 | Vulnerability · Source |
| CVE-2025-32910 | redhat_vex | libsoup: Null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an Unauthorized response with Digest authentication | fixed: 10 known affected: 9 known not affected: 4 | 2026-06-30T03:16:07+00:00 | Vulnerability · Source |
| CVE-2025-32907 | redhat_vex | libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header | fixed: 112 known affected: 6 known not affected: 3 | 2026-06-30T03:16:05+00:00 | Vulnerability · Source |
| CVE-2025-32909 | redhat_vex | libsoup: NULL Pointer Dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c | fixed: 10 known affected: 9 known not affected: 4 | 2026-06-30T03:16:05+00:00 | Vulnerability · Source |
| CVE-2025-32053 | redhat_vex | libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() | fixed: 135 known affected: 6 known not affected: 4 | 2026-06-30T03:16:01+00:00 | Vulnerability · Source |
| CVE-2025-32052 | redhat_vex | libsoup: Heap buffer overflow in sniff_unknown() | fixed: 135 known affected: 6 known not affected: 4 | 2026-06-30T03:16:00+00:00 | Vulnerability · Source |
| CVE-2025-32051 | redhat_vex | libsoup: Segmentation fault when parsing malformed data URI | known affected: 6 known not affected: 10 | 2026-06-30T03:15:57+00:00 | Vulnerability · Source |
| CVE-2025-32050 | redhat_vex | libsoup: Integer overflow in append_param_quoted | fixed: 135 known affected: 6 known not affected: 4 | 2026-06-30T03:15:56+00:00 | Vulnerability · Source |
| CVE-2025-32049 | redhat_vex | libsoup: Denial of Service attack to websocket server | fixed: 285 known affected: 3 | 2026-06-30T03:15:53+00:00 | Vulnerability · Source |
| CVE-2025-8114 | redhat_vex | libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation | fixed: 32 known affected: 9 known not affected: 8 | 2026-06-30T03:15:51+00:00 | Vulnerability · Source |