VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224786 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-7519 | redhat_vex | polkit: XML policy file with a large number of nested elements may lead to out-of-bounds write | known affected: 23 | 2026-06-30T03:15:48+00:00 | Vulnerability · Source |
| CVE-2025-7345 | redhat_vex | gdk‑pixbuf: Heap‑buffer‑overflow in gdk‑pixbuf | fixed: 651 known affected: 3 | 2026-06-30T03:15:48+00:00 | Vulnerability · Source |
| CVE-2025-6395 | redhat_vex | gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() | fixed: 367 known affected: 12 known not affected: 23 | 2026-06-30T03:15:45+00:00 | Vulnerability · Source |
| CVE-2025-2784 | redhat_vex | libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content | fixed: 285 known affected: 3 | 2026-06-30T03:15:45+00:00 | Vulnerability · Source |
| CVE-2025-3576 | redhat_vex | krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions | fixed: 914 known affected: 17 known not affected: 2 | 2026-06-30T03:15:43+00:00 | Vulnerability · Source |
| CVE-2025-2487 | redhat_vex | 389-ds-base: null pointer dereference leads to denial of service | fixed: 157 known affected: 17 known not affected: 8 | 2026-06-30T03:15:42+00:00 | Vulnerability · Source |
| CVE-2023-43628 | redhat_vex | gpsd: integer overflow | known not affected: 3 | 2026-06-30T03:15:12+00:00 | Vulnerability · Source |
| CVE-2023-31355 | redhat_vex | linux-firmware: hw:amd: Improper Restriction of Write Operations in SNP Firmware | known not affected: 60 | 2026-06-30T03:15:03+00:00 | Vulnerability · Source |
| CVE-2025-62689 | redhat_vex | libmicrohttpd: GNU libmicrohttpd null pointer dereference | known affected: 14 known not affected: 4 | 2026-06-30T03:12:32+00:00 | Vulnerability · Source |
| CVE-2025-61912 | redhat_vex | python-ldap: python-ldap Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination | known affected: 36 | 2026-06-30T03:12:22+00:00 | Vulnerability · Source |
| CVE-2025-61911 | redhat_vex | python-ldap: sanitization bypass in ldap.filter.escape_filter_chars | known affected: 36 | 2026-06-30T03:12:18+00:00 | Vulnerability · Source |
| CVE-2025-61795 | redhat_vex | tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service | fixed: 56 known affected: 127 | 2026-06-30T03:12:14+00:00 | Vulnerability · Source |
| CVE-2025-61780 | redhat_vex | rubygem-rack: Improper handling of headers in `Rack::Sendfile` may allow proxy bypass | known affected: 42 known not affected: 200 | 2026-06-30T03:12:11+00:00 | Vulnerability · Source |
| CVE-2025-61727 | redhat_vex | golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs | fixed: 28 known affected: 1339 known not affected: 8 | 2026-06-30T03:12:05+00:00 | Vulnerability · Source |
| CVE-2025-61724 | redhat_vex | net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto | fixed: 8 known affected: 1279 | 2026-06-30T03:12:02+00:00 | Vulnerability · Source |
| CVE-2025-61107 | redhat_vex | frr: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c | known affected: 10 | 2026-06-30T03:11:48+00:00 | Vulnerability · Source |
| CVE-2025-61106 | redhat_vex | frr: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c | known affected: 10 | 2026-06-30T03:11:46+00:00 | Vulnerability · Source |
| CVE-2025-61105 | redhat_vex | FRRouting: frr: NULL Pointer Dereference in FRRouting | known affected: 10 | 2026-06-30T03:11:43+00:00 | Vulnerability · Source |
| CVE-2025-61104 | redhat_vex | frr: NULL pointer dereference in show_vty_unknown_tlv() in ospf_ext.c | known affected: 10 | 2026-06-30T03:11:42+00:00 | Vulnerability · Source |
| CVE-2025-61103 | redhat_vex | frr: NULL pointer dereference in show_vty_ext_link_lan_adj_sid() in ospf_ext.c | known affected: 10 | 2026-06-30T03:11:40+00:00 | Vulnerability · Source |
| CVE-2025-61102 | redhat_vex | FRRouting: frr: NULL Pointer Dereference in FRRouting | known affected: 10 | 2026-06-30T03:11:38+00:00 | Vulnerability · Source |
| CVE-2025-61100 | redhat_vex | frr: FRRouting: NULL Pointer Dereference in FRRouting | known affected: 10 | 2026-06-30T03:11:37+00:00 | Vulnerability · Source |
| CVE-2025-61099 | redhat_vex | FRRouting: frr: NULL Pointer Dereference in FRRouting | known affected: 10 | 2026-06-30T03:11:35+00:00 | Vulnerability · Source |
| CVE-2025-61101 | redhat_vex | FRRouting: frr: NULL Pointer Dereference in FRRouting | known affected: 10 | 2026-06-30T03:11:34+00:00 | Vulnerability · Source |
| CVE-2025-60753 | redhat_vex | libarchive: bsdtar hangs and OOMs with zero-length pattern matches | fixed: 3 known affected: 21 | 2026-06-30T03:11:26+00:00 | Vulnerability · Source |
| CVE-2025-59825 | redhat_vex | astral-tokio-tar: astral-tokio-tar path traversal | known affected: 12 | 2026-06-30T03:11:24+00:00 | Vulnerability · Source |
| CVE-2025-59800 | redhat_vex | Artifex Ghostscript: Artifex Ghostscript: Denial of Service via crafted document processing | known affected: 39 | 2026-06-30T03:11:20+00:00 | Vulnerability · Source |
| CVE-2025-59799 | redhat_vex | Artifex Ghostscript: From CVEorg collector | known affected: 39 | 2026-06-30T03:11:19+00:00 | Vulnerability · Source |
| CVE-2025-59798 | redhat_vex | Artifex Ghostscript: Artifex Ghostscript: Denial of Service via stack-based buffer overflow in pdf_write_cmap | known affected: 39 | 2026-06-30T03:11:15+00:00 | Vulnerability · Source |
| CVE-2025-59777 | redhat_vex | libmicrohttpd: GNU libmicrohttpd null pointer dereference | known affected: 9 known not affected: 9 | 2026-06-30T03:11:12+00:00 | Vulnerability · Source |
| CVE-2025-59432 | redhat_vex | ongres-scram: Timing Attack Vulnerability in SCRAM Authentication | fixed: 2 known affected: 17 | 2026-06-30T03:11:05+00:00 | Vulnerability · Source |
| CVE-2025-59362 | redhat_vex | squid-cache: Squid cache buffer overflow | known affected: 17 | 2026-06-30T03:11:02+00:00 | Vulnerability · Source |
| CVE-2025-58050 | redhat_vex | pcre2: PCRE2: heap-buffer-overflow read in match_ref due to missing boundary restoration in SCS | known not affected: 34 | 2026-06-30T03:10:44+00:00 | Vulnerability · Source |
| CVE-2025-56648 | redhat_vex | parcel: Parcel Origin Validation Error | known affected: 33 known not affected: 2 | 2026-06-30T03:10:42+00:00 | Vulnerability · Source |
| CVE-2025-57752 | redhat_vex | nextjs: Next.js Affected by Cache Key Confusion for Image Optimization API Routes | known affected: 30 | 2026-06-30T03:10:42+00:00 | Vulnerability · Source |
| CVE-2025-55754 | redhat_vex | org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation | fixed: 65 known affected: 53 | 2026-06-30T03:10:38+00:00 | Vulnerability · Source |
| CVE-2025-55668 | redhat_vex | org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve | fixed: 65 known affected: 109 | 2026-06-30T03:10:36+00:00 | Vulnerability · Source |
| CVE-2025-55183 | redhat_vex | next: React Server Components: Source code exposure through crafted HTTP request | known not affected: 32 | 2026-06-30T03:10:32+00:00 | Vulnerability · Source |
| CVE-2025-55173 | redhat_vex | nextjs: Next.js Content Injection Vulnerability for Image Optimization | known affected: 30 | 2026-06-30T03:10:29+00:00 | Vulnerability · Source |
| CVE-2025-55159 | redhat_vex | slab: Slab: Out-of-bounds Memory Access Vulnerability | known affected: 21 known not affected: 275 | 2026-06-30T03:10:28+00:00 | Vulnerability · Source |
| CVE-2025-54567 | redhat_vex | qemu-kvm: QEMU SR-IOV Enable Mask Vulnerability | known affected: 21 known not affected: 127 | 2026-06-30T03:10:20+00:00 | Vulnerability · Source |
| CVE-2025-54571 | redhat_vex | mod_security: ModSecurity Content-Type Override Vulnerability | known affected: 9 | 2026-06-30T03:10:19+00:00 | Vulnerability · Source |
| CVE-2025-54566 | redhat_vex | qemu-kvm: QEMU SR-IOV Migration Inconsistency | known affected: 21 known not affected: 127 | 2026-06-30T03:10:16+00:00 | Vulnerability · Source |
| CVE-2025-54409 | redhat_vex | aide: null pointer dereference allows local DoS | known affected: 10 | 2026-06-30T03:10:10+00:00 | Vulnerability · Source |
| CVE-2025-54090 | redhat_vex | httpd: Apache HTTP Server logic flaw | known not affected: 54 | 2026-06-30T03:10:06+00:00 | Vulnerability · Source |
| CVE-2025-53605 | redhat_vex | protobuf: Protobuf: Uncontrolled Recursion Vulnerability | known affected: 83 known not affected: 16 | 2026-06-30T03:10:00+00:00 | Vulnerability · Source |
| CVE-2025-53506 | redhat_vex | tomcat: Apache Tomcat denial of service | fixed: 142 known affected: 28 | 2026-06-30T03:09:57+00:00 | Vulnerability · Source |
| CVE-2025-52891 | redhat_vex | mod_security: ModSecurity segmentation fault | known not affected: 12 | 2026-06-30T03:09:55+00:00 | Vulnerability · Source |
| CVE-2025-52886 | redhat_vex | poppler: Poppler Use After Free Vulnerability | known affected: 67 | 2026-06-30T03:09:54+00:00 | Vulnerability · Source |
| CVE-2025-52885 | redhat_vex | poppler: Use-After-Free in StructTreeRoot class | fixed: 4 known affected: 59 | 2026-06-30T03:09:52+00:00 | Vulnerability · Source |