VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
81638 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-98173 | redhat_vex | kernel: smb: client: fix use-after-free of iface in cifs_try_adding_channels() | known affected: 234 known not affected: 43 | 2026-10-08T08:52:13+00:00 | Vulnerability · Source |
| CVE-2026-97404 | redhat_vex | zaqar: OpenStack Zaqar: authentication bypass via empty URL-Signature header | known affected: 4 | 2026-10-08T08:52:11+00:00 | Vulnerability · Source |
| CVE-2025-61163 | redhat_vex | Cohere North AI: Cohere North AI: Information disclosure via improper Origin header validation | known not affected: 1 | 2026-10-08T08:52:07+00:00 | Vulnerability · Source |
| CVE-2017-7214 | redhat_vex | openstack-nova: Sensitive information included in legacy notification exception contexts | fixed: 43 known affected: 42 known not affected: 37 | 2026-10-08T08:52:01+00:00 | Vulnerability · Source |
| CVE-2026-78030 | redhat_vex | perl-DBI: DBI: Loading of arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM | known affected: 10 | 2026-10-08T08:51:42+00:00 | Vulnerability · Source |
| CVE-2025-61164 | redhat_vex | Cohere North AI: Cohere North AI: Information Leak via WebSocket Endpoint | known not affected: 1 | 2026-10-08T08:51:38+00:00 | Vulnerability · Source |
| CVE-2022-3100 | redhat_vex | openstack-barbican: access policy bypass via query string injection | fixed: 23 known not affected: 19 | 2026-10-08T08:51:32+00:00 | Vulnerability · Source |
| CVE-2025-61162 | redhat_vex | Cohere North AI: Cohere North AI: Arbitrary user information overwrite via incorrect access control | known not affected: 1 | 2026-10-08T08:51:32+00:00 | Vulnerability · Source |
| CVE-2021-40085 | redhat_vex | openstack-neutron: arbitrary dnsmasq reconfiguration via extra_dhcp_opts | fixed: 56 known not affected: 15 | 2026-10-08T08:51:30+00:00 | Vulnerability · Source |
| CVE-2020-17376 | redhat_vex | openstack-nova: Soft reboot after live-migration reverts instance to original source domain XML | fixed: 93 known affected: 13 known not affected: 13 | 2026-10-08T08:51:18+00:00 | Vulnerability · Source |
| CVE-2015-1195 | redhat_vex | openstack-glance: unrestricted path traversal flaw (incomplete fix for CVE-2014-9493) (OSSA 2015-002) | known not affected: 14 | 2026-10-08T08:51:18+00:00 | Vulnerability · Source |
| CVE-2014-9493 | redhat_vex | openstack-glance: unrestricted path traversal flaw | fixed: 12 known affected: 1 known not affected: 11 | 2026-10-08T08:51:18+00:00 | Vulnerability · Source |
| CVE-2016-0737 | redhat_vex | openstack-swift: Client to proxy DoS through Large Objects | fixed: 42 known affected: 18 known not affected: 6 | 2026-10-08T08:51:18+00:00 | Vulnerability · Source |
| CVE-2016-2140 | redhat_vex | openstack-nova: Host data leak through resize/migration | fixed: 65 known not affected: 59 | 2026-10-08T08:51:18+00:00 | Vulnerability · Source |
| CVE-2026-18212 | redhat_vex | keycloak-services: keycloak-services: SAML Redirect DEFLATE helpers leak native zlib state | fixed: 20 known affected: 2 known not affected: 1 | 2026-10-08T08:23:57+00:00 | Vulnerability · Source |
| CVE-2026-15573 | redhat_vex | keycloak-services: keycloak-services: Authorization bypass via unnormalized URI matching in PathMatcher | fixed: 20 known affected: 2 known not affected: 1 | 2026-10-08T08:23:52+00:00 | Vulnerability · Source |
| CVE-2026-5680 | redhat_vex | undertow-core: Undertow: Denial of Service via WebSocket permessage-deflate processing | fixed: 443 known affected: 12 known not affected: 12 | 2026-10-08T08:23:43+00:00 | Vulnerability · Source |
| CVE-2026-15565 | redhat_vex | undertow: undertow-websockets: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method | fixed: 748 known affected: 5 known not affected: 2189 | 2026-10-08T08:23:43+00:00 | Vulnerability · Source |
| CVE-2026-17615 | redhat_vex | resteasy-core: RESTeasy SourceProvider remote unauthenticated file read | fixed: 20 known affected: 8 known not affected: 7 | 2026-10-08T08:07:17+00:00 | Vulnerability · Source |
| CVE-2026-84641 | redhat_vex | thunderbird: Information disclosure due to malicious IMAP server response | fixed: 78 known affected: 5 | 2026-10-08T08:04:00+00:00 | Vulnerability · Source |
| CVE-2026-84640 | redhat_vex | thunderbird: One byte overflow read in mail parser | fixed: 78 known affected: 5 | 2026-10-08T08:03:45+00:00 | Vulnerability · Source |
| CVE-2026-84131 | redhat_vex | firefox: Privilege escalation due to invalid pointer in the Graphics component | fixed: 238 known affected: 8 | 2026-10-08T08:03:43+00:00 | Vulnerability · Source |
| CVE-2026-84639 | redhat_vex | thunderbird: Uninitialized memory in MIME parsing | fixed: 78 known affected: 5 | 2026-10-08T08:03:40+00:00 | Vulnerability · Source |
| CVE-2026-84145 | redhat_vex | firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 | fixed: 238 known affected: 8 | 2026-10-08T08:03:37+00:00 | Vulnerability · Source |
| CVE-2026-84143 | redhat_vex | firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 | fixed: 238 known affected: 8 | 2026-10-08T08:03:36+00:00 | Vulnerability · Source |
| CVE-2026-84122 | redhat_vex | firefox: Use-after-free in the Audio/Video component | fixed: 238 known affected: 8 | 2026-10-08T08:03:33+00:00 | Vulnerability · Source |
| CVE-2026-84124 | redhat_vex | firefox: Use-after-free in the DOM: Core & HTML component | fixed: 238 known affected: 6 known not affected: 2 | 2026-10-08T08:03:32+00:00 | Vulnerability · Source |
| CVE-2026-84121 | redhat_vex | firefox: Sandbox escape due to use-after-free in the DOM: Security component | fixed: 238 known affected: 8 | 2026-10-08T08:03:27+00:00 | Vulnerability · Source |
| CVE-2026-16365 | redhat_vex | firefox: thunderbird: Privilege escalation in the DOM: Workers component | fixed: 238 known affected: 8 | 2026-10-08T08:03:21+00:00 | Vulnerability · Source |
| CVE-2026-84119 | redhat_vex | firefox: Sandbox escape due to use-after-free in the DOM: Navigation component | fixed: 238 known affected: 8 | 2026-10-08T08:03:21+00:00 | Vulnerability · Source |
| CVE-2026-84120 | redhat_vex | firefox: Use-after-free in the Audio/Video component | fixed: 238 known affected: 8 | 2026-10-08T08:03:21+00:00 | Vulnerability · Source |
| CVE-2026-75874 | redhat_vex | firefox: thunderbird: Sandbox escape in the Remote Settings Client component | fixed: 238 known affected: 8 | 2026-10-08T08:03:21+00:00 | Vulnerability · Source |
| CVE-2026-106063 | redhat_vex | GIMP: GIMP: heap buffer overflow in DICOM export on oversized image dimensions | known affected: 36 | 2026-10-08T07:53:49+00:00 | Vulnerability · Source |
| CVE-2026-106061 | redhat_vex | gimp: GIMP: heap buffer over-read in X cursor (XMC) thumbnail loader on crafted file | known affected: 36 | 2026-10-08T07:53:44+00:00 | Vulnerability · Source |
| CVE-2026-86246 | redhat_vex | tomcat-native: Apache Tomcat Native: Weakened TLS connection security via insecure default configuration | known affected: 3 | 2026-10-08T07:53:29+00:00 | Vulnerability · Source |
| CVE-2026-106062 | redhat_vex | gimp: GIMP: heap buffer overflow in DDS loader on crafted DirectDraw Surface file | known affected: 36 | 2026-10-08T07:53:25+00:00 | Vulnerability · Source |
| CVE-2023-54404 | redhat_vex | zod: zod: Denial of service via unbounded array validation | known affected: 57 known not affected: 62 | 2026-10-08T07:52:40+00:00 | Vulnerability · Source |
| CVE-2026-74582 | redhat_vex | kernel: packet: use consistent hard_header_len in non-ring send paths | fixed: 1368 known affected: 185 known not affected: 43 | 2026-10-08T07:16:31+00:00 | Vulnerability · Source |
| CVE-2026-107449 | redhat_vex | heimdall: heimdall: Information disclosure via server-side request forgery | known not affected: 1 | 2026-10-08T07:06:29+00:00 | Vulnerability · Source |
| CVE-2026-104074 | redhat_vex | coturn: coturn: Information disclosure via uninitialized memory in error response | known not affected: 1 | 2026-10-08T07:02:34+00:00 | Vulnerability · Source |
| CVE-2026-102408 | redhat_vex | elasticsearch: elasticsearch: Denial of Service via crafted regular expressions in ES|QL CHUNK function | known affected: 1 known not affected: 2 | 2026-10-08T06:48:41+00:00 | Vulnerability · Source |
| CVE-2026-86243 | redhat_vex | tomcat-native: Apache Tomcat Native: Denial of Service via buffer over-read during TLS handshake | known affected: 3 | 2026-10-08T06:48:31+00:00 | Vulnerability · Source |
| CVE-2026-102404 | redhat_vex | elasticsearch: Elasticsearch: Denial of Service via uncontrolled memory consumption from crafted queries | known affected: 1 known not affected: 2 | 2026-10-08T06:17:49+00:00 | Vulnerability · Source |
| CVE-2026-106510 | redhat_vex | plugin-techdocs-node: plugin-techdocs-node: Arbitrary code execution via crafted mkdocs configuration | known affected: 3 | 2026-10-08T06:03:33+00:00 | Vulnerability · Source |
| CVE-2026-93374 | redhat_vex | chromium-browser: chromium: use-after-free in Dawn on Android | known not affected: 1 | 2026-10-08T06:03:27+00:00 | Vulnerability · Source |
| CVE-2026-106556 | redhat_vex | plugin-techdocs-node: plugin-techdocs-node: arbitrary command execution via configuration sanitization bypass | known affected: 3 | 2026-10-08T05:50:55+00:00 | Vulnerability · Source |
| CVE-2026-93373 | redhat_vex | chromium-browser: chromium-browser: Arbitrary code execution outside the sandbox via crafted extension | known not affected: 1 | 2026-10-08T05:20:24+00:00 | Vulnerability · Source |
| CVE-2026-93372 | redhat_vex | chromium-browser: chromium-browser: arbitrary code execution via buffer overflow in WebGL | known not affected: 1 | 2026-10-08T05:20:23+00:00 | Vulnerability · Source |
| CVE-2026-106215 | redhat_vex | chromium-browser: Uninitialized resource in ANGLE | known not affected: 1 | 2026-10-08T04:21:23+00:00 | Vulnerability · Source |
| CVE-2026-106308 | redhat_vex | chromium-browser: Incorrect reference resolution in Autofill | known not affected: 1 | 2026-10-08T04:21:23+00:00 | Vulnerability · Source |