VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
104717 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-50851 | redhat_vex | kernel: Linux kernel (vhost_vdpa): Denial of service via large memory unmap | known affected: 156 known not affected: 119 | 2026-10-16T18:17:22+00:00 | Vulnerability · Source |
| CVE-2022-48811 | redhat_vex | kernel: ibmvnic: don't release napi in __ibmvnic_open() | known affected: 184 known not affected: 14 | 2026-10-16T18:17:18+00:00 | Vulnerability · Source |
| CVE-2022-48804 | redhat_vex | kernel: vt_ioctl: fix array_index_nospec in vt_setactivate | fixed: 709 known affected: 50 known not affected: 22 | 2026-10-16T18:17:12+00:00 | Vulnerability · Source |
| CVE-2021-47219 | redhat_vex | kernel: scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() | known affected: 90 known not affected: 108 | 2026-10-16T18:17:07+00:00 | Vulnerability · Source |
| CVE-2021-46960 | redhat_vex | kernel: cifs: Return correct error code from smb2_get_enc_key | fixed: 146 known affected: 74 known not affected: 124 | 2026-10-16T18:17:04+00:00 | Vulnerability · Source |
| CVE-2026-67419 | redhat_vex | rabbitmq-server: rabbitmq-server: Denial of Service via consecutive wildcards in topic binding keys | fixed: 3 known affected: 8 | 2026-10-16T18:14:57+00:00 | Vulnerability · Source |
| CVE-2026-101044 | redhat_vex | pnpm: pnpm: Arbitrary file creation outside project directory via lockfile path traversal | known affected: 4 known not affected: 10 | 2026-10-16T18:14:37+00:00 | Vulnerability · Source |
| CVE-2023-3865 | redhat_vex | kernel: Out of bounds read in smb2_write | known not affected: 275 | 2026-10-16T18:14:27+00:00 | Vulnerability · Source |
| CVE-2023-54286 | redhat_vex | kernel: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace | fixed: 120 known not affected: 243 | 2026-10-16T18:14:24+00:00 | Vulnerability · Source |
| CVE-2021-47605 | redhat_vex | kernel: vduse: fix memory corruption in vduse_dev_ioctl() | known not affected: 198 | 2026-10-16T18:14:20+00:00 | Vulnerability · Source |
| CVE-2017-5436 | redhat_vex | Mozilla: graphite2: Out-of-bounds write with malicious font in Graphite 2 (MFSA 2017-11, MFSA 2017-12) | fixed: 98 known affected: 2 | 2026-10-16T18:14:18+00:00 | Vulnerability · Source |
| CVE-2026-91142 | redhat_vex | cockpit: Cockpit: Unauthorized modification of login records via integer overflow | known affected: 35 | 2026-10-16T17:43:47+00:00 | Vulnerability · Source |
| CVE-2021-4454 | redhat_vex | kernel: can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate | known affected: 108 known not affected: 167 | 2026-10-16T17:43:42+00:00 | Vulnerability · Source |
| CVE-2026-90949 | redhat_vex | gimp: gimp: heap-based buffer overflow in PSP loader due to selection-channel geometry mismatch | known affected: 6 known not affected: 26 | 2026-10-16T17:43:14+00:00 | Vulnerability · Source |
| CVE-2026-43961 | redhat_vex | vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution | fixed: 17 known affected: 32 known not affected: 2 | 2026-10-16T17:42:51+00:00 | Vulnerability · Source |
| CVE-2025-49812 | redhat_vex | httpd: HTTP Session Hijack via a TLS upgrade | fixed: 833 | 2026-10-16T17:37:02+00:00 | Vulnerability · Source |
| CVE-2024-45812 | redhat_vex | vite: XSS via DOM Clobbering gadget found in vite bundled scripts | fixed: 8 known affected: 2 known not affected: 65 | 2026-10-16T17:37:00+00:00 | Vulnerability · Source |
| CVE-2024-45811 | redhat_vex | vite: server.fs.deny is bypassed when using `?import&raw` | fixed: 8 known affected: 2 known not affected: 65 | 2026-10-16T17:36:58+00:00 | Vulnerability · Source |
| CVE-2026-35536 | redhat_vex | tornado: Tornado: Cookie attribute injection due to improper handling of cookie arguments | fixed: 198 known affected: 11 known not affected: 607 | 2026-10-16T17:35:08+00:00 | Vulnerability · Source |
| CVE-2026-18611 | redhat_vex | data-science-pipelines-operator: DSPO: Cryptographically weak secret generation (math/rand) for DB and S3 credentials | fixed: 19 known not affected: 831 | 2026-10-16T17:35:04+00:00 | Vulnerability · Source |
| CVE-2026-93492 | redhat_vex | io.netty/netty-codec-http2: Netty: HTTP/2 HpackEncoder DoS with large table size | fixed: 3 known affected: 9 known not affected: 2 | 2026-10-16T17:35:02+00:00 | Vulnerability · Source |
| CVE-2026-93579 | redhat_vex | io.netty/netty-codec-http2: Netty: HTTP/2 header field values are not validated by default (CR/LF/NUL passthrough) | fixed: 3 known affected: 9 known not affected: 2 | 2026-10-16T17:34:57+00:00 | Vulnerability · Source |
| CVE-2026-31411 | redhat_vex | kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() | fixed: 1420 known affected: 50 known not affected: 77 | 2026-10-16T17:34:42+00:00 | Vulnerability · Source |
| CVE-2026-68086 | redhat_vex | kernel: mm/khugepaged: write all dirty file folios when collapsing | fixed: 919 known affected: 70 known not affected: 42 | 2026-10-16T17:34:35+00:00 | Vulnerability · Source |
| CVE-2026-64490 | redhat_vex | kernel: ALSA: virtio: Validate control metadata from the device | fixed: 919 known affected: 22 known not affected: 90 | 2026-10-16T17:34:33+00:00 | Vulnerability · Source |
| CVE-2026-63984 | redhat_vex | kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() | fixed: 1148 known affected: 113 known not affected: 76 | 2026-10-16T17:34:29+00:00 | Vulnerability · Source |
| CVE-2026-43020 | redhat_vex | kernel: Bluetooth: MGMT: validate LTK enc_size on load | fixed: 1141 known affected: 50 known not affected: 14 | 2026-10-16T17:34:14+00:00 | Vulnerability · Source |
| CVE-2026-31772 | redhat_vex | kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync | fixed: 919 known affected: 22 known not affected: 90 | 2026-10-16T17:34:13+00:00 | Vulnerability · Source |
| CVE-2026-66804 | redhat_vex | console: Authenticated SSRF via user-controlled towerHost in /ansibletower handler | fixed: 48 known not affected: 1752 | 2026-10-16T17:26:04+00:00 | Vulnerability · Source |
| CVE-2026-57516 | redhat_vex | ray: Ray: Remote code execution via unsafe deserialization in WebDataset reader | fixed: 10 known affected: 14 known not affected: 7 | 2026-10-16T17:25:52+00:00 | Vulnerability · Source |
| CVE-2026-47242 | redhat_vex | net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation | fixed: 1138 known not affected: 9 | 2026-10-16T17:25:46+00:00 | Vulnerability · Source |
| CVE-2026-50811 | redhat_vex | freetype: FreeType: Out-of-bounds read vulnerability in font processing | fixed: 7 | 2026-10-16T17:25:46+00:00 | Vulnerability · Source |
| CVE-2026-4944 | redhat_vex | vllm: vllm-project/vllm: Remote Code Execution via malicious HuggingFace model repositories | known affected: 10 known not affected: 16 | 2026-10-16T17:25:43+00:00 | Vulnerability · Source |
| CVE-2026-33938 | redhat_vex | handlebars: Handlebars: Arbitrary code execution via @partial-block overwrite | fixed: 16 known affected: 15 known not affected: 180 | 2026-10-16T17:25:36+00:00 | Vulnerability · Source |
| CVE-2026-33937 | redhat_vex | handlebars.js: Handlebars: Remote Code Execution via crafted Abstract Syntax Tree object in compile() | fixed: 16 known affected: 21 known not affected: 174 | 2026-10-16T17:25:32+00:00 | Vulnerability · Source |
| CVE-2026-15416 | redhat_vex | argo-cd: Argo CD unauthenticated remote code execution in repo-server via GenerateManifest gRPC endpoint | fixed: 8 known affected: 5 known not affected: 42 | 2026-10-16T17:25:31+00:00 | Vulnerability · Source |
| CVE-2022-36087 | redhat_vex | python-oauthlib: DoS when attacker provides malicious IPV6 URI | fixed: 187 known affected: 10 known not affected: 14 | 2026-10-16T17:19:30+00:00 | Vulnerability · Source |
| CVE-2026-48937 | redhat_vex | nodejs: Node.js HTTP/2 Server: Denial of Service due to continued data acceptance after GOAWAY frame | fixed: 316 known affected: 6 known not affected: 5 | 2026-10-16T17:15:19+00:00 | Vulnerability · Source |
| CVE-2026-80792 | redhat_vex | kernel: ipv6: fix use-after-free in ip6_finish_output2() | fixed: 1148 known affected: 100 known not affected: 91 | 2026-10-16T17:13:31+00:00 | Vulnerability · Source |
| CVE-2026-68480 | redhat_vex | kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability | fixed: 1800 known affected: 50 known not affected: 14 | 2026-10-16T17:13:24+00:00 | Vulnerability · Source |
| CVE-2026-63993 | redhat_vex | kernel: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() | fixed: 919 known affected: 22 known not affected: 90 | 2026-10-16T17:13:09+00:00 | Vulnerability · Source |
| CVE-2026-46189 | redhat_vex | kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path | fixed: 2174 known affected: 50 known not affected: 14 | 2026-10-16T17:12:45+00:00 | Vulnerability · Source |
| CVE-2026-3909 | redhat_vex | chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia | fixed: 92 known affected: 4 known not affected: 21 | 2026-10-16T17:08:03+00:00 | Vulnerability · Source |
| CVE-2026-94114 | suse_vex | SUSE CVE CVE-2026-94114 | known affected: 47 recommended: 8 | 2026-10-16T16:30:07+00:00 | Vulnerability · Source |
| CVE-2026-97222 | suse_vex | SUSE CVE CVE-2026-97222 | No product status | 2026-10-16T16:29:59+00:00 | Vulnerability · Source |
| CVE-2026-97617 | suse_vex | SUSE CVE CVE-2026-97617 | known affected: 29 known not affected: 318 recommended: 4 | 2026-10-16T16:29:45+00:00 | Vulnerability · Source |
| CVE-2026-98014 | suse_vex | SUSE CVE CVE-2026-98014 | known affected: 232 known not affected: 115 recommended: 4 | 2026-10-16T16:29:26+00:00 | Vulnerability · Source |
| CVE-2026-98076 | suse_vex | SUSE CVE CVE-2026-98076 | known affected: 204 known not affected: 143 recommended: 4 | 2026-10-16T16:29:21+00:00 | Vulnerability · Source |
| CVE-2026-98314 | suse_vex | SUSE CVE CVE-2026-98314 | known affected: 269 known not affected: 78 | 2026-10-16T16:29:12+00:00 | Vulnerability · Source |
| CVE-2026-98335 | suse_vex | SUSE CVE CVE-2026-98335 | known affected: 282 known not affected: 65 | 2026-10-16T16:29:10+00:00 | Vulnerability · Source |