VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
104719 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-79993 | redhat_vex | zookeeper: Apache ZooKeeper: Unauthorized znode deletion via missing ACL check | fixed: 1 known affected: 9 known not affected: 4 | 2026-10-16T09:48:12+00:00 | Vulnerability · Source |
| CVE-2026-108597 | redhat_vex | cohere: cohere: Arbitrary file overwrite via path traversal in archive extraction | known affected: 2 | 2026-10-16T09:47:03+00:00 | Vulnerability · Source |
| CVE-2026-108575 | redhat_vex | litellm: LiteLLM: Improper authorization via api_key parameter manipulation | known affected: 8 | 2026-10-16T09:47:00+00:00 | Vulnerability · Source |
| CVE-2026-108574 | redhat_vex | litellm: litellm: Authorization bypass via session identifier manipulation | known affected: 8 | 2026-10-16T09:46:59+00:00 | Vulnerability · Source |
| CVE-2026-107717 | redhat_vex | banks: banks: Chat role injection via untrusted template input | known affected: 5 known not affected: 2 | 2026-10-16T09:46:55+00:00 | Vulnerability · Source |
| CVE-2026-107715 | redhat_vex | mechanize: mechanize: Information disclosure via cross-domain HTTP redirect | known affected: 1 | 2026-10-16T09:46:53+00:00 | Vulnerability · Source |
| CVE-2026-107714 | redhat_vex | mechanize: mechanize: Information disclosure via improper redirect scheme and port handling | known affected: 1 | 2026-10-16T09:46:51+00:00 | Vulnerability · Source |
| CVE-2026-107444 | redhat_vex | rubygem-katello: katello: katello: Katello Docker Tags repositories API cross-organization authorization bypass | known affected: 8 known not affected: 1 | 2026-10-16T09:46:49+00:00 | Vulnerability · Source |
| CVE-2026-107445 | redhat_vex | rubygem-katello: katello: katello: Katello Flatpak Remote Repositories API cross-organization authorization bypass | known affected: 8 known not affected: 1 | 2026-10-16T09:46:49+00:00 | Vulnerability · Source |
| CVE-2026-107399 | redhat_vex | mechanize: mechanize: Information disclosure via cross-origin meta refresh | known affected: 1 | 2026-10-16T09:46:45+00:00 | Vulnerability · Source |
| CVE-2026-106033 | redhat_vex | ansible: ansible-ui: Ansible UI DOM XSS in /redirect next parameter | known affected: 8 known not affected: 1 | 2026-10-16T09:46:43+00:00 | Vulnerability · Source |
| CVE-2026-103754 | redhat_vex | ansible-runner: ansible-runner: path traversal and symlink escape in unstream_dir() allows file write outside the target directory | known affected: 2 | 2026-10-16T09:46:41+00:00 | Vulnerability · Source |
| CVE-2026-102325 | redhat_vex | chromium-browser: skia: chromium-browser: Uninitialized resource in Skia | known affected: 27 known not affected: 9 | 2026-10-16T09:46:40+00:00 | Vulnerability · Source |
| CVE-2026-101295 | redhat_vex | oc-mirror: oc-mirror: Path traversal / arbitrary file write in operator catalog image extraction | under investigation: 3 | 2026-10-16T09:46:38+00:00 | Vulnerability · Source |
| CVE-2026-102277 | redhat_vex | brace-expansion: brace-expansion: Denial of Service via crafted brace patterns | fixed: 53 known affected: 449 known not affected: 12 | 2026-10-16T09:46:37+00:00 | Vulnerability · Source |
| CVE-2026-100821 | redhat_vex | firefox: thunderbird: Site isolation issue in the Panning and Zooming component | known affected: 23 | 2026-10-16T09:46:32+00:00 | Vulnerability · Source |
| CVE-2026-100819 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the XPCOM component | known affected: 23 | 2026-10-16T09:46:30+00:00 | Vulnerability · Source |
| CVE-2026-100818 | redhat_vex | firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component | known affected: 23 | 2026-10-16T09:46:28+00:00 | Vulnerability · Source |
| CVE-2026-100816 | redhat_vex | firefox: Site isolation issue in the DOM: Networking component | known not affected: 12 | 2026-10-16T09:46:26+00:00 | Vulnerability · Source |
| CVE-2026-100815 | redhat_vex | firefox: Use-after-free in the CSS Parsing and Computation component | known not affected: 12 | 2026-10-16T09:46:23+00:00 | Vulnerability · Source |
| CVE-2026-100814 | redhat_vex | firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component | known not affected: 12 | 2026-10-16T09:46:22+00:00 | Vulnerability · Source |
| CVE-2026-100813 | redhat_vex | firefox: Invalid pointer in the JavaScript Engine: JIT component | known not affected: 12 | 2026-10-16T09:46:20+00:00 | Vulnerability · Source |
| CVE-2026-100812 | redhat_vex | firefox: Denial-of-service in the Graphics component | known not affected: 12 | 2026-10-16T09:46:19+00:00 | Vulnerability · Source |
| CVE-2026-100810 | redhat_vex | firefox: Other issue in the DevTools component | known not affected: 12 | 2026-10-16T09:46:17+00:00 | Vulnerability · Source |
| CVE-2026-100804 | redhat_vex | firefox: Sandbox escape due to use-after-free in the Preferences: Backend component | known not affected: 12 | 2026-10-16T09:46:15+00:00 | Vulnerability · Source |
| CVE-2026-100807 | redhat_vex | firefox: thunderbird: Privilege escalation in the DOM: Service Workers component | known affected: 23 | 2026-10-16T09:46:14+00:00 | Vulnerability · Source |
| CVE-2026-100805 | redhat_vex | firefox: Race condition, use-after-free in the Audio/Video component | known not affected: 12 | 2026-10-16T09:46:13+00:00 | Vulnerability · Source |
| CVE-2026-100803 | redhat_vex | firefox: thunderbird: Same-origin policy bypass in the WebExtensions component | known affected: 23 | 2026-10-16T09:46:11+00:00 | Vulnerability · Source |
| CVE-2026-100802 | redhat_vex | firefox: Uninitialized memory in the Graphics: WebGPU component | known not affected: 12 | 2026-10-16T09:46:09+00:00 | Vulnerability · Source |
| CVE-2026-100801 | redhat_vex | firefox: thunderbird: Privilege escalation in the DLL Services component | known affected: 23 | 2026-10-16T09:46:04+00:00 | Vulnerability · Source |
| CVE-2026-100800 | redhat_vex | firefox: Sandbox escape due to use-after-free in the Disability Access APIs component | known not affected: 12 | 2026-10-16T09:46:00+00:00 | Vulnerability · Source |
| CVE-2026-100799 | redhat_vex | firefox: Uninitialized memory in the Graphics: WebGPU component | known not affected: 12 | 2026-10-16T09:45:59+00:00 | Vulnerability · Source |
| CVE-2026-100798 | redhat_vex | firefox: Cryptography misuse in Storage: Quota Manager component | known not affected: 12 | 2026-10-16T09:45:57+00:00 | Vulnerability · Source |
| CVE-2026-100795 | redhat_vex | firefox: Denial-of-service in the Networking component | known not affected: 12 | 2026-10-16T09:45:55+00:00 | Vulnerability · Source |
| CVE-2026-100797 | redhat_vex | firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component | known affected: 23 | 2026-10-16T09:45:54+00:00 | Vulnerability · Source |
| CVE-2026-100794 | redhat_vex | firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component | known affected: 23 | 2026-10-16T09:45:50+00:00 | Vulnerability · Source |
| CVE-2026-15911 | redhat_vex | confluent-kafka: confluent-kafka: Information disclosure via improper TLS certificate validation in HashiCorp Vault integration | known affected: 5 | 2026-10-16T09:45:37+00:00 | Vulnerability · Source |
| CVE-2026-93994 | redhat_vex | org.apache.sshd/sshd-core: Apache MINA SSHD: Authentication bypass via duplicate public key presentation | fixed: 5 known affected: 16 known not affected: 20 | 2026-10-16T09:45:22+00:00 | Vulnerability · Source |
| CVE-2026-93576 | redhat_vex | io.netty/netty-codec-smtp: Netty netty-codec-smtp — SMTP command-name field is not CRLF-validated (incomplete fix of CVE-2025-59419) | known affected: 6 known not affected: 1 | 2026-10-16T09:45:18+00:00 | Vulnerability · Source |
| CVE-2026-93575 | redhat_vex | io.netty/netty-codec-mqtt: Netty: Resource Exhaustion in MqttDecoder | known affected: 7 known not affected: 1 | 2026-10-16T09:45:17+00:00 | Vulnerability · Source |
| CVE-2026-93572 | redhat_vex | io.netty/netty-codec-redis: Netty: RedisArrayAggregator nested RESP headers multiply patched preallocation limits | known affected: 6 known not affected: 1 | 2026-10-16T09:45:13+00:00 | Vulnerability · Source |
| CVE-2026-93563 | redhat_vex | io.netty/netty-codec-smtp: Netty: Unbounded multi-line response accumulation in SmtpResponseDecoder leads to memory-exhaustion DoS | known affected: 6 known not affected: 1 | 2026-10-16T09:45:12+00:00 | Vulnerability · Source |
| CVE-2026-93561 | redhat_vex | io.netty/netty-codec-memcache: Netty: Memcache binary codec signed/unsigned type mismatch causes frame desynchronization and response smuggling | known affected: 6 known not affected: 1 | 2026-10-16T09:45:10+00:00 | Vulnerability · Source |
| CVE-2026-93494 | redhat_vex | io.netty/netty-codec-stomp: Netty: ByteBuf Leak in StompSubframeDecoder When a Frame Body Is Never Terminated | known affected: 6 known not affected: 1 | 2026-10-16T09:45:08+00:00 | Vulnerability · Source |
| CVE-2026-84939 | redhat_vex | org.apache.freemarker/freemarker: Apache FreeMarker: Path traversal via malformed locale identifier | fixed: 2 known affected: 1 known not affected: 2077 under investigation: 1 | 2026-10-16T09:44:36+00:00 | Vulnerability · Source |
| CVE-2026-108039 | redhat_vex | org.apache.cxf/cxf-core: Apache CXF: Denial of Service via unrestricted XML parsing | known affected: 10 known not affected: 1 | 2026-10-16T09:44:09+00:00 | Vulnerability · Source |
| CVE-2026-107728 | redhat_vex | strawberry-graphql: strawberry-graphql: Authorization bypass via improper permission evaluation | known affected: 1 | 2026-10-16T09:44:07+00:00 | Vulnerability · Source |
| CVE-2026-107937 | redhat_vex | org.apache.cxf/cxf-core: Apache CXF: Denial of Service via large multipart attachment headers | known affected: 10 known not affected: 1 | 2026-10-16T09:44:05+00:00 | Vulnerability · Source |
| CVE-2026-107282 | redhat_vex | org.asynchttpclient/async-http-client: AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host | known not affected: 2 | 2026-10-16T09:44:02+00:00 | Vulnerability · Source |
| CVE-2026-105816 | redhat_vex | github.com/hashicorp/vault: Vault: Arbitrary code execution via plugin catalog entries in restored snapshots | known affected: 2 known not affected: 1 | 2026-10-16T09:44:00+00:00 | Vulnerability · Source |