VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
104719 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-42040 | suse_vex | SUSE CVE CVE-2024-42040 | known affected: 98 | 2026-10-16T01:50:45+00:00 | Vulnerability · Source |
| CVE-2026-94638 | microsoft_vex | Apache Thrift: PHP `thrift_protocol` C extension ignores the configured `maxStringSize` | known not affected: 1 | 2026-10-16T01:50:44+00:00 | Vulnerability · Source |
| CVE-2026-94653 | microsoft_vex | Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic) | known not affected: 1 | 2026-10-16T01:50:43+00:00 | Vulnerability · Source |
| CVE-2024-42063 | suse_vex | SUSE CVE CVE-2024-42063 | known not affected: 14 recommended: 47 | 2026-10-16T01:50:43+00:00 | Vulnerability · Source |
| CVE-2024-42066 | suse_vex | SUSE CVE CVE-2024-42066 | known not affected: 379 recommended: 47 | 2026-10-16T01:50:41+00:00 | Vulnerability · Source |
| CVE-2026-86537 | microsoft_vex | Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service | known not affected: 1 | 2026-10-16T01:50:40+00:00 | Vulnerability · Source |
| CVE-2024-42068 | suse_vex | SUSE CVE CVE-2024-42068 | No product status | 2026-10-16T01:50:40+00:00 | Vulnerability · Source |
| CVE-2026-94639 | microsoft_vex | Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget) | known not affected: 1 | 2026-10-16T01:50:38+00:00 | Vulnerability · Source |
| CVE-2024-42070 | suse_vex | SUSE CVE CVE-2024-42070 | known affected: 580 known not affected: 6 recommended: 757 | 2026-10-16T01:50:38+00:00 | Vulnerability · Source |
| CVE-2026-96990 | microsoft_vex | Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound | known not affected: 1 | 2026-10-16T01:50:36+00:00 | Vulnerability · Source |
| CVE-2024-42072 | suse_vex | SUSE CVE CVE-2024-42072 | known not affected: 379 | 2026-10-16T01:50:36+00:00 | Vulnerability · Source |
| CVE-2026-66055 | microsoft_vex | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language) | fixed: 2 known affected: 2 known not affected: 3 | 2026-10-16T01:50:34+00:00 | Vulnerability · Source |
| CVE-2024-42073 | suse_vex | SUSE CVE CVE-2024-42073 | known affected: 394 known not affected: 354 recommended: 355 | 2026-10-16T01:50:34+00:00 | Vulnerability · Source |
| CVE-2024-42075 | suse_vex | SUSE CVE CVE-2024-42075 | known not affected: 379 | 2026-10-16T01:50:32+00:00 | Vulnerability · Source |
| CVE-2024-42076 | suse_vex | SUSE CVE CVE-2024-42076 | known affected: 407 known not affected: 237 recommended: 643 | 2026-10-16T01:50:30+00:00 | Vulnerability · Source |
| CVE-2026-94637 | microsoft_vex | Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame | fixed: 2 known affected: 3 known not affected: 2 | 2026-10-16T01:50:29+00:00 | Vulnerability · Source |
| CVE-2024-42077 | suse_vex | SUSE CVE CVE-2024-42077 | known affected: 443 known not affected: 20 recommended: 965 | 2026-10-16T01:50:28+00:00 | Vulnerability · Source |
| CVE-2024-42078 | suse_vex | SUSE CVE CVE-2024-42078 | known not affected: 379 | 2026-10-16T01:50:26+00:00 | Vulnerability · Source |
| CVE-2024-42079 | suse_vex | SUSE CVE CVE-2024-42079 | known affected: 397 known not affected: 225 recommended: 731 | 2026-10-16T01:50:24+00:00 | Vulnerability · Source |
| CVE-2024-42082 | suse_vex | SUSE CVE CVE-2024-42082 | known affected: 522 known not affected: 74 recommended: 771 | 2026-10-16T01:50:22+00:00 | Vulnerability · Source |
| CVE-2024-42084 | suse_vex | SUSE CVE CVE-2024-42084 | known affected: 483 known not affected: 28 recommended: 20 | 2026-10-16T01:50:20+00:00 | Vulnerability · Source |
| CVE-2024-42085 | suse_vex | SUSE CVE CVE-2024-42085 | known affected: 340 known not affected: 264 recommended: 643 | 2026-10-16T01:50:18+00:00 | Vulnerability · Source |
| CVE-2024-42086 | suse_vex | SUSE CVE CVE-2024-42086 | known affected: 407 known not affected: 136 recommended: 643 | 2026-10-16T01:50:16+00:00 | Vulnerability · Source |
| CVE-2024-42087 | suse_vex | SUSE CVE CVE-2024-42087 | known affected: 493 known not affected: 80 recommended: 643 | 2026-10-16T01:50:14+00:00 | Vulnerability · Source |
| CVE-2024-42090 | suse_vex | SUSE CVE CVE-2024-42090 | known affected: 590 known not affected: 18 recommended: 747 | 2026-10-16T01:50:12+00:00 | Vulnerability · Source |
| CVE-2026-82458 | microsoft_vex | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes available | fixed: 2 known affected: 2 known not affected: 4 | 2026-10-16T01:50:11+00:00 | Vulnerability · Source |
| CVE-2024-42092 | suse_vex | SUSE CVE CVE-2024-42092 | known affected: 407 known not affected: 136 recommended: 643 | 2026-10-16T01:50:10+00:00 | Vulnerability · Source |
| CVE-2024-42093 | suse_vex | SUSE CVE CVE-2024-42093 | known affected: 377 known not affected: 109 recommended: 851 | 2026-10-16T01:50:08+00:00 | Vulnerability · Source |
| CVE-2026-105773 | microsoft_vex | Canimaan Software ClamXAV local privilege escalation | known not affected: 1 | 2026-10-16T01:50:06+00:00 | Vulnerability · Source |
| CVE-2024-42094 | suse_vex | SUSE CVE CVE-2024-42094 | known not affected: 379 recommended: 153 | 2026-10-16T01:50:06+00:00 | Vulnerability · Source |
| CVE-2026-72131 | microsoft_vex | nvme-apple: Prevent shared tags across queues on Apple A11 | known not affected: 1 | 2026-10-16T01:50:04+00:00 | Vulnerability · Source |
| CVE-2024-42095 | suse_vex | SUSE CVE CVE-2024-42095 | known affected: 407 known not affected: 225 recommended: 643 | 2026-10-16T01:50:04+00:00 | Vulnerability · Source |
| CVE-2026-19553 | microsoft_vex | SSLContext.wrap_bio() missing validation of server_hostname parameter | fixed: 1 known affected: 1 known not affected: 1 | 2026-10-16T01:50:02+00:00 | Vulnerability · Source |
| CVE-2024-42096 | suse_vex | SUSE CVE CVE-2024-42096 | known affected: 586 recommended: 815 | 2026-10-16T01:50:02+00:00 | Vulnerability · Source |
| CVE-2026-97689 | microsoft_vex | urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory | fixed: 1 known affected: 1 known not affected: 1 | 2026-10-16T01:50:00+00:00 | Vulnerability · Source |
| CVE-2024-42097 | suse_vex | SUSE CVE CVE-2024-42097 | known affected: 638 known not affected: 12 recommended: 643 | 2026-10-16T01:50:00+00:00 | Vulnerability · Source |
| CVE-2026-12345 | microsoft_vex | Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory | known affected: 1 known not affected: 1 | 2026-10-16T01:49:59+00:00 | Vulnerability · Source |
| CVE-2024-42098 | suse_vex | SUSE CVE CVE-2024-42098 | known affected: 556 known not affected: 54 recommended: 792 | 2026-10-16T01:49:58+00:00 | Vulnerability · Source |
| CVE-2026-67406 | microsoft_vex | RabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_status | known not affected: 1 | 2026-10-16T01:49:57+00:00 | Vulnerability · Source |
| CVE-2024-42102 | suse_vex | SUSE CVE CVE-2024-42102 | known affected: 398 known not affected: 470 recommended: 416 | 2026-10-16T01:49:56+00:00 | Vulnerability · Source |
| CVE-2026-67405 | microsoft_vex | RabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation) | known not affected: 1 | 2026-10-16T01:49:55+00:00 | Vulnerability · Source |
| CVE-2026-67415 | microsoft_vex | RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service | known not affected: 1 | 2026-10-16T01:49:53+00:00 | Vulnerability · Source |
| CVE-2024-42103 | suse_vex | SUSE CVE CVE-2024-42103 | known affected: 394 known not affected: 356 recommended: 212 | 2026-10-16T01:49:53+00:00 | Vulnerability · Source |
| CVE-2026-15390 | microsoft_vex | Out-of-bounds write in Das U-Boot | known not affected: 1 | 2026-10-16T01:49:52+00:00 | Vulnerability · Source |
| CVE-2024-42104 | suse_vex | SUSE CVE CVE-2024-42104 | known affected: 563 known not affected: 31 recommended: 657 | 2026-10-16T01:49:51+00:00 | Vulnerability · Source |
| CVE-2026-71972 | microsoft_vex | U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder | known not affected: 1 | 2026-10-16T01:49:50+00:00 | Vulnerability · Source |
| CVE-2024-42106 | suse_vex | SUSE CVE CVE-2024-42106 | known affected: 582 known not affected: 14 recommended: 713 | 2026-10-16T01:49:49+00:00 | Vulnerability · Source |
| CVE-2026-71973 | microsoft_vex | U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation | known not affected: 1 | 2026-10-16T01:49:48+00:00 | Vulnerability · Source |
| CVE-2024-42107 | suse_vex | SUSE CVE CVE-2024-42107 | known affected: 407 known not affected: 225 recommended: 643 | 2026-10-16T01:49:47+00:00 | Vulnerability · Source |
| CVE-2026-71971 | microsoft_vex | U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly | known not affected: 1 | 2026-10-16T01:49:46+00:00 | Vulnerability · Source |