VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
104719 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-73064 | microsoft_vex | In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers. | known affected: 1 known not affected: 1 | 2026-10-16T01:49:45+00:00 | Vulnerability · Source |
| CVE-2024-42108 | suse_vex | SUSE CVE CVE-2024-42108 | known not affected: 379 | 2026-10-16T01:49:45+00:00 | Vulnerability · Source |
| CVE-2026-74221 | microsoft_vex | U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK | known not affected: 1 | 2026-10-16T01:49:43+00:00 | Vulnerability · Source |
| CVE-2024-42109 | suse_vex | SUSE CVE CVE-2024-42109 | known affected: 394 known not affected: 354 recommended: 355 | 2026-10-16T01:49:43+00:00 | Vulnerability · Source |
| CVE-2026-74220 | microsoft_vex | U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply | known not affected: 1 | 2026-10-16T01:49:41+00:00 | Vulnerability · Source |
| CVE-2024-42110 | suse_vex | SUSE CVE CVE-2024-42110 | known affected: 590 known not affected: 6 recommended: 785 | 2026-10-16T01:49:41+00:00 | Vulnerability · Source |
| CVE-2026-102992 | microsoft_vex | piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env | known not affected: 1 | 2026-10-16T01:49:40+00:00 | Vulnerability · Source |
| CVE-2024-42112 | suse_vex | SUSE CVE CVE-2024-42112 | known not affected: 379 | 2026-10-16T01:49:39+00:00 | Vulnerability · Source |
| CVE-2026-102598 | microsoft_vex | Werkzeug safe_join() allows Windows special device names | known not affected: 3 | 2026-10-16T01:49:38+00:00 | Vulnerability · Source |
| CVE-2024-42114 | suse_vex | SUSE CVE CVE-2024-42114 | known affected: 558 known not affected: 86 recommended: 689 | 2026-10-16T01:49:37+00:00 | Vulnerability · Source |
| CVE-2024-42117 | suse_vex | SUSE CVE CVE-2024-42117 | known affected: 394 known not affected: 326 recommended: 355 | 2026-10-16T01:49:36+00:00 | Vulnerability · Source |
| CVE-2026-97687 | microsoft_vex | urllib3: HTTPS proxy TLS configuration may be ignored or overridden | known not affected: 5 | 2026-10-16T01:49:34+00:00 | Vulnerability · Source |
| CVE-2024-42118 | suse_vex | SUSE CVE CVE-2024-42118 | known not affected: 379 recommended: 47 | 2026-10-16T01:49:34+00:00 | Vulnerability · Source |
| CVE-2024-42119 | suse_vex | SUSE CVE CVE-2024-42119 | known affected: 474 known not affected: 44 recommended: 727 | 2026-10-16T01:49:33+00:00 | Vulnerability · Source |
| CVE-2024-42121 | suse_vex | SUSE CVE CVE-2024-42121 | known affected: 456 known not affected: 188 recommended: 643 | 2026-10-16T01:49:31+00:00 | Vulnerability · Source |
| CVE-2024-42122 | suse_vex | SUSE CVE CVE-2024-42122 | known affected: 446 known not affected: 176 recommended: 653 | 2026-10-16T01:49:29+00:00 | Vulnerability · Source |
| CVE-2026-102937 | microsoft_vex | virtualenv: Command injection via --prompt in activate.bat (batch activator) | known not affected: 2 | 2026-10-16T01:49:27+00:00 | Vulnerability · Source |
| CVE-2024-42126 | suse_vex | SUSE CVE CVE-2024-42126 | known affected: 315 known not affected: 254 recommended: 766 | 2026-10-16T01:49:27+00:00 | Vulnerability · Source |
| CVE-2026-67215 | microsoft_vex | cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion | known not affected: 3 | 2026-10-16T01:49:26+00:00 | Vulnerability · Source |
| CVE-2026-102991 | microsoft_vex | Mako: Path traversal via drive-letter URI on Windows in TemplateLookup | known not affected: 1 | 2026-10-16T01:49:25+00:00 | Vulnerability · Source |
| CVE-2024-42127 | suse_vex | SUSE CVE CVE-2024-42127 | known affected: 340 known not affected: 266 recommended: 643 | 2026-10-16T01:49:25+00:00 | Vulnerability · Source |
| CVE-2026-17527 | microsoft_vex | Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone | known affected: 4 known not affected: 1 | 2026-10-16T01:49:24+00:00 | Vulnerability · Source |
| CVE-2026-103111 | microsoft_vex | PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data. | known affected: 2 known not affected: 3 | 2026-10-16T01:49:23+00:00 | Vulnerability · Source |
| CVE-2024-42130 | suse_vex | SUSE CVE CVE-2024-42130 | known affected: 393 known not affected: 207 recommended: 643 | 2026-10-16T01:49:23+00:00 | Vulnerability · Source |
| CVE-2024-42131 | suse_vex | SUSE CVE CVE-2024-42131 | known affected: 522 known not affected: 35 recommended: 742 | 2026-10-16T01:49:21+00:00 | Vulnerability · Source |
| CVE-2026-13325 | microsoft_vex | Virt-handler-rhel9: kubevirt: kubevirt: disabletls migration setting removes authentication, exposing unauthenticated virtqemud proxy on all interfaces | known affected: 3 known not affected: 1 | 2026-10-16T01:49:20+00:00 | Vulnerability · Source |
| CVE-2024-42135 | suse_vex | SUSE CVE CVE-2024-42135 | known not affected: 379 | 2026-10-16T01:49:19+00:00 | Vulnerability · Source |
| CVE-2026-63209 | microsoft_vex | Integer Overflow or Wraparound and Out-of-bounds Write in compress | known not affected: 2 | 2026-10-16T01:49:18+00:00 | Vulnerability · Source |
| CVE-2024-42137 | suse_vex | SUSE CVE CVE-2024-42137 | known affected: 340 known not affected: 207 recommended: 643 | 2026-10-16T01:49:18+00:00 | Vulnerability · Source |
| CVE-2024-42139 | suse_vex | SUSE CVE CVE-2024-42139 | known affected: 407 known not affected: 225 recommended: 643 | 2026-10-16T01:49:16+00:00 | Vulnerability · Source |
| CVE-2026-101276 | microsoft_vex | iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperf_stream; fixed in 3.22. | known not affected: 1 | 2026-10-16T01:49:15+00:00 | Vulnerability · Source |
| CVE-2024-42142 | suse_vex | SUSE CVE CVE-2024-42142 | known affected: 340 known not affected: 285 recommended: 643 | 2026-10-16T01:49:14+00:00 | Vulnerability · Source |
| CVE-2026-72897 | microsoft_vex | Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake | fixed: 1 known affected: 1 known not affected: 5 | 2026-10-16T01:49:13+00:00 | Vulnerability · Source |
| CVE-2024-42143 | suse_vex | SUSE CVE CVE-2024-42143 | known affected: 340 known not affected: 6 recommended: 643 | 2026-10-16T01:49:12+00:00 | Vulnerability · Source |
| CVE-2024-42144 | suse_vex | SUSE CVE CVE-2024-42144 | known affected: 394 known not affected: 326 recommended: 355 | 2026-10-16T01:49:10+00:00 | Vulnerability · Source |
| CVE-2024-42147 | suse_vex | SUSE CVE CVE-2024-42147 | known affected: 394 known not affected: 326 recommended: 355 | 2026-10-16T01:49:08+00:00 | Vulnerability · Source |
| CVE-2026-84784 | microsoft_vex | QUIC: Unbounded RETIRE_CONNECTION_ID Backlog | fixed: 1 known affected: 1 known not affected: 5 | 2026-10-16T01:49:06+00:00 | Vulnerability · Source |
| CVE-2024-42150 | suse_vex | SUSE CVE CVE-2024-42150 | known not affected: 379 | 2026-10-16T01:49:06+00:00 | Vulnerability · Source |
| CVE-2024-42151 | suse_vex | SUSE CVE CVE-2024-42151 | known not affected: 382 | 2026-10-16T01:49:04+00:00 | Vulnerability · Source |
| CVE-2024-42153 | suse_vex | SUSE CVE CVE-2024-42153 | known affected: 394 known not affected: 563 recommended: 355 | 2026-10-16T01:49:02+00:00 | Vulnerability · Source |
| CVE-2025-13763 | microsoft_vex | Libopensc: opensc: multiple uses of uninitialized variable | fixed: 1 known affected: 3 | 2026-10-16T01:49:00+00:00 | Vulnerability · Source |
| CVE-2024-42154 | suse_vex | SUSE CVE CVE-2024-42154 | known affected: 605 known not affected: 35 recommended: 744 | 2026-10-16T01:49:00+00:00 | Vulnerability · Source |
| CVE-2026-77696 | microsoft_vex | Timing Side-Channel in SM2 Signature Generation | fixed: 2 known affected: 2 known not affected: 6 | 2026-10-16T01:48:59+00:00 | Vulnerability · Source |
| CVE-2024-42158 | suse_vex | SUSE CVE CVE-2024-42158 | known affected: 582 known not affected: 14 recommended: 713 | 2026-10-16T01:48:58+00:00 | Vulnerability · Source |
| CVE-2024-42159 | suse_vex | SUSE CVE CVE-2024-42159 | known affected: 394 known not affected: 355 recommended: 385 | 2026-10-16T01:48:56+00:00 | Vulnerability · Source |
| CVE-2024-42160 | suse_vex | SUSE CVE CVE-2024-42160 | known not affected: 379 | 2026-10-16T01:48:54+00:00 | Vulnerability · Source |
| CVE-2024-42162 | suse_vex | SUSE CVE CVE-2024-42162 | known affected: 522 known not affected: 74 recommended: 713 | 2026-10-16T01:48:52+00:00 | Vulnerability · Source |
| CVE-2024-42224 | suse_vex | SUSE CVE CVE-2024-42224 | known affected: 572 known not affected: 14 recommended: 723 | 2026-10-16T01:48:50+00:00 | Vulnerability · Source |
| CVE-2024-42225 | suse_vex | SUSE CVE CVE-2024-42225 | known affected: 378 known not affected: 165 recommended: 721 | 2026-10-16T01:48:48+00:00 | Vulnerability · Source |
| CVE-2024-42226 | suse_vex | SUSE CVE CVE-2024-42226 | known affected: 609 known not affected: 8 recommended: 716 | 2026-10-16T01:48:46+00:00 | Vulnerability · Source |