VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
104719 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-68160 | microsoft_vex | Heap out-of-bounds write in BIO_f_linebuffer on short writes | known not affected: 1 | 2026-10-16T01:46:33+00:00 | Vulnerability · Source |
| CVE-2026-96294 | microsoft_vex | Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection | known not affected: 1 | 2026-10-16T01:46:32+00:00 | Vulnerability · Source |
| CVE-2024-43374 | suse_vex | SUSE CVE CVE-2024-43374 | known affected: 412 known not affected: 138 recommended: 163 | 2026-10-16T01:46:32+00:00 | Vulnerability · Source |
| CVE-2026-28387 | microsoft_vex | Potential Use-after-free in DANE Client Code | fixed: 4 known affected: 13 known not affected: 11 | 2026-10-16T01:46:31+00:00 | Vulnerability · Source |
| CVE-2026-86536 | microsoft_vex | Apache Thrift, Apache Thrift, Apache Thrift: A map key from the wire can replace a decoded object's prototype in generated JavaScript | known not affected: 1 | 2026-10-16T01:46:30+00:00 | Vulnerability · Source |
| CVE-2024-43394 | suse_vex | SUSE CVE CVE-2024-43394 | known affected: 0 known not affected: 307 recommended: 1 | 2026-10-16T01:46:30+00:00 | Vulnerability · Source |
| CVE-2026-23438 | microsoft_vex | net: mvpp2: guard flow control update with global_tx_fc in buffer switching | known affected: 2 | 2026-10-16T01:46:29+00:00 | Vulnerability · Source |
| CVE-2026-94646 | microsoft_vex | Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers) | known not affected: 1 | 2026-10-16T01:46:29+00:00 | Vulnerability · Source |
| CVE-2026-31789 | microsoft_vex | Heap Buffer Overflow in Hexadecimal Conversion | fixed: 1 known affected: 5 known not affected: 8 | 2026-10-16T01:46:29+00:00 | Vulnerability · Source |
| CVE-2024-43495 | suse_vex | SUSE CVE CVE-2024-43495 | known not affected: 199 | 2026-10-16T01:46:28+00:00 | Vulnerability · Source |
| CVE-2026-28388 | microsoft_vex | NULL Pointer Dereference When Processing a Delta CRL | fixed: 3 known affected: 12 known not affected: 11 | 2026-10-16T01:46:27+00:00 | Vulnerability · Source |
| CVE-2026-94645 | microsoft_vex | Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound | known not affected: 1 | 2026-10-16T01:46:27+00:00 | Vulnerability · Source |
| CVE-2026-28389 | microsoft_vex | Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo | fixed: 5 known affected: 11 known not affected: 8 | 2026-10-16T01:46:25+00:00 | Vulnerability · Source |
| CVE-2026-86535 | microsoft_vex | Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely | known not affected: 1 | 2026-10-16T01:46:25+00:00 | Vulnerability · Source |
| CVE-2026-85086 | microsoft_vex | Apache Thrift: Perl TLS client disables certificate verification by default | known not affected: 1 | 2026-10-16T01:46:24+00:00 | Vulnerability · Source |
| CVE-2026-23340 | microsoft_vex | net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs | fixed: 1 known affected: 3 | 2026-10-16T01:46:23+00:00 | Vulnerability · Source |
| CVE-2024-43784 | suse_vex | SUSE CVE CVE-2024-43784 | recommended: 4 | 2026-10-16T01:46:23+00:00 | Vulnerability · Source |
| CVE-2025-66199 | microsoft_vex | TLS 1.3 CompressedCertificate excessive memory allocation | known not affected: 1 | 2026-10-16T01:46:22+00:00 | Vulnerability · Source |
| CVE-2026-100419 | microsoft_vex | gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink | known affected: 1 known not affected: 1 | 2026-10-16T01:46:22+00:00 | Vulnerability · Source |
| CVE-2024-43802 | suse_vex | SUSE CVE CVE-2024-43802 | known affected: 532 known not affected: 3 recommended: 158 | 2026-10-16T01:46:21+00:00 | Vulnerability · Source |
| CVE-2025-15469 | microsoft_vex | 'openssl dgst' one-shot codepath silently truncates inputs >16MB | known not affected: 1 | 2026-10-16T01:46:20+00:00 | Vulnerability · Source |
| CVE-2026-67407 | microsoft_vex | RabbitMQ: Incomplete fix for CVE-2026-44838: `escape_regex_char/1` does not escape `-`, leaving room for an MQTT topic permission bypass | known not affected: 1 | 2026-10-16T01:46:20+00:00 | Vulnerability · Source |
| CVE-2026-67410 | microsoft_vex | RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint | known not affected: 1 | 2026-10-16T01:46:19+00:00 | Vulnerability · Source |
| CVE-2026-45446 | microsoft_vex | Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes | fixed: 1 known affected: 1 known not affected: 7 | 2026-10-16T01:46:19+00:00 | Vulnerability · Source |
| CVE-2024-43806 | suse_vex | SUSE CVE CVE-2024-43806 | known affected: 75 known not affected: 648 recommended: 114 | 2026-10-16T01:46:19+00:00 | Vulnerability · Source |
| CVE-2024-43815 | suse_vex | SUSE CVE CVE-2024-43815 | known not affected: 371 | 2026-10-16T01:46:17+00:00 | Vulnerability · Source |
| CVE-2026-23339 | microsoft_vex | nfc: nci: free skb on nci_transceive early error paths | known affected: 2 known not affected: 1 | 2026-10-16T01:46:16+00:00 | Vulnerability · Source |
| CVE-2026-66078 | microsoft_vex | RabbitMQ: protected tag bypass via bulk-delete | known not affected: 1 | 2026-10-16T01:46:16+00:00 | Vulnerability · Source |
| CVE-2025-69418 | microsoft_vex | Unauthenticated/unencrypted trailing bytes with low-level OCB function calls | known not affected: 1 | 2026-10-16T01:46:16+00:00 | Vulnerability · Source |
| CVE-2026-42766 | microsoft_vex | Possible NULL Dereference in Password-Based CMS Decryption | fixed: 2 known affected: 2 known not affected: 7 | 2026-10-16T01:46:15+00:00 | Vulnerability · Source |
| CVE-2024-43816 | suse_vex | SUSE CVE CVE-2024-43816 | known affected: 340 known not affected: 260 recommended: 643 | 2026-10-16T01:46:15+00:00 | Vulnerability · Source |
| CVE-2026-101904 | microsoft_vex | Axios: Header Injection via Inherited headers After Minimal Interceptor | known not affected: 1 | 2026-10-16T01:46:13+00:00 | Vulnerability · Source |
| CVE-2024-43817 | suse_vex | SUSE CVE CVE-2024-43817 | known affected: 421 known not affected: 219 recommended: 624 | 2026-10-16T01:46:13+00:00 | Vulnerability · Source |
| CVE-2024-43818 | suse_vex | SUSE CVE CVE-2024-43818 | known affected: 340 known not affected: 260 recommended: 643 | 2026-10-16T01:46:12+00:00 | Vulnerability · Source |
| CVE-2025-69421 | microsoft_vex | NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function | known not affected: 1 | 2026-10-16T01:46:11+00:00 | Vulnerability · Source |
| CVE-2026-23336 | microsoft_vex | wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() | fixed: 1 known affected: 3 | 2026-10-16T01:46:11+00:00 | Vulnerability · Source |
| CVE-2026-97058 | microsoft_vex | sprintf-js through 1.1.3 Denial of Service via Unbounded Precision | known not affected: 1 | 2026-10-16T01:46:11+00:00 | Vulnerability · Source |
| CVE-2024-43822 | suse_vex | SUSE CVE CVE-2024-43822 | known affected: 0 known not affected: 364 recommended: 47 | 2026-10-16T01:46:10+00:00 | Vulnerability · Source |
| CVE-2026-102277 | microsoft_vex | brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service | known not affected: 1 | 2026-10-16T01:46:09+00:00 | Vulnerability · Source |
| CVE-2026-42767 | microsoft_vex | NULL Pointer Dereference in CRMF EncryptedValue Decryption | fixed: 2 known affected: 2 known not affected: 7 | 2026-10-16T01:46:09+00:00 | Vulnerability · Source |
| CVE-2024-43823 | suse_vex | SUSE CVE CVE-2024-43823 | known affected: 372 known not affected: 165 recommended: 729 | 2026-10-16T01:46:08+00:00 | Vulnerability · Source |
| CVE-2026-102276 | microsoft_vex | brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion | known not affected: 1 | 2026-10-16T01:46:07+00:00 | Vulnerability · Source |
| CVE-2026-42769 | microsoft_vex | Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate | fixed: 1 known affected: 1 known not affected: 6 | 2026-10-16T01:46:07+00:00 | Vulnerability · Source |
| CVE-2026-23335 | microsoft_vex | RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() | known affected: 2 known not affected: 1 | 2026-10-16T01:46:06+00:00 | Vulnerability · Source |
| CVE-2024-43824 | suse_vex | SUSE CVE CVE-2024-43824 | known affected: 581 known not affected: 194 recommended: 355 | 2026-10-16T01:46:06+00:00 | Vulnerability · Source |
| CVE-2026-7383 | microsoft_vex | Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion | fixed: 2 known affected: 2 known not affected: 9 | 2026-10-16T01:46:05+00:00 | Vulnerability · Source |
| CVE-2026-101902 | microsoft_vex | Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method | known not affected: 1 | 2026-10-16T01:46:05+00:00 | Vulnerability · Source |
| CVE-2024-43825 | suse_vex | SUSE CVE CVE-2024-43825 | known affected: 394 known not affected: 322 recommended: 355 | 2026-10-16T01:46:04+00:00 | Vulnerability · Source |
| CVE-2026-2673 | microsoft_vex | OpenSSL TLS 1.3 server may choose unexpected key agreement group | fixed: 1 known affected: 3 known not affected: 6 | 2026-10-16T01:46:03+00:00 | Vulnerability · Source |
| CVE-2026-102278 | microsoft_vex | brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion | known not affected: 1 | 2026-10-16T01:46:03+00:00 | Vulnerability · Source |