VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
104719 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-43853 | suse_vex | SUSE CVE CVE-2024-43853 | known affected: 464 known not affected: 21 recommended: 922 | 2026-10-16T01:45:30+00:00 | Vulnerability · Source |
| CVE-2025-38584 | microsoft_vex | padata: Fix pd UAF once and for all | fixed: 1 known affected: 20 | 2026-10-16T01:45:29+00:00 | Vulnerability · Source |
| CVE-2026-107718 | microsoft_vex | AdonisJS: Unencoded route parameters can produce open redirects | known not affected: 1 | 2026-10-16T01:45:29+00:00 | Vulnerability · Source |
| CVE-2024-43854 | suse_vex | SUSE CVE CVE-2024-43854 | known affected: 503 recommended: 930 | 2026-10-16T01:45:28+00:00 | Vulnerability · Source |
| CVE-2026-17545 | microsoft_vex | PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS | known not affected: 1 | 2026-10-16T01:45:27+00:00 | Vulnerability · Source |
| CVE-2019-8331 | microsoft_vex | In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute. | known not affected: 4 | 2026-10-16T01:45:26+00:00 | Vulnerability · Source |
| CVE-2024-43855 | suse_vex | SUSE CVE CVE-2024-43855 | known affected: 394 known not affected: 348 recommended: 443 | 2026-10-16T01:45:26+00:00 | Vulnerability · Source |
| CVE-2026-103006 | microsoft_vex | Uncontrolled Recursion in Elasticsearch Leading to Denial of Service | known not affected: 1 | 2026-10-16T01:45:24+00:00 | Vulnerability · Source |
| CVE-2024-43856 | suse_vex | SUSE CVE CVE-2024-43856 | known affected: 590 known not affected: 12 recommended: 727 | 2026-10-16T01:45:24+00:00 | Vulnerability · Source |
| CVE-2026-102411 | microsoft_vex | Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service | known not affected: 1 | 2026-10-16T01:45:22+00:00 | Vulnerability · Source |
| CVE-2024-43858 | suse_vex | SUSE CVE CVE-2024-43858 | known affected: 450 known not affected: 223 recommended: 643 | 2026-10-16T01:45:22+00:00 | Vulnerability · Source |
| CVE-2026-102404 | microsoft_vex | Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service | known not affected: 1 | 2026-10-16T01:45:20+00:00 | Vulnerability · Source |
| CVE-2024-6485 | microsoft_vex | XSS in Bootstrap button component | fixed: 2 known affected: 4 known not affected: 3 | 2026-10-16T01:45:20+00:00 | Vulnerability · Source |
| CVE-2024-43861 | suse_vex | SUSE CVE CVE-2024-43861 | known affected: 403 known not affected: 20 recommended: 1106 | 2026-10-16T01:45:20+00:00 | Vulnerability · Source |
| CVE-2026-102407 | microsoft_vex | Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification | known not affected: 1 | 2026-10-16T01:45:18+00:00 | Vulnerability · Source |
| CVE-2024-43863 | suse_vex | SUSE CVE CVE-2024-43863 | known affected: 584 known not affected: 18 recommended: 727 | 2026-10-16T01:45:18+00:00 | Vulnerability · Source |
| CVE-2026-6669 | microsoft_vex | Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer | known not affected: 1 | 2026-10-16T01:45:16+00:00 | Vulnerability · Source |
| CVE-2024-43866 | suse_vex | SUSE CVE CVE-2024-43866 | known affected: 576 known not affected: 14 recommended: 713 | 2026-10-16T01:45:16+00:00 | Vulnerability · Source |
| CVE-2025-22121 | microsoft_vex | ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() | fixed: 1 known affected: 13 | 2026-10-16T01:45:15+00:00 | Vulnerability · Source |
| CVE-2026-106589 | microsoft_vex | In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged allocation of PTY devices. | known not affected: 1 | 2026-10-16T01:45:15+00:00 | Vulnerability · Source |
| CVE-2026-102633 | microsoft_vex | libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc | known not affected: 1 | 2026-10-16T01:45:14+00:00 | Vulnerability · Source |
| CVE-2024-43869 | suse_vex | SUSE CVE CVE-2024-43869 | known affected: 416 known not affected: 406 recommended: 318 | 2026-10-16T01:45:14+00:00 | Vulnerability · Source |
| CVE-2026-55556 | microsoft_vex | Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling | known not affected: 1 | 2026-10-16T01:45:13+00:00 | Vulnerability · Source |
| CVE-2026-61374 | microsoft_vex | Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit | known not affected: 1 | 2026-10-16T01:45:13+00:00 | Vulnerability · Source |
| CVE-2025-22107 | microsoft_vex | net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() | fixed: 1 known affected: 12 | 2026-10-16T01:45:12+00:00 | Vulnerability · Source |
| CVE-2026-85493 | microsoft_vex | Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME) | known not affected: 1 | 2026-10-16T01:45:12+00:00 | Vulnerability · Source |
| CVE-2024-43871 | suse_vex | SUSE CVE CVE-2024-43871 | known affected: 584 known not affected: 18 recommended: 833 | 2026-10-16T01:45:11+00:00 | Vulnerability · Source |
| CVE-2026-94635 | microsoft_vex | Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name | known not affected: 1 | 2026-10-16T01:45:09+00:00 | Vulnerability · Source |
| CVE-2024-43872 | suse_vex | SUSE CVE CVE-2024-43872 | known affected: 576 known not affected: 26 recommended: 713 | 2026-10-16T01:45:09+00:00 | Vulnerability · Source |
| CVE-2025-22105 | microsoft_vex | bonding: check xdp prog when set bond mode | fixed: 1 known affected: 7 under investigation: 2 | 2026-10-16T01:45:08+00:00 | Vulnerability · Source |
| CVE-2026-94648 | microsoft_vex | Apache Thrift: dart `TJsonProtocol`/`TJSONProtocol` has no string size bound | known not affected: 1 | 2026-10-16T01:45:08+00:00 | Vulnerability · Source |
| CVE-2024-43873 | suse_vex | SUSE CVE CVE-2024-43873 | known affected: 407 known not affected: 219 recommended: 729 | 2026-10-16T01:45:07+00:00 | Vulnerability · Source |
| CVE-2026-91137 | microsoft_vex | Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements | known not affected: 1 | 2026-10-16T01:45:06+00:00 | Vulnerability · Source |
| CVE-2024-43875 | suse_vex | SUSE CVE CVE-2024-43875 | known affected: 394 known not affected: 322 recommended: 355 | 2026-10-16T01:45:05+00:00 | Vulnerability · Source |
| CVE-2024-43878 | suse_vex | SUSE CVE CVE-2024-43878 | known not affected: 371 | 2026-10-16T01:45:04+00:00 | Vulnerability · Source |
| CVE-2026-94655 | microsoft_vex | Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic | known not affected: 1 | 2026-10-16T01:45:03+00:00 | Vulnerability · Source |
| CVE-2024-43879 | suse_vex | SUSE CVE CVE-2024-43879 | known affected: 508 known not affected: 86 recommended: 713 | 2026-10-16T01:45:02+00:00 | Vulnerability · Source |
| CVE-2026-96292 | microsoft_vex | Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic) | known not affected: 1 | 2026-10-16T01:45:01+00:00 | Vulnerability · Source |
| CVE-2025-38591 | microsoft_vex | bpf: Reject narrower access to pointer ctx fields | known affected: 25 | 2026-10-16T01:45:00+00:00 | Vulnerability · Source |
| CVE-2024-43881 | suse_vex | SUSE CVE CVE-2024-43881 | known affected: 394 known not affected: 322 recommended: 355 | 2026-10-16T01:45:00+00:00 | Vulnerability · Source |
| CVE-2026-96288 | microsoft_vex | Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory) | known not affected: 1 | 2026-10-16T01:44:59+00:00 | Vulnerability · Source |
| CVE-2026-87117 | microsoft_vex | Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec | known not affected: 1 | 2026-10-16T01:44:57+00:00 | Vulnerability · Source |
| CVE-2024-43882 | suse_vex | SUSE CVE CVE-2024-43882 | known affected: 403 known not affected: 2 recommended: 1075 | 2026-10-16T01:44:57+00:00 | Vulnerability · Source |
| CVE-2026-61373 | microsoft_vex | Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation | known not affected: 1 | 2026-10-16T01:44:56+00:00 | Vulnerability · Source |
| CVE-2024-43883 | suse_vex | SUSE CVE CVE-2024-43883 | known affected: 405 known not affected: 6 recommended: 1007 | 2026-10-16T01:44:55+00:00 | Vulnerability · Source |
| CVE-2024-43884 | suse_vex | SUSE CVE CVE-2024-43884 | known affected: 519 known not affected: 12 recommended: 813 | 2026-10-16T01:44:53+00:00 | Vulnerability · Source |
| CVE-2024-43889 | suse_vex | SUSE CVE CVE-2024-43889 | known affected: 340 known not affected: 201 recommended: 706 | 2026-10-16T01:44:51+00:00 | Vulnerability · Source |
| CVE-2024-43890 | suse_vex | SUSE CVE CVE-2024-43890 | known affected: 520 known not affected: 43 recommended: 710 | 2026-10-16T01:44:49+00:00 | Vulnerability · Source |
| CVE-2024-43892 | suse_vex | SUSE CVE CVE-2024-43892 | known affected: 502 known not affected: 14 recommended: 747 | 2026-10-16T01:44:47+00:00 | Vulnerability · Source |
| CVE-2026-84445 | microsoft_vex | gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers | fixed: 24 known affected: 42 known not affected: 6 | 2026-10-16T01:44:45+00:00 | Vulnerability · Source |