VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
104719 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-106443 | redhat_vex | weasyprint: WeasyPrint: Arbitrary code execution via unsafe PostScript image processing | known not affected: 1 | 2026-10-15T23:04:39+00:00 | Vulnerability · Source |
| CVE-2026-15467 | redhat_vex | trustyai-service-operator: trustyai-service-operator: LMEvalJob sidecar containers bypass protected environment variable filtering, allowing TRUST_REMOTE_CODE policy override | fixed: 20 known not affected: 621 | 2026-10-15T23:03:07+00:00 | Vulnerability · Source |
| CVE-2026-101913 | redhat_vex | ip-address: ip-address: Security bypass via incomplete IPv6 link-local address validation | known not affected: 3 | 2026-10-15T21:14:56+00:00 | Vulnerability · Source |
| CVE-2026-101912 | redhat_vex | ip-address: ip-address: Access control bypass via cross-family subnet comparison | known not affected: 3 | 2026-10-15T21:14:55+00:00 | Vulnerability · Source |
| CVE-2026-101910 | redhat_vex | ip-address: ip-address: Security boundary bypass via unclassified NAT64 local-use address range | known not affected: 3 | 2026-10-15T21:14:50+00:00 | Vulnerability · Source |
| CVE-2025-30703 | redhat_vex | mysql: InnoDB unspecified vulnerability (CPU Apr 2025) | fixed: 310 known not affected: 9 | 2026-10-15T21:04:09+00:00 | Vulnerability · Source |
| CVE-2025-30681 | redhat_vex | mysql: Replication unspecified vulnerability (CPU Apr 2025) | fixed: 310 known not affected: 9 | 2026-10-15T21:04:05+00:00 | Vulnerability · Source |
| CVE-2024-21247 | redhat_vex | mysql: mysqldump unspecified vulnerability (CPU Oct 2024) | fixed: 156 known affected: 9 | 2026-10-15T21:04:04+00:00 | Vulnerability · Source |
| CVE-2024-21237 | redhat_vex | mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) | fixed: 156 known affected: 9 | 2026-10-15T21:03:55+00:00 | Vulnerability · Source |
| CVE-2024-21231 | redhat_vex | mysql: Client programs unspecified vulnerability (CPU Oct 2024) | fixed: 156 known affected: 9 | 2026-10-15T21:03:51+00:00 | Vulnerability · Source |
| CVE-2026-101023 | redhat_vex | code.gitea.io/gitea: Gitea: Prolonged access via improper OAuth2 token type validation | known not affected: 1 | 2026-10-15T21:02:42+00:00 | Vulnerability · Source |
| CVE-2026-73563 | redhat_vex | @backstage/plugin-auth-backend: Backstage: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass | fixed: 2 known not affected: 1 | 2026-10-15T21:02:37+00:00 | Vulnerability · Source |
| CVE-2026-73557 | redhat_vex | vllm: vLLM: Incomplete remediation allows bypass via concurrent prompt processing | fixed: 8 known not affected: 21 | 2026-10-15T21:02:35+00:00 | Vulnerability · Source |
| CVE-2026-67236 | redhat_vex | rabbitmq-server: rabbitmq-server: Information disclosure via insecure authentication cookies | fixed: 3 known affected: 1 known not affected: 7 | 2026-10-15T21:02:32+00:00 | Vulnerability · Source |
| CVE-2026-66071 | redhat_vex | rabbitmq-server: rabbitmq-server: Denial of service via atom exhaustion in OAuth2 JWT scope parsing | fixed: 3 known affected: 8 | 2026-10-15T21:02:30+00:00 | Vulnerability · Source |
| CVE-2026-64487 | redhat_vex | kernel: ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser | known affected: 261 known not affected: 14 | 2026-10-15T21:02:28+00:00 | Vulnerability · Source |
| CVE-2026-64458 | redhat_vex | kernel: mm/damon/ops-common: handle extreme intervals in damon_hot_score() | known affected: 185 known not affected: 90 | 2026-10-15T21:02:24+00:00 | Vulnerability · Source |
| CVE-2026-64455 | redhat_vex | kernel: USB: chaoskey: Fix slab-use-after-free in chaoskey_release() | known affected: 233 known not affected: 42 | 2026-10-15T21:02:23+00:00 | Vulnerability · Source |
| CVE-2024-21235 | redhat_vex | JDK: Integer conversion error leads to incorrect range check (8332644) | fixed: 2658 known affected: 45 known not affected: 24 | 2026-10-15T21:02:06+00:00 | Vulnerability · Source |
| CVE-2025-30698 | redhat_vex | openjdk: Enhance Buffered Image handling (Oracle CPU 2025-04) | fixed: 2650 known affected: 105 | 2026-10-15T21:02:06+00:00 | Vulnerability · Source |
| CVE-2025-30691 | redhat_vex | openjdk: Improve compiler transformations (Oracle CPU 2025-04) | fixed: 2607 known affected: 105 known not affected: 14 | 2026-10-15T21:02:04+00:00 | Vulnerability · Source |
| CVE-2026-73073 | redhat_vex | vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion | fixed: 37 known affected: 14 known not affected: 188 | 2026-10-15T21:01:46+00:00 | Vulnerability · Source |
| CVE-2024-21208 | redhat_vex | JDK: HTTP client improper handling of maxHeaderSize (8328286) | fixed: 2658 known affected: 45 known not affected: 24 | 2026-10-15T21:01:41+00:00 | Vulnerability · Source |
| CVE-2023-32803 | redhat_vex | ca-certificates: ca-certificates: Failure to remove TrustCor root certificates | fixed: 5 known affected: 2 | 2026-10-15T21:01:41+00:00 | Vulnerability · Source |
| CVE-2024-21217 | redhat_vex | JDK: Unbounded allocation leads to out-of-memory error (8331446) | fixed: 2658 known affected: 45 known not affected: 24 | 2026-10-15T21:01:41+00:00 | Vulnerability · Source |
| CVE-2026-64549 | redhat_vex | kernel: Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() | known affected: 233 known not affected: 42 | 2026-10-15T20:50:16+00:00 | Vulnerability · Source |
| CVE-2026-64526 | redhat_vex | kernel: ethtool: tsconfig: fix missing ethnl_ops_complete() | known affected: 185 known not affected: 90 | 2026-10-15T20:50:12+00:00 | Vulnerability · Source |
| CVE-2026-64517 | redhat_vex | kernel: drm/xe/gsc: Fix double-free of managed BO in error path | known affected: 185 known not affected: 90 | 2026-10-15T20:50:11+00:00 | Vulnerability · Source |
| CVE-2026-64491 | redhat_vex | kernel: ALSA: usx2y: us144mkii: fix work UAF on disconnect | known affected: 185 known not affected: 90 | 2026-10-15T20:50:06+00:00 | Vulnerability · Source |
| CVE-2026-64330 | redhat_vex | kernel: usb: typec: tcpm: Validate SVID index in svdm_consume_modes() | known affected: 233 known not affected: 42 | 2026-10-15T20:50:02+00:00 | Vulnerability · Source |
| CVE-2026-74860 | redhat_vex | libxml2: double-free/UAF in libxml2 Python bindings | fixed: 172 known affected: 10 known not affected: 38 | 2026-10-15T20:49:48+00:00 | Vulnerability · Source |
| CVE-2026-44216 | redhat_vex | wasmtime: Wasmtime: Denial of Service via large WebAssembly table allocation | fixed: 39 known not affected: 1 | 2026-10-15T20:49:38+00:00 | Vulnerability · Source |
| CVE-2026-12259 | redhat_vex | nltk: nltk: Installation of attacker-controlled packages due to improper checksum validation | known affected: 14 | 2026-10-15T20:49:33+00:00 | Vulnerability · Source |
| CVE-2022-48696 | redhat_vex | kernel: regmap: spi: Reserve space for register address/padding | fixed: 321 known affected: 66 known not affected: 14 | 2026-10-15T20:47:20+00:00 | Vulnerability · Source |
| CVE-2018-19517 | redhat_vex | sysstat: Out of bounds read in remap_struct function in sa_common.c | known affected: 2 known not affected: 3 | 2026-10-15T20:22:07+00:00 | Vulnerability · Source |
| CVE-2018-19416 | redhat_vex | sysstat: Out-of-bounds read in remap_struct function in sa_common.c | known affected: 2 known not affected: 3 | 2026-10-15T20:22:06+00:00 | Vulnerability · Source |
| CVE-2018-19139 | redhat_vex | jasper: memory leak of data allocated in jpc_unk_getparms() after abort in jpc_dec_process_sot() | known affected: 17 | 2026-10-15T20:22:02+00:00 | Vulnerability · Source |
| CVE-2018-11212 | redhat_vex | libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c | fixed: 303 known affected: 5 known not affected: 6 | 2026-10-15T20:22:01+00:00 | Vulnerability · Source |
| CVE-2022-49471 | redhat_vex | kernel: rtw89: cfo: check mac_id to avoid out-of-bounds | fixed: 321 known affected: 38 known not affected: 119 | 2026-10-15T20:17:06+00:00 | Vulnerability · Source |
| CVE-2022-49465 | redhat_vex | kernel: blk-throttle: Set BIO_THROTTLED when bio has been throttled | fixed: 166 known affected: 112 known not affected: 77 | 2026-10-15T20:17:04+00:00 | Vulnerability · Source |
| CVE-2022-49426 | redhat_vex | kernel: iommu/arm-smmu-v3-sva: Fix mm use-after-free | fixed: 286 known affected: 22 known not affected: 135 | 2026-10-15T20:17:00+00:00 | Vulnerability · Source |
| CVE-2022-49294 | redhat_vex | kernel: drm/amd/display: Check if modulo is 0 before dividing. | fixed: 321 known affected: 38 known not affected: 119 | 2026-10-15T20:16:58+00:00 | Vulnerability · Source |
| CVE-2022-49275 | redhat_vex | kernel: can: m_can: m_can_tx_handler(): fix use after free of skb | fixed: 201 known affected: 22 known not affected: 167 | 2026-10-15T20:16:53+00:00 | Vulnerability · Source |
| CVE-2022-49129 | redhat_vex | kernel: mt76: mt7921: fix crash when startup fails. | fixed: 286 known affected: 38 known not affected: 119 | 2026-10-15T20:16:50+00:00 | Vulnerability · Source |
| CVE-2018-12115 | redhat_vex | nodejs: Out of bounds (OOB) write via UCS-2 encoding | fixed: 149 known affected: 5 known not affected: 110 | 2026-10-15T20:16:20+00:00 | Vulnerability · Source |
| CVE-2018-1061 | redhat_vex | python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib | fixed: 521 known affected: 24 | 2026-10-15T20:16:14+00:00 | Vulnerability · Source |
| CVE-2018-2811 | redhat_vex | JDK: unspecified vulnerability fixed in 8u171 and 10.0.1 (Install) | fixed: 64 | 2026-10-15T20:16:14+00:00 | Vulnerability · Source |
| CVE-2018-0737 | redhat_vex | openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys | fixed: 282 known affected: 15 known not affected: 7 | 2026-10-15T20:16:13+00:00 | Vulnerability · Source |
| CVE-2026-96611 | redhat_vex | ffmpeg: FFmpeg: Data corruption and information disclosure via signed integer overflow in HEIF processing | known affected: 8 | 2026-10-15T20:12:37+00:00 | Vulnerability · Source |
| CVE-2026-64478 | redhat_vex | kernel: ALSA: usb-audio: avoid kobject path lookup in DualSense match | known affected: 199 known not affected: 76 | 2026-10-15T20:05:28+00:00 | Vulnerability · Source |