VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
104719 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64477 | redhat_vex | kernel: x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled | known affected: 185 known not affected: 90 | 2026-10-15T20:05:23+00:00 | Vulnerability · Source |
| CVE-2026-33036 | redhat_vex | fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass | fixed: 610 known affected: 7 known not affected: 189 | 2026-10-15T20:05:21+00:00 | Vulnerability · Source |
| CVE-2026-64534 | redhat_vex | kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path | fixed: 762 known affected: 22 known not affected: 42 | 2026-10-15T20:05:18+00:00 | Vulnerability · Source |
| CVE-2026-27942 | redhat_vex | fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service | fixed: 333 known affected: 4 known not affected: 143 | 2026-10-15T20:05:16+00:00 | Vulnerability · Source |
| CVE-2026-26278 | redhat_vex | fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion | fixed: 245 known affected: 6 known not affected: 127 | 2026-10-15T20:05:09+00:00 | Vulnerability · Source |
| CVE-2026-25128 | redhat_vex | fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug | fixed: 243 known affected: 12 known not affected: 124 | 2026-10-15T20:04:59+00:00 | Vulnerability · Source |
| CVE-2025-27613 | redhat_vex | gitk: Git file creation flaw | fixed: 150 known affected: 32 | 2026-10-15T20:04:59+00:00 | Vulnerability · Source |
| CVE-2026-25896 | redhat_vex | fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling | fixed: 245 known affected: 6 known not affected: 127 | 2026-10-15T20:04:59+00:00 | Vulnerability · Source |
| CVE-2025-59436 | redhat_vex | ip: Node ip SSRF | fixed: 11 known affected: 36 known not affected: 63 | 2026-10-15T19:33:28+00:00 | Vulnerability · Source |
| CVE-2018-6913 | redhat_vex | perl: heap buffer overflow in pp_pack.c | fixed: 203 known affected: 48 known not affected: 116 | 2026-10-15T19:33:25+00:00 | Vulnerability · Source |
| CVE-2017-12837 | redhat_vex | perl: Heap buffer overflow in regular expression compiler | fixed: 203 known affected: 43 known not affected: 67 | 2026-10-15T19:33:21+00:00 | Vulnerability · Source |
| CVE-2025-68458 | redhat_vex | webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior | fixed: 366 known affected: 127 known not affected: 63 | 2026-10-15T19:33:13+00:00 | Vulnerability · Source |
| CVE-2025-68157 | redhat_vex | webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects | fixed: 366 known affected: 127 known not affected: 63 | 2026-10-15T19:33:10+00:00 | Vulnerability · Source |
| CVE-2026-21716 | redhat_vex | nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership via incomplete security fix. | fixed: 179 known affected: 47 known not affected: 8 | 2026-10-15T19:33:08+00:00 | Vulnerability · Source |
| CVE-2025-14819 | redhat_vex | curl: libcurl: Improper certificate validation due to cached TLS settings reuse | fixed: 133 known affected: 81 known not affected: 19 | 2026-10-15T19:33:02+00:00 | Vulnerability · Source |
| CVE-2025-64718 | redhat_vex | js-yaml: js-yaml prototype pollution in merge | fixed: 79 known affected: 227 known not affected: 76 | 2026-10-15T19:31:50+00:00 | Vulnerability · Source |
| CVE-2025-7783 | redhat_vex | form-data: Unsafe random function in form-data | fixed: 200 known affected: 70 known not affected: 1032 | 2026-10-15T19:31:31+00:00 | Vulnerability · Source |
| CVE-2024-5206 | redhat_vex | scikit-learn: Possible sensitive data leak | fixed: 3 known affected: 5 known not affected: 26 | 2026-10-15T19:31:14+00:00 | Vulnerability · Source |
| CVE-2023-28155 | redhat_vex | request: bypass of SSRF mitigations when following a cross-protocol redirect | fixed: 7 known affected: 13 known not affected: 120 | 2026-10-15T19:31:13+00:00 | Vulnerability · Source |
| CVE-2023-25153 | redhat_vex | containerd: OCI image importer memory exhaustion | fixed: 451 known affected: 6 known not affected: 503 | 2026-10-15T19:31:12+00:00 | Vulnerability · Source |
| CVE-2025-66200 | redhat_vex | httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo | fixed: 276 known affected: 16 known not affected: 87 | 2026-10-15T19:30:04+00:00 | Vulnerability · Source |
| CVE-2025-65082 | redhat_vex | httpd: Apache HTTP Server: CGI environment variable override | fixed: 276 known affected: 16 known not affected: 87 | 2026-10-15T19:30:02+00:00 | Vulnerability · Source |
| CVE-2020-10543 | redhat_vex | perl: heap-based buffer overflow in regular expression compiler leads to DoS | fixed: 844 known affected: 75 | 2026-10-15T19:29:54+00:00 | Vulnerability · Source |
| CVE-2017-12883 | redhat_vex | perl: Buffer over-read in regular expression parser | fixed: 203 known affected: 30 known not affected: 80 | 2026-10-15T19:29:51+00:00 | Vulnerability · Source |
| CVE-2016-2381 | redhat_vex | perl: ambiguous environment variables handling | fixed: 203 known affected: 126 | 2026-10-15T19:29:50+00:00 | Vulnerability · Source |
| CVE-2015-8853 | redhat_vex | perl: regexp matching hangs indefinitely on illegal UTF-8 input | fixed: 203 known affected: 126 | 2026-10-15T19:29:47+00:00 | Vulnerability · Source |
| CVE-2012-6329 | redhat_vex | perl: possible arbitrary code execution via Locale::Maketext | fixed: 959 known affected: 1 | 2026-10-15T19:29:46+00:00 | Vulnerability · Source |
| CVE-2025-66031 | redhat_vex | node-forge: node-forge ASN.1 Unbounded Recursion | fixed: 513 known affected: 44 known not affected: 1790 | 2026-10-15T19:21:44+00:00 | Vulnerability · Source |
| CVE-2026-33636 | redhat_vex | libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion | fixed: 3692 known affected: 23 known not affected: 197 | 2026-10-15T19:20:11+00:00 | Vulnerability · Source |
| CVE-2026-33416 | redhat_vex | libpng: libpng: Arbitrary code execution due to use-after-free vulnerability | fixed: 4183 known affected: 20 known not affected: 12 | 2026-10-15T19:20:06+00:00 | Vulnerability · Source |
| CVE-2026-22801 | redhat_vex | libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API | fixed: 3311 known affected: 61 known not affected: 35 | 2026-10-15T19:20:01+00:00 | Vulnerability · Source |
| CVE-2026-22695 | redhat_vex | libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read | fixed: 3311 known affected: 61 known not affected: 35 | 2026-10-15T19:19:57+00:00 | Vulnerability · Source |
| CVE-2025-28164 | redhat_vex | libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function | fixed: 31 known affected: 267 | 2026-10-15T19:19:56+00:00 | Vulnerability · Source |
| CVE-2025-64506 | redhat_vex | libpng: LIBPNG heap buffer over-read | fixed: 22 known affected: 242 | 2026-10-15T19:19:56+00:00 | Vulnerability · Source |
| CVE-2026-21717 | redhat_vex | nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash collisions | fixed: 179 known affected: 47 known not affected: 8 | 2026-10-15T19:18:24+00:00 | Vulnerability · Source |
| CVE-2026-21637 | redhat_vex | nodejs: Nodejs denial of service | fixed: 619 known not affected: 8 | 2026-10-15T19:18:19+00:00 | Vulnerability · Source |
| CVE-2026-21636 | redhat_vex | nodejs: Nodejs network segmentation bypass | fixed: 68 known not affected: 82 | 2026-10-15T19:18:18+00:00 | Vulnerability · Source |
| CVE-2025-59466 | redhat_vex | nodejs: Nodejs denial of service | fixed: 508 known not affected: 8 | 2026-10-15T19:18:14+00:00 | Vulnerability · Source |
| CVE-2025-59464 | redhat_vex | nodejs: Nodejs memory leak | fixed: 102 known affected: 6 known not affected: 80 | 2026-10-15T19:18:14+00:00 | Vulnerability · Source |
| CVE-2025-55132 | redhat_vex | nodejs: Nodejs filesystem permissions bypass | fixed: 399 known not affected: 12 | 2026-10-15T19:18:13+00:00 | Vulnerability · Source |
| CVE-2026-3784 | redhat_vex | curl: curl: Unauthorized access due to improper HTTP proxy connection reuse | fixed: 130 known affected: 40 known not affected: 53 | 2026-10-15T19:17:57+00:00 | Vulnerability · Source |
| CVE-2026-3783 | redhat_vex | curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect | fixed: 298 known affected: 34 known not affected: 58 | 2026-10-15T19:17:56+00:00 | Vulnerability · Source |
| CVE-2026-1965 | redhat_vex | curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication | fixed: 298 known affected: 34 known not affected: 58 | 2026-10-15T19:17:56+00:00 | Vulnerability · Source |
| CVE-2025-14017 | redhat_vex | curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers | fixed: 35 known affected: 105 | 2026-10-15T19:17:24+00:00 | Vulnerability · Source |
| CVE-2025-9086 | redhat_vex | curl: libcurl: Curl out of bounds read for cookie path | fixed: 368 known affected: 14 known not affected: 211 | 2026-10-15T19:17:22+00:00 | Vulnerability · Source |
| CVE-2026-96577 | redhat_vex | oc-mirror__release-4.21: Embedded local cache registry listens on all interfaces without authentication, with delete enabled | fixed: 20 known not affected: 3241 under investigation: 1 | 2026-10-15T19:14:03+00:00 | Vulnerability · Source |
| CVE-2026-83589 | redhat_vex | oauth-proxy: Open Redirect via /\ and /\t Bypass in Post-Login Redirect | fixed: 28 known not affected: 4552 | 2026-10-15T19:13:56+00:00 | Vulnerability · Source |
| CVE-2026-75939 | redhat_vex | openshift/oc-mirror: Release signature verification: OpenPGP SignatureError checked before signed body is consumed | fixed: 4 known not affected: 647 | 2026-10-15T19:13:54+00:00 | Vulnerability · Source |
| CVE-2026-49329 | redhat_vex | openshift/oauth-server: openshift/oauth-server: Quadratic-time DoS via Accept-Language header underscore bypass on unauthenticated login endpoints | fixed: 28 known not affected: 4552 | 2026-10-15T19:13:34+00:00 | Vulnerability · Source |
| CVE-2026-42151 | redhat_vex | github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API | fixed: 538 known affected: 45 known not affected: 6375 | 2026-10-15T19:13:16+00:00 | Vulnerability · Source |