VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
104719 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-75887 | redhat_vex | openshift/console: openshift/console: Unauthenticated path traversal in i18n locale handler | fixed: 34 known not affected: 5577 | 2026-10-15T19:12:54+00:00 | Vulnerability · Source |
| CVE-2026-75885 | redhat_vex | openshift/console: openshift/console: Unauthenticated SSRF and resource exhaustion via devfile parser endpoint | fixed: 38 known not affected: 6225 | 2026-10-15T19:12:31+00:00 | Vulnerability · Source |
| CVE-2026-39832 | redhat_vex | golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions | fixed: 1058 known affected: 64 known not affected: 6422 | 2026-10-15T19:11:49+00:00 | Vulnerability · Source |
| CVE-2026-39831 | redhat_vex | golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check | fixed: 441 known affected: 132 known not affected: 9867 | 2026-10-15T19:11:37+00:00 | Vulnerability · Source |
| CVE-2025-64756 | redhat_vex | glob: glob: Command Injection Vulnerability via Malicious Filenames | fixed: 174 known affected: 115 known not affected: 1114 | 2026-10-15T19:10:59+00:00 | Vulnerability · Source |
| CVE-2019-10790 | redhat_vex | taffy: taffydb: Internal Property Tampering | fixed: 57 known affected: 87 known not affected: 394 | 2026-10-15T19:10:41+00:00 | Vulnerability · Source |
| CVE-2026-55204 | redhat_vex | haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions | fixed: 150 known affected: 16 known not affected: 4542 | 2026-10-15T19:10:31+00:00 | Vulnerability · Source |
| CVE-2026-44990 | redhat_vex | sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass | fixed: 128 known affected: 3 known not affected: 8219 | 2026-10-15T19:09:59+00:00 | Vulnerability · Source |
| CVE-2026-25646 | redhat_vex | libpng: LIBPNG has a heap buffer overflow in png_set_quantize | fixed: 800 known affected: 6 known not affected: 293 | 2026-10-15T19:09:12+00:00 | Vulnerability · Source |
| CVE-2025-58098 | redhat_vex | httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... | fixed: 980 known not affected: 87 | 2026-10-15T19:06:34+00:00 | Vulnerability · Source |
| CVE-2025-55131 | redhat_vex | nodejs: Nodejs uninitialized memory exposure | fixed: 542 known not affected: 12 | 2026-10-15T19:06:26+00:00 | Vulnerability · Source |
| CVE-2025-55130 | redhat_vex | nodejs: Nodejs file permissions bypass | fixed: 542 known not affected: 12 | 2026-10-15T19:06:20+00:00 | Vulnerability · Source |
| CVE-2026-4519 | redhat_vex | python: Python: Command-line option injection in webbrowser.open() via crafted URLs | fixed: 1839 known not affected: 96 | 2026-10-15T19:06:15+00:00 | Vulnerability · Source |
| CVE-2026-22029 | redhat_vex | @remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects | fixed: 454 known affected: 62 known not affected: 8683 | 2026-10-15T19:03:16+00:00 | Vulnerability · Source |
| CVE-2026-6321 | redhat_vex | fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies | fixed: 740 known affected: 12 known not affected: 1228 | 2026-10-15T19:02:53+00:00 | Vulnerability · Source |
| CVE-2025-15284 | redhat_vex | qs: qs: Denial of Service via improper input validation in array parsing | fixed: 614 known affected: 80 known not affected: 5358 | 2026-10-15T19:01:48+00:00 | Vulnerability · Source |
| CVE-2025-13465 | redhat_vex | lodash: prototype pollution in _.unset and _.omit functions | fixed: 809 known affected: 331 known not affected: 12909 | 2026-10-15T19:01:40+00:00 | Vulnerability · Source |
| CVE-2026-73500 | redhat_vex | etcd: etcd: Denial of Service via unbounded TLS handshake goroutines | fixed: 61 known affected: 19 known not affected: 801 | 2026-10-15T19:01:19+00:00 | Vulnerability · Source |
| CVE-2025-66293 | redhat_vex | libpng: LIBPNG out-of-bounds read in png_image_read_composite | fixed: 531 known affected: 4 known not affected: 241 | 2026-10-15T19:00:37+00:00 | Vulnerability · Source |
| CVE-2025-65018 | redhat_vex | libpng: LIBPNG heap buffer overflow | fixed: 3631 known affected: 9 known not affected: 48 | 2026-10-15T19:00:33+00:00 | Vulnerability · Source |
| CVE-2025-64720 | redhat_vex | libpng: LIBPNG buffer overflow | fixed: 3667 known affected: 26 known not affected: 27 | 2026-10-15T19:00:21+00:00 | Vulnerability · Source |
| CVE-2025-59465 | redhat_vex | nodejs: Nodejs denial of service | fixed: 508 known not affected: 8 | 2026-10-15T18:59:43+00:00 | Vulnerability · Source |
| CVE-2026-27135 | redhat_vex | nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination | fixed: 973 known not affected: 58 | 2026-10-15T18:58:14+00:00 | Vulnerability · Source |
| CVE-2026-18140 | redhat_vex | aws-smithy-json: aws-smithy-json: Denial of Service via uncontrolled recursion with deeply nested JSON | fixed: 47 known affected: 1 known not affected: 122 | 2026-10-15T18:56:58+00:00 | Vulnerability · Source |
| CVE-2026-2950 | redhat_vex | lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass | fixed: 90 known affected: 366 known not affected: 10 | 2026-10-15T18:55:23+00:00 | Vulnerability · Source |
| CVE-2017-16137 | redhat_vex | nodejs-debug: Regular expression Denial of Service | fixed: 1 known affected: 6 known not affected: 20 | 2026-10-15T18:55:19+00:00 | Vulnerability · Source |
| CVE-2026-4631 | redhat_vex | cockpit: Cockpit: Unauthenticated remote code execution due to SSH command-line argument injection | fixed: 154 known not affected: 13 | 2026-10-15T18:54:46+00:00 | Vulnerability · Source |
| CVE-2026-106435 | redhat_vex | pymongo: pymongo: Denial of Service via out-of-bounds read during malformed BSON decoding | known affected: 23 | 2026-10-15T18:45:48+00:00 | Vulnerability · Source |
| CVE-2026-19487 | redhat_vex | perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions. | known affected: 327 | 2026-10-15T18:44:57+00:00 | Vulnerability · Source |
| CVE-2026-53399 | redhat_vex | kernel: nfsd: release layout stid on setlease failure | fixed: 762 known affected: 50 known not affected: 14 | 2026-10-15T18:43:51+00:00 | Vulnerability · Source |
| CVE-2026-19395 | redhat_vex | qt-mcu: qt: Denial of Service via empty image tag attribute in styled text | fixed: 14 known not affected: 56 | 2026-10-15T18:43:22+00:00 | Vulnerability · Source |
| CVE-2023-52975 | redhat_vex | kernel: scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress | fixed: 286 known affected: 198 known not affected: 77 | 2026-10-15T18:43:19+00:00 | Vulnerability · Source |
| CVE-2026-72183 | redhat_vex | kernel: landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path | known affected: 108 known not affected: 167 | 2026-10-15T18:39:35+00:00 | Vulnerability · Source |
| CVE-2026-61711 | redhat_vex | github.com/moby/buildkit: BuildKit: Security bypass allows disabling container protections | known affected: 199 | 2026-10-15T18:39:31+00:00 | Vulnerability · Source |
| CVE-2026-97032 | redhat_vex | net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification | known affected: 342 | 2026-10-15T18:35:01+00:00 | Vulnerability · Source |
| CVE-2026-94447 | redhat_vex | cmd/go: golang: cmd/go: Toolchain checksum verification bypass via crafted project configuration | fixed: 34 known affected: 36 | 2026-10-15T18:34:49+00:00 | Vulnerability · Source |
| CVE-2026-94444 | redhat_vex | cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy | fixed: 34 known affected: 36 | 2026-10-15T18:34:47+00:00 | Vulnerability · Source |
| CVE-2026-89769 | redhat_vex | kernel: clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path | known affected: 77 known not affected: 200 | 2026-10-15T18:34:38+00:00 | Vulnerability · Source |
| CVE-2026-89696 | redhat_vex | kernel: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref | known affected: 200 known not affected: 77 | 2026-10-15T18:34:36+00:00 | Vulnerability · Source |
| CVE-2026-89679 | redhat_vex | kernel: nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs | known affected: 91 known not affected: 186 | 2026-10-15T18:34:32+00:00 | Vulnerability · Source |
| CVE-2026-89661 | redhat_vex | kernel: NFSD: Prevent post-shutdown use-after-free in unlock_filesystem | known affected: 77 known not affected: 200 | 2026-10-15T18:34:29+00:00 | Vulnerability · Source |
| CVE-2026-89511 | redhat_vex | kernel: qede: Fix NULL pointer dereference in TPA fragment processing | known affected: 263 known not affected: 14 | 2026-10-15T18:34:26+00:00 | Vulnerability · Source |
| CVE-2026-89596 | redhat_vex | kernel: forcedeth: fix off-by-one when saving/restoring non-PCI config space | known not affected: 277 | 2026-10-15T18:34:24+00:00 | Vulnerability · Source |
| CVE-2026-89761 | redhat_vex | kernel: apparmor: fix out-of-bounds write when null terminating a label vec | known not affected: 277 | 2026-10-15T18:34:02+00:00 | Vulnerability · Source |
| CVE-2026-89736 | redhat_vex | kernel: usb: gadget: u_audio: Fix use-after-free on sound card disconnect | known not affected: 277 | 2026-10-15T18:33:59+00:00 | Vulnerability · Source |
| CVE-2026-89725 | redhat_vex | kernel: media: cec: stm32: prevent out-of-bounds write on RX overflow | known not affected: 277 | 2026-10-15T18:33:56+00:00 | Vulnerability · Source |
| CVE-2026-89674 | redhat_vex | kernel: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget | known not affected: 277 | 2026-10-15T18:33:52+00:00 | Vulnerability · Source |
| CVE-2026-89617 | redhat_vex | kernel: fs/ntfs3: validate dirty page table on log replay | known not affected: 277 | 2026-10-15T18:33:47+00:00 | Vulnerability · Source |
| CVE-2026-89524 | redhat_vex | kernel: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets | known not affected: 277 | 2026-10-15T18:33:44+00:00 | Vulnerability · Source |
| CVE-2026-89513 | redhat_vex | kernel: RISC-V: KVM: Fix PMU event info array size overflow | known not affected: 277 | 2026-10-15T18:33:42+00:00 | Vulnerability · Source |