VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
287403 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-33099 | redhat_vex | lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling | fixed: 58 known not affected: 15 | 2026-08-04T06:32:01+00:00 | Vulnerability · Source |
| CVE-2022-29824 | redhat_vex | libxml2: integer overflows in xmlBuf and xmlBuffer lead to out-of-bounds write | fixed: 91 known affected: 10 | 2026-08-04T06:31:59+00:00 | Vulnerability · Source |
| CVE-2023-52425 | redhat_vex | expat: parsing large tokens can trigger a denial of service | fixed: 223 known affected: 29 known not affected: 47 | 2026-08-04T06:28:18+00:00 | Vulnerability · Source |
| CVE-2020-13938 | redhat_vex | httpd: Improper Handling of Insufficient Privileges | known affected: 2 known not affected: 52 | 2026-08-04T06:28:14+00:00 | Vulnerability · Source |
| CVE-2023-52426 | redhat_vex | expat: recursive XML entity expansion vulnerability | known affected: 21 known not affected: 21 | 2026-08-04T06:28:13+00:00 | Vulnerability · Source |
| CVE-2024-25062 | redhat_vex | libxml2: use-after-free in XMLReader | fixed: 226 known affected: 12 | 2026-08-04T06:28:05+00:00 | Vulnerability · Source |
| CVE-2022-24048 | redhat_vex | mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer | fixed: 736 known affected: 19 known not affected: 36 | 2026-08-04T06:27:53+00:00 | Vulnerability · Source |
| CVE-2022-24051 | redhat_vex | mariadb: lack of proper validation of a user-supplied string before using it as a format specifier | fixed: 736 known affected: 19 known not affected: 36 | 2026-08-04T06:27:41+00:00 | Vulnerability · Source |
| CVE-2023-38709 | redhat_vex | httpd: HTTP response splitting | fixed: 188 known affected: 30 known not affected: 44 | 2026-08-04T06:27:18+00:00 | Vulnerability · Source |
| CVE-2022-24052 | redhat_vex | mariadb: CONNECT storage engine heap-based buffer overflow | fixed: 736 known affected: 19 known not affected: 36 | 2026-08-04T06:27:08+00:00 | Vulnerability · Source |
| CVE-2024-8176 | redhat_vex | libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat | fixed: 477 known affected: 31 known not affected: 150 | 2026-08-04T06:27:05+00:00 | Vulnerability · Source |
| CVE-2021-43519 | redhat_vex | lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file | fixed: 116 known affected: 6 known not affected: 9 | 2026-08-04T06:27:01+00:00 | Vulnerability · Source |
| CVE-2022-24050 | redhat_vex | mariadb: lack of validating the existence of an object prior to performing operations on the object | fixed: 736 known affected: 19 known not affected: 36 | 2026-08-04T06:26:49+00:00 | Vulnerability · Source |
| CVE-2006-20001 | redhat_vex | httpd: mod_dav: out-of-bounds read/write of zero byte | fixed: 188 known affected: 26 known not affected: 97 | 2026-08-04T06:26:45+00:00 | Vulnerability · Source |
| CVE-2023-24021 | redhat_vex | modsecurity: lacking the complete content in FILES_TMP_CONTENT leads to web application firewall bypass | fixed: 7 known affected: 10 known not affected: 99 | 2026-08-04T06:26:42+00:00 | Vulnerability · Source |
| CVE-2022-48279 | redhat_vex | mod_security: incorrect parsing of HTTP multipart requests leads to web application firewall bypass | fixed: 7 known affected: 10 known not affected: 99 | 2026-08-04T06:26:40+00:00 | Vulnerability · Source |
| CVE-2022-43680 | redhat_vex | expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate | fixed: 141 known affected: 29 known not affected: 27 | 2026-08-04T06:26:30+00:00 | Vulnerability · Source |
| CVE-2021-31618 | redhat_vex | httpd: NULL pointer dereference on specially crafted HTTP/2 request | known not affected: 54 | 2026-08-04T06:25:58+00:00 | Vulnerability · Source |
| CVE-2021-44964 | redhat_vex | lua: use after free allows Sandbox Escape | fixed: 116 known not affected: 15 | 2026-08-04T06:24:54+00:00 | Vulnerability · Source |
| CVE-2016-3709 | redhat_vex | libxml2: Incorrect server side include parsing can lead to XSS | fixed: 90 known affected: 10 known not affected: 5 | 2026-08-04T06:23:28+00:00 | Vulnerability · Source |
| CVE-2022-40304 | redhat_vex | libxml2: dict corruption caused by entity reference cycles | fixed: 136 known affected: 10 | 2026-08-04T06:23:24+00:00 | Vulnerability · Source |
| CVE-2022-36760 | redhat_vex | httpd: mod_proxy_ajp: Possible request smuggling | fixed: 188 known affected: 26 known not affected: 78 | 2026-08-04T06:23:17+00:00 | Vulnerability · Source |
| CVE-2022-40303 | redhat_vex | libxml2: integer overflows with XML_PARSE_HUGE | fixed: 136 known affected: 10 | 2026-08-04T06:23:16+00:00 | Vulnerability · Source |
| CVE-2022-37436 | redhat_vex | httpd: mod_proxy: HTTP response splitting | fixed: 188 known affected: 20 known not affected: 84 | 2026-08-04T06:23:13+00:00 | Vulnerability · Source |
| CVE-2020-11985 | redhat_vex | httpd: IP address spoofing when proxying using mod_remoteip and mod_rewrite | fixed: 138 known affected: 3 known not affected: 22 | 2026-08-04T06:22:34+00:00 | Vulnerability · Source |
| CVE-2020-12243 | redhat_vex | openldap: denial of service via nested boolean expressions in LDAP search filters | fixed: 74 known affected: 11 known not affected: 6 | 2026-08-04T06:22:29+00:00 | Vulnerability · Source |
| CVE-2020-25709 | redhat_vex | openldap: assertion failure in Certificate List syntax validation | fixed: 67 known affected: 12 known not affected: 6 | 2026-08-04T06:22:21+00:00 | Vulnerability · Source |
| CVE-2020-25710 | redhat_vex | openldap: assertion failure in CSN normalization with invalid input | fixed: 67 known affected: 12 known not affected: 6 | 2026-08-04T06:22:17+00:00 | Vulnerability · Source |
| CVE-2020-28196 | redhat_vex | krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS | fixed: 82 known affected: 9 known not affected: 29 | 2026-08-04T06:22:11+00:00 | Vulnerability · Source |
| CVE-2020-24977 | redhat_vex | libxml2: Buffer overflow vulnerability in xmlEncodeEntitiesInternal() in entities.c | fixed: 45 known affected: 11 known not affected: 1 | 2026-08-04T06:22:01+00:00 | Vulnerability · Source |
| CVE-2022-40674 | redhat_vex | expat: a use-after-free in the doContent function in xmlparse.c | fixed: 348 known affected: 9 known not affected: 12 | 2026-08-04T06:19:43+00:00 | Vulnerability · Source |
| CVE-2023-23931 | redhat_vex | python-cryptography: memory corruption via immutable objects | fixed: 354 known affected: 10 known not affected: 143 | 2026-08-04T06:17:00+00:00 | Vulnerability · Source |
| CVE-2020-9490 | redhat_vex | httpd: Push diary crash on specifically crafted HTTP/2 header | fixed: 341 known affected: 3 known not affected: 17 | 2026-08-04T06:16:22+00:00 | Vulnerability · Source |
| CVE-2026-58222 | redhat_vex | samba: Samba AD LDAP Compare filter injection and trusted-request confusion disclose protected attributes | known not affected: 174 | 2026-08-04T05:55:18+00:00 | Vulnerability · Source |
| CVE-2024-45811 | redhat_vex | vite: server.fs.deny is bypassed when using `?import&raw` | fixed: 8 known affected: 2 known not affected: 65 | 2026-08-04T05:47:45+00:00 | Vulnerability · Source |
| CVE-2024-45812 | redhat_vex | vite: XSS via DOM Clobbering gadget found in vite bundled scripts | fixed: 8 known affected: 2 known not affected: 65 | 2026-08-04T05:47:30+00:00 | Vulnerability · Source |
| CVE-2020-16305 | redhat_vex | ghostscript: buffer overflow in pcx_write_rle() in contrib/japanese/gdev10v.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-04T05:32:59+00:00 | Vulnerability · Source |
| CVE-2019-14849 | redhat_vex | 3scale: user session cookie does not set HTTPOnly | fixed: 6 | 2026-08-04T05:32:56+00:00 | Vulnerability · Source |
| CVE-2022-3143 | redhat_vex | wildfly-elytron: possible timing attacks via use of unsafe comparator | fixed: 101 known not affected: 194 | 2026-08-04T05:22:19+00:00 | Vulnerability · Source |
| CVE-2018-1041 | redhat_vex | jboss-remoting: High CPU Denial of Service | fixed: 475 known not affected: 1 | 2026-08-04T05:17:39+00:00 | Vulnerability · Source |
| CVE-2018-10934 | redhat_vex | wildfly-core: Cross-site scripting (XSS) in JBoss Management Console | fixed: 663 known affected: 6 known not affected: 4 | 2026-08-04T05:17:07+00:00 | Vulnerability · Source |
| CVE-2021-3763 | redhat_vex | 7: Incorrect privilege in Management Console | fixed: 1 known affected: 1 | 2026-08-04T05:06:37+00:00 | Vulnerability · Source |
| CVE-2021-4040 | redhat_vex | Broker: Malformed message can result in partial DoS (OOM) | fixed: 1 | 2026-08-04T05:05:53+00:00 | Vulnerability · Source |
| CVE-2025-55182 | redhat_vex | next: React Server Components: Pre-authentication remote code execution via unsafe deserialization | known not affected: 33 | 2026-08-04T05:05:19+00:00 | Vulnerability · Source |
| CVE-2021-30151 | redhat_vex | sidekiq: XSS via the queue name of the live-poll feature | fixed: 2 known not affected: 3485 | 2026-08-04T05:03:19+00:00 | Vulnerability · Source |
| CVE-2020-17538 | redhat_vex | ghostscript: buffer overflow in GetNumSameData() in contrib/lips4/gdevlips.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-04T05:03:04+00:00 | Vulnerability · Source |
| CVE-2020-16309 | redhat_vex | ghostscript: buffer overflow in lxm5700m_print_page() in devices/gdevlxm.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-04T05:03:02+00:00 | Vulnerability · Source |
| CVE-2020-16308 | redhat_vex | ghostscript: buffer overflow in p_print_image() in devices/gdevcdj.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-04T05:03:00+00:00 | Vulnerability · Source |
| CVE-2020-16302 | redhat_vex | ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a privilege escalation | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-04T05:02:55+00:00 | Vulnerability · Source |
| CVE-2020-16303 | redhat_vex | ghostscript: use-after-free in xps_finish_image_path() in devices/vector/gdevxps.c could result in a privilege escalation | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-04T05:02:48+00:00 | Vulnerability · Source |