VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
287833 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-49996 | redhat_vex | kernel: cifs: Fix buffer overflow when parsing NFS reparse points | known affected: 76 known not affected: 122 | 2026-08-04T17:43:26+00:00 | Vulnerability · Source |
| CVE-2024-49988 | redhat_vex | kernel: ksmbd: add refcnt to ksmbd_conn struct | known not affected: 198 | 2026-08-04T17:43:21+00:00 | Vulnerability · Source |
| CVE-2023-6394 | redhat_vex | quarkus: GraphQL operations over WebSockets bypass | fixed: 2 known not affected: 2038 | 2026-08-04T17:43:14+00:00 | Vulnerability · Source |
| CVE-2023-28154 | redhat_vex | webpack: avoid cross-realm objects | fixed: 20 known affected: 5 known not affected: 145 | 2026-08-04T17:43:10+00:00 | Vulnerability · Source |
| CVE-2023-46233 | redhat_vex | crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard | fixed: 468 known affected: 14 | 2026-08-04T17:43:10+00:00 | Vulnerability · Source |
| CVE-2024-0985 | redhat_vex | postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL | fixed: 2984 known affected: 11 known not affected: 58 | 2026-08-04T17:43:04+00:00 | Vulnerability · Source |
| CVE-2023-4043 | redhat_vex | parsson: Denial of Service due to large number parsing | fixed: 58 known affected: 2 known not affected: 1055 | 2026-08-04T17:42:59+00:00 | Vulnerability · Source |
| CVE-2023-36478 | redhat_vex | jetty: hpack header values cause denial of service in http/2 | fixed: 2 known affected: 11 known not affected: 44 | 2026-08-04T17:42:55+00:00 | Vulnerability · Source |
| CVE-2023-34034 | redhat_vex | spring-security-webflux: path wildcard leads to security bypass | fixed: 1 known affected: 2 known not affected: 3 | 2026-08-04T17:42:52+00:00 | Vulnerability · Source |
| CVE-2023-6267 | redhat_vex | quarkus: json payload getting processed prior to security checks when rest resources are used with annotations. | fixed: 2 known affected: 2 known not affected: 2045 | 2026-08-04T17:42:22+00:00 | Vulnerability · Source |
| CVE-2024-1132 | redhat_vex | keycloak: path transversal in redirection validation | fixed: 38 known affected: 6 known not affected: 8 | 2026-08-04T17:41:47+00:00 | Vulnerability · Source |
| CVE-2024-1597 | redhat_vex | pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE | fixed: 74 known affected: 10 known not affected: 2055 | 2026-08-04T17:40:45+00:00 | Vulnerability · Source |
| CVE-2024-1635 | redhat_vex | undertow: Out-of-memory Error after several closed connections with wildfly-http-client protocol | fixed: 109 known affected: 4 known not affected: 2455 | 2026-08-04T17:40:34+00:00 | Vulnerability · Source |
| CVE-2023-4853 | redhat_vex | quarkus: HTTP security policy bypass | fixed: 49 known affected: 3 known not affected: 876 | 2026-08-04T17:40:14+00:00 | Vulnerability · Source |
| CVE-2023-34062 | redhat_vex | reactor-netty-http: directory traversal vulnerability | known affected: 1 known not affected: 7 | 2026-08-04T17:40:02+00:00 | Vulnerability · Source |
| CVE-2023-3223 | redhat_vex | undertow: OutOfMemoryError due to @MultipartConfig handling | fixed: 109 known affected: 7 known not affected: 2378 | 2026-08-04T17:39:47+00:00 | Vulnerability · Source |
| CVE-2024-50043 | redhat_vex | kernel: nfsd: fix possible badness in FREE_STATEID | known affected: 42 known not affected: 156 | 2026-08-04T17:38:43+00:00 | Vulnerability · Source |
| CVE-2024-50145 | redhat_vex | kernel: octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx() | known affected: 108 known not affected: 90 | 2026-08-04T17:38:37+00:00 | Vulnerability · Source |
| CVE-2024-50036 | redhat_vex | kernel: net: do not delay dst_entries_add() in dst_release() | known affected: 198 | 2026-08-04T17:38:33+00:00 | Vulnerability · Source |
| CVE-2024-49973 | redhat_vex | kernel: r8169: add tally counter fields added with RTL8125 | fixed: 305 known affected: 70 known not affected: 42 | 2026-08-04T17:38:30+00:00 | Vulnerability · Source |
| CVE-2024-50046 | redhat_vex | kernel: NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() | fixed: 305 known affected: 64 known not affected: 48 | 2026-08-04T17:38:25+00:00 | Vulnerability · Source |
| CVE-2024-50128 | redhat_vex | kernel: net: wwan: fix global oob in wwan_rtnl_policy | fixed: 305 known affected: 22 known not affected: 90 | 2026-08-04T17:38:19+00:00 | Vulnerability · Source |
| CVE-2024-50041 | redhat_vex | kernel: i40e: Fix macvlan leak by synchronizing access to mac_filter_hash | known affected: 184 known not affected: 14 | 2026-08-04T17:38:15+00:00 | Vulnerability · Source |
| CVE-2024-50059 | redhat_vex | kernel: ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition | known not affected: 198 | 2026-08-04T17:38:11+00:00 | Vulnerability · Source |
| CVE-2024-29736 | redhat_vex | apache: cxf: org.apache.cxf:cxf-rt-rs-service-description: SSRF via WADL stylesheet parameter | fixed: 2 known affected: 3 known not affected: 3 | 2026-08-04T17:38:08+00:00 | Vulnerability · Source |
| CVE-2024-47072 | redhat_vex | com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream | fixed: 36 known affected: 9 known not affected: 12 | 2026-08-04T17:38:01+00:00 | Vulnerability · Source |
| CVE-2025-2240 | redhat_vex | smallrye-fault-tolerance: SmallRye Fault Tolerance | fixed: 3 known affected: 5 known not affected: 4 | 2026-08-04T17:37:56+00:00 | Vulnerability · Source |
| CVE-2024-7254 | redhat_vex | protobuf: StackOverflow vulnerability in Protocol Buffers | fixed: 65 known affected: 24 known not affected: 358 | 2026-08-04T17:37:51+00:00 | Vulnerability · Source |
| CVE-2024-28752 | redhat_vex | cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding | fixed: 252 known affected: 2 known not affected: 2719 | 2026-08-04T17:37:39+00:00 | Vulnerability · Source |
| CVE-2025-23368 | redhat_vex | org.wildfly.core:wildfly-elytron-integration: Wildfly Elytron Brute Force Attack via CLI | fixed: 17 known affected: 6 known not affected: 244 | 2026-08-04T17:37:35+00:00 | Vulnerability · Source |
| CVE-2024-51132 | redhat_vex | org.hl7.fhir.convertors: org.hl7.fhir.dstu2: org.hl7.fhir.dstu2016may: org.hl7.fhir.dstu3: org.hl7.fhir.r4: org.hl7.fhir.r5: org.hl7.fhir.utilities: org.hl7.fhir.validation: org.hl7.fhir.core: FHIR arbitrary code execution via specially-crafted request | fixed: 2 known affected: 20 | 2026-08-04T17:37:34+00:00 | Vulnerability · Source |
| CVE-2024-38819 | redhat_vex | org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks | fixed: 1 known affected: 7 known not affected: 8 | 2026-08-04T17:37:25+00:00 | Vulnerability · Source |
| CVE-2024-52046 | redhat_vex | mina-core: Apache MINA: applications using unbounded deserialization may allow RCE | fixed: 1 known affected: 8 known not affected: 6 | 2026-08-04T17:37:25+00:00 | Vulnerability · Source |
| CVE-2024-4027 | redhat_vex | undertow: OutOfMemoryError in HttpServletRequestImpl.getParameterNames() can cause remote DoS attacks | known affected: 7 known not affected: 5 under investigation: 8 | 2026-08-04T17:37:19+00:00 | Vulnerability · Source |
| CVE-2024-56128 | redhat_vex | kafka: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption | fixed: 3 known affected: 4 known not affected: 7 | 2026-08-04T17:37:05+00:00 | Vulnerability · Source |
| CVE-2024-25638 | redhat_vex | dnsjava: Improper response validation allowing DNSSEC bypass | known affected: 4 known not affected: 5 | 2026-08-04T17:36:50+00:00 | Vulnerability · Source |
| CVE-2024-53677 | redhat_vex | struts: org.apache.struts: mixing setters for uploaded files and normal fields can allow bypass file upload checks | known not affected: 64 | 2026-08-04T17:36:35+00:00 | Vulnerability · Source |
| CVE-2024-52007 | redhat_vex | org.hl7.fhir.dstu2016may: org.hl7.fhir.dstu3: org.hl7.fhir.r4: org.hl7.fhir.r5: org.hl7.fhir.utilities: org.hl7.fhir.core: XXE vulnerability in XSLT parsing in `org.hl7.fhir.core` | fixed: 1 known affected: 15 | 2026-08-04T17:36:22+00:00 | Vulnerability · Source |
| CVE-2024-45294 | redhat_vex | org.hl7.fhir.core: org.hl7.fhir.dstu3: org.hl7.fhir.r4: org.hl7.fhir.r4b: org.hl7.fhir.r5: org.hl7.fhir.utilities: XXE vulnerability in XSLT transforms in `org.hl7.fhir.core` | fixed: 3 known affected: 11 known not affected: 5 | 2026-08-04T17:35:33+00:00 | Vulnerability · Source |
| CVE-2024-51504 | redhat_vex | org.apache.zookeeper: Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server | known not affected: 14 | 2026-08-04T17:35:22+00:00 | Vulnerability · Source |
| CVE-2024-51127 | redhat_vex | hornetq-core-client: Arbitrarily overwrite files or access sensitive information | fixed: 603 known affected: 2 known not affected: 2201 | 2026-08-04T17:35:11+00:00 | Vulnerability · Source |
| CVE-2026-16526 | redhat_vex | PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability | known affected: 501 known not affected: 1 | 2026-08-04T17:33:37+00:00 | Vulnerability · Source |
| CVE-2026-16529 | redhat_vex | PCP: PCP: Denial of Service due to signed integer overflow | known affected: 501 known not affected: 1 | 2026-08-04T17:33:31+00:00 | Vulnerability · Source |
| CVE-2026-37462 | redhat_vex | github.com/osrg/gobgp: gobgp: Denial of Service via crafted BGP UPDATE message | known affected: 1 known not affected: 1 | 2026-08-04T17:30:38+00:00 | Vulnerability · Source |
| CVE-2026-16524 | redhat_vex | PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection | known affected: 501 known not affected: 1 | 2026-08-04T17:30:12+00:00 | Vulnerability · Source |
| CVE-2026-41731 | redhat_vex | spring-kafka: Spring for Apache Kafka: Arbitrary code execution via insecure deserialization of crafted header values | known affected: 1 known not affected: 1 | 2026-08-04T17:29:03+00:00 | Vulnerability · Source |
| CVE-2026-40987 | redhat_vex | Spring Integration: Spring Integration: Arbitrary file write via malicious server | known affected: 2 known not affected: 6 | 2026-08-04T17:28:45+00:00 | Vulnerability · Source |
| CVE-2026-14474 | redhat_vex | sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation | fixed: 4124 known affected: 32 | 2026-08-04T17:22:29+00:00 | Vulnerability · Source |
| CVE-2023-49569 | redhat_vex | go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients | fixed: 1287 known affected: 27 known not affected: 7555 | 2026-08-04T15:24:49+00:00 | Vulnerability · Source |
| CVE-2024-55949 | redhat_vex | minio: Privilege escalation in IAM import API in MinIO | known not affected: 46 | 2026-08-04T15:02:48+00:00 | Vulnerability · Source |