VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
287978 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-5651 | redhat_vex | tomcat: Incorrect handling of send file processing could result into adding Processort to the cache twice | known not affected: 55 | 2026-08-04T18:34:39+00:00 | Vulnerability · Source |
| CVE-2018-1000300 | redhat_vex | curl: FTP shutdown response heap-based buffer overflow can potentially lead to RCE | known not affected: 22 | 2026-08-04T18:34:32+00:00 | Vulnerability · Source |
| CVE-2024-42275 | redhat_vex | kernel: drm/client: Fix error code in drm_client_buffer_vmap_local() | known affected: 42 known not affected: 156 | 2026-08-04T18:33:44+00:00 | Vulnerability · Source |
| CVE-2024-42099 | redhat_vex | kernel: s390/dasd: Fix invalid dereferencing of indirect CCW data pointer | known not affected: 198 | 2026-08-04T18:33:44+00:00 | Vulnerability · Source |
| CVE-2024-42271 | redhat_vex | kernel: net/iucv: fix use after free in iucv_sock_close() | fixed: 793 known affected: 112 known not affected: 9 | 2026-08-04T18:33:31+00:00 | Vulnerability · Source |
| CVE-2024-42083 | redhat_vex | kernel: ionic: fix kernel panic due to multi-buffer handling | known affected: 108 known not affected: 90 | 2026-08-04T18:33:28+00:00 | Vulnerability · Source |
| CVE-2024-41081 | redhat_vex | kernel: ila: block BH in ila_output() | known not affected: 198 | 2026-08-04T18:33:27+00:00 | Vulnerability · Source |
| CVE-2024-42279 | redhat_vex | kernel: spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer | known not affected: 198 | 2026-08-04T18:33:24+00:00 | Vulnerability · Source |
| CVE-2024-42120 | redhat_vex | kernel: drm/amd/display: Check pipe offset before setting vblank | known not affected: 198 | 2026-08-04T18:33:20+00:00 | Vulnerability · Source |
| CVE-2024-42145 | redhat_vex | kernel: IB/core: Implement a limit on UMAD receive List | known affected: 198 | 2026-08-04T18:33:18+00:00 | Vulnerability · Source |
| CVE-2024-42259 | redhat_vex | kernel: drm/i915/gem: Fix Virtual Memory mapping boundaries calculation | known affected: 198 | 2026-08-04T18:33:14+00:00 | Vulnerability · Source |
| CVE-2024-42304 | redhat_vex | kernel: ext4: make sure the first directory block is not a hole | fixed: 305 known affected: 112 | 2026-08-04T18:33:14+00:00 | Vulnerability · Source |
| CVE-2024-41096 | redhat_vex | kernel: PCI/MSI: Fix UAF in msi_capability_init | fixed: 279 known affected: 22 known not affected: 90 | 2026-08-04T18:33:12+00:00 | Vulnerability · Source |
| CVE-2024-42311 | redhat_vex | kernel: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() | known not affected: 198 | 2026-08-04T18:33:09+00:00 | Vulnerability · Source |
| CVE-2024-42123 | redhat_vex | kernel: drm/amdgpu: fix double free err_addr pointer warnings | fixed: 280 known affected: 22 known not affected: 98 | 2026-08-04T18:33:07+00:00 | Vulnerability · Source |
| CVE-2024-42112 | redhat_vex | kernel: net: txgbe: free isb resources at the right time | known not affected: 198 | 2026-08-04T18:33:05+00:00 | Vulnerability · Source |
| CVE-2024-42288 | redhat_vex | kernel: scsi: qla2xxx: Fix for possible memory corruption | known affected: 198 | 2026-08-04T18:33:02+00:00 | Vulnerability · Source |
| CVE-2024-42105 | redhat_vex | kernel: nilfs2: fix inode number range checks | known not affected: 198 | 2026-08-04T18:33:01+00:00 | Vulnerability · Source |
| CVE-2024-42108 | redhat_vex | kernel: net: rswitch: Avoid use-after-free in rswitch_poll() | known not affected: 198 | 2026-08-04T18:32:58+00:00 | Vulnerability · Source |
| CVE-2024-42133 | redhat_vex | kernel: Bluetooth: Ignore too large handle values in BIG | fixed: 305 known affected: 64 known not affected: 48 | 2026-08-04T18:32:56+00:00 | Vulnerability · Source |
| CVE-2018-12023 | redhat_vex | jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver | fixed: 423 known affected: 21 known not affected: 11 | 2026-08-04T18:32:55+00:00 | Vulnerability · Source |
| CVE-2018-10899 | redhat_vex | jolokia: system-wide CSRF that could lead to Remote Code Execution | fixed: 2 known affected: 9 known not affected: 1 | 2026-08-04T18:32:51+00:00 | Vulnerability · Source |
| CVE-2018-1275 | redhat_vex | spring-framework: Address partial fix for CVE-2018-1270 | fixed: 2 known affected: 2 known not affected: 32 | 2026-08-04T18:32:50+00:00 | Vulnerability · Source |
| CVE-2018-11307 | redhat_vex | jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis | fixed: 421 known affected: 17 known not affected: 17 | 2026-08-04T18:32:47+00:00 | Vulnerability · Source |
| CVE-2018-14432 | redhat_vex | openstack-keystone: Information Exposure through /v3/OS-FEDERATION/projects | fixed: 11 known not affected: 14 | 2026-08-04T18:32:46+00:00 | Vulnerability · Source |
| CVE-2018-1335 | redhat_vex | tika: Command injection in tika-server can allow remote attackers to execute arbitrary commands via crafted headers | fixed: 1 known affected: 1 known not affected: 11 | 2026-08-04T18:32:43+00:00 | Vulnerability · Source |
| CVE-2018-1323 | redhat_vex | isapi_redirect: Mishandled HTTP request paths in jk_isapi_plugin.c can lead to unintended exposure of application resources via the reverse proxy | fixed: 1 known affected: 3 | 2026-08-04T18:32:40+00:00 | Vulnerability · Source |
| CVE-2018-11798 | redhat_vex | thrift: Improper Access Control grants access to files outside the webservers docroot path | fixed: 2 known affected: 3 known not affected: 104 | 2026-08-04T18:32:40+00:00 | Vulnerability · Source |
| CVE-2018-1308 | redhat_vex | Solr: XML external entity expansion in handler/dataimport/DataImporter.java allows remote attackers to read arbitrary files | known not affected: 9 | 2026-08-04T18:32:36+00:00 | Vulnerability · Source |
| CVE-2018-14718 | redhat_vex | jackson-databind: arbitrary code execution in slf4j-ext class | fixed: 38 known affected: 16 known not affected: 167 | 2026-08-04T18:32:32+00:00 | Vulnerability · Source |
| CVE-2018-1273 | redhat_vex | spring-data-commons: Improper neutralization of special elements allow remote attackers to execute code via crafted requests | known affected: 1 known not affected: 3 | 2026-08-04T18:32:27+00:00 | Vulnerability · Source |
| CVE-2018-1336 | redhat_vex | tomcat: A bug in the UTF-8 decoder can lead to DoS | fixed: 686 known affected: 5 known not affected: 38 | 2026-08-04T18:32:26+00:00 | Vulnerability · Source |
| CVE-2018-1282 | redhat_vex | hive: Improper input validation in jdbc/HivePreparedStatement.java allows for SQL injection | known not affected: 1 | 2026-08-04T18:32:21+00:00 | Vulnerability · Source |
| CVE-2018-12022 | redhat_vex | jackson-databind: improper polymorphic deserialization of types from Jodd-db library | fixed: 423 known affected: 15 known not affected: 17 | 2026-08-04T18:32:15+00:00 | Vulnerability · Source |
| CVE-2018-1313 | redhat_vex | derby: Externally-controlled input vulnerability allows remote attacker to boot a database under attacker's control | known affected: 1 known not affected: 6 | 2026-08-04T18:32:09+00:00 | Vulnerability · Source |
| CVE-2018-1270 | redhat_vex | spring-framework: Possible RCE via spring messaging | fixed: 1 known affected: 2 known not affected: 39 | 2026-08-04T18:32:05+00:00 | Vulnerability · Source |
| CVE-2018-11766 | redhat_vex | hadoop: Privilege escalation to root (Incomplete fix for CVE-2016-6811) | known not affected: 3 | 2026-08-04T18:30:59+00:00 | Vulnerability · Source |
| CVE-2018-1274 | redhat_vex | spring-data-commons: Unlimited path depth in PropertyPath.java allow remote attackers to cause a denial of service | known affected: 1 known not affected: 3 | 2026-08-04T18:30:18+00:00 | Vulnerability · Source |
| CVE-2018-1199 | redhat_vex | spring-framework: Improper URL path validation allows for bypassing of security checks on static resources | fixed: 1 known affected: 6 known not affected: 35 | 2026-08-04T18:30:10+00:00 | Vulnerability · Source |
| CVE-2018-11235 | redhat_vex | git: arbitrary code execution when recursively cloning a malicious repository | fixed: 252 known affected: 7 known not affected: 62 | 2026-08-04T18:29:52+00:00 | Vulnerability · Source |
| CVE-2018-14719 | redhat_vex | jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes | fixed: 38 known affected: 14 known not affected: 168 | 2026-08-04T18:29:36+00:00 | Vulnerability · Source |
| CVE-2024-42280 | redhat_vex | kernel: mISDN: Fix a use after free in hfcmulti_tx() | known affected: 90 known not affected: 108 | 2026-08-04T18:28:46+00:00 | Vulnerability · Source |
| CVE-2024-41092 | redhat_vex | kernel: drm/i915/gt: Fix potential UAF by revoke of fence registers | fixed: 709 known affected: 64 known not affected: 8 | 2026-08-04T18:28:46+00:00 | Vulnerability · Source |
| CVE-2024-42117 | redhat_vex | kernel: drm/amd/display: ASSERT when failing to find index by plane/stream id | known not affected: 198 | 2026-08-04T18:28:43+00:00 | Vulnerability · Source |
| CVE-2024-42224 | redhat_vex | kernel: net: dsa: mv88e6xxx: Correct check for empty list | known affected: 124 known not affected: 74 | 2026-08-04T18:28:39+00:00 | Vulnerability · Source |
| CVE-2024-42266 | redhat_vex | kernel: btrfs: make cow_file_range_inline() honor locked_page on error | known affected: 42 known not affected: 156 | 2026-08-04T18:28:37+00:00 | Vulnerability · Source |
| CVE-2024-42273 | redhat_vex | kernel: f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid | known not affected: 198 | 2026-08-04T18:28:36+00:00 | Vulnerability · Source |
| CVE-2024-42104 | redhat_vex | kernel: nilfs2: add missing check for inode numbers on directory entries | known not affected: 198 | 2026-08-04T18:28:33+00:00 | Vulnerability · Source |
| CVE-2024-42233 | redhat_vex | kernel: filemap: replace pte_offset_map() with pte_offset_map_nolock() | known affected: 42 known not affected: 156 | 2026-08-04T18:28:32+00:00 | Vulnerability · Source |
| CVE-2024-41073 | redhat_vex | kernel: nvme: avoid double free special payload | fixed: 752 known affected: 50 known not affected: 14 | 2026-08-04T18:28:26+00:00 | Vulnerability · Source |