VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288048 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-40974 | redhat_vex | kernel: powerpc/pseries: Enforce hcall result buffer validity and size | fixed: 120 known affected: 166 | 2026-08-04T18:43:08+00:00 | Vulnerability · Source |
| CVE-2024-41048 | redhat_vex | kernel: skmsg: Skip zero length skb in sk_msg_recvmsg | known affected: 58 known not affected: 140 | 2026-08-04T18:43:05+00:00 | Vulnerability · Source |
| CVE-2024-40989 | redhat_vex | kernel: KVM: arm64: Disassociate vcpus from redistributor region on teardown | fixed: 943 known affected: 22 known not affected: 51 | 2026-08-04T18:42:19+00:00 | Vulnerability · Source |
| CVE-2024-41014 | redhat_vex | kernel: xfs: add bounds checking to xlog_recover_process_data | fixed: 926 known affected: 64 known not affected: 4 | 2026-08-04T18:42:14+00:00 | Vulnerability · Source |
| CVE-2017-15089 | redhat_vex | infinispan: Unsafe deserialization of malicious object injected into data cache | fixed: 321 known affected: 7 known not affected: 2 | 2026-08-04T18:42:08+00:00 | Vulnerability · Source |
| CVE-2016-6817 | redhat_vex | tomcat: Infinite loop in HTTP/2 header parser | known not affected: 6 under investigation: 5 | 2026-08-04T18:41:56+00:00 | Vulnerability · Source |
| CVE-2017-12615 | redhat_vex | tomcat: Remote Code Execution via JSP Upload | fixed: 267 known not affected: 11 | 2026-08-04T18:41:56+00:00 | Vulnerability · Source |
| CVE-2017-12617 | redhat_vex | tomcat: Remote Code Execution bypass for CVE-2017-12615 | fixed: 743 known affected: 2 known not affected: 10 | 2026-08-04T18:41:50+00:00 | Vulnerability · Source |
| CVE-2016-8735 | redhat_vex | tomcat: Remote code execution vulnerability in JmxRemoteLifecycleListener | fixed: 99 known affected: 16 known not affected: 35 | 2026-08-04T18:41:50+00:00 | Vulnerability · Source |
| CVE-2016-6497 | redhat_vex | groovy: allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods | known affected: 7 known not affected: 7 | 2026-08-04T18:41:48+00:00 | Vulnerability · Source |
| CVE-2016-7050 | redhat_vex | RESTEasy: SerializableProvider enabled by default and deserializes untrusted data | fixed: 64 known not affected: 4 | 2026-08-04T18:41:44+00:00 | Vulnerability · Source |
| CVE-2016-6814 | redhat_vex | Groovy: Remote code execution via deserialization | fixed: 33 known affected: 8 known not affected: 2 under investigation: 1 | 2026-08-04T18:41:43+00:00 | Vulnerability · Source |
| CVE-2016-7054 | redhat_vex | openssl: Corrupting larger payloads when using ChaCha20/Poly1305 ciphersuites leads to DoS | known not affected: 22 | 2026-08-04T18:41:20+00:00 | Vulnerability · Source |
| CVE-2016-8745 | redhat_vex | tomcat: information disclosure due to incorrect Processor sharing | fixed: 191 known affected: 14 known not affected: 9 | 2026-08-04T18:41:16+00:00 | Vulnerability · Source |
| CVE-2016-8656 | redhat_vex | jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation | fixed: 1493 known affected: 1 | 2026-08-04T18:41:12+00:00 | Vulnerability · Source |
| CVE-2017-11103 | redhat_vex | krb5: Metadata taken from the unauthenticated plaintext | known not affected: 115 | 2026-08-04T18:40:35+00:00 | Vulnerability · Source |
| CVE-2017-12629 | redhat_vex | Solr: Code execution via entity expansion | fixed: 460 known affected: 5 known not affected: 14 | 2026-08-04T18:39:55+00:00 | Vulnerability · Source |
| CVE-2024-41059 | redhat_vex | kernel: hfsplus: fix uninit-value in copy_name | known not affected: 198 | 2026-08-04T18:38:46+00:00 | Vulnerability · Source |
| CVE-2024-41022 | redhat_vex | kernel: drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() | known affected: 28 known not affected: 170 | 2026-08-04T18:38:45+00:00 | Vulnerability · Source |
| CVE-2024-41019 | redhat_vex | kernel: fs/ntfs3: Validate ff offset | known not affected: 198 | 2026-08-04T18:38:41+00:00 | Vulnerability · Source |
| CVE-2024-40984 | redhat_vex | kernel: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." | fixed: 827 known affected: 64 known not affected: 1 | 2026-08-04T18:38:32+00:00 | Vulnerability · Source |
| CVE-2024-41045 | redhat_vex | kernel: bpf: Defer work in bpf_timer_cancel_and_free | known affected: 136 known not affected: 62 | 2026-08-04T18:38:26+00:00 | Vulnerability · Source |
| CVE-2024-41020 | redhat_vex | kernel: filelock: Fix fcntl/close race recovery compat path | fixed: 280 known affected: 112 known not affected: 8 | 2026-08-04T18:38:24+00:00 | Vulnerability · Source |
| CVE-2024-41010 | redhat_vex | kernel: bpf: Fix too early release of tcx_entry | fixed: 305 known affected: 112 | 2026-08-04T18:38:23+00:00 | Vulnerability · Source |
| CVE-2024-40958 | redhat_vex | kernel: netns: Make get_net_ns() handle zero refcount net | fixed: 429 known affected: 64 known not affected: 8 | 2026-08-04T18:38:19+00:00 | Vulnerability · Source |
| CVE-2024-41018 | redhat_vex | kernel: fs/ntfs3: Add a check for attr_names and oatbl | known not affected: 198 | 2026-08-04T18:38:18+00:00 | Vulnerability · Source |
| CVE-2024-41034 | redhat_vex | kernel: nilfs2: fix kernel bug on rename operation of broken directory | known not affected: 198 | 2026-08-04T18:38:14+00:00 | Vulnerability · Source |
| CVE-2024-41016 | redhat_vex | kernel: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() | known not affected: 198 | 2026-08-04T18:38:11+00:00 | Vulnerability · Source |
| CVE-2024-41070 | redhat_vex | kernel: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() | known not affected: 198 | 2026-08-04T18:38:08+00:00 | Vulnerability · Source |
| CVE-2024-40980 | redhat_vex | kernel: drop_monitor: replace spin_lock by raw_spin_lock | known affected: 198 | 2026-08-04T18:38:07+00:00 | Vulnerability · Source |
| CVE-2024-41007 | redhat_vex | kernel: tcp: avoid too many retransmit packets | fixed: 709 known affected: 64 known not affected: 8 | 2026-08-04T18:38:07+00:00 | Vulnerability · Source |
| CVE-2024-40983 | redhat_vex | kernel: tipc: force a dst refcount before doing decryption | fixed: 663 known affected: 22 known not affected: 43 | 2026-08-04T18:37:55+00:00 | Vulnerability · Source |
| CVE-2024-41009 | redhat_vex | kernel: bpf: Fix overrunning reservations in ringbuf | fixed: 1209 known affected: 50 known not affected: 15 | 2026-08-04T18:37:50+00:00 | Vulnerability · Source |
| CVE-2024-40954 | redhat_vex | kernel: net: do not leave a dangling sk pointer, when socket creation fails | fixed: 429 known affected: 64 known not affected: 8 | 2026-08-04T18:37:45+00:00 | Vulnerability · Source |
| CVE-2024-41040 | redhat_vex | kernel: net/sched: Fix UAF when resolving a clash | fixed: 783 known affected: 22 known not affected: 43 | 2026-08-04T18:37:44+00:00 | Vulnerability · Source |
| CVE-2024-40990 | redhat_vex | kernel: RDMA/mlx5: Add check for srq max_sge attribute | known affected: 198 | 2026-08-04T18:37:40+00:00 | Vulnerability · Source |
| CVE-2024-40986 | redhat_vex | kernel: dmaengine: xilinx: xdma: Fix data synchronisation in xdma_channel_isr() | known not affected: 198 | 2026-08-04T18:37:39+00:00 | Vulnerability · Source |
| CVE-2024-40979 | redhat_vex | kernel: wifi: ath12k: fix kernel crash during resume | known not affected: 198 | 2026-08-04T18:37:36+00:00 | Vulnerability · Source |
| CVE-2024-41064 | redhat_vex | kernel: powerpc/eeh: avoid possible crash when edev->pdev changes | fixed: 599 known affected: 152 known not affected: 15 | 2026-08-04T18:37:36+00:00 | Vulnerability · Source |
| CVE-2024-42272 | redhat_vex | kernel: sched: act_ct: take care of padding in struct zones_ht_key | fixed: 513 known affected: 22 known not affected: 91 | 2026-08-04T18:37:27+00:00 | Vulnerability · Source |
| CVE-2024-40956 | redhat_vex | kernel: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list | fixed: 818 known affected: 70 known not affected: 43 | 2026-08-04T18:37:26+00:00 | Vulnerability · Source |
| CVE-2024-42152 | redhat_vex | kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment | fixed: 663 known affected: 50 known not affected: 15 | 2026-08-04T18:37:21+00:00 | Vulnerability · Source |
| CVE-2024-42293 | redhat_vex | kernel: arm64: mm: Fix lockless walks with static and dynamic page-table folding | known affected: 28 known not affected: 170 | 2026-08-04T18:37:19+00:00 | Vulnerability · Source |
| CVE-2024-42284 | redhat_vex | kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error | fixed: 783 known affected: 22 known not affected: 43 | 2026-08-04T18:37:12+00:00 | Vulnerability · Source |
| CVE-2024-42306 | redhat_vex | kernel: udf: Avoid using corrupted block bitmap buffer | known affected: 42 known not affected: 156 | 2026-08-04T18:37:09+00:00 | Vulnerability · Source |
| CVE-2017-9788 | redhat_vex | httpd: Uninitialized memory reflection in mod_auth_digest | fixed: 563 known affected: 2 known not affected: 1 | 2026-08-04T18:37:08+00:00 | Vulnerability · Source |
| CVE-2017-9803 | redhat_vex | solr: Kerberos delegation token functionality allows to re-use authentication | known not affected: 6 | 2026-08-04T18:37:04+00:00 | Vulnerability · Source |
| CVE-2017-8046 | redhat_vex | spring-boot: Malicious PATCH requests submitted to servers can use specially crafted JSON data to run arbitrary Java code | fixed: 1 known not affected: 1 | 2026-08-04T18:37:02+00:00 | Vulnerability · Source |
| CVE-2017-5650 | redhat_vex | tomcat: Handling of HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection | known not affected: 55 | 2026-08-04T18:36:59+00:00 | Vulnerability · Source |
| CVE-2017-5664 | redhat_vex | tomcat: Security constrained bypass in error page mechanism | fixed: 747 known affected: 4 known not affected: 7 under investigation: 3 | 2026-08-04T18:36:56+00:00 | Vulnerability · Source |