VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288054 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-42272 | redhat_vex | kernel: sched: act_ct: take care of padding in struct zones_ht_key | fixed: 513 known affected: 22 known not affected: 91 | 2026-08-04T18:37:27+00:00 | Vulnerability · Source |
| CVE-2024-40956 | redhat_vex | kernel: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list | fixed: 818 known affected: 70 known not affected: 43 | 2026-08-04T18:37:26+00:00 | Vulnerability · Source |
| CVE-2024-42152 | redhat_vex | kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment | fixed: 663 known affected: 50 known not affected: 15 | 2026-08-04T18:37:21+00:00 | Vulnerability · Source |
| CVE-2024-42293 | redhat_vex | kernel: arm64: mm: Fix lockless walks with static and dynamic page-table folding | known affected: 28 known not affected: 170 | 2026-08-04T18:37:19+00:00 | Vulnerability · Source |
| CVE-2024-42284 | redhat_vex | kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error | fixed: 783 known affected: 22 known not affected: 43 | 2026-08-04T18:37:12+00:00 | Vulnerability · Source |
| CVE-2024-42306 | redhat_vex | kernel: udf: Avoid using corrupted block bitmap buffer | known affected: 42 known not affected: 156 | 2026-08-04T18:37:09+00:00 | Vulnerability · Source |
| CVE-2017-9788 | redhat_vex | httpd: Uninitialized memory reflection in mod_auth_digest | fixed: 563 known affected: 2 known not affected: 1 | 2026-08-04T18:37:08+00:00 | Vulnerability · Source |
| CVE-2017-9803 | redhat_vex | solr: Kerberos delegation token functionality allows to re-use authentication | known not affected: 6 | 2026-08-04T18:37:04+00:00 | Vulnerability · Source |
| CVE-2017-8046 | redhat_vex | spring-boot: Malicious PATCH requests submitted to servers can use specially crafted JSON data to run arbitrary Java code | fixed: 1 known not affected: 1 | 2026-08-04T18:37:02+00:00 | Vulnerability · Source |
| CVE-2017-5650 | redhat_vex | tomcat: Handling of HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection | known not affected: 55 | 2026-08-04T18:36:59+00:00 | Vulnerability · Source |
| CVE-2017-5664 | redhat_vex | tomcat: Security constrained bypass in error page mechanism | fixed: 747 known affected: 4 known not affected: 7 under investigation: 3 | 2026-08-04T18:36:56+00:00 | Vulnerability · Source |
| CVE-2017-3523 | redhat_vex | mysql-connector-java: Improper automatic deserialization of binary data (CPU Apr 2017) | known affected: 6 known not affected: 1 | 2026-08-04T18:36:53+00:00 | Vulnerability · Source |
| CVE-2017-4995 | redhat_vex | Security: Deserialization of untrusted data via Jackson | known affected: 1 known not affected: 3 | 2026-08-04T18:36:51+00:00 | Vulnerability · Source |
| CVE-2017-3733 | redhat_vex | openssl: Encrypt-Then-Mac renegotiation crash | known not affected: 27 | 2026-08-04T18:36:49+00:00 | Vulnerability · Source |
| CVE-2017-7465 | redhat_vex | JBoss: JAXP in EAP 7.0 allows RCE via XSL | fixed: 1 known affected: 1 known not affected: 2 | 2026-08-04T18:36:45+00:00 | Vulnerability · Source |
| CVE-2017-9789 | redhat_vex | httpd: Read after free in mod_http2 | known not affected: 40 | 2026-08-04T18:35:54+00:00 | Vulnerability · Source |
| CVE-2017-8028 | redhat_vex | spring-ldap: Authentication with userSearch and STARTTLS allows authentication with arbitrary password | fixed: 2 known affected: 2 | 2026-08-04T18:35:39+00:00 | Vulnerability · Source |
| CVE-2017-5651 | redhat_vex | tomcat: Incorrect handling of send file processing could result into adding Processort to the cache twice | known not affected: 55 | 2026-08-04T18:34:39+00:00 | Vulnerability · Source |
| CVE-2018-1000300 | redhat_vex | curl: FTP shutdown response heap-based buffer overflow can potentially lead to RCE | known not affected: 22 | 2026-08-04T18:34:32+00:00 | Vulnerability · Source |
| CVE-2024-42275 | redhat_vex | kernel: drm/client: Fix error code in drm_client_buffer_vmap_local() | known affected: 42 known not affected: 156 | 2026-08-04T18:33:44+00:00 | Vulnerability · Source |
| CVE-2024-42099 | redhat_vex | kernel: s390/dasd: Fix invalid dereferencing of indirect CCW data pointer | known not affected: 198 | 2026-08-04T18:33:44+00:00 | Vulnerability · Source |
| CVE-2024-42271 | redhat_vex | kernel: net/iucv: fix use after free in iucv_sock_close() | fixed: 793 known affected: 112 known not affected: 9 | 2026-08-04T18:33:31+00:00 | Vulnerability · Source |
| CVE-2024-42083 | redhat_vex | kernel: ionic: fix kernel panic due to multi-buffer handling | known affected: 108 known not affected: 90 | 2026-08-04T18:33:28+00:00 | Vulnerability · Source |
| CVE-2024-41081 | redhat_vex | kernel: ila: block BH in ila_output() | known not affected: 198 | 2026-08-04T18:33:27+00:00 | Vulnerability · Source |
| CVE-2024-42279 | redhat_vex | kernel: spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer | known not affected: 198 | 2026-08-04T18:33:24+00:00 | Vulnerability · Source |
| CVE-2024-42120 | redhat_vex | kernel: drm/amd/display: Check pipe offset before setting vblank | known not affected: 198 | 2026-08-04T18:33:20+00:00 | Vulnerability · Source |
| CVE-2024-42145 | redhat_vex | kernel: IB/core: Implement a limit on UMAD receive List | known affected: 198 | 2026-08-04T18:33:18+00:00 | Vulnerability · Source |
| CVE-2024-42259 | redhat_vex | kernel: drm/i915/gem: Fix Virtual Memory mapping boundaries calculation | known affected: 198 | 2026-08-04T18:33:14+00:00 | Vulnerability · Source |
| CVE-2024-42304 | redhat_vex | kernel: ext4: make sure the first directory block is not a hole | fixed: 305 known affected: 112 | 2026-08-04T18:33:14+00:00 | Vulnerability · Source |
| CVE-2024-41096 | redhat_vex | kernel: PCI/MSI: Fix UAF in msi_capability_init | fixed: 279 known affected: 22 known not affected: 90 | 2026-08-04T18:33:12+00:00 | Vulnerability · Source |
| CVE-2024-42311 | redhat_vex | kernel: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() | known not affected: 198 | 2026-08-04T18:33:09+00:00 | Vulnerability · Source |
| CVE-2024-42123 | redhat_vex | kernel: drm/amdgpu: fix double free err_addr pointer warnings | fixed: 280 known affected: 22 known not affected: 98 | 2026-08-04T18:33:07+00:00 | Vulnerability · Source |
| CVE-2024-42112 | redhat_vex | kernel: net: txgbe: free isb resources at the right time | known not affected: 198 | 2026-08-04T18:33:05+00:00 | Vulnerability · Source |
| CVE-2024-42288 | redhat_vex | kernel: scsi: qla2xxx: Fix for possible memory corruption | known affected: 198 | 2026-08-04T18:33:02+00:00 | Vulnerability · Source |
| CVE-2024-42105 | redhat_vex | kernel: nilfs2: fix inode number range checks | known not affected: 198 | 2026-08-04T18:33:01+00:00 | Vulnerability · Source |
| CVE-2024-42108 | redhat_vex | kernel: net: rswitch: Avoid use-after-free in rswitch_poll() | known not affected: 198 | 2026-08-04T18:32:58+00:00 | Vulnerability · Source |
| CVE-2024-42133 | redhat_vex | kernel: Bluetooth: Ignore too large handle values in BIG | fixed: 305 known affected: 64 known not affected: 48 | 2026-08-04T18:32:56+00:00 | Vulnerability · Source |
| CVE-2018-12023 | redhat_vex | jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver | fixed: 423 known affected: 21 known not affected: 11 | 2026-08-04T18:32:55+00:00 | Vulnerability · Source |
| CVE-2018-10899 | redhat_vex | jolokia: system-wide CSRF that could lead to Remote Code Execution | fixed: 2 known affected: 9 known not affected: 1 | 2026-08-04T18:32:51+00:00 | Vulnerability · Source |
| CVE-2018-1275 | redhat_vex | spring-framework: Address partial fix for CVE-2018-1270 | fixed: 2 known affected: 2 known not affected: 32 | 2026-08-04T18:32:50+00:00 | Vulnerability · Source |
| CVE-2018-11307 | redhat_vex | jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis | fixed: 421 known affected: 17 known not affected: 17 | 2026-08-04T18:32:47+00:00 | Vulnerability · Source |
| CVE-2018-14432 | redhat_vex | openstack-keystone: Information Exposure through /v3/OS-FEDERATION/projects | fixed: 11 known not affected: 14 | 2026-08-04T18:32:46+00:00 | Vulnerability · Source |
| CVE-2018-1335 | redhat_vex | tika: Command injection in tika-server can allow remote attackers to execute arbitrary commands via crafted headers | fixed: 1 known affected: 1 known not affected: 11 | 2026-08-04T18:32:43+00:00 | Vulnerability · Source |
| CVE-2018-1323 | redhat_vex | isapi_redirect: Mishandled HTTP request paths in jk_isapi_plugin.c can lead to unintended exposure of application resources via the reverse proxy | fixed: 1 known affected: 3 | 2026-08-04T18:32:40+00:00 | Vulnerability · Source |
| CVE-2018-11798 | redhat_vex | thrift: Improper Access Control grants access to files outside the webservers docroot path | fixed: 2 known affected: 3 known not affected: 104 | 2026-08-04T18:32:40+00:00 | Vulnerability · Source |
| CVE-2018-1308 | redhat_vex | Solr: XML external entity expansion in handler/dataimport/DataImporter.java allows remote attackers to read arbitrary files | known not affected: 9 | 2026-08-04T18:32:36+00:00 | Vulnerability · Source |
| CVE-2018-14718 | redhat_vex | jackson-databind: arbitrary code execution in slf4j-ext class | fixed: 38 known affected: 16 known not affected: 167 | 2026-08-04T18:32:32+00:00 | Vulnerability · Source |
| CVE-2018-1273 | redhat_vex | spring-data-commons: Improper neutralization of special elements allow remote attackers to execute code via crafted requests | known affected: 1 known not affected: 3 | 2026-08-04T18:32:27+00:00 | Vulnerability · Source |
| CVE-2018-1336 | redhat_vex | tomcat: A bug in the UTF-8 decoder can lead to DoS | fixed: 686 known affected: 5 known not affected: 38 | 2026-08-04T18:32:26+00:00 | Vulnerability · Source |
| CVE-2018-1282 | redhat_vex | hive: Improper input validation in jdbc/HivePreparedStatement.java allows for SQL injection | known not affected: 1 | 2026-08-04T18:32:21+00:00 | Vulnerability · Source |