VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288063 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-42300 | redhat_vex | kernel: erofs: fix race in z_erofs_get_gbuf() | known not affected: 198 | 2026-08-04T18:27:58+00:00 | Vulnerability · Source |
| CVE-2024-42285 | redhat_vex | kernel: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs | known affected: 182 | 2026-08-04T18:27:55+00:00 | Vulnerability · Source |
| CVE-2019-12384 | redhat_vex | jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution | fixed: 595 known affected: 20 known not affected: 30 | 2026-08-04T18:27:49+00:00 | Vulnerability · Source |
| CVE-2018-8016 | redhat_vex | cassandra: Unauthenticated JMX/RMI interface bound to all network interfaces (Regression of CVE-2015-0225) | known not affected: 1 | 2026-08-04T18:27:47+00:00 | Vulnerability · Source |
| CVE-2019-0211 | redhat_vex | httpd: privilege escalation from modules scripts | fixed: 346 known affected: 3 known not affected: 19 | 2026-08-04T18:27:45+00:00 | Vulnerability · Source |
| CVE-2018-19362 | redhat_vex | jackson-databind: improper polymorphic deserialization in jboss-common-core class | fixed: 38 known affected: 16 known not affected: 166 | 2026-08-04T18:27:42+00:00 | Vulnerability · Source |
| CVE-2018-19360 | redhat_vex | jackson-databind: improper polymorphic deserialization in axis2-transport-jms class | fixed: 38 known affected: 16 known not affected: 166 | 2026-08-04T18:27:40+00:00 | Vulnerability · Source |
| CVE-2018-3258 | redhat_vex | mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018) | fixed: 1252 known affected: 4 known not affected: 2 | 2026-08-04T18:27:33+00:00 | Vulnerability · Source |
| CVE-2018-8039 | redhat_vex | apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.* | fixed: 306 known affected: 1 known not affected: 6 | 2026-08-04T18:27:30+00:00 | Vulnerability · Source |
| CVE-2019-0190 | redhat_vex | httpd: mod_ssl: infinite loop triggered by client-initiated renegotiation when using OpenSSL 1.1.1 | known not affected: 56 | 2026-08-04T18:27:29+00:00 | Vulnerability · Source |
| CVE-2018-8009 | redhat_vex | hadoop: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file | fixed: 1 known not affected: 2 | 2026-08-04T18:27:26+00:00 | Vulnerability · Source |
| CVE-2019-12409 | redhat_vex | solr: JMX monitoring service exposed without authentication in default configuration | known affected: 2 known not affected: 2 | 2026-08-04T18:27:22+00:00 | Vulnerability · Source |
| CVE-2018-8037 | redhat_vex | tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up | fixed: 98 known affected: 1 known not affected: 56 | 2026-08-04T18:27:12+00:00 | Vulnerability · Source |
| CVE-2019-0193 | redhat_vex | solr: Remote Code Execution via DataImportHandler | known affected: 1 known not affected: 4 | 2026-08-04T18:27:07+00:00 | Vulnerability · Source |
| CVE-2019-0192 | redhat_vex | solr: remote code execution due to unsafe deserialization | fixed: 1 known affected: 3 known not affected: 1 | 2026-08-04T18:26:59+00:00 | Vulnerability · Source |
| CVE-2019-10173 | redhat_vex | xstream: remote code execution due to insecure XML deserialization (regression of CVE-2013-7285) | fixed: 6 | 2026-08-04T18:26:53+00:00 | Vulnerability · Source |
| CVE-2018-19361 | redhat_vex | jackson-databind: improper polymorphic deserialization in openjpa class | fixed: 38 known affected: 22 known not affected: 160 | 2026-08-04T18:26:52+00:00 | Vulnerability · Source |
| CVE-2019-10174 | redhat_vex | infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods | fixed: 50 known affected: 7 known not affected: 19 | 2026-08-04T18:26:39+00:00 | Vulnerability · Source |
| CVE-2019-0223 | redhat_vex | qpid-proton: TLS Man in the Middle Vulnerability | fixed: 1022 known affected: 8 known not affected: 4 | 2026-08-04T18:25:59+00:00 | Vulnerability · Source |
| CVE-2019-0199 | redhat_vex | tomcat: Apache Tomcat HTTP/2 DoS | fixed: 85 known affected: 2 known not affected: 57 | 2026-08-04T18:24:49+00:00 | Vulnerability · Source |
| CVE-2019-12402 | redhat_vex | apache-commons-compress: Infinite loop in name encoding algorithm | fixed: 1 known affected: 1 known not affected: 20 | 2026-08-04T18:24:33+00:00 | Vulnerability · Source |
| CVE-2019-0215 | redhat_vex | httpd: mod_ssl: access control bypass when using per-location client certification authentication | fixed: 80 known not affected: 32 | 2026-08-04T18:24:25+00:00 | Vulnerability · Source |
| CVE-2024-42162 | redhat_vex | kernel: gve: Account for stopped queues when reading NIC stats | known affected: 136 known not affected: 62 | 2026-08-04T18:23:43+00:00 | Vulnerability · Source |
| CVE-2024-42225 | redhat_vex | kernel: wifi: mt76: replace skb_put with skb_put_zero | fixed: 399 known affected: 80 | 2026-08-04T18:23:40+00:00 | Vulnerability · Source |
| CVE-2024-42313 | redhat_vex | kernel: media: venus: fix use after free in vdec_close | known not affected: 198 | 2026-08-04T18:23:37+00:00 | Vulnerability · Source |
| CVE-2024-44940 | redhat_vex | kernel: fou: remove warn in gue_gro_receive on unsupported protocol | known not affected: 198 | 2026-08-04T18:23:34+00:00 | Vulnerability · Source |
| CVE-2024-44998 | redhat_vex | kernel: atm: idt77252: prevent use after free in dequeue_rx() | known affected: 198 | 2026-08-04T18:23:33+00:00 | Vulnerability · Source |
| CVE-2020-11619 | redhat_vex | jackson-databind: Serialization gadgets in org.springframework:spring-aop | fixed: 1362 known affected: 14 known not affected: 12 | 2026-08-04T18:23:26+00:00 | Vulnerability · Source |
| CVE-2020-10968 | redhat_vex | jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider | fixed: 1371 known affected: 9 known not affected: 5 | 2026-08-04T18:23:24+00:00 | Vulnerability · Source |
| CVE-2020-12691 | redhat_vex | openstack-keystone: Credentials endpoint policy logic allows changing credential owner and target project ID | fixed: 16 known affected: 3 known not affected: 2 | 2026-08-04T18:23:22+00:00 | Vulnerability · Source |
| CVE-2020-13936 | redhat_vex | velocity: arbitrary code execution when attacker is able to modify templates | fixed: 440 known affected: 24 known not affected: 173 | 2026-08-04T18:23:21+00:00 | Vulnerability · Source |
| CVE-2020-13957 | redhat_vex | solr: The checks added to unauthenticated configset uploads can be circumvented | known not affected: 6 | 2026-08-04T18:23:18+00:00 | Vulnerability · Source |
| CVE-2019-12419 | redhat_vex | cxf: OpenId Connect token service does not properly validate the clientId | fixed: 3 known affected: 7 known not affected: 6 | 2026-08-04T18:23:16+00:00 | Vulnerability · Source |
| CVE-2020-10672 | redhat_vex | jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution | fixed: 791 known affected: 14 known not affected: 19 | 2026-08-04T18:23:10+00:00 | Vulnerability · Source |
| CVE-2019-20330 | redhat_vex | jackson-databind: lacks certain net.sf.ehcache blocking | fixed: 228 known affected: 7 known not affected: 3 | 2026-08-04T18:23:07+00:00 | Vulnerability · Source |
| CVE-2020-1710 | redhat_vex | EAP: field-name is not parsed in accordance to RFC7230 | fixed: 664 known affected: 3 known not affected: 4 | 2026-08-04T18:23:04+00:00 | Vulnerability · Source |
| CVE-2020-13935 | redhat_vex | tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS | fixed: 407 known affected: 14 known not affected: 22 | 2026-08-04T18:23:03+00:00 | Vulnerability · Source |
| CVE-2020-11111 | redhat_vex | jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory | fixed: 25 known affected: 15 known not affected: 6 | 2026-08-04T18:22:59+00:00 | Vulnerability · Source |
| CVE-2020-11112 | redhat_vex | jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider | fixed: 25 known affected: 17 known not affected: 4 | 2026-08-04T18:22:51+00:00 | Vulnerability · Source |
| CVE-2020-11994 | redhat_vex | camel: server-side template injection and arbitrary file disclosure on templating components | fixed: 2 known affected: 3 | 2026-08-04T18:22:47+00:00 | Vulnerability · Source |
| CVE-2020-14326 | redhat_vex | RESTEasy: Caching routes in RootNode may result in DoS | fixed: 4 known affected: 1 known not affected: 21 | 2026-08-04T18:22:40+00:00 | Vulnerability · Source |
| CVE-2019-14379 | redhat_vex | jackson-databind: default typing mishandling leading to remote code execution | fixed: 545 known affected: 20 known not affected: 174 | 2026-08-04T18:22:33+00:00 | Vulnerability · Source |
| CVE-2020-13934 | redhat_vex | tomcat: OutOfMemoryException caused by HTTP/2 connection leak could lead to DoS | fixed: 36 known affected: 8 known not affected: 41 | 2026-08-04T18:22:32+00:00 | Vulnerability · Source |
| CVE-2020-11620 | redhat_vex | jackson-databind: Serialization gadgets in commons-jelly:commons-jelly | fixed: 22 known affected: 15 known not affected: 6 | 2026-08-04T18:22:15+00:00 | Vulnerability · Source |
| CVE-2019-17558 | redhat_vex | solr: Remote Code Execution through the VelocityResponseWriter | known not affected: 4 | 2026-08-04T18:22:06+00:00 | Vulnerability · Source |
| CVE-2020-11113 | redhat_vex | jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime | fixed: 194 known affected: 15 known not affected: 5 | 2026-08-04T18:22:01+00:00 | Vulnerability · Source |
| CVE-2020-13692 | redhat_vex | postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML | fixed: 36 known affected: 1 known not affected: 5 | 2026-08-04T18:21:33+00:00 | Vulnerability · Source |
| CVE-2020-12690 | redhat_vex | openstack-keystone: OAuth1 request token authorize silently ignores roles parameter | fixed: 6 known affected: 10 known not affected: 2 | 2026-08-04T18:21:15+00:00 | Vulnerability · Source |
| CVE-2020-13941 | redhat_vex | solr: replication handler allows a read-write operations to any location the solr user can access | known affected: 3 known not affected: 3 | 2026-08-04T18:21:04+00:00 | Vulnerability · Source |
| CVE-2020-11973 | redhat_vex | camel: Netty enables Java deserialization by default which could leed to remote code execution | fixed: 1 known affected: 1 known not affected: 1 | 2026-08-04T18:20:31+00:00 | Vulnerability · Source |