VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288066 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-13934 | redhat_vex | tomcat: OutOfMemoryException caused by HTTP/2 connection leak could lead to DoS | fixed: 36 known affected: 8 known not affected: 41 | 2026-08-04T18:22:32+00:00 | Vulnerability · Source |
| CVE-2020-11620 | redhat_vex | jackson-databind: Serialization gadgets in commons-jelly:commons-jelly | fixed: 22 known affected: 15 known not affected: 6 | 2026-08-04T18:22:15+00:00 | Vulnerability · Source |
| CVE-2019-17558 | redhat_vex | solr: Remote Code Execution through the VelocityResponseWriter | known not affected: 4 | 2026-08-04T18:22:06+00:00 | Vulnerability · Source |
| CVE-2020-11113 | redhat_vex | jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime | fixed: 194 known affected: 15 known not affected: 5 | 2026-08-04T18:22:01+00:00 | Vulnerability · Source |
| CVE-2020-13692 | redhat_vex | postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML | fixed: 36 known affected: 1 known not affected: 5 | 2026-08-04T18:21:33+00:00 | Vulnerability · Source |
| CVE-2020-12690 | redhat_vex | openstack-keystone: OAuth1 request token authorize silently ignores roles parameter | fixed: 6 known affected: 10 known not affected: 2 | 2026-08-04T18:21:15+00:00 | Vulnerability · Source |
| CVE-2020-13941 | redhat_vex | solr: replication handler allows a read-write operations to any location the solr user can access | known affected: 3 known not affected: 3 | 2026-08-04T18:21:04+00:00 | Vulnerability · Source |
| CVE-2020-11973 | redhat_vex | camel: Netty enables Java deserialization by default which could leed to remote code execution | fixed: 1 known affected: 1 known not affected: 1 | 2026-08-04T18:20:31+00:00 | Vulnerability · Source |
| CVE-2019-14844 | redhat_vex | krb5: reversed strlcpy() allows client to crash the KDC | known not affected: 29 | 2026-08-04T18:19:53+00:00 | Vulnerability · Source |
| CVE-2019-17638 | redhat_vex | jetty: double release of resource can lead to information disclosure | fixed: 10 known not affected: 81 | 2026-08-04T18:19:41+00:00 | Vulnerability · Source |
| CVE-2020-12689 | redhat_vex | openstack-keystone: EC2 and credential endpoints are not protected from a scoped context | fixed: 16 known affected: 3 known not affected: 2 | 2026-08-04T18:19:26+00:00 | Vulnerability · Source |
| CVE-2024-43858 | redhat_vex | kernel: jfs: Fix array-index-out-of-bounds in diFree | known affected: 58 known not affected: 140 | 2026-08-04T18:18:45+00:00 | Vulnerability · Source |
| CVE-2024-43830 | redhat_vex | kernel: leds: trigger: Unregister sysfs attributes before calling deactivate() | fixed: 679 known affected: 80 known not affected: 8 | 2026-08-04T18:18:42+00:00 | Vulnerability · Source |
| CVE-2024-43877 | redhat_vex | kernel: media: pci: ivtv: Add check for DMA map result | known affected: 28 known not affected: 170 | 2026-08-04T18:18:41+00:00 | Vulnerability · Source |
| CVE-2024-44959 | redhat_vex | kernel: tracefs: Use generic inode RCU for synchronizing freeing | known not affected: 198 | 2026-08-04T18:18:37+00:00 | Vulnerability · Source |
| CVE-2024-44966 | redhat_vex | kernel: binfmt_flat: Fix corruption when not offsetting data start | known not affected: 198 | 2026-08-04T18:18:36+00:00 | Vulnerability · Source |
| CVE-2024-44951 | redhat_vex | kernel: serial: sc16is7xx: fix TX fifo corruption | known not affected: 198 | 2026-08-04T18:18:32+00:00 | Vulnerability · Source |
| CVE-2024-45030 | redhat_vex | kernel: igb: cope with large MAX_SKB_FRAGS | known affected: 42 known not affected: 156 | 2026-08-04T18:18:30+00:00 | Vulnerability · Source |
| CVE-2024-42318 | redhat_vex | kernel: landlock: Don't lose track of restrictions on cred_transfer | known not affected: 198 | 2026-08-04T18:18:28+00:00 | Vulnerability · Source |
| CVE-2024-44992 | redhat_vex | kernel: smb/client: avoid possible NULL dereference in cifs_free_subrequest() | known not affected: 198 | 2026-08-04T18:18:25+00:00 | Vulnerability · Source |
| CVE-2024-44973 | redhat_vex | kernel: mm, slub: do not call do_slab_free for kfence object | known affected: 28 known not affected: 170 | 2026-08-04T18:18:20+00:00 | Vulnerability · Source |
| CVE-2024-44933 | redhat_vex | kernel: bnxt_en : Fix memory out-of-bounds in bnxt_fill_hw_rss_tbl() | known affected: 28 known not affected: 170 | 2026-08-04T18:18:18+00:00 | Vulnerability · Source |
| CVE-2024-45013 | redhat_vex | kernel: nvme: move stopping keep-alive into nvme_uninit_ctrl() | known affected: 136 known not affected: 62 | 2026-08-04T18:18:15+00:00 | Vulnerability · Source |
| CVE-2024-45021 | redhat_vex | kernel: memcg_write_event_control(): fix a user-triggerable oops | known affected: 42 known not affected: 156 | 2026-08-04T18:18:11+00:00 | Vulnerability · Source |
| CVE-2024-45009 | redhat_vex | kernel: mptcp: pm: only decrement add_addr_accepted for MPJ req | fixed: 305 known affected: 70 known not affected: 42 | 2026-08-04T18:18:10+00:00 | Vulnerability · Source |
| CVE-2024-43825 | redhat_vex | kernel: iio: Fix the sorting functionality in iio_gts_build_avail_time_table | known not affected: 198 | 2026-08-04T18:18:07+00:00 | Vulnerability · Source |
| CVE-2024-43910 | redhat_vex | kernel: bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory accesses | fixed: 305 known affected: 98 known not affected: 14 | 2026-08-04T18:18:05+00:00 | Vulnerability · Source |
| CVE-2024-44954 | redhat_vex | kernel: ALSA: line6: Fix racy access to midibuf | known affected: 184 known not affected: 14 | 2026-08-04T18:18:02+00:00 | Vulnerability · Source |
| CVE-2024-43888 | redhat_vex | kernel: mm: list_lru: fix UAF for memory cgroup | fixed: 559 known affected: 64 known not affected: 56 | 2026-08-04T18:17:56+00:00 | Vulnerability · Source |
| CVE-2024-44974 | redhat_vex | kernel: mptcp: pm: avoid possible UaF when selecting endp | known affected: 156 known not affected: 42 | 2026-08-04T18:17:54+00:00 | Vulnerability · Source |
| CVE-2024-45000 | redhat_vex | kernel: fs/netfs/fscache_cookie: add missing "n_accesses" check | fixed: 305 known affected: 64 known not affected: 48 | 2026-08-04T18:17:50+00:00 | Vulnerability · Source |
| CVE-2024-45016 | redhat_vex | kernel: netem: fix return value if duplicate enqueue fails | fixed: 305 known affected: 112 | 2026-08-04T18:17:49+00:00 | Vulnerability · Source |
| CVE-2024-44942 | redhat_vex | kernel: f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC | known not affected: 198 | 2026-08-04T18:17:46+00:00 | Vulnerability · Source |
| CVE-2024-45020 | redhat_vex | kernel: bpf: Fix a kernel verifier crash in stacksafe() | fixed: 280 known affected: 28 known not affected: 84 | 2026-08-04T18:17:42+00:00 | Vulnerability · Source |
| CVE-2020-25695 | redhat_vex | postgresql: Multiple features escape "security restricted operation" sandbox | fixed: 1340 known affected: 14 known not affected: 25 | 2026-08-04T18:17:39+00:00 | Vulnerability · Source |
| CVE-2020-1938 | redhat_vex | tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability | fixed: 825 known affected: 5 known not affected: 9 | 2026-08-04T18:17:27+00:00 | Vulnerability · Source |
| CVE-2020-7014 | redhat_vex | elasticsearch: Incomplete fix for CVE-2020-7009 could result in generating API key with elevated privileges | known not affected: 6 | 2026-08-04T18:17:22+00:00 | Vulnerability · Source |
| CVE-2020-17519 | redhat_vex | apache-flink: directory traversal attack allows reading remote files through the REST API | known not affected: 2 | 2026-08-04T18:17:17+00:00 | Vulnerability · Source |
| CVE-2020-7746 | redhat_vex | chart.js: prototype pollution | fixed: 1 | 2026-08-04T18:17:06+00:00 | Vulnerability · Source |
| CVE-2020-9484 | redhat_vex | tomcat: deserialization flaw in session persistence storage leading to RCE | fixed: 199 known affected: 5 known not affected: 12 | 2026-08-04T18:16:59+00:00 | Vulnerability · Source |
| CVE-2020-25694 | redhat_vex | postgresql: Reconnection can downgrade connection security settings | fixed: 1434 known affected: 14 known not affected: 22 | 2026-08-04T18:15:57+00:00 | Vulnerability · Source |
| CVE-2020-7009 | redhat_vex | elasticsearch: Generating API keys with specific steps could result in generating API key with elevated privileges | known not affected: 6 | 2026-08-04T18:15:44+00:00 | Vulnerability · Source |
| CVE-2020-25638 | redhat_vex | hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String literals are used | fixed: 373 known affected: 17 known not affected: 2 | 2026-08-04T18:15:06+00:00 | Vulnerability · Source |
| CVE-2020-9492 | redhat_vex | hadoop: WebHDFS client might send SPNEGO authorization header | fixed: 2 known affected: 5 known not affected: 1 | 2026-08-04T18:14:48+00:00 | Vulnerability · Source |
| CVE-2024-43816 | redhat_vex | kernel: scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages | known affected: 150 known not affected: 48 | 2026-08-04T18:13:45+00:00 | Vulnerability · Source |
| CVE-2024-44934 | redhat_vex | kernel: net: bridge: mcast: wait for previous gc cycles when removing port | fixed: 305 known affected: 112 | 2026-08-04T18:13:42+00:00 | Vulnerability · Source |
| CVE-2024-46678 | redhat_vex | kernel: bonding: change ipsec_lock from spin lock to mutex | known affected: 198 known not affected: 76 | 2026-08-04T18:13:39+00:00 | Vulnerability · Source |
| CVE-2024-46673 | redhat_vex | kernel: scsi: aacraid: Fix double-free on probe failure | fixed: 305 known affected: 112 | 2026-08-04T18:13:37+00:00 | Vulnerability · Source |
| CVE-2024-44987 | redhat_vex | kernel: ipv6: prevent UAF in ip6_send_skb() | fixed: 305 known affected: 112 | 2026-08-04T18:13:34+00:00 | Vulnerability · Source |
| CVE-2024-45001 | redhat_vex | kernel: net: mana: Fix RX buf alloc_size alignment and atomic op panic | known affected: 156 known not affected: 42 | 2026-08-04T18:13:33+00:00 | Vulnerability · Source |