VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288107 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-11766 | redhat_vex | hadoop: Privilege escalation to root (Incomplete fix for CVE-2016-6811) | known not affected: 3 | 2026-08-04T18:30:59+00:00 | Vulnerability · Source |
| CVE-2018-1274 | redhat_vex | spring-data-commons: Unlimited path depth in PropertyPath.java allow remote attackers to cause a denial of service | known affected: 1 known not affected: 3 | 2026-08-04T18:30:18+00:00 | Vulnerability · Source |
| CVE-2018-1199 | redhat_vex | spring-framework: Improper URL path validation allows for bypassing of security checks on static resources | fixed: 1 known affected: 6 known not affected: 35 | 2026-08-04T18:30:10+00:00 | Vulnerability · Source |
| CVE-2018-11235 | redhat_vex | git: arbitrary code execution when recursively cloning a malicious repository | fixed: 252 known affected: 7 known not affected: 62 | 2026-08-04T18:29:52+00:00 | Vulnerability · Source |
| CVE-2018-14719 | redhat_vex | jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes | fixed: 38 known affected: 14 known not affected: 168 | 2026-08-04T18:29:36+00:00 | Vulnerability · Source |
| CVE-2024-42280 | redhat_vex | kernel: mISDN: Fix a use after free in hfcmulti_tx() | known affected: 90 known not affected: 108 | 2026-08-04T18:28:46+00:00 | Vulnerability · Source |
| CVE-2024-41092 | redhat_vex | kernel: drm/i915/gt: Fix potential UAF by revoke of fence registers | fixed: 709 known affected: 64 known not affected: 8 | 2026-08-04T18:28:46+00:00 | Vulnerability · Source |
| CVE-2024-42117 | redhat_vex | kernel: drm/amd/display: ASSERT when failing to find index by plane/stream id | known not affected: 198 | 2026-08-04T18:28:43+00:00 | Vulnerability · Source |
| CVE-2024-42224 | redhat_vex | kernel: net: dsa: mv88e6xxx: Correct check for empty list | known affected: 124 known not affected: 74 | 2026-08-04T18:28:39+00:00 | Vulnerability · Source |
| CVE-2024-42266 | redhat_vex | kernel: btrfs: make cow_file_range_inline() honor locked_page on error | known affected: 42 known not affected: 156 | 2026-08-04T18:28:37+00:00 | Vulnerability · Source |
| CVE-2024-42273 | redhat_vex | kernel: f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid | known not affected: 198 | 2026-08-04T18:28:36+00:00 | Vulnerability · Source |
| CVE-2024-42104 | redhat_vex | kernel: nilfs2: add missing check for inode numbers on directory entries | known not affected: 198 | 2026-08-04T18:28:33+00:00 | Vulnerability · Source |
| CVE-2024-42233 | redhat_vex | kernel: filemap: replace pte_offset_map() with pte_offset_map_nolock() | known affected: 42 known not affected: 156 | 2026-08-04T18:28:32+00:00 | Vulnerability · Source |
| CVE-2024-41073 | redhat_vex | kernel: nvme: avoid double free special payload | fixed: 752 known affected: 50 known not affected: 14 | 2026-08-04T18:28:26+00:00 | Vulnerability · Source |
| CVE-2024-42299 | redhat_vex | kernel: fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed | known not affected: 198 | 2026-08-04T18:28:24+00:00 | Vulnerability · Source |
| CVE-2024-41087 | redhat_vex | kernel: ata: libata-core: Fix double free on error | known affected: 198 | 2026-08-04T18:28:22+00:00 | Vulnerability · Source |
| CVE-2024-42232 | redhat_vex | kernel: libceph: fix race between delayed_work() and ceph_monc_stop() | known affected: 184 known not affected: 14 | 2026-08-04T18:28:20+00:00 | Vulnerability · Source |
| CVE-2024-42234 | redhat_vex | kernel: mm: fix crashes from deferred split racing folio migration | known affected: 42 known not affected: 156 | 2026-08-04T18:28:18+00:00 | Vulnerability · Source |
| CVE-2024-42264 | redhat_vex | kernel: drm/v3d: Prevent out of bounds access in performance query extensions | known not affected: 198 | 2026-08-04T18:28:16+00:00 | Vulnerability · Source |
| CVE-2024-42069 | redhat_vex | kernel: net: mana: Fix possible double free in error handling path | known affected: 156 known not affected: 42 | 2026-08-04T18:28:12+00:00 | Vulnerability · Source |
| CVE-2024-42301 | redhat_vex | kernel: dev/parport: fix the array out-of-bounds risk | fixed: 709 known affected: 64 known not affected: 8 | 2026-08-04T18:28:10+00:00 | Vulnerability · Source |
| CVE-2024-42250 | redhat_vex | kernel: cachefiles: add missing lock protection when polling | known affected: 42 known not affected: 232 | 2026-08-04T18:28:06+00:00 | Vulnerability · Source |
| CVE-2024-42297 | redhat_vex | kernel: f2fs: fix to don't dirty inode for readonly filesystem | known not affected: 198 | 2026-08-04T18:28:05+00:00 | Vulnerability · Source |
| CVE-2024-42296 | redhat_vex | kernel: f2fs: fix return value of f2fs_convert_inline_inode() | known not affected: 198 | 2026-08-04T18:28:02+00:00 | Vulnerability · Source |
| CVE-2024-42286 | redhat_vex | kernel: scsi: qla2xxx: validate nvme_local_port correctly | known affected: 184 known not affected: 14 | 2026-08-04T18:28:01+00:00 | Vulnerability · Source |
| CVE-2024-42300 | redhat_vex | kernel: erofs: fix race in z_erofs_get_gbuf() | known not affected: 198 | 2026-08-04T18:27:58+00:00 | Vulnerability · Source |
| CVE-2024-42285 | redhat_vex | kernel: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs | known affected: 182 | 2026-08-04T18:27:55+00:00 | Vulnerability · Source |
| CVE-2019-12384 | redhat_vex | jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution | fixed: 595 known affected: 20 known not affected: 30 | 2026-08-04T18:27:49+00:00 | Vulnerability · Source |
| CVE-2018-8016 | redhat_vex | cassandra: Unauthenticated JMX/RMI interface bound to all network interfaces (Regression of CVE-2015-0225) | known not affected: 1 | 2026-08-04T18:27:47+00:00 | Vulnerability · Source |
| CVE-2019-0211 | redhat_vex | httpd: privilege escalation from modules scripts | fixed: 346 known affected: 3 known not affected: 19 | 2026-08-04T18:27:45+00:00 | Vulnerability · Source |
| CVE-2018-19362 | redhat_vex | jackson-databind: improper polymorphic deserialization in jboss-common-core class | fixed: 38 known affected: 16 known not affected: 166 | 2026-08-04T18:27:42+00:00 | Vulnerability · Source |
| CVE-2018-19360 | redhat_vex | jackson-databind: improper polymorphic deserialization in axis2-transport-jms class | fixed: 38 known affected: 16 known not affected: 166 | 2026-08-04T18:27:40+00:00 | Vulnerability · Source |
| CVE-2018-3258 | redhat_vex | mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018) | fixed: 1252 known affected: 4 known not affected: 2 | 2026-08-04T18:27:33+00:00 | Vulnerability · Source |
| CVE-2018-8039 | redhat_vex | apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.* | fixed: 306 known affected: 1 known not affected: 6 | 2026-08-04T18:27:30+00:00 | Vulnerability · Source |
| CVE-2019-0190 | redhat_vex | httpd: mod_ssl: infinite loop triggered by client-initiated renegotiation when using OpenSSL 1.1.1 | known not affected: 56 | 2026-08-04T18:27:29+00:00 | Vulnerability · Source |
| CVE-2018-8009 | redhat_vex | hadoop: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file | fixed: 1 known not affected: 2 | 2026-08-04T18:27:26+00:00 | Vulnerability · Source |
| CVE-2019-12409 | redhat_vex | solr: JMX monitoring service exposed without authentication in default configuration | known affected: 2 known not affected: 2 | 2026-08-04T18:27:22+00:00 | Vulnerability · Source |
| CVE-2018-8037 | redhat_vex | tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up | fixed: 98 known affected: 1 known not affected: 56 | 2026-08-04T18:27:12+00:00 | Vulnerability · Source |
| CVE-2019-0193 | redhat_vex | solr: Remote Code Execution via DataImportHandler | known affected: 1 known not affected: 4 | 2026-08-04T18:27:07+00:00 | Vulnerability · Source |
| CVE-2019-0192 | redhat_vex | solr: remote code execution due to unsafe deserialization | fixed: 1 known affected: 3 known not affected: 1 | 2026-08-04T18:26:59+00:00 | Vulnerability · Source |
| CVE-2019-10173 | redhat_vex | xstream: remote code execution due to insecure XML deserialization (regression of CVE-2013-7285) | fixed: 6 | 2026-08-04T18:26:53+00:00 | Vulnerability · Source |
| CVE-2018-19361 | redhat_vex | jackson-databind: improper polymorphic deserialization in openjpa class | fixed: 38 known affected: 22 known not affected: 160 | 2026-08-04T18:26:52+00:00 | Vulnerability · Source |
| CVE-2019-10174 | redhat_vex | infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods | fixed: 50 known affected: 7 known not affected: 19 | 2026-08-04T18:26:39+00:00 | Vulnerability · Source |
| CVE-2019-0223 | redhat_vex | qpid-proton: TLS Man in the Middle Vulnerability | fixed: 1022 known affected: 8 known not affected: 4 | 2026-08-04T18:25:59+00:00 | Vulnerability · Source |
| CVE-2019-0199 | redhat_vex | tomcat: Apache Tomcat HTTP/2 DoS | fixed: 85 known affected: 2 known not affected: 57 | 2026-08-04T18:24:49+00:00 | Vulnerability · Source |
| CVE-2019-12402 | redhat_vex | apache-commons-compress: Infinite loop in name encoding algorithm | fixed: 1 known affected: 1 known not affected: 20 | 2026-08-04T18:24:33+00:00 | Vulnerability · Source |
| CVE-2019-0215 | redhat_vex | httpd: mod_ssl: access control bypass when using per-location client certification authentication | fixed: 80 known not affected: 32 | 2026-08-04T18:24:25+00:00 | Vulnerability · Source |
| CVE-2024-42162 | redhat_vex | kernel: gve: Account for stopped queues when reading NIC stats | known affected: 136 known not affected: 62 | 2026-08-04T18:23:43+00:00 | Vulnerability · Source |
| CVE-2024-42225 | redhat_vex | kernel: wifi: mt76: replace skb_put with skb_put_zero | fixed: 399 known affected: 80 | 2026-08-04T18:23:40+00:00 | Vulnerability · Source |
| CVE-2024-42313 | redhat_vex | kernel: media: venus: fix use after free in vdec_close | known not affected: 198 | 2026-08-04T18:23:37+00:00 | Vulnerability · Source |