VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288109 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-43872 | redhat_vex | kernel: RDMA/hns: Fix soft lockup under heavy CEQE load | known not affected: 198 | 2026-08-04T18:13:00+00:00 | Vulnerability · Source |
| CVE-2024-44950 | redhat_vex | kernel: serial: sc16is7xx: fix invalid FIFO access with special register set | known not affected: 198 | 2026-08-04T18:12:56+00:00 | Vulnerability · Source |
| CVE-2024-45023 | redhat_vex | kernel: md/raid1: Fix data corruption for degraded array with slow disk | known affected: 42 known not affected: 156 | 2026-08-04T18:12:55+00:00 | Vulnerability · Source |
| CVE-2024-45026 | redhat_vex | kernel: s390/dasd: fix error recovery leading to data corruption on ESE devices | fixed: 240 known affected: 106 known not affected: 60 | 2026-08-04T18:12:51+00:00 | Vulnerability · Source |
| CVE-2024-44970 | redhat_vex | kernel: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink | fixed: 430 known affected: 50 known not affected: 22 | 2026-08-04T18:12:47+00:00 | Vulnerability · Source |
| CVE-2024-44945 | redhat_vex | kernel: netfilter: nfnetlink: Initialise extack before use in ACKs | known affected: 42 known not affected: 156 | 2026-08-04T18:12:45+00:00 | Vulnerability · Source |
| CVE-2021-22145 | redhat_vex | elasticsearch: memory disclosure in error reporting | known not affected: 18 | 2026-08-04T18:12:42+00:00 | Vulnerability · Source |
| CVE-2021-22573 | redhat_vex | google-oauth-client: Token signature not verified | fixed: 4 known affected: 7 known not affected: 8 | 2026-08-04T18:12:41+00:00 | Vulnerability · Source |
| CVE-2020-9547 | redhat_vex | jackson-databind: Serialization gadgets in ibatis-sqlmap | fixed: 2591 known affected: 12 known not affected: 18 | 2026-08-04T18:12:35+00:00 | Vulnerability · Source |
| CVE-2021-22140 | redhat_vex | Search: App Search XML External Entity Injection | known not affected: 19 | 2026-08-04T18:12:22+00:00 | Vulnerability · Source |
| CVE-2021-23436 | redhat_vex | immer: type confusion vulnerability can lead to a bypass of CVE-2020-28477 | fixed: 1 known affected: 1 known not affected: 1 | 2026-08-04T18:12:15+00:00 | Vulnerability · Source |
| CVE-2020-9546 | redhat_vex | jackson-databind: Serialization gadgets in shaded-hikari-config | fixed: 2590 known affected: 13 known not affected: 18 | 2026-08-04T18:12:01+00:00 | Vulnerability · Source |
| CVE-2021-22112 | redhat_vex | jenkins: Privilege escalation vulnerability in bundled Spring Security library | known not affected: 5 | 2026-08-04T18:10:40+00:00 | Vulnerability · Source |
| CVE-2020-9548 | redhat_vex | jackson-databind: Serialization gadgets in anteros-core | fixed: 2590 known affected: 13 known not affected: 18 | 2026-08-04T18:10:10+00:00 | Vulnerability · Source |
| CVE-2024-43864 | redhat_vex | kernel: net/mlx5e: Fix CT entry update leaks of modify header context | known not affected: 198 | 2026-08-04T18:08:42+00:00 | Vulnerability · Source |
| CVE-2024-43846 | redhat_vex | kernel: lib: objagg: Fix general protection fault | fixed: 305 known affected: 70 known not affected: 42 | 2026-08-04T18:08:39+00:00 | Vulnerability · Source |
| CVE-2024-43883 | redhat_vex | kernel: usb: vhci-hcd: Do not drop references before new references are gained | known not affected: 198 | 2026-08-04T18:08:36+00:00 | Vulnerability · Source |
| CVE-2024-44946 | redhat_vex | kernel: kcm: Serialise kcm_sendmsg() for the same socket. | known not affected: 198 | 2026-08-04T18:08:34+00:00 | Vulnerability · Source |
| CVE-2024-44967 | redhat_vex | kernel: drm/mgag200: Bind I2C lifetime to DRM device | known affected: 184 known not affected: 14 | 2026-08-04T18:08:30+00:00 | Vulnerability · Source |
| CVE-2024-44994 | redhat_vex | kernel: iommu: Restore lost return in iommu_report_device_fault() | fixed: 280 known affected: 22 known not affected: 90 | 2026-08-04T18:08:28+00:00 | Vulnerability · Source |
| CVE-2024-43913 | redhat_vex | kernel: nvme: apple: fix device reference counting | known not affected: 198 | 2026-08-04T18:08:27+00:00 | Vulnerability · Source |
| CVE-2024-46750 | redhat_vex | kernel: PCI: Add missing bridge lock to pci_bus_lock() | fixed: 305 known affected: 112 | 2026-08-04T18:07:25+00:00 | Vulnerability · Source |
| CVE-2024-46858 | redhat_vex | kernel: mptcp: pm: Fix uaf in __timer_delete_sync | fixed: 1440 known affected: 38 known not affected: 43 | 2026-08-04T18:07:15+00:00 | Vulnerability · Source |
| CVE-2024-46730 | redhat_vex | kernel: drm/amd/display: Ensure array index tg_inst won't be -1 | known not affected: 198 | 2026-08-04T18:07:13+00:00 | Vulnerability · Source |
| CVE-2021-39149 | redhat_vex | xstream: Arbitrary code execution via unsafe deserialization of com.sun.corba.* | fixed: 17 known affected: 10 known not affected: 5 | 2026-08-04T18:07:12+00:00 | Vulnerability · Source |
| CVE-2021-26291 | redhat_vex | maven: Block repositories using http by default | fixed: 10 known affected: 338 known not affected: 7 | 2026-08-04T18:07:11+00:00 | Vulnerability · Source |
| CVE-2021-39151 | redhat_vex | xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapBindingEnumeration | fixed: 17 known affected: 10 known not affected: 5 | 2026-08-04T18:07:03+00:00 | Vulnerability · Source |
| CVE-2021-39153 | redhat_vex | xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl | fixed: 17 known affected: 9 known not affected: 6 | 2026-08-04T18:07:01+00:00 | Vulnerability · Source |
| CVE-2021-26117 | redhat_vex | activemq: LDAP authentication bypass with anonymous bind | fixed: 2 | 2026-08-04T18:07:00+00:00 | Vulnerability · Source |
| CVE-2021-39147 | redhat_vex | xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapSearchEnumeration | fixed: 17 known affected: 10 known not affected: 5 | 2026-08-04T18:06:59+00:00 | Vulnerability · Source |
| CVE-2021-30639 | redhat_vex | tomcat: non-blocking I/O error flag is not reset between requests | known affected: 3 known not affected: 44 | 2026-08-04T18:06:56+00:00 | Vulnerability · Source |
| CVE-2021-39146 | redhat_vex | xstream: Arbitrary code execution via unsafe deserialization of javax.swing.UIDefaults$ProxyLazyValue | fixed: 17 known affected: 11 known not affected: 5 | 2026-08-04T18:06:56+00:00 | Vulnerability · Source |
| CVE-2021-39150 | redhat_vex | xstream: Server-side request forgery (SSRF) via unsafe deserialization of com.sun.xml.internal.ws.client.sei.* | fixed: 17 known affected: 9 known not affected: 6 | 2026-08-04T18:06:52+00:00 | Vulnerability · Source |
| CVE-2026-48962 | redhat_vex | perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob | fixed: 826 known not affected: 944 | 2026-08-04T18:06:51+00:00 | Vulnerability · Source |
| CVE-2021-39152 | redhat_vex | xstream: Server-side request forgery (SSRF) via unsafe deserialization of jdk.nashorn.internal.runtime.Source$URLData | fixed: 17 known affected: 10 known not affected: 5 | 2026-08-04T18:06:38+00:00 | Vulnerability · Source |
| CVE-2026-53002 | redhat_vex | kernel: netfilter: conntrack: remove sprintf usage | known affected: 260 known not affected: 14 | 2026-08-04T18:06:34+00:00 | Vulnerability · Source |
| CVE-2021-32027 | redhat_vex | postgresql: Buffer overrun from integer overflow in array subscripting calculations | fixed: 1394 known affected: 12 known not affected: 24 | 2026-08-04T18:06:21+00:00 | Vulnerability · Source |
| CVE-2021-39154 | redhat_vex | xstream: Arbitrary code execution via unsafe deserialization of javax.swing.UIDefaults$ProxyLazyValue | fixed: 17 known affected: 10 known not affected: 5 | 2026-08-04T18:05:54+00:00 | Vulnerability · Source |
| CVE-2021-3711 | redhat_vex | openssl: SM2 Decryption Buffer Overflow | known affected: 1 known not affected: 33 | 2026-08-04T18:05:47+00:00 | Vulnerability · Source |
| CVE-2021-39141 | redhat_vex | xstream: Arbitrary code execution via unsafe deserialization of com.sun.xml.internal.ws.client.sei.* | fixed: 17 known affected: 9 known not affected: 6 | 2026-08-04T18:05:19+00:00 | Vulnerability · Source |
| CVE-2021-39148 | redhat_vex | xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.toolkit.dir.ContextEnumerator | fixed: 17 known affected: 10 known not affected: 5 | 2026-08-04T18:05:09+00:00 | Vulnerability · Source |
| CVE-2021-40085 | redhat_vex | openstack-neutron: arbitrary dnsmasq reconfiguration via extra_dhcp_opts | fixed: 56 known not affected: 1 | 2026-08-04T18:04:33+00:00 | Vulnerability · Source |
| CVE-2021-39139 | redhat_vex | xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl | fixed: 17 known affected: 10 known not affected: 5 | 2026-08-04T18:04:29+00:00 | Vulnerability · Source |
| CVE-2024-46866 | redhat_vex | kernel: drm/xe/client: add missing bo locking in show_meminfo() | known not affected: 198 | 2026-08-04T18:03:44+00:00 | Vulnerability · Source |
| CVE-2024-46842 | redhat_vex | kernel: scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info | known affected: 198 | 2026-08-04T18:03:41+00:00 | Vulnerability · Source |
| CVE-2024-46869 | redhat_vex | kernel: Bluetooth: btintel_pcie: Allocate memory for driver private data | known not affected: 198 | 2026-08-04T18:03:38+00:00 | Vulnerability · Source |
| CVE-2024-46741 | redhat_vex | kernel: misc: fastrpc: Fix double free of 'buf' in error path | known not affected: 198 | 2026-08-04T18:03:34+00:00 | Vulnerability · Source |
| CVE-2024-47676 | redhat_vex | kernel: mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway | known affected: 42 known not affected: 156 | 2026-08-04T18:03:30+00:00 | Vulnerability · Source |
| CVE-2024-46755 | redhat_vex | kernel: wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() | known affected: 198 | 2026-08-04T18:03:28+00:00 | Vulnerability · Source |
| CVE-2024-46683 | redhat_vex | kernel: drm/xe: prevent UAF around preempt fence | known not affected: 198 | 2026-08-04T18:03:25+00:00 | Vulnerability · Source |