VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288117 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-47072 | redhat_vex | com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream | fixed: 36 known affected: 9 known not affected: 12 | 2026-08-04T17:38:01+00:00 | Vulnerability · Source |
| CVE-2024-7254 | redhat_vex | protobuf: StackOverflow vulnerability in Protocol Buffers | fixed: 65 known affected: 24 known not affected: 358 | 2026-08-04T17:37:51+00:00 | Vulnerability · Source |
| CVE-2024-28752 | redhat_vex | cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding | fixed: 252 known affected: 2 known not affected: 2719 | 2026-08-04T17:37:39+00:00 | Vulnerability · Source |
| CVE-2025-23368 | redhat_vex | org.wildfly.core:wildfly-elytron-integration: Wildfly Elytron Brute Force Attack via CLI | fixed: 17 known affected: 6 known not affected: 244 | 2026-08-04T17:37:35+00:00 | Vulnerability · Source |
| CVE-2024-51132 | redhat_vex | org.hl7.fhir.convertors: org.hl7.fhir.dstu2: org.hl7.fhir.dstu2016may: org.hl7.fhir.dstu3: org.hl7.fhir.r4: org.hl7.fhir.r5: org.hl7.fhir.utilities: org.hl7.fhir.validation: org.hl7.fhir.core: FHIR arbitrary code execution via specially-crafted request | fixed: 2 known affected: 20 | 2026-08-04T17:37:34+00:00 | Vulnerability · Source |
| CVE-2024-52046 | redhat_vex | mina-core: Apache MINA: applications using unbounded deserialization may allow RCE | fixed: 1 known affected: 8 known not affected: 6 | 2026-08-04T17:37:25+00:00 | Vulnerability · Source |
| CVE-2024-4027 | redhat_vex | undertow: OutOfMemoryError in HttpServletRequestImpl.getParameterNames() can cause remote DoS attacks | known affected: 7 known not affected: 5 under investigation: 8 | 2026-08-04T17:37:19+00:00 | Vulnerability · Source |
| CVE-2024-56128 | redhat_vex | kafka: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption | fixed: 3 known affected: 4 known not affected: 7 | 2026-08-04T17:37:05+00:00 | Vulnerability · Source |
| CVE-2024-25638 | redhat_vex | dnsjava: Improper response validation allowing DNSSEC bypass | known affected: 4 known not affected: 5 | 2026-08-04T17:36:50+00:00 | Vulnerability · Source |
| CVE-2024-53677 | redhat_vex | struts: org.apache.struts: mixing setters for uploaded files and normal fields can allow bypass file upload checks | known not affected: 64 | 2026-08-04T17:36:35+00:00 | Vulnerability · Source |
| CVE-2024-52007 | redhat_vex | org.hl7.fhir.dstu2016may: org.hl7.fhir.dstu3: org.hl7.fhir.r4: org.hl7.fhir.r5: org.hl7.fhir.utilities: org.hl7.fhir.core: XXE vulnerability in XSLT parsing in `org.hl7.fhir.core` | fixed: 1 known affected: 15 | 2026-08-04T17:36:22+00:00 | Vulnerability · Source |
| CVE-2024-45294 | redhat_vex | org.hl7.fhir.core: org.hl7.fhir.dstu3: org.hl7.fhir.r4: org.hl7.fhir.r4b: org.hl7.fhir.r5: org.hl7.fhir.utilities: XXE vulnerability in XSLT transforms in `org.hl7.fhir.core` | fixed: 3 known affected: 11 known not affected: 5 | 2026-08-04T17:35:33+00:00 | Vulnerability · Source |
| CVE-2024-51504 | redhat_vex | org.apache.zookeeper: Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server | known not affected: 14 | 2026-08-04T17:35:22+00:00 | Vulnerability · Source |
| CVE-2024-51127 | redhat_vex | hornetq-core-client: Arbitrarily overwrite files or access sensitive information | fixed: 603 known affected: 2 known not affected: 2201 | 2026-08-04T17:35:11+00:00 | Vulnerability · Source |
| CVE-2026-16526 | redhat_vex | PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability | known affected: 501 known not affected: 1 | 2026-08-04T17:33:37+00:00 | Vulnerability · Source |
| CVE-2026-16529 | redhat_vex | PCP: PCP: Denial of Service due to signed integer overflow | known affected: 501 known not affected: 1 | 2026-08-04T17:33:31+00:00 | Vulnerability · Source |
| CVE-2026-37462 | redhat_vex | github.com/osrg/gobgp: gobgp: Denial of Service via crafted BGP UPDATE message | known affected: 1 known not affected: 1 | 2026-08-04T17:30:38+00:00 | Vulnerability · Source |
| CVE-2026-16524 | redhat_vex | PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection | known affected: 501 known not affected: 1 | 2026-08-04T17:30:12+00:00 | Vulnerability · Source |
| CVE-2026-41731 | redhat_vex | spring-kafka: Spring for Apache Kafka: Arbitrary code execution via insecure deserialization of crafted header values | known affected: 1 known not affected: 1 | 2026-08-04T17:29:03+00:00 | Vulnerability · Source |
| CVE-2026-40987 | redhat_vex | Spring Integration: Spring Integration: Arbitrary file write via malicious server | known affected: 2 known not affected: 6 | 2026-08-04T17:28:45+00:00 | Vulnerability · Source |
| CVE-2026-14474 | redhat_vex | sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation | fixed: 4124 known affected: 32 | 2026-08-04T17:22:29+00:00 | Vulnerability · Source |
| CVE-2020-25644 | redhat_vex | wildfly-openssl: memory leak per HTTP session creation in WildFly OpenSSL | fixed: 321 known affected: 1 known not affected: 2 | 2026-08-04T14:49:23+00:00 | Vulnerability · Source |
| CVE-2017-12174 | redhat_vex | artemis/hornetq: memory exhaustion via UDP and JGroups discovery | fixed: 793 known not affected: 1 | 2026-08-04T14:41:32+00:00 | Vulnerability · Source |
| CVE-2011-2487 | redhat_vex | jbossws: Prone to Bleichenbacher attack against to be distributed symmetric key | fixed: 884 known affected: 5 | 2026-08-04T14:28:09+00:00 | Vulnerability · Source |
| CVE-2026-41252 | redhat_vex | xrdp: heap-based buffer overflow in vnc-any mode | known not affected: 1 | 2026-08-04T14:21:07+00:00 | Vulnerability · Source |
| CVE-2024-49981 | redhat_vex | kernel: media: venus: fix use after free bug in venus_remove due to race condition | known not affected: 198 | 2026-08-04T14:18:41+00:00 | Vulnerability · Source |
| CVE-2024-50152 | redhat_vex | kernel: smb: client: fix possible double free in smb2_set_ea() | fixed: 305 known affected: 22 known not affected: 90 | 2026-08-04T14:18:37+00:00 | Vulnerability · Source |
| CVE-2024-50119 | redhat_vex | kernel: cifs: fix warning when destroy 'cifs_io_request_pool' | known not affected: 198 | 2026-08-04T14:18:32+00:00 | Vulnerability · Source |
| CVE-2024-50027 | redhat_vex | kernel: thermal: core: Free tzp copy along with the thermal zone | fixed: 305 known affected: 50 known not affected: 62 | 2026-08-04T14:18:27+00:00 | Vulnerability · Source |
| CVE-2024-50029 | redhat_vex | kernel: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync | fixed: 305 known affected: 64 known not affected: 48 | 2026-08-04T14:18:25+00:00 | Vulnerability · Source |
| CVE-2024-49984 | redhat_vex | kernel: drm/v3d: Prevent out of bounds access in performance query extensions | known not affected: 198 | 2026-08-04T14:18:21+00:00 | Vulnerability · Source |
| CVE-2024-50055 | redhat_vex | kernel: driver core: bus: Fix double free in driver API bus_register() | fixed: 305 known affected: 112 | 2026-08-04T14:18:15+00:00 | Vulnerability · Source |
| CVE-2024-50031 | redhat_vex | kernel: drm/v3d: Stop the active perfmon before being destroyed | known not affected: 198 | 2026-08-04T14:18:14+00:00 | Vulnerability · Source |
| CVE-2024-49986 | redhat_vex | kernel: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors | known not affected: 198 | 2026-08-04T14:18:08+00:00 | Vulnerability · Source |
| CVE-2024-50257 | redhat_vex | kernel: netfilter: Fix use-after-free in get_info() | known affected: 42 known not affected: 156 | 2026-08-04T14:18:04+00:00 | Vulnerability · Source |
| CVE-2024-50268 | redhat_vex | kernel: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() | known affected: 108 known not affected: 90 | 2026-08-04T14:18:04+00:00 | Vulnerability · Source |
| CVE-2024-50195 | redhat_vex | kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() | fixed: 303 known affected: 112 | 2026-08-04T14:17:58+00:00 | Vulnerability · Source |
| CVE-2024-50175 | redhat_vex | kernel: media: qcom: camss: Remove use_count guard in stop_streaming | known not affected: 198 | 2026-08-04T14:17:57+00:00 | Vulnerability · Source |
| CVE-2024-53080 | redhat_vex | kernel: drm/panthor: Lock XArray when getting entries for the VM | known not affected: 198 | 2026-08-04T14:17:51+00:00 | Vulnerability · Source |
| CVE-2024-53110 | redhat_vex | kernel: vp_vdpa: fix id_table array not null terminated error | fixed: 305 known affected: 22 known not affected: 90 | 2026-08-04T14:17:32+00:00 | Vulnerability · Source |
| CVE-2024-53107 | redhat_vex | kernel: fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args() | known affected: 42 known not affected: 156 | 2026-08-04T14:17:32+00:00 | Vulnerability · Source |
| CVE-2024-50164 | redhat_vex | kernel: bpf: Fix overloading of MEM_UNINIT's meaning | known affected: 136 known not affected: 62 | 2026-08-04T14:17:29+00:00 | Vulnerability · Source |
| CVE-2024-53073 | redhat_vex | kernel: NFSD: Never decrement pending_async_copies on error | known affected: 198 | 2026-08-04T14:17:20+00:00 | Vulnerability · Source |
| CVE-2024-50294 | redhat_vex | kernel: rxrpc: Fix missing locking causing hanging calls | fixed: 303 known affected: 22 known not affected: 90 | 2026-08-04T14:17:17+00:00 | Vulnerability · Source |
| CVE-2024-53092 | redhat_vex | kernel: virtio_pci: Fix admin vq cleanup by using correct info pointer | known affected: 28 known not affected: 170 | 2026-08-04T14:17:13+00:00 | Vulnerability · Source |
| CVE-2024-53044 | redhat_vex | kernel: net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext() | fixed: 305 known affected: 64 known not affected: 48 | 2026-08-04T14:17:10+00:00 | Vulnerability · Source |
| CVE-2024-50162 | redhat_vex | kernel: bpf: devmap: provide rxq after redirect | fixed: 305 known affected: 98 known not affected: 14 | 2026-08-04T14:17:08+00:00 | Vulnerability · Source |
| CVE-2024-53066 | redhat_vex | kernel: nfs: Fix KMSAN warning in decode_getfattr_attrs() | known affected: 198 | 2026-08-04T14:17:04+00:00 | Vulnerability · Source |
| CVE-2024-50288 | redhat_vex | kernel: media: vivid: fix buffer overwrite when using > 32 buffers | known not affected: 198 | 2026-08-04T14:17:03+00:00 | Vulnerability · Source |
| CVE-2024-53058 | redhat_vex | kernel: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data | known not affected: 198 | 2026-08-04T14:17:01+00:00 | Vulnerability · Source |