VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288174 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-56677 | redhat_vex | kernel: powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() | known affected: 150 known not affected: 48 | 2026-08-04T14:03:09+00:00 | Vulnerability · Source |
| CVE-2024-53185 | redhat_vex | kernel: smb: client: fix NULL ptr deref in crypto_aead_setkey() | known affected: 108 known not affected: 166 | 2026-08-04T14:03:05+00:00 | Vulnerability · Source |
| CVE-2024-53140 | redhat_vex | kernel: netlink: terminate outstanding dump on socket close | known affected: 198 | 2026-08-04T14:03:04+00:00 | Vulnerability · Source |
| CVE-2024-53100 | redhat_vex | kernel: nvme: tcp: avoid race between queue_lock lock and destroy | known affected: 156 known not affected: 42 | 2026-08-04T14:03:01+00:00 | Vulnerability · Source |
| CVE-2024-53120 | redhat_vex | kernel: net/mlx5e: CT: Fix null-ptr-deref in add rule err flow | fixed: 305 known affected: 22 known not affected: 90 | 2026-08-04T14:02:59+00:00 | Vulnerability · Source |
| CVE-2024-53177 | redhat_vex | kernel: smb: prevent use-after-free due to open_cached_dir error paths | known affected: 108 known not affected: 90 | 2026-08-04T14:02:56+00:00 | Vulnerability · Source |
| CVE-2024-53090 | redhat_vex | kernel: afs: Fix lock recursion | fixed: 303 known affected: 22 known not affected: 90 | 2026-08-04T14:02:55+00:00 | Vulnerability · Source |
| CVE-2024-53179 | redhat_vex | kernel: smb: client: fix use-after-free of signing key | known affected: 156 known not affected: 118 | 2026-08-04T14:02:51+00:00 | Vulnerability · Source |
| CVE-2024-57995 | redhat_vex | kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() | fixed: 612 known affected: 22 known not affected: 90 | 2026-08-04T14:02:50+00:00 | Vulnerability · Source |
| CVE-2024-53099 | redhat_vex | kernel: bpf: Check validity of link->type in bpf_link_show_fdinfo() | known affected: 184 known not affected: 14 | 2026-08-04T14:02:46+00:00 | Vulnerability · Source |
| CVE-2024-56645 | redhat_vex | kernel: can: j1939: j1939_session_new(): fix skb reference counting | fixed: 1224 known affected: 22 known not affected: 90 | 2026-08-04T14:02:39+00:00 | Vulnerability · Source |
| CVE-2024-58100 | redhat_vex | kernel: bpf: check changes_pkt_data property for extension programs | known affected: 260 known not affected: 14 | 2026-08-04T14:02:35+00:00 | Vulnerability · Source |
| CVE-2024-56640 | redhat_vex | kernel: net/smc: fix LGR and link use-after-free issue | known affected: 156 known not affected: 42 | 2026-08-04T14:02:32+00:00 | Vulnerability · Source |
| CVE-2024-56598 | redhat_vex | kernel: jfs: array-index-out-of-bounds fix in dtReadFirst | known affected: 14 known not affected: 184 | 2026-08-04T14:02:30+00:00 | Vulnerability · Source |
| CVE-2024-56637 | redhat_vex | kernel: netfilter: ipset: Hold module reference while requesting a module | known affected: 198 | 2026-08-04T14:02:26+00:00 | Vulnerability · Source |
| CVE-2024-58098 | redhat_vex | kernel: bpf: track changes_pkt_data property for global functions | known affected: 260 known not affected: 14 | 2026-08-04T14:02:24+00:00 | Vulnerability · Source |
| CVE-2024-50275 | redhat_vex | kernel: arm64/sve: Discard stale CPU state when handling SVE traps | fixed: 829 known affected: 22 known not affected: 42 | 2026-08-04T14:02:17+00:00 | Vulnerability · Source |
| CVE-2024-53146 | redhat_vex | kernel: NFSD: Prevent a potential integer overflow | fixed: 305 known affected: 112 | 2026-08-04T14:02:13+00:00 | Vulnerability · Source |
| CVE-2024-50300 | redhat_vex | kernel: regulator: rtq2208: Fix uninitialized use of regulator_config | known not affected: 198 | 2026-08-04T14:02:13+00:00 | Vulnerability · Source |
| CVE-2024-58002 | redhat_vex | kernel: media: uvcvideo: Remove dangling pointers | fixed: 1674 known affected: 22 known not affected: 42 | 2026-08-04T14:01:56+00:00 | Vulnerability · Source |
| CVE-2025-0604 | redhat_vex | keycloak-ldap-federation: Authentication Bypass Due to Missing LDAP Bind After Password Reset in Keycloak | fixed: 8 known affected: 1 | 2026-08-04T13:58:39+00:00 | Vulnerability · Source |
| CVE-2025-14778 | redhat_vex | keycloak: Incorrect ownership checks in /uma-policy/ | fixed: 20 | 2026-08-04T13:58:27+00:00 | Vulnerability · Source |
| CVE-2025-14777 | redhat_vex | keycloak: Keycloak IDOR in realm client creating/deleting | fixed: 10 | 2026-08-04T13:58:24+00:00 | Vulnerability · Source |
| CVE-2024-27309 | redhat_vex | Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode | known affected: 1 | 2026-08-04T13:58:22+00:00 | Vulnerability · Source |
| CVE-2025-12110 | redhat_vex | keycloak: org.keycloak:keycloak-services: User can refresh offline session even after client's offline_access scope was removed | fixed: 20 | 2026-08-04T13:57:46+00:00 | Vulnerability · Source |
| CVE-2025-11538 | redhat_vex | keycloak-server: Debug default bind address | fixed: 10 | 2026-08-04T13:57:45+00:00 | Vulnerability · Source |
| CVE-2026-13325 | redhat_vex | virt-handler-rhel9: kubevirt: kubevirt: DisableTLS migration setting removes authentication, exposing unauthenticated virtqemud proxy on all interfaces | known not affected: 2 | 2026-08-04T13:57:43+00:00 | Vulnerability · Source |
| CVE-2026-0707 | redhat_vex | keycloak: Keycloak Authorization Header Parsing Leading to Potential Security Control Bypass | fixed: 10 | 2026-08-04T13:57:42+00:00 | Vulnerability · Source |
| CVE-2026-1180 | redhat_vex | org.keycloak.protocol.oidc: Blind Server-Side Request Forgery (SSRF) in Keycloak OIDC Dynamic Client Registration via jwks_uri | fixed: 10 known affected: 2 known not affected: 3 | 2026-08-04T13:57:24+00:00 | Vulnerability · Source |
| CVE-2025-66614 | redhat_vex | tomcat: Client certificate verification bypass due to virtual host mapping | fixed: 47 known affected: 56 | 2026-08-04T13:57:21+00:00 | Vulnerability · Source |
| CVE-2022-1996 | redhat_vex | go-restful: Authorization Bypass Through User-Controlled Key | fixed: 145 known affected: 56 known not affected: 48 | 2026-08-04T13:57:06+00:00 | Vulnerability · Source |
| CVE-2021-47605 | redhat_vex | kernel: vduse: fix memory corruption in vduse_dev_ioctl() | known not affected: 198 | 2026-08-04T13:57:05+00:00 | Vulnerability · Source |
| CVE-2022-23943 | redhat_vex | httpd: mod_sed: Read/write beyond bounds | fixed: 224 known affected: 16 known not affected: 111 | 2026-08-04T13:56:57+00:00 | Vulnerability · Source |
| CVE-2026-0871 | redhat_vex | org.keycloak/keycloak-services: Keycloak: Unauthorized modification of unmanaged user attributes by administrators | fixed: 10 known affected: 3 | 2026-08-04T13:53:43+00:00 | Vulnerability · Source |
| CVE-2026-3121 | redhat_vex | keycloak: org.keycloak/keycloak-services: Keycloak: Privilege escalation via manage-clients permission | fixed: 10 known affected: 2 known not affected: 1 | 2026-08-04T13:53:42+00:00 | Vulnerability · Source |
| CVE-2026-2575 | redhat_vex | keycloak: Keycloak: Denial of Service due to excessive SAMLRequest decompression | fixed: 10 | 2026-08-04T13:53:40+00:00 | Vulnerability · Source |
| CVE-2026-3429 | redhat_vex | org.keycloak.services.resources.account: Improper Access Control Leading to MFA Deletion and Account Takeover in Keycloak Account REST API | fixed: 10 known not affected: 5 | 2026-08-04T13:53:31+00:00 | Vulnerability · Source |
| CVE-2026-32990 | redhat_vex | Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix | fixed: 43 known affected: 36 known not affected: 20 | 2026-08-04T13:53:27+00:00 | Vulnerability · Source |
| CVE-2026-3190 | redhat_vex | keycloak: Keycloak: Information Disclosure via improper role enforcement in UMA 2.0 Protection API | fixed: 10 | 2026-08-04T13:53:26+00:00 | Vulnerability · Source |
| CVE-2026-4366 | redhat_vex | keycloak-services: Blind Server-Side Request Forgery (SSRF) via HTTP Redirect Handling in Keycloak | fixed: 10 known affected: 5 | 2026-08-04T13:52:56+00:00 | Vulnerability · Source |
| CVE-2022-31160 | redhat_vex | jqueryui: XSS when refreshing a checkboxradio with an HTML-like initial text label | known affected: 7 | 2026-08-04T13:51:44+00:00 | Vulnerability · Source |
| CVE-2022-35951 | redhat_vex | redis: heap overflow in XAUTOCLAIM command's COUNT argument | known not affected: 15 | 2026-08-04T13:51:34+00:00 | Vulnerability · Source |
| CVE-2022-48927 | redhat_vex | kernel: iio: adc: tsc2046: fix memory corruption by preventing array overflow | known not affected: 198 | 2026-08-04T13:46:36+00:00 | Vulnerability · Source |
| CVE-2022-48878 | redhat_vex | kernel: Bluetooth: hci_qca: Fix driver shutdown on closed serdev | known not affected: 198 | 2026-08-04T13:46:35+00:00 | Vulnerability · Source |
| CVE-2022-48874 | redhat_vex | kernel: misc: fastrpc: Fix use-after-free and race in fastrpc_map_find | known not affected: 198 | 2026-08-04T13:46:34+00:00 | Vulnerability · Source |
| CVE-2022-48873 | redhat_vex | kernel: misc: fastrpc: Don't remove map on creater_process and device_release | known not affected: 198 | 2026-08-04T13:46:30+00:00 | Vulnerability · Source |
| CVE-2022-48871 | redhat_vex | kernel: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer | known not affected: 198 | 2026-08-04T13:46:12+00:00 | Vulnerability · Source |
| CVE-2025-61594 | redhat_vex | uri: URI module: Credential exposure via URI + operator | known affected: 100 | 2026-08-04T13:43:07+00:00 | Vulnerability · Source |
| CVE-2024-12369 | redhat_vex | elytron-oidc-client: OIDC Authorization Code Injection | fixed: 52 known affected: 1 known not affected: 1 | 2026-08-04T13:38:07+00:00 | Vulnerability · Source |
| CVE-2024-9676 | redhat_vex | Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) | fixed: 711 known affected: 19 known not affected: 4893 | 2026-08-04T13:37:43+00:00 | Vulnerability · Source |