VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288174 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-41991 | redhat_vex | python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget | fixed: 22 known affected: 2 known not affected: 407 | 2026-08-04T13:37:33+00:00 | Vulnerability · Source |
| CVE-2022-49470 | redhat_vex | kernel: Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event | known not affected: 274 | 2026-08-04T13:35:33+00:00 | Vulnerability · Source |
| CVE-2022-49910 | redhat_vex | kernel: Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu | known affected: 44 known not affected: 230 | 2026-08-04T13:32:19+00:00 | Vulnerability · Source |
| CVE-2022-49770 | redhat_vex | kernel: ceph: avoid putting the realm twice when decoding snaps fails | known affected: 28 known not affected: 246 | 2026-08-04T13:31:14+00:00 | Vulnerability · Source |
| CVE-2023-31418 | redhat_vex | elasticsearch: uncontrolled resource consumption | known affected: 2 known not affected: 3 | 2026-08-04T13:24:23+00:00 | Vulnerability · Source |
| CVE-2023-35141 | redhat_vex | jenkins: CSRF protection bypass vulnerability | known affected: 4 known not affected: 3 | 2026-08-04T13:22:25+00:00 | Vulnerability · Source |
| CVE-2026-27830 | redhat_vex | c3p0: c3p0: Arbitrary Code Execution via deserialization of crafted objects | fixed: 14 known affected: 17 known not affected: 271 | 2026-08-04T13:18:25+00:00 | Vulnerability · Source |
| CVE-2023-3867 | redhat_vex | kernel: Out of bounds read in smb2_sess_setup | known not affected: 274 | 2026-08-04T13:18:21+00:00 | Vulnerability · Source |
| CVE-2023-36824 | redhat_vex | redis: heap overflow in COMMAND GETKEYS and ACL evaluation | known affected: 2 known not affected: 20 | 2026-08-04T13:18:17+00:00 | Vulnerability · Source |
| CVE-2023-29483 | redhat_vex | dnspython: denial of service in stub resolver | fixed: 20 known affected: 6 known not affected: 1213 | 2026-08-04T13:04:10+00:00 | Vulnerability · Source |
| CVE-2024-32004 | redhat_vex | git: RCE while cloning local repos | fixed: 441 known affected: 32 known not affected: 35 | 2026-08-04T12:59:02+00:00 | Vulnerability · Source |
| CVE-2024-32002 | redhat_vex | git: Recursive clones RCE | fixed: 421 known affected: 51 known not affected: 16 | 2026-08-04T12:59:02+00:00 | Vulnerability · Source |
| CVE-2023-52755 | redhat_vex | kernel: ksmbd: fix slab out of bounds write in smb_inherit_dacl() | known not affected: 198 | 2026-08-04T12:51:13+00:00 | Vulnerability · Source |
| CVE-2023-53107 | redhat_vex | kernel: veth: Fix use after free in XDP_REDIRECT | fixed: 270 known affected: 106 known not affected: 168 | 2026-08-04T12:47:35+00:00 | Vulnerability · Source |
| CVE-2021-43998 | redhat_vex | vault: incorrect policy enforcement | fixed: 15 known affected: 5 known not affected: 82 | 2026-08-04T12:43:49+00:00 | Vulnerability · Source |
| CVE-2022-30632 | redhat_vex | golang: path/filepath: stack exhaustion in Glob | fixed: 1091 known affected: 81 known not affected: 164 | 2026-08-04T12:43:21+00:00 | Vulnerability · Source |
| CVE-2026-43871 | redhat_vex | thrift: Apache Thrift: Denial of Service via infinite loop | known affected: 5 known not affected: 2 | 2026-08-04T12:36:56+00:00 | Vulnerability · Source |
| CVE-2024-1249 | redhat_vex | keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkLoginIframe leads to DDoS | fixed: 48 known affected: 13 known not affected: 8 | 2026-08-04T12:27:04+00:00 | Vulnerability · Source |
| CVE-2023-54286 | redhat_vex | kernel: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace | fixed: 120 known not affected: 242 | 2026-08-04T12:26:42+00:00 | Vulnerability · Source |
| CVE-2024-27307 | redhat_vex | jsonata: malicious expression can pollute the "Object" prototype | fixed: 1 known not affected: 3 | 2026-08-04T12:14:22+00:00 | Vulnerability · Source |
| CVE-2024-36886 | redhat_vex | kernel: TIPC message reassembly use-after-free remote code execution vulnerability | fixed: 1290 known affected: 22 known not affected: 127 | 2026-08-04T12:01:53+00:00 | Vulnerability · Source |
| CVE-2021-23566 | redhat_vex | nanoid: Information disclosure via valueOf() function | fixed: 7 known affected: 7 known not affected: 688 | 2026-08-04T11:53:04+00:00 | Vulnerability · Source |
| CVE-2024-41046 | redhat_vex | kernel: net: ethernet: lantiq_etop: fix double free in detach | known not affected: 198 | 2026-08-04T11:50:40+00:00 | Vulnerability · Source |
| CVE-2021-33197 | redhat_vex | golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty | fixed: 817 known affected: 91 known not affected: 927 | 2026-08-04T11:48:22+00:00 | Vulnerability · Source |
| CVE-2021-23434 | redhat_vex | object-path: Type confusion vulnerability can lead to a bypass of CVE-2020-15256 | known affected: 16 | 2026-08-04T11:48:02+00:00 | Vulnerability · Source |
| CVE-2021-3805 | redhat_vex | nodejs-object-path: prototype pollution vulnerability | known affected: 10 known not affected: 1 | 2026-08-04T11:48:00+00:00 | Vulnerability · Source |
| CVE-2024-41091 | redhat_vex | kernel: virtio-net: tun: mlx5_core short frame denial of service | fixed: 1336 known affected: 22 known not affected: 55 | 2026-08-04T11:47:31+00:00 | Vulnerability · Source |
| CVE-2020-10749 | redhat_vex | containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters | fixed: 259 known affected: 8 known not affected: 411 | 2026-08-04T11:43:56+00:00 | Vulnerability · Source |
| CVE-2019-11254 | redhat_vex | kubernetes: Denial of service in API server via crafted YAML payloads by authorized users | fixed: 31 known affected: 3 known not affected: 9 | 2026-08-04T11:43:53+00:00 | Vulnerability · Source |
| CVE-2024-44941 | redhat_vex | kernel: f2fs: fix to cover read extent cache access with lock | known not affected: 198 | 2026-08-04T11:43:00+00:00 | Vulnerability · Source |
| CVE-2024-46812 | redhat_vex | kernel: drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration | known not affected: 198 | 2026-08-04T11:36:57+00:00 | Vulnerability · Source |
| CVE-2024-46815 | redhat_vex | kernel: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] | known not affected: 198 | 2026-08-04T11:36:30+00:00 | Vulnerability · Source |
| CVE-2019-12814 | redhat_vex | jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. | fixed: 640 known affected: 23 known not affected: 8 | 2026-08-04T11:23:15+00:00 | Vulnerability · Source |
| CVE-2024-50297 | redhat_vex | kernel: net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts | known not affected: 198 | 2026-08-04T11:22:09+00:00 | Vulnerability · Source |
| CVE-2024-50246 | redhat_vex | kernel: fs/ntfs3: Add rough attr alloc_size check | known not affected: 198 | 2026-08-04T11:21:17+00:00 | Vulnerability · Source |
| CVE-2020-24553 | redhat_vex | golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS | fixed: 51 known affected: 60 known not affected: 258 | 2026-08-04T11:18:43+00:00 | Vulnerability · Source |
| CVE-2021-3115 | redhat_vex | golang: cmd/go: packages using cgo can cause arbitrary code execution at build time | fixed: 135 known affected: 31 known not affected: 114 | 2026-08-04T11:18:36+00:00 | Vulnerability · Source |
| CVE-2023-50967 | redhat_vex | jose: Denial of service due to uncontrolled CPU consumption | fixed: 75 known affected: 6 known not affected: 9 | 2026-08-04T11:17:57+00:00 | Vulnerability · Source |
| CVE-2024-53165 | redhat_vex | kernel: sh: intc: Fix use-after-free bug in register_intc_controller() | known not affected: 198 | 2026-08-04T11:17:51+00:00 | Vulnerability · Source |
| CVE-2024-56555 | redhat_vex | kernel: binder: fix OOB in binder_add_freeze_work() | known not affected: 198 | 2026-08-04T11:17:47+00:00 | Vulnerability · Source |
| CVE-2024-53141 | redhat_vex | kernel: netfilter: ipset: add missing range check in bitmap_ip_uadt | fixed: 1879 known affected: 36 | 2026-08-04T11:16:29+00:00 | Vulnerability · Source |
| CVE-2024-53186 | redhat_vex | kernel: ksmbd: fix use-after-free in SMB request handling | known not affected: 198 | 2026-08-04T11:16:16+00:00 | Vulnerability · Source |
| CVE-2021-27919 | redhat_vex | golang: archive/zip: panic when calling Reader.Open | known affected: 5 known not affected: 138 | 2026-08-04T11:14:35+00:00 | Vulnerability · Source |
| CVE-2020-28367 | redhat_vex | golang: improper validation of cgo flags can lead to code execution at build time | fixed: 91 known affected: 62 known not affected: 74 | 2026-08-04T11:14:22+00:00 | Vulnerability · Source |
| CVE-2021-3703 | redhat_vex | serverless: incomplete fix for CVE-2021-27918 / CVE-2021-31525 / CVE-2021-33196 | fixed: 92 known not affected: 2 | 2026-08-04T11:14:18+00:00 | Vulnerability · Source |
| CVE-2022-30630 | redhat_vex | golang: io/fs: stack exhaustion in Glob | fixed: 1085 known affected: 79 known not affected: 142 | 2026-08-04T11:09:40+00:00 | Vulnerability · Source |
| CVE-2022-30635 | redhat_vex | golang: encoding/gob: stack exhaustion in Decoder.Decode | fixed: 821 known affected: 48 known not affected: 220 | 2026-08-04T11:09:30+00:00 | Vulnerability · Source |
| CVE-2021-39293 | redhat_vex | golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196) | fixed: 133 known affected: 73 known not affected: 204 | 2026-08-04T11:09:26+00:00 | Vulnerability · Source |
| CVE-2023-26144 | redhat_vex | graphql: Insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries | fixed: 4 known affected: 6 known not affected: 50 | 2026-08-04T11:09:23+00:00 | Vulnerability · Source |
| CVE-2022-30633 | redhat_vex | golang: encoding/xml: stack exhaustion in Unmarshal | fixed: 995 known affected: 50 known not affected: 115 | 2026-08-04T11:09:13+00:00 | Vulnerability · Source |