VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288186 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-56581 | redhat_vex | kernel: btrfs: ref-verify: fix use-after-free after invalid ref action | known not affected: 198 | 2026-08-04T11:06:21+00:00 | Vulnerability · Source |
| CVE-2024-38374 | redhat_vex | cyclonedx-core-java: XML External Entity injection while evaluating XPath expressions | known affected: 2 known not affected: 6 | 2026-08-04T11:04:41+00:00 | Vulnerability · Source |
| CVE-2025-1247 | redhat_vex | io.quarkus:quarkus-rest: Quarkus REST Endpoint Request Parameter Leakage Due to Shared Instance | fixed: 3 | 2026-08-04T11:04:17+00:00 | Vulnerability · Source |
| CVE-2026-4631 | redhat_vex | cockpit: Cockpit: Unauthenticated remote code execution due to SSH command-line argument injection | fixed: 102 known not affected: 13 | 2026-08-04T10:48:47+00:00 | Vulnerability · Source |
| CVE-2024-10270 | redhat_vex | org.keycloak:keycloak-services: Keycloak Denial of Service | fixed: 16 known affected: 1 known not affected: 2 | 2026-08-04T10:44:57+00:00 | Vulnerability · Source |
| CVE-2024-11736 | redhat_vex | org.keycloak:keycloak-quarkus-server: Unrestricted admin use of system and environment variables | fixed: 8 known not affected: 2 | 2026-08-04T10:43:57+00:00 | Vulnerability · Source |
| CVE-2022-1798 | redhat_vex | kubeVirt: Arbitrary file read on the host from KubeVirt VMs | fixed: 12 known not affected: 67 | 2026-08-04T09:02:25+00:00 | Vulnerability · Source |
| CVE-2021-41099 | redhat_vex | redis: Integer overflow issue with strings | fixed: 105 known affected: 2 known not affected: 7 | 2026-08-04T08:48:05+00:00 | Vulnerability · Source |
| CVE-2021-32687 | redhat_vex | redis: Integer overflow issue with intsets | fixed: 105 known affected: 1 known not affected: 8 | 2026-08-04T08:48:00+00:00 | Vulnerability · Source |
| CVE-2021-32675 | redhat_vex | redis: Denial of service via Redis Standard Protocol (RESP) request | fixed: 105 known affected: 1 known not affected: 8 | 2026-08-04T08:47:55+00:00 | Vulnerability · Source |
| CVE-2021-32628 | redhat_vex | redis: Integer overflow bug in the ziplist data structure | fixed: 105 known affected: 1 known not affected: 8 | 2026-08-04T08:47:48+00:00 | Vulnerability · Source |
| CVE-2021-32627 | redhat_vex | redis: Integer overflow issue with Streams | fixed: 105 known affected: 1 known not affected: 8 | 2026-08-04T08:47:37+00:00 | Vulnerability · Source |
| CVE-2021-23017 | redhat_vex | nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name | fixed: 403 known affected: 10 known not affected: 11 | 2026-08-04T08:47:14+00:00 | Vulnerability · Source |
| CVE-2024-23651 | redhat_vex | moby/buildkit: possible race condition with accessing subpaths from cache mounts | known affected: 2 known not affected: 31 | 2026-08-04T08:21:33+00:00 | Vulnerability · Source |
| CVE-2018-10894 | redhat_vex | keycloak: auth permitted with expired certs in SAML client | fixed: 8 known affected: 3 | 2026-08-04T08:16:15+00:00 | Vulnerability · Source |
| CVE-2017-7559 | redhat_vex | undertow: HTTP Request smuggling vulnerability (incomplete fix of CVE-2017-2666) | fixed: 985 known affected: 1 known not affected: 1 | 2026-08-04T08:11:50+00:00 | Vulnerability · Source |
| CVE-2017-2666 | redhat_vex | undertow: HTTP Request smuggling vulnerability due to permitting invalid characters in HTTP requests | fixed: 1117 known affected: 1 known not affected: 1 | 2026-08-04T08:11:41+00:00 | Vulnerability · Source |
| CVE-2025-24294 | redhat_vex | resolv: Denial of Service in resolv gem | fixed: 622 known affected: 96 known not affected: 29 | 2026-08-04T08:11:05+00:00 | Vulnerability · Source |
| CVE-2023-6920 | redhat_vex | keycloak-core: Reflected XSS via wildcard in OIDC redirect_uri. Incomplete fix of CVE-2023-6134 | known affected: 2 | 2026-08-04T07:22:34+00:00 | Vulnerability · Source |
| CVE-2024-54677 | redhat_vex | tomcat: Apache Tomcat: DoS in examples web application | fixed: 9 known affected: 35 known not affected: 13 | 2026-08-04T07:18:31+00:00 | Vulnerability · Source |
| CVE-2024-52316 | redhat_vex | tomcat: Apache Tomcat: Authentication bypass when using Jakarta Authentication API | fixed: 32 known affected: 25 known not affected: 21 | 2026-08-04T07:18:21+00:00 | Vulnerability · Source |
| CVE-2023-3446 | redhat_vex | openssl: Excessive time spent checking DH keys and parameters | fixed: 198 known affected: 20 known not affected: 169 | 2026-08-04T07:18:11+00:00 | Vulnerability · Source |
| CVE-2023-6134 | redhat_vex | keycloak: reflected XSS via wildcard in OIDC redirect_uri | fixed: 35 | 2026-08-04T07:17:31+00:00 | Vulnerability · Source |
| CVE-2023-6544 | redhat_vex | keycloak: Authorization Bypass | fixed: 21 | 2026-08-04T07:17:28+00:00 | Vulnerability · Source |
| CVE-2023-6787 | redhat_vex | keycloak: session hijacking via re-authentication | fixed: 8 known affected: 1 | 2026-08-04T07:16:42+00:00 | Vulnerability · Source |
| CVE-2023-6563 | redhat_vex | keycloak: offline session token DoS | fixed: 14 known not affected: 1 | 2026-08-04T07:15:30+00:00 | Vulnerability · Source |
| CVE-2024-3094 | redhat_vex | xz: malicious code in distributed source | known not affected: 26 | 2026-08-04T07:05:53+00:00 | Vulnerability · Source |
| CVE-2025-30754 | redhat_vex | openjdk: Enhance TLS protocol support (Oracle CPU 2025-07) | fixed: 2354 known affected: 41 | 2026-08-04T07:03:14+00:00 | Vulnerability · Source |
| CVE-2025-53057 | redhat_vex | openjdk: Enhance certificate handling (Oracle CPU 2025-10) | fixed: 2507 known affected: 39 | 2026-08-04T07:03:05+00:00 | Vulnerability · Source |
| CVE-2022-37434 | redhat_vex | zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field | fixed: 230 known affected: 7 | 2026-08-04T07:02:59+00:00 | Vulnerability · Source |
| CVE-2025-21587 | redhat_vex | openjdk: Better TLS connection support (Oracle CPU 2025-04) | fixed: 2650 known affected: 132 | 2026-08-04T07:02:31+00:00 | Vulnerability · Source |
| CVE-2025-53066 | redhat_vex | openjdk: Enhance Path Factories (Oracle CPU 2025-10) | fixed: 2507 known affected: 39 | 2026-08-04T07:02:15+00:00 | Vulnerability · Source |
| CVE-2025-30698 | redhat_vex | openjdk: Enhance Buffered Image handling (Oracle CPU 2025-04) | fixed: 2650 known affected: 105 | 2026-08-04T07:02:09+00:00 | Vulnerability · Source |
| CVE-2025-61748 | redhat_vex | openjdk: Enhance String handling (Oracle CPU 2025-10) | fixed: 696 known not affected: 164 | 2026-08-04T07:02:00+00:00 | Vulnerability · Source |
| CVE-2025-30691 | redhat_vex | openjdk: Improve compiler transformations (Oracle CPU 2025-04) | fixed: 2607 known affected: 105 known not affected: 14 | 2026-08-04T07:01:33+00:00 | Vulnerability · Source |
| CVE-2025-30761 | redhat_vex | openjdk: Improve scripting supports (Oracle CPU 2025-07) | fixed: 1016 known affected: 41 known not affected: 130 | 2026-08-04T07:01:30+00:00 | Vulnerability · Source |
| CVE-2025-50059 | redhat_vex | openjdk: Improve HTTP client header handling (Oracle CPU 2025-07) | fixed: 1654 known affected: 41 known not affected: 66 | 2026-08-04T07:01:14+00:00 | Vulnerability · Source |
| CVE-2025-50106 | redhat_vex | openjdk: Glyph out-of-memory access and crash (Oracle CPU 2025-07) | fixed: 2384 known affected: 41 | 2026-08-04T07:00:59+00:00 | Vulnerability · Source |
| CVE-2025-30749 | redhat_vex | openjdk: Better Glyph drawing (Oracle CPU 2025-07) | fixed: 2384 known affected: 41 | 2026-08-04T07:00:16+00:00 | Vulnerability · Source |
| CVE-2024-50379 | redhat_vex | tomcat: RCE due to TOCTOU issue in JSP compilation | fixed: 107 known affected: 15 known not affected: 22 | 2026-08-04T06:58:39+00:00 | Vulnerability · Source |
| CVE-2025-48976 | redhat_vex | apache-commons-fileupload: Apache Commons FileUpload DoS via part headers | fixed: 142 known affected: 57 | 2026-08-04T06:58:25+00:00 | Vulnerability · Source |
| CVE-2024-56337 | redhat_vex | tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation | fixed: 99 known affected: 7 known not affected: 31 | 2026-08-04T06:57:59+00:00 | Vulnerability · Source |
| CVE-2022-28331 | redhat_vex | apr: Windows out-of-bounds write in apr_socket_sendv function | fixed: 2 | 2026-08-04T06:56:05+00:00 | Vulnerability · Source |
| CVE-2024-24549 | redhat_vex | Tomcat: HTTP/2 header handling DoS | fixed: 104 known affected: 17 known not affected: 11 | 2026-08-04T06:55:51+00:00 | Vulnerability · Source |
| CVE-2025-48989 | redhat_vex | tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames | fixed: 142 known affected: 3 known not affected: 25 | 2026-08-04T06:55:37+00:00 | Vulnerability · Source |
| CVE-2025-24813 | redhat_vex | tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT | fixed: 122 known affected: 11 known not affected: 27 | 2026-08-04T06:55:26+00:00 | Vulnerability · Source |
| CVE-2022-24963 | redhat_vex | apr: integer overflow/wraparound in apr_encode | fixed: 40 known not affected: 178 | 2026-08-04T06:52:57+00:00 | Vulnerability · Source |
| CVE-2024-23672 | redhat_vex | Tomcat: WebSocket DoS with incomplete closing handshake | fixed: 95 known affected: 17 known not affected: 26 | 2026-08-04T06:52:34+00:00 | Vulnerability · Source |
| CVE-2018-16839 | redhat_vex | curl: Integer overflow leading to heap-based buffer overflow in Curl_sasl_create_plain_message() | fixed: 1 known affected: 10 known not affected: 15 | 2026-08-04T06:48:09+00:00 | Vulnerability · Source |
| CVE-2018-16840 | redhat_vex | curl: Use-after-free when closing "easy" handle in Curl_close() | fixed: 1 known affected: 5 known not affected: 20 | 2026-08-04T06:48:04+00:00 | Vulnerability · Source |