VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288195 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-50059 | redhat_vex | openjdk: Improve HTTP client header handling (Oracle CPU 2025-07) | fixed: 1654 known affected: 41 known not affected: 66 | 2026-08-04T07:01:14+00:00 | Vulnerability · Source |
| CVE-2025-50106 | redhat_vex | openjdk: Glyph out-of-memory access and crash (Oracle CPU 2025-07) | fixed: 2384 known affected: 41 | 2026-08-04T07:00:59+00:00 | Vulnerability · Source |
| CVE-2025-30749 | redhat_vex | openjdk: Better Glyph drawing (Oracle CPU 2025-07) | fixed: 2384 known affected: 41 | 2026-08-04T07:00:16+00:00 | Vulnerability · Source |
| CVE-2024-50379 | redhat_vex | tomcat: RCE due to TOCTOU issue in JSP compilation | fixed: 107 known affected: 15 known not affected: 22 | 2026-08-04T06:58:39+00:00 | Vulnerability · Source |
| CVE-2025-48976 | redhat_vex | apache-commons-fileupload: Apache Commons FileUpload DoS via part headers | fixed: 142 known affected: 57 | 2026-08-04T06:58:25+00:00 | Vulnerability · Source |
| CVE-2024-56337 | redhat_vex | tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation | fixed: 99 known affected: 7 known not affected: 31 | 2026-08-04T06:57:59+00:00 | Vulnerability · Source |
| CVE-2022-28331 | redhat_vex | apr: Windows out-of-bounds write in apr_socket_sendv function | fixed: 2 | 2026-08-04T06:56:05+00:00 | Vulnerability · Source |
| CVE-2024-24549 | redhat_vex | Tomcat: HTTP/2 header handling DoS | fixed: 104 known affected: 17 known not affected: 11 | 2026-08-04T06:55:51+00:00 | Vulnerability · Source |
| CVE-2025-48989 | redhat_vex | tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames | fixed: 142 known affected: 3 known not affected: 25 | 2026-08-04T06:55:37+00:00 | Vulnerability · Source |
| CVE-2025-24813 | redhat_vex | tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT | fixed: 122 known affected: 11 known not affected: 27 | 2026-08-04T06:55:26+00:00 | Vulnerability · Source |
| CVE-2022-24963 | redhat_vex | apr: integer overflow/wraparound in apr_encode | fixed: 40 known not affected: 178 | 2026-08-04T06:52:57+00:00 | Vulnerability · Source |
| CVE-2024-23672 | redhat_vex | Tomcat: WebSocket DoS with incomplete closing handshake | fixed: 95 known affected: 17 known not affected: 26 | 2026-08-04T06:52:34+00:00 | Vulnerability · Source |
| CVE-2018-16839 | redhat_vex | curl: Integer overflow leading to heap-based buffer overflow in Curl_sasl_create_plain_message() | fixed: 1 known affected: 10 known not affected: 15 | 2026-08-04T06:48:09+00:00 | Vulnerability · Source |
| CVE-2018-16840 | redhat_vex | curl: Use-after-free when closing "easy" handle in Curl_close() | fixed: 1 known affected: 5 known not affected: 20 | 2026-08-04T06:48:04+00:00 | Vulnerability · Source |
| CVE-2019-3823 | redhat_vex | curl: SMTP end-of-response out-of-bounds read | fixed: 46 known affected: 14 known not affected: 10 | 2026-08-04T06:48:02+00:00 | Vulnerability · Source |
| CVE-2018-16842 | redhat_vex | curl: Heap-based buffer over-read in the curl tool warning formatting | fixed: 58 known affected: 15 known not affected: 6 | 2026-08-04T06:47:59+00:00 | Vulnerability · Source |
| CVE-2019-3822 | redhat_vex | curl: NTLMv2 type-3 header stack buffer overflow | fixed: 46 known affected: 14 known not affected: 10 | 2026-08-04T06:47:20+00:00 | Vulnerability · Source |
| CVE-2018-16890 | redhat_vex | curl: NTLM type-2 heap out-of-bounds buffer read | fixed: 46 known affected: 14 known not affected: 10 | 2026-08-04T06:46:52+00:00 | Vulnerability · Source |
| CVE-2019-6706 | redhat_vex | lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service | fixed: 58 known affected: 25 known not affected: 7 | 2026-08-04T06:46:31+00:00 | Vulnerability · Source |
| CVE-2022-28805 | redhat_vex | lua: heap buffer overread | fixed: 58 known not affected: 15 | 2026-08-04T06:43:34+00:00 | Vulnerability · Source |
| CVE-2024-24795 | redhat_vex | httpd: HTTP Response Splitting in multiple modules | fixed: 103 known affected: 42 known not affected: 113 | 2026-08-04T06:43:32+00:00 | Vulnerability · Source |
| CVE-2021-44647 | redhat_vex | lua: type confusion in funcnamefromcode in ldebug.c could result in local DoS | known not affected: 19 | 2026-08-04T06:43:25+00:00 | Vulnerability · Source |
| CVE-2024-36387 | redhat_vex | mod_http2: DoS by null pointer in websocket over HTTP/2 | fixed: 20 known not affected: 122 | 2026-08-04T06:43:21+00:00 | Vulnerability · Source |
| CVE-2024-34459 | redhat_vex | libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c | fixed: 459 known affected: 10 known not affected: 1 | 2026-08-04T06:43:15+00:00 | Vulnerability · Source |
| CVE-2024-41996 | redhat_vex | openssl: remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations | known affected: 41 | 2026-08-04T06:43:11+00:00 | Vulnerability · Source |
| CVE-2020-14155 | redhat_vex | pcre: Integer overflow when parsing callout numeric arguments | fixed: 234 known affected: 9 | 2026-08-04T06:43:08+00:00 | Vulnerability · Source |
| CVE-2021-23839 | redhat_vex | openssl: incorrect SSLv2 rollback protection | known affected: 7 known not affected: 24 | 2026-08-04T06:43:07+00:00 | Vulnerability · Source |
| CVE-2019-20838 | redhat_vex | pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1 | fixed: 234 known affected: 1 known not affected: 8 | 2026-08-04T06:42:58+00:00 | Vulnerability · Source |
| CVE-2001-0131 | redhat_vex | httpd: allows local users to overwrite arbitrary files via a symlink attack | known affected: 4 known not affected: 41 | 2026-08-04T06:42:55+00:00 | Vulnerability · Source |
| CVE-2025-68214 | redhat_vex | kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown | fixed: 612 known affected: 70 known not affected: 42 | 2026-08-04T06:42:40+00:00 | Vulnerability · Source |
| CVE-2022-33099 | redhat_vex | lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling | fixed: 58 known not affected: 15 | 2026-08-04T06:32:01+00:00 | Vulnerability · Source |
| CVE-2022-29824 | redhat_vex | libxml2: integer overflows in xmlBuf and xmlBuffer lead to out-of-bounds write | fixed: 91 known affected: 10 | 2026-08-04T06:31:59+00:00 | Vulnerability · Source |
| CVE-2023-52425 | redhat_vex | expat: parsing large tokens can trigger a denial of service | fixed: 223 known affected: 29 known not affected: 47 | 2026-08-04T06:28:18+00:00 | Vulnerability · Source |
| CVE-2020-13938 | redhat_vex | httpd: Improper Handling of Insufficient Privileges | known affected: 2 known not affected: 52 | 2026-08-04T06:28:14+00:00 | Vulnerability · Source |
| CVE-2023-52426 | redhat_vex | expat: recursive XML entity expansion vulnerability | known affected: 21 known not affected: 21 | 2026-08-04T06:28:13+00:00 | Vulnerability · Source |
| CVE-2024-25062 | redhat_vex | libxml2: use-after-free in XMLReader | fixed: 226 known affected: 12 | 2026-08-04T06:28:05+00:00 | Vulnerability · Source |
| CVE-2022-24048 | redhat_vex | mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer | fixed: 736 known affected: 19 known not affected: 36 | 2026-08-04T06:27:53+00:00 | Vulnerability · Source |
| CVE-2022-24051 | redhat_vex | mariadb: lack of proper validation of a user-supplied string before using it as a format specifier | fixed: 736 known affected: 19 known not affected: 36 | 2026-08-04T06:27:41+00:00 | Vulnerability · Source |
| CVE-2023-38709 | redhat_vex | httpd: HTTP response splitting | fixed: 188 known affected: 30 known not affected: 44 | 2026-08-04T06:27:18+00:00 | Vulnerability · Source |
| CVE-2022-24052 | redhat_vex | mariadb: CONNECT storage engine heap-based buffer overflow | fixed: 736 known affected: 19 known not affected: 36 | 2026-08-04T06:27:08+00:00 | Vulnerability · Source |
| CVE-2024-8176 | redhat_vex | libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat | fixed: 477 known affected: 31 known not affected: 150 | 2026-08-04T06:27:05+00:00 | Vulnerability · Source |
| CVE-2021-43519 | redhat_vex | lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file | fixed: 116 known affected: 6 known not affected: 9 | 2026-08-04T06:27:01+00:00 | Vulnerability · Source |
| CVE-2022-24050 | redhat_vex | mariadb: lack of validating the existence of an object prior to performing operations on the object | fixed: 736 known affected: 19 known not affected: 36 | 2026-08-04T06:26:49+00:00 | Vulnerability · Source |
| CVE-2006-20001 | redhat_vex | httpd: mod_dav: out-of-bounds read/write of zero byte | fixed: 188 known affected: 26 known not affected: 97 | 2026-08-04T06:26:45+00:00 | Vulnerability · Source |
| CVE-2023-24021 | redhat_vex | modsecurity: lacking the complete content in FILES_TMP_CONTENT leads to web application firewall bypass | fixed: 7 known affected: 10 known not affected: 99 | 2026-08-04T06:26:42+00:00 | Vulnerability · Source |
| CVE-2022-48279 | redhat_vex | mod_security: incorrect parsing of HTTP multipart requests leads to web application firewall bypass | fixed: 7 known affected: 10 known not affected: 99 | 2026-08-04T06:26:40+00:00 | Vulnerability · Source |
| CVE-2022-43680 | redhat_vex | expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate | fixed: 141 known affected: 29 known not affected: 27 | 2026-08-04T06:26:30+00:00 | Vulnerability · Source |
| CVE-2021-31618 | redhat_vex | httpd: NULL pointer dereference on specially crafted HTTP/2 request | known not affected: 54 | 2026-08-04T06:25:58+00:00 | Vulnerability · Source |
| CVE-2021-44964 | redhat_vex | lua: use after free allows Sandbox Escape | fixed: 116 known not affected: 15 | 2026-08-04T06:24:54+00:00 | Vulnerability · Source |
| CVE-2016-3709 | redhat_vex | libxml2: Incorrect server side include parsing can lead to XSS | fixed: 90 known affected: 10 known not affected: 5 | 2026-08-04T06:23:28+00:00 | Vulnerability · Source |