VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288195 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-40304 | redhat_vex | libxml2: dict corruption caused by entity reference cycles | fixed: 136 known affected: 10 | 2026-08-04T06:23:24+00:00 | Vulnerability · Source |
| CVE-2022-36760 | redhat_vex | httpd: mod_proxy_ajp: Possible request smuggling | fixed: 188 known affected: 26 known not affected: 78 | 2026-08-04T06:23:17+00:00 | Vulnerability · Source |
| CVE-2022-40303 | redhat_vex | libxml2: integer overflows with XML_PARSE_HUGE | fixed: 136 known affected: 10 | 2026-08-04T06:23:16+00:00 | Vulnerability · Source |
| CVE-2022-37436 | redhat_vex | httpd: mod_proxy: HTTP response splitting | fixed: 188 known affected: 20 known not affected: 84 | 2026-08-04T06:23:13+00:00 | Vulnerability · Source |
| CVE-2020-11985 | redhat_vex | httpd: IP address spoofing when proxying using mod_remoteip and mod_rewrite | fixed: 138 known affected: 3 known not affected: 22 | 2026-08-04T06:22:34+00:00 | Vulnerability · Source |
| CVE-2020-12243 | redhat_vex | openldap: denial of service via nested boolean expressions in LDAP search filters | fixed: 74 known affected: 11 known not affected: 6 | 2026-08-04T06:22:29+00:00 | Vulnerability · Source |
| CVE-2020-25709 | redhat_vex | openldap: assertion failure in Certificate List syntax validation | fixed: 67 known affected: 12 known not affected: 6 | 2026-08-04T06:22:21+00:00 | Vulnerability · Source |
| CVE-2020-25710 | redhat_vex | openldap: assertion failure in CSN normalization with invalid input | fixed: 67 known affected: 12 known not affected: 6 | 2026-08-04T06:22:17+00:00 | Vulnerability · Source |
| CVE-2020-28196 | redhat_vex | krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS | fixed: 82 known affected: 9 known not affected: 29 | 2026-08-04T06:22:11+00:00 | Vulnerability · Source |
| CVE-2020-24977 | redhat_vex | libxml2: Buffer overflow vulnerability in xmlEncodeEntitiesInternal() in entities.c | fixed: 45 known affected: 11 known not affected: 1 | 2026-08-04T06:22:01+00:00 | Vulnerability · Source |
| CVE-2022-40674 | redhat_vex | expat: a use-after-free in the doContent function in xmlparse.c | fixed: 348 known affected: 9 known not affected: 12 | 2026-08-04T06:19:43+00:00 | Vulnerability · Source |
| CVE-2023-23931 | redhat_vex | python-cryptography: memory corruption via immutable objects | fixed: 354 known affected: 10 known not affected: 143 | 2026-08-04T06:17:00+00:00 | Vulnerability · Source |
| CVE-2020-9490 | redhat_vex | httpd: Push diary crash on specifically crafted HTTP/2 header | fixed: 341 known affected: 3 known not affected: 17 | 2026-08-04T06:16:22+00:00 | Vulnerability · Source |
| CVE-2024-45811 | redhat_vex | vite: server.fs.deny is bypassed when using `?import&raw` | fixed: 8 known affected: 2 known not affected: 65 | 2026-08-04T05:47:45+00:00 | Vulnerability · Source |
| CVE-2024-45812 | redhat_vex | vite: XSS via DOM Clobbering gadget found in vite bundled scripts | fixed: 8 known affected: 2 known not affected: 65 | 2026-08-04T05:47:30+00:00 | Vulnerability · Source |
| CVE-2020-16305 | redhat_vex | ghostscript: buffer overflow in pcx_write_rle() in contrib/japanese/gdev10v.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-04T05:32:59+00:00 | Vulnerability · Source |
| CVE-2019-14849 | redhat_vex | 3scale: user session cookie does not set HTTPOnly | fixed: 6 | 2026-08-04T05:32:56+00:00 | Vulnerability · Source |
| CVE-2022-3143 | redhat_vex | wildfly-elytron: possible timing attacks via use of unsafe comparator | fixed: 101 known not affected: 194 | 2026-08-04T05:22:19+00:00 | Vulnerability · Source |
| CVE-2018-1041 | redhat_vex | jboss-remoting: High CPU Denial of Service | fixed: 475 known not affected: 1 | 2026-08-04T05:17:39+00:00 | Vulnerability · Source |
| CVE-2018-10934 | redhat_vex | wildfly-core: Cross-site scripting (XSS) in JBoss Management Console | fixed: 663 known affected: 6 known not affected: 4 | 2026-08-04T05:17:07+00:00 | Vulnerability · Source |
| CVE-2021-3763 | redhat_vex | 7: Incorrect privilege in Management Console | fixed: 1 known affected: 1 | 2026-08-04T05:06:37+00:00 | Vulnerability · Source |
| CVE-2021-4040 | redhat_vex | Broker: Malformed message can result in partial DoS (OOM) | fixed: 1 | 2026-08-04T05:05:53+00:00 | Vulnerability · Source |
| CVE-2025-55182 | redhat_vex | next: React Server Components: Pre-authentication remote code execution via unsafe deserialization | known not affected: 33 | 2026-08-04T05:05:19+00:00 | Vulnerability · Source |
| CVE-2021-30151 | redhat_vex | sidekiq: XSS via the queue name of the live-poll feature | fixed: 2 known not affected: 3485 | 2026-08-04T05:03:19+00:00 | Vulnerability · Source |
| CVE-2020-17538 | redhat_vex | ghostscript: buffer overflow in GetNumSameData() in contrib/lips4/gdevlips.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-04T05:03:04+00:00 | Vulnerability · Source |
| CVE-2020-16309 | redhat_vex | ghostscript: buffer overflow in lxm5700m_print_page() in devices/gdevlxm.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-04T05:03:02+00:00 | Vulnerability · Source |
| CVE-2020-16308 | redhat_vex | ghostscript: buffer overflow in p_print_image() in devices/gdevcdj.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-04T05:03:00+00:00 | Vulnerability · Source |
| CVE-2020-16302 | redhat_vex | ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a privilege escalation | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-04T05:02:55+00:00 | Vulnerability · Source |
| CVE-2020-16303 | redhat_vex | ghostscript: use-after-free in xps_finish_image_path() in devices/vector/gdevxps.c could result in a privilege escalation | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-04T05:02:48+00:00 | Vulnerability · Source |
| CVE-2020-16304 | redhat_vex | ghostscript: buffer overflow in image_render_color_thresh() in base/gxicolor.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-04T05:02:44+00:00 | Vulnerability · Source |
| CVE-2020-16288 | redhat_vex | ghostscript: buffer overflow in pj_common_print_page() in devices/gdevpjet.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-04T05:02:44+00:00 | Vulnerability · Source |
| CVE-2020-16300 | redhat_vex | ghostscript: buffer overflow in tiff12_print_page() in devices/gdevtfnx.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-04T05:02:40+00:00 | Vulnerability · Source |
| CVE-2020-16298 | redhat_vex | ghostscript: buffer overflow in mj_color_correct() in contrib/japanese/gdevmjc.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-04T05:02:38+00:00 | Vulnerability · Source |
| CVE-2019-14852 | redhat_vex | apicast: deprecated protocol TLS 1.0 enabled in gateway | known affected: 1 | 2026-08-04T05:02:37+00:00 | Vulnerability · Source |
| CVE-2020-5247 | redhat_vex | rubygem-puma: attacker is able to use newline characters to insert malicious content (HTTP Response Splitting), this could lead to XSS | known affected: 9 | 2026-08-04T05:02:29+00:00 | Vulnerability · Source |
| CVE-2019-20388 | redhat_vex | libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c | fixed: 225 known affected: 1 known not affected: 6 | 2026-08-04T05:02:25+00:00 | Vulnerability · Source |
| CVE-2026-67319 | redhat_vex | axios: axios: Information disclosure and data manipulation via prototype pollution | fixed: 6 known not affected: 1 | 2026-08-04T04:49:14+00:00 | Vulnerability · Source |
| CVE-2019-14812 | redhat_vex | ghostscript: Safer mode bypass by .forceput exposure in setuserparams (701444) | fixed: 175 known affected: 6 known not affected: 1 | 2026-08-04T04:41:13+00:00 | Vulnerability · Source |
| CVE-2019-14869 | redhat_vex | ghostscript: -dSAFER escape in .charkeys (701841) | fixed: 190 known not affected: 7 | 2026-08-04T04:41:12+00:00 | Vulnerability · Source |
| CVE-2019-10216 | redhat_vex | ghostscript: -dSAFER escape via .buildfont1 (701394) | fixed: 175 known affected: 6 | 2026-08-04T04:41:08+00:00 | Vulnerability · Source |
| CVE-2019-14817 | redhat_vex | ghostscript: Safer mode bypass by .forceput exposure in .pdfexectoken and other procedures (701450) | fixed: 175 known affected: 6 known not affected: 1 | 2026-08-04T04:40:55+00:00 | Vulnerability · Source |
| CVE-2019-14813 | redhat_vex | ghostscript: Safer mode bypass by .forceput exposure in setsystemparams (701443) | fixed: 175 known affected: 6 known not affected: 1 | 2026-08-04T04:40:49+00:00 | Vulnerability · Source |
| CVE-2019-14811 | redhat_vex | ghostscript: Safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator (701445) | fixed: 175 known affected: 6 known not affected: 1 | 2026-08-04T04:40:48+00:00 | Vulnerability · Source |
| CVE-2026-17614 | redhat_vex | wildfly-core: Path Traversal on WildFly Domain Controller | known affected: 9 | 2026-08-04T04:33:57+00:00 | Vulnerability · Source |
| CVE-2025-7338 | redhat_vex | multer: Multer Denial of Service | fixed: 2 known affected: 1 known not affected: 5 | 2026-08-04T03:12:58+00:00 | Vulnerability · Source |
| CVE-2024-12905 | redhat_vex | tar-fs: link following and path traversal via maliciously crafted tar file | fixed: 48 known affected: 56 known not affected: 56 | 2026-08-04T01:26:52+00:00 | Vulnerability · Source |
| CVE-2025-29775 | redhat_vex | xml-crypto: xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment | fixed: 3 known affected: 1 known not affected: 6 | 2026-08-04T01:26:11+00:00 | Vulnerability · Source |
| CVE-2004-1060 | suse_vex | SUSE CVE CVE-2004-1060 | known not affected: 310 | 2026-08-04T00:13:31+00:00 | Vulnerability · Source |
| CVE-2005-2349 | suse_vex | SUSE CVE CVE-2005-2349 | known not affected: 32 | 2026-08-04T00:13:29+00:00 | Vulnerability · Source |
| CVE-2006-4574 | suse_vex | SUSE CVE CVE-2006-4574 | recommended: 29 | 2026-08-04T00:13:27+00:00 | Vulnerability · Source |