VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288586 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-40553 | redhat_vex | gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service | fixed: 4 known affected: 7 known not affected: 1 | 2026-08-05T06:41:20+00:00 | Vulnerability · Source |
| CVE-2026-40468 | redhat_vex | gawk: gawk: Memory corruption via integer overflow | fixed: 4 known affected: 8 | 2026-08-05T06:41:16+00:00 | Vulnerability · Source |
| CVE-2026-40467 | redhat_vex | gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c | fixed: 4 known affected: 8 | 2026-08-05T06:41:15+00:00 | Vulnerability · Source |
| CVE-2026-53910 | redhat_vex | diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations | fixed: 3 known affected: 6 | 2026-08-05T06:28:04+00:00 | Vulnerability · Source |
| CVE-2026-16728 | redhat_vex | undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length | fixed: 8 known affected: 1 known not affected: 4 | 2026-08-05T06:27:44+00:00 | Vulnerability · Source |
| CVE-2026-15157 | redhat_vex | undici: undici: HTTP header injection via unvalidated blob-like body type property | fixed: 8 known affected: 1 known not affected: 4 | 2026-08-05T06:27:41+00:00 | Vulnerability · Source |
| CVE-2026-14643 | redhat_vex | undici: undici: Cross-user information disclosure due to improper Cache-Control directive parsing | fixed: 8 known affected: 1 known not affected: 4 | 2026-08-05T06:27:40+00:00 | Vulnerability · Source |
| CVE-2026-57432 | redhat_vex | perl: Perl: Information disclosure via integer overflow in pack/unpack operations | fixed: 4 known affected: 325 | 2026-08-05T06:27:34+00:00 | Vulnerability · Source |
| CVE-2026-67326 | redhat_vex | gitpython: GitPython: Remote Code Execution via Newline Injection in config_writer() | fixed: 11 known not affected: 1 | 2026-08-05T06:27:31+00:00 | Vulnerability · Source |
| CVE-2026-67321 | redhat_vex | axios: axios: Denial of Service via object serialization bypass | fixed: 9 | 2026-08-05T06:27:15+00:00 | Vulnerability · Source |
| CVE-2026-67320 | redhat_vex | axios: axios: Information disclosure via Prototype Pollution in Node HTTP adapter | fixed: 9 | 2026-08-05T06:27:15+00:00 | Vulnerability · Source |
| CVE-2026-67312 | redhat_vex | axios: axios: Denial of Service via uncontrolled recursion in form data processing | fixed: 9 under investigation: 107 | 2026-08-05T06:27:07+00:00 | Vulnerability · Source |
| CVE-2026-13697 | redhat_vex | undici: undici: Information disclosure and Denial of Service via malformed Cache-Control directives | fixed: 8 known affected: 1 known not affected: 4 | 2026-08-05T06:27:00+00:00 | Vulnerability · Source |
| CVE-2026-34980 | redhat_vex | cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network | fixed: 19 known affected: 14 known not affected: 262 | 2026-08-05T06:05:49+00:00 | Vulnerability · Source |
| CVE-2025-23266 | redhat_vex | nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit | fixed: 42 known affected: 2 known not affected: 14 | 2026-08-05T06:04:33+00:00 | Vulnerability · Source |
| CVE-2022-31684 | redhat_vex | reactor-netty-http: Log request headers in some cases of invalid HTTP requests | fixed: 2 known affected: 7 | 2026-08-05T05:20:21+00:00 | Vulnerability · Source |
| CVE-2022-40156 | redhat_vex | xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks | fixed: 3 known affected: 4 known not affected: 27 | 2026-08-05T05:20:03+00:00 | Vulnerability · Source |
| CVE-2022-42004 | redhat_vex | jackson-databind: use of deeply nested arrays | fixed: 126 known affected: 32 known not affected: 2356 | 2026-08-05T05:19:54+00:00 | Vulnerability · Source |
| CVE-2022-38751 | redhat_vex | snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match | fixed: 21 known affected: 41 known not affected: 1943 | 2026-08-05T05:18:40+00:00 | Vulnerability · Source |
| CVE-2022-42003 | redhat_vex | jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS | fixed: 381 known affected: 31 known not affected: 2355 | 2026-08-05T05:18:21+00:00 | Vulnerability · Source |
| CVE-2022-38752 | redhat_vex | snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode | fixed: 28 known affected: 40 known not affected: 2319 | 2026-08-05T05:18:12+00:00 | Vulnerability · Source |
| CVE-2020-12135 | redhat_vex | bson: integer overflow in bson_ensure_space() parameter bytesNeeded | known not affected: 12 | 2026-08-05T05:18:04+00:00 | Vulnerability · Source |
| CVE-2021-0341 | redhat_vex | okhttp: information disclosure via improperly used cryptographic function | fixed: 19 known affected: 14 known not affected: 46 | 2026-08-05T05:17:52+00:00 | Vulnerability · Source |
| CVE-2022-40152 | redhat_vex | woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks | fixed: 102 known affected: 17 known not affected: 207 | 2026-08-05T05:17:38+00:00 | Vulnerability · Source |
| CVE-2020-7610 | redhat_vex | bson: Deserialization of Untrusted Data could result in Code injection or Excessive CPU load | known not affected: 1 | 2026-08-05T05:17:31+00:00 | Vulnerability · Source |
| CVE-2022-37866 | redhat_vex | Ivy: Ivy Path traversal | fixed: 1 known affected: 13 known not affected: 5 | 2026-08-05T05:17:25+00:00 | Vulnerability · Source |
| CVE-2022-40153 | redhat_vex | xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks | fixed: 1 known affected: 3 known not affected: 29 | 2026-08-05T05:17:21+00:00 | Vulnerability · Source |
| CVE-2022-40151 | redhat_vex | xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks | fixed: 5 known affected: 20 known not affected: 11 | 2026-08-05T05:17:20+00:00 | Vulnerability · Source |
| CVE-2022-40155 | redhat_vex | xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks | fixed: 1 known affected: 4 known not affected: 28 | 2026-08-05T05:17:10+00:00 | Vulnerability · Source |
| CVE-2022-41853 | redhat_vex | hsqldb: Untrusted input may lead to RCE attack | fixed: 500 known affected: 14 known not affected: 359 | 2026-08-05T05:17:05+00:00 | Vulnerability · Source |
| CVE-2022-1471 | redhat_vex | SnakeYaml: Constructor Deserialization Remote Code Execution | fixed: 122 known affected: 28 known not affected: 2407 | 2026-08-05T05:17:01+00:00 | Vulnerability · Source |
| CVE-2022-41966 | redhat_vex | xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow | fixed: 13 known affected: 15 known not affected: 202 | 2026-08-05T05:17:00+00:00 | Vulnerability · Source |
| CVE-2020-36184 | redhat_vex | jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource | fixed: 6 known affected: 11 known not affected: 175 | 2026-08-05T05:12:38+00:00 | Vulnerability · Source |
| CVE-2021-20190 | redhat_vex | jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing | fixed: 6 known affected: 11 known not affected: 174 | 2026-08-05T05:12:34+00:00 | Vulnerability · Source |
| CVE-2020-10969 | redhat_vex | jackson-databind: Serialization gadgets in javax.swing.JEditorPane | fixed: 1371 known affected: 3 known not affected: 4 | 2026-08-05T05:12:31+00:00 | Vulnerability · Source |
| CVE-2020-36189 | redhat_vex | jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource | fixed: 6 known affected: 11 known not affected: 175 | 2026-08-05T05:11:03+00:00 | Vulnerability · Source |
| CVE-2024-29131 | redhat_vex | commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() | fixed: 3 known affected: 9 known not affected: 15 | 2026-08-05T05:08:43+00:00 | Vulnerability · Source |
| CVE-2024-29133 | redhat_vex | commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree | fixed: 3 known affected: 9 known not affected: 15 | 2026-08-05T05:08:39+00:00 | Vulnerability · Source |
| CVE-2024-22371 | redhat_vex | camel-core: Exposure of sensitive data by crafting a malicious EventFactory | fixed: 26 known affected: 9 known not affected: 7 | 2026-08-05T05:08:37+00:00 | Vulnerability · Source |
| CVE-2020-10688 | redhat_vex | RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack | fixed: 769 known affected: 3 | 2026-08-05T05:08:24+00:00 | Vulnerability · Source |
| CVE-2024-25710 | redhat_vex | commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file | fixed: 35 known affected: 11 known not affected: 2061 | 2026-08-05T05:08:21+00:00 | Vulnerability · Source |
| CVE-2020-14338 | redhat_vex | wildfly: XML validation manipulation due to incomplete application of use-grammar-pool-only in xercesImpl | fixed: 374 known affected: 12 known not affected: 1 | 2026-08-05T05:08:15+00:00 | Vulnerability · Source |
| CVE-2024-26308 | redhat_vex | commons-compress: OutOfMemoryError unpacking broken Pack200 file | fixed: 48 known affected: 11 known not affected: 2061 | 2026-08-05T05:08:07+00:00 | Vulnerability · Source |
| CVE-2019-14892 | redhat_vex | jackson-databind: Serialization gadgets in classes of the commons-configuration package | fixed: 313 known affected: 24 known not affected: 6 | 2026-08-05T05:07:56+00:00 | Vulnerability · Source |
| CVE-2019-11939 | redhat_vex | thrift: Resource exhaustion via containers sizes messages | known affected: 3 known not affected: 43 | 2026-08-05T05:07:52+00:00 | Vulnerability · Source |
| CVE-2020-14195 | redhat_vex | jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory | fixed: 1347 known affected: 21 known not affected: 9 | 2026-08-05T05:07:33+00:00 | Vulnerability · Source |
| CVE-2024-29025 | redhat_vex | netty-codec-http: Allocation of Resources Without Limits or Throttling | fixed: 544 known affected: 17 known not affected: 2392 | 2026-08-05T05:07:31+00:00 | Vulnerability · Source |
| CVE-2020-1953 | redhat_vex | apache-commons-configuration: uncontrolled class instantiation when loading YAML files | fixed: 2 known affected: 2 known not affected: 17 | 2026-08-05T05:07:21+00:00 | Vulnerability · Source |
| CVE-2024-43398 | redhat_vex | rexml: DoS vulnerability in REXML | fixed: 598 known affected: 144 known not affected: 54 | 2026-08-05T05:00:08+00:00 | Vulnerability · Source |
| CVE-2026-48706 | redhat_vex | envoy: Envoy Heap Buffer Overflow in TcpStatsdSink | fixed: 12 known affected: 1 known not affected: 63 | 2026-08-05T04:45:59+00:00 | Vulnerability · Source |