VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288586 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-47221 | redhat_vex | envoy: Envoy: Null pointer deref in internal redirects | fixed: 16 known affected: 1 known not affected: 84 | 2026-08-05T04:45:56+00:00 | Vulnerability · Source |
| CVE-2026-47204 | redhat_vex | envoy: Envoy: Denial of Service via Connect protocol request | fixed: 16 known affected: 1 known not affected: 84 | 2026-08-05T04:45:53+00:00 | Vulnerability · Source |
| CVE-2026-48743 | redhat_vex | envoy: Envoy: Request desynchronization allows security policy bypass via HTTP/3 to HTTP/1 translation | fixed: 8 known affected: 1 known not affected: 42 | 2026-08-05T04:43:54+00:00 | Vulnerability · Source |
| CVE-2026-48044 | redhat_vex | Envoy: Envoy: Denial of Service via specially crafted zstd payload | fixed: 16 known affected: 1 known not affected: 84 | 2026-08-05T04:43:51+00:00 | Vulnerability · Source |
| CVE-2026-48042 | redhat_vex | envoy: Envoy: Denial of Service via deeply nested JSON objects | fixed: 16 known affected: 1 known not affected: 84 | 2026-08-05T04:43:48+00:00 | Vulnerability · Source |
| CVE-2024-57850 | redhat_vex | kernel: jffs2: Prevent rtime decompress memory corruption | known not affected: 198 | 2026-08-05T03:52:59+00:00 | Vulnerability · Source |
| CVE-2024-56653 | redhat_vex | kernel: Bluetooth: btmtk: avoid UAF in btmtk_process_coredump | fixed: 305 known affected: 22 known not affected: 166 | 2026-08-05T03:52:56+00:00 | Vulnerability · Source |
| CVE-2024-56655 | redhat_vex | kernel: netfilter: nf_tables: do not defer rule destruction via call_rcu | known affected: 28 known not affected: 170 | 2026-08-05T03:52:56+00:00 | Vulnerability · Source |
| CVE-2024-56557 | redhat_vex | kernel: iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer | known not affected: 198 | 2026-08-05T03:52:55+00:00 | Vulnerability · Source |
| CVE-2024-53207 | redhat_vex | kernel: Bluetooth: MGMT: Fix possible deadlocks | known affected: 136 known not affected: 62 | 2026-08-05T03:52:52+00:00 | Vulnerability · Source |
| CVE-2024-53121 | redhat_vex | kernel: net/mlx5: fs, lock FTE when checking if active | fixed: 305 known affected: 98 known not affected: 14 | 2026-08-05T03:52:51+00:00 | Vulnerability · Source |
| CVE-2024-53122 | redhat_vex | kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust | fixed: 1654 known affected: 22 known not affected: 43 | 2026-08-05T03:52:51+00:00 | Vulnerability · Source |
| CVE-2024-52319 | redhat_vex | kernel: mm: use aligned address in clear_gigantic_page() | known affected: 42 known not affected: 156 | 2026-08-05T03:52:49+00:00 | Vulnerability · Source |
| CVE-2024-50301 | redhat_vex | kernel: security/keys: fix slab-out-of-bounds in key_task_permission | fixed: 455 known affected: 64 | 2026-08-05T03:52:48+00:00 | Vulnerability · Source |
| CVE-2024-50090 | redhat_vex | kernel: drm/xe/oa: Fix overflow in oa batch buffer | known not affected: 198 | 2026-08-05T03:52:46+00:00 | Vulnerability · Source |
| CVE-2024-50117 | redhat_vex | kernel: drm/amd: Guard against bad data for ATIF ACPI method | fixed: 305 known affected: 98 known not affected: 14 | 2026-08-05T03:52:46+00:00 | Vulnerability · Source |
| CVE-2024-49982 | redhat_vex | kernel: aoe: fix the potential use-after-free problem in more places | known not affected: 198 | 2026-08-05T03:52:45+00:00 | Vulnerability · Source |
| CVE-2024-47658 | redhat_vex | kernel: crypto: stm32/cryp - call finalize with bh disabled | known not affected: 198 | 2026-08-05T03:52:44+00:00 | Vulnerability · Source |
| CVE-2024-42276 | redhat_vex | kernel: nvme-pci: add missing condition check for existence of mapped data | fixed: 280 known affected: 50 known not affected: 70 | 2026-08-05T03:52:41+00:00 | Vulnerability · Source |
| CVE-2024-42110 | redhat_vex | kernel: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() | fixed: 279 known affected: 98 known not affected: 14 | 2026-08-05T03:52:41+00:00 | Vulnerability · Source |
| CVE-2024-35948 | redhat_vex | kernel: bcachefs: Check for journal entries overruning end of sb clean section | known not affected: 198 | 2026-08-05T03:52:40+00:00 | Vulnerability · Source |
| CVE-2024-41060 | redhat_vex | kernel: drm/radeon: check bo_va->bo is non-NULL before using it | fixed: 709 known affected: 64 known not affected: 8 | 2026-08-05T03:52:40+00:00 | Vulnerability · Source |
| CVE-2024-26611 | redhat_vex | kernel: xsk: fix usage of multi-buffer BPF helpers for ZC XDP | fixed: 280 known affected: 54 known not affected: 66 | 2026-08-05T03:52:35+00:00 | Vulnerability · Source |
| CVE-2024-27431 | redhat_vex | kernel: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program | fixed: 280 known affected: 64 known not affected: 8 under investigation: 48 | 2026-08-05T03:52:35+00:00 | Vulnerability · Source |
| CVE-2024-27017 | redhat_vex | kernel: netfilter: nft_set_pipapo: walk over current view on netlink dump | fixed: 709 known affected: 22 known not affected: 50 | 2026-08-05T03:52:34+00:00 | Vulnerability · Source |
| CVE-2023-52903 | redhat_vex | kernel: io_uring: lock overflowing for IOPOLL | known not affected: 198 | 2026-08-05T03:52:31+00:00 | Vulnerability · Source |
| CVE-2022-49362 | redhat_vex | kernel: NFSD: Fix potential use-after-free in nfsd_file_put() | fixed: 201 known not affected: 188 | 2026-08-05T03:52:26+00:00 | Vulnerability · Source |
| CVE-2022-48692 | redhat_vex | kernel: RDMA/srp: Set scmnd->result only when scmnd is not NULL | known affected: 42 known not affected: 156 | 2026-08-05T03:52:23+00:00 | Vulnerability · Source |
| CVE-2022-48629 | redhat_vex | kernel: crypto: qcom-rng - ensure buffer for generate is completely filled | known not affected: 198 | 2026-08-05T03:52:21+00:00 | Vulnerability · Source |
| CVE-2022-40896 | redhat_vex | pygments: ReDoS in pygments | fixed: 24 known affected: 28 known not affected: 2393 | 2026-08-05T03:52:21+00:00 | Vulnerability · Source |
| CVE-2021-47194 | redhat_vex | kernel: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type | known affected: 90 known not affected: 108 | 2026-08-05T03:52:10+00:00 | Vulnerability · Source |
| CVE-2020-7677 | redhat_vex | thenify: Arbitrary Code Execution in thenify | known affected: 4 known not affected: 1 | 2026-08-05T03:52:08+00:00 | Vulnerability · Source |
| CVE-2021-36373 | redhat_vex | ant: excessive memory allocation when reading a specially crafted TAR archive | fixed: 1 known affected: 124 known not affected: 4 | 2026-08-05T03:52:06+00:00 | Vulnerability · Source |
| CVE-2020-17530 | redhat_vex | struts2: using forced OGNL evaluation on untrusted user input can lead to a RCE and security degradation | known not affected: 4 | 2026-08-05T03:52:05+00:00 | Vulnerability · Source |
| CVE-2024-43853 | redhat_vex | kernel: cgroup/cpuset: Prevent UAF in proc_cpuset_show() | fixed: 305 known affected: 112 | 2026-08-05T03:51:59+00:00 | Vulnerability · Source |
| CVE-2015-8381 | redhat_vex | pcre: Buffer overflow caused by duplicate named references (8.38/36) | fixed: 339 known not affected: 95 | 2026-08-05T03:51:55+00:00 | Vulnerability · Source |
| CVE-2014-0095 | redhat_vex | 8: Denial of service via AJP requests with content length zero | known not affected: 39 | 2026-08-05T03:51:53+00:00 | Vulnerability · Source |
| CVE-2021-21252 | redhat_vex | jquery-validate: jquery.validate.js vulnerable to ReDoS | known not affected: 2 | 2026-08-05T03:51:51+00:00 | Vulnerability · Source |
| CVE-2022-2880 | redhat_vex | golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters | fixed: 2672 known affected: 71 known not affected: 2674 | 2026-08-05T03:51:42+00:00 | Vulnerability · Source |
| CVE-2026-16313 | redhat_vex | sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export | fixed: 82 known affected: 7 known not affected: 3 | 2026-08-05T03:51:42+00:00 | Vulnerability · Source |
| CVE-2017-5661 | redhat_vex | fop: XML external entity processing vulnerability | known affected: 9 | 2026-08-05T03:51:40+00:00 | Vulnerability · Source |
| CVE-2015-1792 | redhat_vex | OpenSSL: CMS verify infinite loop with unknown hash function | fixed: 152 known affected: 4 known not affected: 6 | 2026-08-05T03:51:39+00:00 | Vulnerability · Source |
| CVE-2022-34916 | redhat_vex | flume: JNDI Injection in JMSMessageConsumer | known not affected: 6 | 2026-08-05T03:51:37+00:00 | Vulnerability · Source |
| CVE-2016-3191 | redhat_vex | pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12) | fixed: 164 known affected: 117 known not affected: 35 | 2026-08-05T03:51:36+00:00 | Vulnerability · Source |
| CVE-2024-50276 | redhat_vex | kernel: net: vertexcom: mse102x: Fix possible double free of TX skb | known not affected: 198 | 2026-08-05T03:51:33+00:00 | Vulnerability · Source |
| CVE-2017-15710 | redhat_vex | httpd: Out of bounds write in mod_authnz_ldap when using too small Accept-Language values | fixed: 544 known affected: 10 known not affected: 16 | 2026-08-05T03:51:32+00:00 | Vulnerability · Source |
| CVE-2015-8393 | redhat_vex | pcre: pcregrep -q is not always quiet (8.38/28) | known affected: 5 known not affected: 130 | 2026-08-05T03:51:29+00:00 | Vulnerability · Source |
| CVE-2023-53072 | redhat_vex | kernel: mptcp: use the workqueue to destroy unaccepted sockets | fixed: 120 known affected: 124 known not affected: 118 | 2026-08-05T03:51:28+00:00 | Vulnerability · Source |
| CVE-2023-53100 | redhat_vex | kernel: ext4: fix WARNING in ext4_update_inline_data | known affected: 198 known not affected: 76 | 2026-08-05T03:51:28+00:00 | Vulnerability · Source |
| CVE-2024-38827 | redhat_vex | spring-security: authorization bypass for case sensitive comparisons | known affected: 4 known not affected: 11 | 2026-08-05T03:51:28+00:00 | Vulnerability · Source |