VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288586 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-34916 | redhat_vex | flume: JNDI Injection in JMSMessageConsumer | known not affected: 6 | 2026-08-05T03:51:37+00:00 | Vulnerability · Source |
| CVE-2016-3191 | redhat_vex | pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12) | fixed: 164 known affected: 117 known not affected: 35 | 2026-08-05T03:51:36+00:00 | Vulnerability · Source |
| CVE-2024-50276 | redhat_vex | kernel: net: vertexcom: mse102x: Fix possible double free of TX skb | known not affected: 198 | 2026-08-05T03:51:33+00:00 | Vulnerability · Source |
| CVE-2017-15710 | redhat_vex | httpd: Out of bounds write in mod_authnz_ldap when using too small Accept-Language values | fixed: 544 known affected: 10 known not affected: 16 | 2026-08-05T03:51:32+00:00 | Vulnerability · Source |
| CVE-2015-8393 | redhat_vex | pcre: pcregrep -q is not always quiet (8.38/28) | known affected: 5 known not affected: 130 | 2026-08-05T03:51:29+00:00 | Vulnerability · Source |
| CVE-2023-53072 | redhat_vex | kernel: mptcp: use the workqueue to destroy unaccepted sockets | fixed: 120 known affected: 124 known not affected: 118 | 2026-08-05T03:51:28+00:00 | Vulnerability · Source |
| CVE-2023-53100 | redhat_vex | kernel: ext4: fix WARNING in ext4_update_inline_data | known affected: 198 known not affected: 76 | 2026-08-05T03:51:28+00:00 | Vulnerability · Source |
| CVE-2024-38827 | redhat_vex | spring-security: authorization bypass for case sensitive comparisons | known affected: 4 known not affected: 11 | 2026-08-05T03:51:28+00:00 | Vulnerability · Source |
| CVE-2019-0232 | redhat_vex | tomcat: Remote Code Execution on Windows | fixed: 84 known affected: 14 known not affected: 42 | 2026-08-05T03:49:57+00:00 | Vulnerability · Source |
| CVE-2018-5968 | redhat_vex | jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485) | fixed: 324 known affected: 25 known not affected: 4 | 2026-08-05T03:48:39+00:00 | Vulnerability · Source |
| CVE-2023-53803 | redhat_vex | kernel: scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() | fixed: 321 known affected: 166 known not affected: 76 | 2026-08-05T03:48:33+00:00 | Vulnerability · Source |
| CVE-2021-47124 | redhat_vex | kernel: io_uring: fix link timeout refs | known affected: 42 known not affected: 156 | 2026-08-05T03:48:28+00:00 | Vulnerability · Source |
| CVE-2023-52679 | redhat_vex | kernel: of: Fix double free in of_parse_phandle_with_args_map | fixed: 709 known affected: 50 known not affected: 22 | 2026-08-05T03:48:26+00:00 | Vulnerability · Source |
| CVE-2023-53718 | redhat_vex | kernel: ring-buffer: Do not swap cpu_buffer during resize process | known affected: 184 known not affected: 90 | 2026-08-05T03:48:25+00:00 | Vulnerability · Source |
| CVE-2024-42067 | redhat_vex | kernel: bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() | known affected: 184 known not affected: 14 | 2026-08-05T03:48:19+00:00 | Vulnerability · Source |
| CVE-2021-4044 | redhat_vex | openssl: invalid handling of X509_verify_cert() internal errors in libssl | known not affected: 32 | 2026-08-05T03:48:14+00:00 | Vulnerability · Source |
| CVE-2022-50079 | redhat_vex | kernel: drm/amd/display: Check correct bounds for stream encoder instances for DCN303 | fixed: 321 known affected: 38 known not affected: 118 | 2026-08-05T03:48:13+00:00 | Vulnerability · Source |
| CVE-2023-47627 | redhat_vex | python-aiohttp: numerous issues in HTTP parser with header parsing | fixed: 54 known not affected: 2681 | 2026-08-05T03:48:12+00:00 | Vulnerability · Source |
| CVE-2023-53659 | redhat_vex | kernel: iavf: Fix out-of-bounds when setting channels on remove | known affected: 156 known not affected: 118 | 2026-08-05T03:48:10+00:00 | Vulnerability · Source |
| CVE-2024-1459 | redhat_vex | undertow: directory traversal vulnerability | fixed: 259 known affected: 7 known not affected: 1 | 2026-08-05T03:48:09+00:00 | Vulnerability · Source |
| CVE-2020-15824 | redhat_vex | kotlin: kotlin-main-kts cached scripts in the system temp directory could result in priviledge escalation | known not affected: 12 | 2026-08-05T03:48:07+00:00 | Vulnerability · Source |
| CVE-2023-3865 | redhat_vex | kernel: Out of bounds read in smb2_write | known not affected: 274 | 2026-08-05T03:48:05+00:00 | Vulnerability · Source |
| CVE-2023-33201 | redhat_vex | bouncycastle: potential blind LDAP injection attack using a self-signed certificate | fixed: 54 known affected: 16 known not affected: 336 | 2026-08-05T03:48:03+00:00 | Vulnerability · Source |
| CVE-2020-1967 | redhat_vex | openssl: Segmentation fault in SSL_check_chain causes denial of service | known not affected: 30 | 2026-08-05T03:48:02+00:00 | Vulnerability · Source |
| CVE-2023-1108 | redhat_vex | Undertow: Infinite loop in SslConduit during close | fixed: 137 known affected: 6 known not affected: 2539 | 2026-08-05T03:47:59+00:00 | Vulnerability · Source |
| CVE-2019-12086 | redhat_vex | jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. | fixed: 1969 known affected: 30 known not affected: 2 | 2026-08-05T03:47:46+00:00 | Vulnerability · Source |
| CVE-2023-3629 | redhat_vex | infinispan: Non-admins should not be able to get cache config via REST API | fixed: 1 known affected: 1 | 2026-08-05T03:47:44+00:00 | Vulnerability · Source |
| CVE-2022-1227 | redhat_vex | psgo: Privilege escalation in 'podman top' | fixed: 1133 known affected: 11 known not affected: 25 | 2026-08-05T03:47:36+00:00 | Vulnerability · Source |
| CVE-2024-8698 | redhat_vex | keycloak-saml-core: Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak | fixed: 263 known affected: 2 | 2026-08-05T03:47:31+00:00 | Vulnerability · Source |
| CVE-2024-57883 | redhat_vex | kernel: mm: hugetlb: independent PMD page table shared count | known affected: 274 | 2026-08-05T03:46:52+00:00 | Vulnerability · Source |
| CVE-2024-56627 | redhat_vex | kernel: ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read | known not affected: 198 | 2026-08-05T03:46:50+00:00 | Vulnerability · Source |
| CVE-2024-49934 | redhat_vex | kernel: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name | fixed: 305 known affected: 112 | 2026-08-05T03:46:46+00:00 | Vulnerability · Source |
| CVE-2024-46737 | redhat_vex | kernel: nvmet-tcp: fix kernel crash if commands allocation fails | known affected: 156 known not affected: 42 | 2026-08-05T03:46:43+00:00 | Vulnerability · Source |
| CVE-2024-41090 | redhat_vex | kernel: virtio-net: tap: mlx5_core short frame denial of service | fixed: 1336 known affected: 22 known not affected: 55 | 2026-08-05T03:46:42+00:00 | Vulnerability · Source |
| CVE-2018-12123 | redhat_vex | nodejs: Hostname spoofing in URL parser for javascript protocol | fixed: 206 known affected: 40 known not affected: 15 | 2026-08-05T03:46:40+00:00 | Vulnerability · Source |
| CVE-2024-58075 | redhat_vex | kernel: crypto: tegra - do not transfer req when tegra init fails | fixed: 612 known affected: 22 known not affected: 90 | 2026-08-05T03:46:36+00:00 | Vulnerability · Source |
| CVE-2024-58053 | redhat_vex | kernel: rxrpc: Fix handling of received connection abort | known affected: 184 known not affected: 90 | 2026-08-05T03:46:35+00:00 | Vulnerability · Source |
| CVE-2024-53144 | redhat_vex | kernel: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE | known affected: 198 | 2026-08-05T03:46:31+00:00 | Vulnerability · Source |
| CVE-2024-39482 | redhat_vex | kernel: bcache: fix variable length array abuse in btree_iter | known not affected: 198 | 2026-08-05T03:46:31+00:00 | Vulnerability · Source |
| CVE-2024-32007 | redhat_vex | apache: cxf: org.apache.cxf:cxf-rt-rs-security-jose: Denial of Service vulnerability in JOSE | fixed: 3 known affected: 4 known not affected: 3 | 2026-08-05T03:46:29+00:00 | Vulnerability · Source |
| CVE-2024-58240 | redhat_vex | kernel: tls: separate no-async decryption request handling from async | fixed: 239 known affected: 156 known not affected: 118 | 2026-08-05T03:46:26+00:00 | Vulnerability · Source |
| CVE-2024-26967 | redhat_vex | kernel: clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays | known not affected: 198 | 2026-08-05T03:46:22+00:00 | Vulnerability · Source |
| CVE-2024-26880 | redhat_vex | kernel: dm: call the resume method on internal suspend | fixed: 663 known affected: 64 known not affected: 1 | 2026-08-05T03:46:20+00:00 | Vulnerability · Source |
| CVE-2024-26807 | redhat_vex | kernel: spi: cadence-qspi: fix pointer reference in runtime PM hooks | known not affected: 198 | 2026-08-05T03:46:17+00:00 | Vulnerability · Source |
| CVE-2024-47669 | redhat_vex | kernel: nilfs2: fix state management in error path of log writing function | known not affected: 198 | 2026-08-05T03:46:16+00:00 | Vulnerability · Source |
| CVE-2024-36911 | redhat_vex | kernel: hv_netvsc: Don't free decrypted memory | known affected: 182 known not affected: 16 | 2026-08-05T03:46:11+00:00 | Vulnerability · Source |
| CVE-2024-46763 | redhat_vex | kernel: fou: Fix null-ptr-deref in GRO. | known not affected: 198 | 2026-08-05T03:45:21+00:00 | Vulnerability · Source |
| CVE-2010-2227 | redhat_vex | tomcat: information leak vulnerability in the handling of 'Transfer-Encoding' header | fixed: 249 known not affected: 11 | 2026-08-05T03:45:18+00:00 | Vulnerability · Source |
| CVE-2023-53556 | redhat_vex | kernel: Linux kernel iavf driver: Denial of Service via use-after-free vulnerability | fixed: 450 known affected: 66 known not affected: 90 | 2026-08-05T03:45:18+00:00 | Vulnerability · Source |
| CVE-2024-38583 | redhat_vex | kernel: nilfs2: fix use-after-free of timer for log writer thread | known not affected: 198 | 2026-08-05T03:45:15+00:00 | Vulnerability · Source |