VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288586 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2021-32672 | redhat_vex | redis: Out of bounds read in lua debugger protocol parser | known affected: 16 known not affected: 7 | 2026-08-05T03:45:01+00:00 | Vulnerability · Source |
| CVE-2021-32626 | redhat_vex | redis: Lua scripts can overflow the heap-based Lua stack | fixed: 105 known affected: 2 known not affected: 7 | 2026-08-05T03:45:00+00:00 | Vulnerability · Source |
| CVE-2023-53828 | redhat_vex | kernel: Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() | known affected: 108 known not affected: 152 under investigation: 14 | 2026-08-05T03:45:00+00:00 | Vulnerability · Source |
| CVE-2022-36077 | redhat_vex | Electron: Redirection error and misuse of hashed credentials | known affected: 5 known not affected: 10 | 2026-08-05T03:44:58+00:00 | Vulnerability · Source |
| CVE-2024-26730 | redhat_vex | kernel: hwmon: (nct6775) Fix access to temperature configuration registers | known not affected: 198 | 2026-08-05T03:44:57+00:00 | Vulnerability · Source |
| CVE-2022-48851 | redhat_vex | kernel: staging: gdm724x: fix use after free in gdm_lte_rx() | known not affected: 198 | 2026-08-05T03:44:54+00:00 | Vulnerability · Source |
| CVE-2022-49561 | redhat_vex | kernel: netfilter: conntrack: re-fetch conntrack after insertion | fixed: 286 known affected: 80 known not affected: 76 | 2026-08-05T03:44:52+00:00 | Vulnerability · Source |
| CVE-2024-35797 | redhat_vex | kernel: mm: cachestat: fix two shmem bugs | fixed: 279 known affected: 64 known not affected: 48 | 2026-08-05T03:44:52+00:00 | Vulnerability · Source |
| CVE-2024-27058 | redhat_vex | kernel: tmpfs: fix race on handling dquot rbtree | known not affected: 198 | 2026-08-05T03:44:51+00:00 | Vulnerability · Source |
| CVE-2022-49149 | redhat_vex | kernel: rxrpc: Fix call timer start racing with call destruction | known affected: 108 known not affected: 166 | 2026-08-05T03:41:20+00:00 | Vulnerability · Source |
| CVE-2024-44988 | redhat_vex | kernel: net: dsa: mv88e6xxx: Fix out-of-bound access | known not affected: 198 | 2026-08-05T03:41:20+00:00 | Vulnerability · Source |
| CVE-2017-7536 | redhat_vex | hibernate-validator: Privilege escalation when running under the security manager | fixed: 2565 known affected: 7 known not affected: 9 under investigation: 1 | 2026-08-05T03:41:16+00:00 | Vulnerability · Source |
| CVE-2022-49670 | redhat_vex | kernel: linux/dim: Fix divide by 0 in RDMA DIM | fixed: 303 known affected: 70 known not affected: 118 | 2026-08-05T03:41:15+00:00 | Vulnerability · Source |
| CVE-2021-47087 | redhat_vex | kernel: tee: optee: Fix incorrect page free bug | known not affected: 198 | 2026-08-05T03:41:15+00:00 | Vulnerability · Source |
| CVE-2021-47060 | redhat_vex | kernel: KVM: use-after-free while looking for coalesced MMIO zones if the bus is destroyed | known affected: 42 known not affected: 156 | 2026-08-05T03:41:13+00:00 | Vulnerability · Source |
| CVE-2017-5647 | redhat_vex | tomcat: Incorrect handling of pipelined requests when send file was used | fixed: 224 known affected: 6 known not affected: 13 under investigation: 1 | 2026-08-05T03:41:12+00:00 | Vulnerability · Source |
| CVE-2024-47750 | redhat_vex | kernel: RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 | known not affected: 198 | 2026-08-05T03:41:11+00:00 | Vulnerability · Source |
| CVE-2024-38587 | redhat_vex | kernel: speakup: Fix sizeof() vs ARRAY_SIZE() bug | known not affected: 198 | 2026-08-05T03:41:11+00:00 | Vulnerability · Source |
| CVE-2022-2668 | redhat_vex | keycloak: Uploading of SAML javascript protocol mapper scripts through the admin console | fixed: 24 | 2026-08-05T03:41:10+00:00 | Vulnerability · Source |
| CVE-2023-53559 | redhat_vex | kernel: ip_vti: fix potential slab-use-after-free in decode_session6 | fixed: 399 known affected: 38 known not affected: 118 | 2026-08-05T03:41:05+00:00 | Vulnerability · Source |
| CVE-2022-49991 | redhat_vex | kernel: mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte | fixed: 365 known affected: 36 known not affected: 152 | 2026-08-05T03:41:04+00:00 | Vulnerability · Source |
| CVE-2022-50283 | redhat_vex | kernel: mtd: core: add missing of_node_get() in dynamic partitions code | known affected: 14 known not affected: 260 | 2026-08-05T03:41:03+00:00 | Vulnerability · Source |
| CVE-2021-47109 | redhat_vex | kernel: neighbour: allow NUD_NOARP entries to be forced GCed | known affected: 42 known not affected: 156 | 2026-08-05T03:22:41+00:00 | Vulnerability · Source |
| CVE-2022-24407 | redhat_vex | cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands | fixed: 846 known affected: 1 known not affected: 20 | 2026-08-05T03:21:18+00:00 | Vulnerability · Source |
| CVE-2013-2069 | redhat_vex | livecd-tools: improper handling of passwords | fixed: 1 known affected: 4 | 2026-08-05T03:21:16+00:00 | Vulnerability · Source |
| CVE-2024-47659 | redhat_vex | kernel: smack: tcp: ipv4, fix incorrect labeling | known not affected: 198 | 2026-08-05T03:21:13+00:00 | Vulnerability · Source |
| CVE-2022-50650 | redhat_vex | kernel: bpf: Fix reference state management for synchronous callbacks | known affected: 156 known not affected: 118 | 2026-08-05T03:20:46+00:00 | Vulnerability · Source |
| CVE-2023-41056 | redhat_vex | redis: Heap Buffer Overflow may lead to potential remote code execution | fixed: 18 known affected: 2 known not affected: 12 | 2026-08-05T03:20:43+00:00 | Vulnerability · Source |
| CVE-2022-46175 | redhat_vex | json5: Prototype Pollution in JSON5 via Parse Method | fixed: 30 known affected: 51 known not affected: 288 | 2026-08-05T02:58:56+00:00 | Vulnerability · Source |
| CVE-2022-37603 | redhat_vex | loader-utils: Regular expression denial of service | fixed: 21 known affected: 40 known not affected: 127 | 2026-08-05T02:58:00+00:00 | Vulnerability · Source |
| CVE-2022-25858 | redhat_vex | terser: insecure use of regular expressions leads to ReDoS | fixed: 4 known affected: 53 known not affected: 33 | 2026-08-05T02:57:33+00:00 | Vulnerability · Source |
| CVE-2022-24999 | redhat_vex | express: "qs" prototype poisoning causes the hang of the node process | fixed: 134 known affected: 60 known not affected: 281 | 2026-08-05T02:57:31+00:00 | Vulnerability · Source |
| CVE-2022-23773 | redhat_vex | golang: cmd/go: misinterpretation of branch names can lead to incorrect access control | fixed: 855 known affected: 148 known not affected: 1049 | 2026-08-05T02:57:13+00:00 | Vulnerability · Source |
| CVE-2022-0235 | redhat_vex | node-fetch: exposure of sensitive information to an unauthorized actor | fixed: 102 known affected: 140 known not affected: 796 under investigation: 2 | 2026-08-05T02:56:24+00:00 | Vulnerability · Source |
| CVE-2021-41772 | redhat_vex | golang: archive/zip: Reader.Open panics on empty string | fixed: 208 known affected: 47 known not affected: 1145 | 2026-08-05T02:55:46+00:00 | Vulnerability · Source |
| CVE-2021-41771 | redhat_vex | golang: debug/macho: invalid dynamic symbol table command can cause panic | fixed: 140 known affected: 22 known not affected: 91 | 2026-08-05T02:55:41+00:00 | Vulnerability · Source |
| CVE-2021-38297 | redhat_vex | golang: Command-line arguments may overwrite global data | fixed: 127 known affected: 23 known not affected: 179 | 2026-08-05T02:53:59+00:00 | Vulnerability · Source |
| CVE-2022-37601 | redhat_vex | loader-utils: prototype pollution in function parseQuery in parseQuery.js | fixed: 5 known affected: 56 known not affected: 93 | 2026-08-05T02:52:40+00:00 | Vulnerability · Source |
| CVE-2021-23343 | redhat_vex | nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe | fixed: 197 known affected: 51 known not affected: 49 | 2026-08-05T02:39:08+00:00 | Vulnerability · Source |
| CVE-2021-33502 | redhat_vex | nodejs-normalize-url: ReDoS for data URLs | fixed: 176 known affected: 5 known not affected: 105 | 2026-08-05T02:35:04+00:00 | Vulnerability · Source |
| CVE-2021-29060 | redhat_vex | nodejs-color-string: Regular expression denial of service when the application is provided and checks a crafted invalid HWB string | known affected: 21 known not affected: 4 | 2026-08-05T02:34:55+00:00 | Vulnerability · Source |
| CVE-2021-27515 | redhat_vex | nodejs-url-parse: mishandling certain uses of backslash may lead to confidentiality compromise | fixed: 1 known affected: 2 known not affected: 20 | 2026-08-05T02:34:47+00:00 | Vulnerability · Source |
| CVE-2021-23364 | redhat_vex | browserslist: parsing of invalid queries could result in Regular Expression Denial of Service (ReDoS) | fixed: 1 known affected: 17 known not affected: 10 | 2026-08-05T02:34:37+00:00 | Vulnerability · Source |
| CVE-2021-3664 | redhat_vex | nodejs-url-parse: URL Redirection to Untrusted Site | known affected: 13 known not affected: 11 | 2026-08-05T02:33:43+00:00 | Vulnerability · Source |
| CVE-2020-28362 | redhat_vex | golang: math/big: panic during recursive division of very large numbers | fixed: 807 known affected: 216 known not affected: 1585 | 2026-08-05T02:33:09+00:00 | Vulnerability · Source |
| CVE-2020-27813 | redhat_vex | golang-github-gorilla-websocket: integer overflow leads to denial of service | fixed: 19 known affected: 31 known not affected: 533 | 2026-08-05T02:32:59+00:00 | Vulnerability · Source |
| CVE-2020-8203 | redhat_vex | nodejs-lodash: prototype pollution in zipObjectDeep function | fixed: 60 known affected: 14 known not affected: 329 | 2026-08-05T02:32:22+00:00 | Vulnerability · Source |
| CVE-2019-16769 | redhat_vex | npm-serialize-javascript: XSS via unsafe characters in serialized regular expressions | fixed: 6 known affected: 3 known not affected: 246 | 2026-08-05T02:31:53+00:00 | Vulnerability · Source |
| CVE-2018-16487 | redhat_vex | lodash: Prototype pollution in utilities function | known affected: 23 known not affected: 7 | 2026-08-05T02:31:17+00:00 | Vulnerability · Source |
| CVE-2020-7660 | redhat_vex | npm-serialize-javascript: allows remote attackers to inject arbitrary code via the function deleteFunctions within index.js | fixed: 6 known affected: 5 known not affected: 2 | 2026-08-05T02:29:39+00:00 | Vulnerability · Source |