VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288712 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-7610 | redhat_vex | bson: Deserialization of Untrusted Data could result in Code injection or Excessive CPU load | known not affected: 1 | 2026-08-05T05:17:31+00:00 | Vulnerability · Source |
| CVE-2022-37866 | redhat_vex | Ivy: Ivy Path traversal | fixed: 1 known affected: 13 known not affected: 5 | 2026-08-05T05:17:25+00:00 | Vulnerability · Source |
| CVE-2022-40153 | redhat_vex | xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks | fixed: 1 known affected: 3 known not affected: 29 | 2026-08-05T05:17:21+00:00 | Vulnerability · Source |
| CVE-2022-40151 | redhat_vex | xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks | fixed: 5 known affected: 20 known not affected: 11 | 2026-08-05T05:17:20+00:00 | Vulnerability · Source |
| CVE-2022-40155 | redhat_vex | xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks | fixed: 1 known affected: 4 known not affected: 28 | 2026-08-05T05:17:10+00:00 | Vulnerability · Source |
| CVE-2022-41853 | redhat_vex | hsqldb: Untrusted input may lead to RCE attack | fixed: 500 known affected: 14 known not affected: 359 | 2026-08-05T05:17:05+00:00 | Vulnerability · Source |
| CVE-2022-1471 | redhat_vex | SnakeYaml: Constructor Deserialization Remote Code Execution | fixed: 122 known affected: 28 known not affected: 2407 | 2026-08-05T05:17:01+00:00 | Vulnerability · Source |
| CVE-2022-41966 | redhat_vex | xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow | fixed: 13 known affected: 15 known not affected: 202 | 2026-08-05T05:17:00+00:00 | Vulnerability · Source |
| CVE-2020-36184 | redhat_vex | jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource | fixed: 6 known affected: 11 known not affected: 175 | 2026-08-05T05:12:38+00:00 | Vulnerability · Source |
| CVE-2021-20190 | redhat_vex | jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing | fixed: 6 known affected: 11 known not affected: 174 | 2026-08-05T05:12:34+00:00 | Vulnerability · Source |
| CVE-2020-10969 | redhat_vex | jackson-databind: Serialization gadgets in javax.swing.JEditorPane | fixed: 1371 known affected: 3 known not affected: 4 | 2026-08-05T05:12:31+00:00 | Vulnerability · Source |
| CVE-2020-36189 | redhat_vex | jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource | fixed: 6 known affected: 11 known not affected: 175 | 2026-08-05T05:11:03+00:00 | Vulnerability · Source |
| CVE-2024-29131 | redhat_vex | commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() | fixed: 3 known affected: 9 known not affected: 15 | 2026-08-05T05:08:43+00:00 | Vulnerability · Source |
| CVE-2024-29133 | redhat_vex | commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree | fixed: 3 known affected: 9 known not affected: 15 | 2026-08-05T05:08:39+00:00 | Vulnerability · Source |
| CVE-2024-22371 | redhat_vex | camel-core: Exposure of sensitive data by crafting a malicious EventFactory | fixed: 26 known affected: 9 known not affected: 7 | 2026-08-05T05:08:37+00:00 | Vulnerability · Source |
| CVE-2020-10688 | redhat_vex | RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack | fixed: 769 known affected: 3 | 2026-08-05T05:08:24+00:00 | Vulnerability · Source |
| CVE-2024-25710 | redhat_vex | commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file | fixed: 35 known affected: 11 known not affected: 2061 | 2026-08-05T05:08:21+00:00 | Vulnerability · Source |
| CVE-2020-14338 | redhat_vex | wildfly: XML validation manipulation due to incomplete application of use-grammar-pool-only in xercesImpl | fixed: 374 known affected: 12 known not affected: 1 | 2026-08-05T05:08:15+00:00 | Vulnerability · Source |
| CVE-2024-26308 | redhat_vex | commons-compress: OutOfMemoryError unpacking broken Pack200 file | fixed: 48 known affected: 11 known not affected: 2061 | 2026-08-05T05:08:07+00:00 | Vulnerability · Source |
| CVE-2019-14892 | redhat_vex | jackson-databind: Serialization gadgets in classes of the commons-configuration package | fixed: 313 known affected: 24 known not affected: 6 | 2026-08-05T05:07:56+00:00 | Vulnerability · Source |
| CVE-2019-11939 | redhat_vex | thrift: Resource exhaustion via containers sizes messages | known affected: 3 known not affected: 43 | 2026-08-05T05:07:52+00:00 | Vulnerability · Source |
| CVE-2020-14195 | redhat_vex | jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory | fixed: 1347 known affected: 21 known not affected: 9 | 2026-08-05T05:07:33+00:00 | Vulnerability · Source |
| CVE-2024-29025 | redhat_vex | netty-codec-http: Allocation of Resources Without Limits or Throttling | fixed: 544 known affected: 17 known not affected: 2392 | 2026-08-05T05:07:31+00:00 | Vulnerability · Source |
| CVE-2020-1953 | redhat_vex | apache-commons-configuration: uncontrolled class instantiation when loading YAML files | fixed: 2 known affected: 2 known not affected: 17 | 2026-08-05T05:07:21+00:00 | Vulnerability · Source |
| CVE-2024-43398 | redhat_vex | rexml: DoS vulnerability in REXML | fixed: 598 known affected: 144 known not affected: 54 | 2026-08-05T05:00:08+00:00 | Vulnerability · Source |
| CVE-2026-48706 | redhat_vex | envoy: Envoy Heap Buffer Overflow in TcpStatsdSink | fixed: 12 known affected: 1 known not affected: 63 | 2026-08-05T04:45:59+00:00 | Vulnerability · Source |
| CVE-2026-47221 | redhat_vex | envoy: Envoy: Null pointer deref in internal redirects | fixed: 16 known affected: 1 known not affected: 84 | 2026-08-05T04:45:56+00:00 | Vulnerability · Source |
| CVE-2026-47204 | redhat_vex | envoy: Envoy: Denial of Service via Connect protocol request | fixed: 16 known affected: 1 known not affected: 84 | 2026-08-05T04:45:53+00:00 | Vulnerability · Source |
| CVE-2026-48743 | redhat_vex | envoy: Envoy: Request desynchronization allows security policy bypass via HTTP/3 to HTTP/1 translation | fixed: 8 known affected: 1 known not affected: 42 | 2026-08-05T04:43:54+00:00 | Vulnerability · Source |
| CVE-2026-48044 | redhat_vex | Envoy: Envoy: Denial of Service via specially crafted zstd payload | fixed: 16 known affected: 1 known not affected: 84 | 2026-08-05T04:43:51+00:00 | Vulnerability · Source |
| CVE-2026-48042 | redhat_vex | envoy: Envoy: Denial of Service via deeply nested JSON objects | fixed: 16 known affected: 1 known not affected: 84 | 2026-08-05T04:43:48+00:00 | Vulnerability · Source |
| CVE-2024-57850 | redhat_vex | kernel: jffs2: Prevent rtime decompress memory corruption | known not affected: 198 | 2026-08-05T03:52:59+00:00 | Vulnerability · Source |
| CVE-2024-56653 | redhat_vex | kernel: Bluetooth: btmtk: avoid UAF in btmtk_process_coredump | fixed: 305 known affected: 22 known not affected: 166 | 2026-08-05T03:52:56+00:00 | Vulnerability · Source |
| CVE-2024-56655 | redhat_vex | kernel: netfilter: nf_tables: do not defer rule destruction via call_rcu | known affected: 28 known not affected: 170 | 2026-08-05T03:52:56+00:00 | Vulnerability · Source |
| CVE-2024-56557 | redhat_vex | kernel: iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer | known not affected: 198 | 2026-08-05T03:52:55+00:00 | Vulnerability · Source |
| CVE-2024-53207 | redhat_vex | kernel: Bluetooth: MGMT: Fix possible deadlocks | known affected: 136 known not affected: 62 | 2026-08-05T03:52:52+00:00 | Vulnerability · Source |
| CVE-2024-53121 | redhat_vex | kernel: net/mlx5: fs, lock FTE when checking if active | fixed: 305 known affected: 98 known not affected: 14 | 2026-08-05T03:52:51+00:00 | Vulnerability · Source |
| CVE-2024-53122 | redhat_vex | kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust | fixed: 1654 known affected: 22 known not affected: 43 | 2026-08-05T03:52:51+00:00 | Vulnerability · Source |
| CVE-2024-52319 | redhat_vex | kernel: mm: use aligned address in clear_gigantic_page() | known affected: 42 known not affected: 156 | 2026-08-05T03:52:49+00:00 | Vulnerability · Source |
| CVE-2024-50301 | redhat_vex | kernel: security/keys: fix slab-out-of-bounds in key_task_permission | fixed: 455 known affected: 64 | 2026-08-05T03:52:48+00:00 | Vulnerability · Source |
| CVE-2024-50090 | redhat_vex | kernel: drm/xe/oa: Fix overflow in oa batch buffer | known not affected: 198 | 2026-08-05T03:52:46+00:00 | Vulnerability · Source |
| CVE-2024-50117 | redhat_vex | kernel: drm/amd: Guard against bad data for ATIF ACPI method | fixed: 305 known affected: 98 known not affected: 14 | 2026-08-05T03:52:46+00:00 | Vulnerability · Source |
| CVE-2024-49982 | redhat_vex | kernel: aoe: fix the potential use-after-free problem in more places | known not affected: 198 | 2026-08-05T03:52:45+00:00 | Vulnerability · Source |
| CVE-2024-47658 | redhat_vex | kernel: crypto: stm32/cryp - call finalize with bh disabled | known not affected: 198 | 2026-08-05T03:52:44+00:00 | Vulnerability · Source |
| CVE-2024-42276 | redhat_vex | kernel: nvme-pci: add missing condition check for existence of mapped data | fixed: 280 known affected: 50 known not affected: 70 | 2026-08-05T03:52:41+00:00 | Vulnerability · Source |
| CVE-2024-42110 | redhat_vex | kernel: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() | fixed: 279 known affected: 98 known not affected: 14 | 2026-08-05T03:52:41+00:00 | Vulnerability · Source |
| CVE-2024-35948 | redhat_vex | kernel: bcachefs: Check for journal entries overruning end of sb clean section | known not affected: 198 | 2026-08-05T03:52:40+00:00 | Vulnerability · Source |
| CVE-2024-41060 | redhat_vex | kernel: drm/radeon: check bo_va->bo is non-NULL before using it | fixed: 709 known affected: 64 known not affected: 8 | 2026-08-05T03:52:40+00:00 | Vulnerability · Source |
| CVE-2024-26611 | redhat_vex | kernel: xsk: fix usage of multi-buffer BPF helpers for ZC XDP | fixed: 280 known affected: 54 known not affected: 66 | 2026-08-05T03:52:35+00:00 | Vulnerability · Source |
| CVE-2024-27431 | redhat_vex | kernel: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program | fixed: 280 known affected: 64 known not affected: 8 under investigation: 48 | 2026-08-05T03:52:35+00:00 | Vulnerability · Source |