VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288714 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-41123 | redhat_vex | rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, >] and ]> | fixed: 598 known affected: 80 known not affected: 49 | 2026-08-05T08:55:11+00:00 | Vulnerability · Source |
| CVE-2026-67338 | redhat_vex | jupyterlab: JupyterLab: Stored cross-site scripting in Extension Manager allows arbitrary code execution | known affected: 16 | 2026-08-05T08:55:10+00:00 | Vulnerability · Source |
| CVE-2024-39908 | redhat_vex | rexml: DoS vulnerability in REXML | fixed: 558 known affected: 80 known not affected: 49 | 2026-08-05T08:47:02+00:00 | Vulnerability · Source |
| CVE-2026-12259 | redhat_vex | nltk: nltk: Installation of attacker-controlled packages due to improper checksum validation | known affected: 14 | 2026-08-05T08:43:00+00:00 | Vulnerability · Source |
| CVE-2026-53704 | redhat_vex | gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer FILEINFO metadata parser | fixed: 36 known affected: 2 known not affected: 4 | 2026-08-05T08:42:24+00:00 | Vulnerability · Source |
| CVE-2026-53703 | redhat_vex | gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer audio stream header parser | fixed: 46 known not affected: 4 | 2026-08-05T08:38:52+00:00 | Vulnerability · Source |
| CVE-2025-53020 | redhat_vex | mod_http2: Apache HTTP Server: HTTP/2 DoS by Memory Increase | fixed: 325 known not affected: 63 | 2026-08-05T08:38:19+00:00 | Vulnerability · Source |
| CVE-2026-49975 | redhat_vex | httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack | fixed: 333 known not affected: 110 | 2026-08-05T08:28:51+00:00 | Vulnerability · Source |
| CVE-2026-59939 | redhat_vex | httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies | fixed: 1223 known affected: 45 known not affected: 298 | 2026-08-05T08:28:41+00:00 | Vulnerability · Source |
| CVE-2026-40553 | redhat_vex | gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service | fixed: 4 known affected: 7 known not affected: 1 | 2026-08-05T06:41:20+00:00 | Vulnerability · Source |
| CVE-2026-40468 | redhat_vex | gawk: gawk: Memory corruption via integer overflow | fixed: 4 known affected: 8 | 2026-08-05T06:41:16+00:00 | Vulnerability · Source |
| CVE-2026-40467 | redhat_vex | gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c | fixed: 4 known affected: 8 | 2026-08-05T06:41:15+00:00 | Vulnerability · Source |
| CVE-2026-53910 | redhat_vex | diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations | fixed: 3 known affected: 6 | 2026-08-05T06:28:04+00:00 | Vulnerability · Source |
| CVE-2026-16728 | redhat_vex | undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length | fixed: 8 known affected: 1 known not affected: 4 | 2026-08-05T06:27:44+00:00 | Vulnerability · Source |
| CVE-2026-15157 | redhat_vex | undici: undici: HTTP header injection via unvalidated blob-like body type property | fixed: 8 known affected: 1 known not affected: 4 | 2026-08-05T06:27:41+00:00 | Vulnerability · Source |
| CVE-2026-14643 | redhat_vex | undici: undici: Cross-user information disclosure due to improper Cache-Control directive parsing | fixed: 8 known affected: 1 known not affected: 4 | 2026-08-05T06:27:40+00:00 | Vulnerability · Source |
| CVE-2026-57432 | redhat_vex | perl: Perl: Information disclosure via integer overflow in pack/unpack operations | fixed: 4 known affected: 325 | 2026-08-05T06:27:34+00:00 | Vulnerability · Source |
| CVE-2026-67326 | redhat_vex | gitpython: GitPython: Remote Code Execution via Newline Injection in config_writer() | fixed: 11 known not affected: 1 | 2026-08-05T06:27:31+00:00 | Vulnerability · Source |
| CVE-2026-67321 | redhat_vex | axios: axios: Denial of Service via object serialization bypass | fixed: 9 | 2026-08-05T06:27:15+00:00 | Vulnerability · Source |
| CVE-2026-67320 | redhat_vex | axios: axios: Information disclosure via Prototype Pollution in Node HTTP adapter | fixed: 9 | 2026-08-05T06:27:15+00:00 | Vulnerability · Source |
| CVE-2026-67312 | redhat_vex | axios: axios: Denial of Service via uncontrolled recursion in form data processing | fixed: 9 under investigation: 107 | 2026-08-05T06:27:07+00:00 | Vulnerability · Source |
| CVE-2026-13697 | redhat_vex | undici: undici: Information disclosure and Denial of Service via malformed Cache-Control directives | fixed: 8 known affected: 1 known not affected: 4 | 2026-08-05T06:27:00+00:00 | Vulnerability · Source |
| CVE-2026-34980 | redhat_vex | cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network | fixed: 19 known affected: 14 known not affected: 262 | 2026-08-05T06:05:49+00:00 | Vulnerability · Source |
| CVE-2025-23266 | redhat_vex | nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit | fixed: 42 known affected: 2 known not affected: 14 | 2026-08-05T06:04:33+00:00 | Vulnerability · Source |
| CVE-2022-31684 | redhat_vex | reactor-netty-http: Log request headers in some cases of invalid HTTP requests | fixed: 2 known affected: 7 | 2026-08-05T05:20:21+00:00 | Vulnerability · Source |
| CVE-2022-40156 | redhat_vex | xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks | fixed: 3 known affected: 4 known not affected: 27 | 2026-08-05T05:20:03+00:00 | Vulnerability · Source |
| CVE-2022-42004 | redhat_vex | jackson-databind: use of deeply nested arrays | fixed: 126 known affected: 32 known not affected: 2356 | 2026-08-05T05:19:54+00:00 | Vulnerability · Source |
| CVE-2022-38751 | redhat_vex | snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match | fixed: 21 known affected: 41 known not affected: 1943 | 2026-08-05T05:18:40+00:00 | Vulnerability · Source |
| CVE-2022-42003 | redhat_vex | jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS | fixed: 381 known affected: 31 known not affected: 2355 | 2026-08-05T05:18:21+00:00 | Vulnerability · Source |
| CVE-2022-38752 | redhat_vex | snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode | fixed: 28 known affected: 40 known not affected: 2319 | 2026-08-05T05:18:12+00:00 | Vulnerability · Source |
| CVE-2020-12135 | redhat_vex | bson: integer overflow in bson_ensure_space() parameter bytesNeeded | known not affected: 12 | 2026-08-05T05:18:04+00:00 | Vulnerability · Source |
| CVE-2021-0341 | redhat_vex | okhttp: information disclosure via improperly used cryptographic function | fixed: 19 known affected: 14 known not affected: 46 | 2026-08-05T05:17:52+00:00 | Vulnerability · Source |
| CVE-2022-40152 | redhat_vex | woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks | fixed: 102 known affected: 17 known not affected: 207 | 2026-08-05T05:17:38+00:00 | Vulnerability · Source |
| CVE-2020-7610 | redhat_vex | bson: Deserialization of Untrusted Data could result in Code injection or Excessive CPU load | known not affected: 1 | 2026-08-05T05:17:31+00:00 | Vulnerability · Source |
| CVE-2022-37866 | redhat_vex | Ivy: Ivy Path traversal | fixed: 1 known affected: 13 known not affected: 5 | 2026-08-05T05:17:25+00:00 | Vulnerability · Source |
| CVE-2022-40153 | redhat_vex | xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks | fixed: 1 known affected: 3 known not affected: 29 | 2026-08-05T05:17:21+00:00 | Vulnerability · Source |
| CVE-2022-40151 | redhat_vex | xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks | fixed: 5 known affected: 20 known not affected: 11 | 2026-08-05T05:17:20+00:00 | Vulnerability · Source |
| CVE-2022-40155 | redhat_vex | xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks | fixed: 1 known affected: 4 known not affected: 28 | 2026-08-05T05:17:10+00:00 | Vulnerability · Source |
| CVE-2022-41853 | redhat_vex | hsqldb: Untrusted input may lead to RCE attack | fixed: 500 known affected: 14 known not affected: 359 | 2026-08-05T05:17:05+00:00 | Vulnerability · Source |
| CVE-2022-1471 | redhat_vex | SnakeYaml: Constructor Deserialization Remote Code Execution | fixed: 122 known affected: 28 known not affected: 2407 | 2026-08-05T05:17:01+00:00 | Vulnerability · Source |
| CVE-2022-41966 | redhat_vex | xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow | fixed: 13 known affected: 15 known not affected: 202 | 2026-08-05T05:17:00+00:00 | Vulnerability · Source |
| CVE-2020-36184 | redhat_vex | jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource | fixed: 6 known affected: 11 known not affected: 175 | 2026-08-05T05:12:38+00:00 | Vulnerability · Source |
| CVE-2021-20190 | redhat_vex | jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing | fixed: 6 known affected: 11 known not affected: 174 | 2026-08-05T05:12:34+00:00 | Vulnerability · Source |
| CVE-2020-10969 | redhat_vex | jackson-databind: Serialization gadgets in javax.swing.JEditorPane | fixed: 1371 known affected: 3 known not affected: 4 | 2026-08-05T05:12:31+00:00 | Vulnerability · Source |
| CVE-2020-36189 | redhat_vex | jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource | fixed: 6 known affected: 11 known not affected: 175 | 2026-08-05T05:11:03+00:00 | Vulnerability · Source |
| CVE-2024-29131 | redhat_vex | commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() | fixed: 3 known affected: 9 known not affected: 15 | 2026-08-05T05:08:43+00:00 | Vulnerability · Source |
| CVE-2024-29133 | redhat_vex | commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree | fixed: 3 known affected: 9 known not affected: 15 | 2026-08-05T05:08:39+00:00 | Vulnerability · Source |
| CVE-2024-22371 | redhat_vex | camel-core: Exposure of sensitive data by crafting a malicious EventFactory | fixed: 26 known affected: 9 known not affected: 7 | 2026-08-05T05:08:37+00:00 | Vulnerability · Source |
| CVE-2020-10688 | redhat_vex | RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack | fixed: 769 known affected: 3 | 2026-08-05T05:08:24+00:00 | Vulnerability · Source |
| CVE-2024-25710 | redhat_vex | commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file | fixed: 35 known affected: 11 known not affected: 2061 | 2026-08-05T05:08:21+00:00 | Vulnerability · Source |