VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304162 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-1635 | redhat_vex | undertow: Out-of-memory Error after several closed connections with wildfly-http-client protocol | fixed: 109 known affected: 4 known not affected: 2455 | 2026-10-02T03:00:47+00:00 | Vulnerability · Source |
| CVE-2023-46589 | redhat_vex | tomcat: HTTP request smuggling via malformed trailer headers | fixed: 105 known affected: 13 known not affected: 30 | 2026-10-02T03:00:46+00:00 | Vulnerability · Source |
| CVE-2023-36479 | redhat_vex | jetty: Improper addition of quotation marks to user inputs in CgiServlet | fixed: 25 known affected: 43 known not affected: 1952 under investigation: 1 | 2026-10-02T03:00:44+00:00 | Vulnerability · Source |
| CVE-2023-36478 | redhat_vex | jetty: hpack header values cause denial of service in http/2 | fixed: 2 known affected: 11 known not affected: 44 | 2026-10-02T03:00:43+00:00 | Vulnerability · Source |
| CVE-2023-3223 | redhat_vex | undertow: OutOfMemoryError due to @MultipartConfig handling | fixed: 109 known affected: 7 known not affected: 2378 | 2026-10-02T03:00:42+00:00 | Vulnerability · Source |
| CVE-2026-102825 | redhat_vex | russh: russh: Authentication attempt limit bypass via unenforced maximum authentication attempts | fixed: 7 | 2026-10-02T02:27:49+00:00 | Vulnerability · Source |
| CVE-2026-35388 | redhat_vex | OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions | fixed: 965 known affected: 19 known not affected: 160 | 2026-10-02T02:27:45+00:00 | Vulnerability · Source |
| CVE-2026-35387 | redhat_vex | OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage | fixed: 968 known affected: 19 known not affected: 157 | 2026-10-02T02:27:42+00:00 | Vulnerability · Source |
| CVE-2026-35386 | redhat_vex | OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username | fixed: 963 known affected: 19 known not affected: 162 | 2026-10-02T02:27:40+00:00 | Vulnerability · Source |
| CVE-2026-5419 | redhat_vex | gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal | fixed: 347 known affected: 13 known not affected: 37 | 2026-10-02T02:27:38+00:00 | Vulnerability · Source |
| CVE-2024-34459 | redhat_vex | libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c | fixed: 467 known affected: 10 known not affected: 2 | 2026-10-02T02:27:33+00:00 | Vulnerability · Source |
| CVE-2025-6170 | redhat_vex | libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling | fixed: 347 known affected: 13 known not affected: 5 | 2026-10-02T02:27:30+00:00 | Vulnerability · Source |
| CVE-2026-54786 | redhat_vex | Wasmtime: Wasmtime: Leak in WASIp1 `fd_renumber` implementation | known affected: 2 known not affected: 1 | 2026-10-02T02:27:16+00:00 | Vulnerability · Source |
| CVE-2026-13574 | redhat_vex | llvm: llvm-project: LLVM: Denial of service via heap-based buffer overflow in Bitcode File Handler | fixed: 8 known affected: 63 known not affected: 66 | 2026-10-02T02:27:14+00:00 | Vulnerability · Source |
| CVE-2026-13573 | redhat_vex | llvm: llvm: Denial of Service via stack-based buffer overflow in StringMap::insert | fixed: 8 known affected: 145 known not affected: 1 | 2026-10-02T02:27:10+00:00 | Vulnerability · Source |
| CVE-2025-21976 | redhat_vex | kernel: fbdev: hyperv_fb: Allow graceful removal of framebuffer | fixed: 309 known affected: 92 known not affected: 106 | 2026-10-02T02:27:07+00:00 | Vulnerability · Source |
| CVE-2024-26844 | redhat_vex | kernel: block: Fix WARNING in _copy_from_iter | known affected: 44 known not affected: 154 | 2026-10-02T02:27:06+00:00 | Vulnerability · Source |
| CVE-2023-52828 | redhat_vex | kernel: bpf: Detect IP == ksym.end as part of BPF program | known affected: 2 known not affected: 196 | 2026-10-02T02:27:01+00:00 | Vulnerability · Source |
| CVE-2022-48662 | redhat_vex | kernel: drm/i915/gem: Really move i915_gem_context.link under ref protection | known affected: 92 known not affected: 106 | 2026-10-02T02:26:59+00:00 | Vulnerability · Source |
| CVE-2022-48658 | redhat_vex | kernel: mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context. | known affected: 78 known not affected: 120 | 2026-10-02T02:26:56+00:00 | Vulnerability · Source |
| CVE-2022-48657 | redhat_vex | kernel: arm64: topology: fix possible overflow in amu_fie_setup() | known affected: 2 known not affected: 196 | 2026-10-02T02:26:51+00:00 | Vulnerability · Source |
| CVE-2022-48639 | redhat_vex | kernel: net: sched: fix possible refcount leak in tc_new_tfilter() | known affected: 92 known not affected: 106 | 2026-10-02T02:26:46+00:00 | Vulnerability · Source |
| CVE-2022-48640 | redhat_vex | kernel: bonding: fix NULL deref in bond_rr_gen_slave_id | known affected: 92 known not affected: 106 | 2026-10-02T02:26:46+00:00 | Vulnerability · Source |
| CVE-2021-47422 | redhat_vex | kernel: drm/nouveau/kms/nv50-: fix file release memory leak | known affected: 44 known not affected: 154 | 2026-10-02T02:26:41+00:00 | Vulnerability · Source |
| CVE-2021-47380 | redhat_vex | kernel: HID: amd_sfh: Fix potential NULL pointer dereference | known affected: 78 known not affected: 120 | 2026-10-02T02:26:40+00:00 | Vulnerability · Source |
| CVE-2021-47327 | redhat_vex | kernel: iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails | known affected: 50 known not affected: 148 | 2026-10-02T02:26:36+00:00 | Vulnerability · Source |
| CVE-2021-47325 | redhat_vex | kernel: iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation | known affected: 50 known not affected: 148 | 2026-10-02T02:26:31+00:00 | Vulnerability · Source |
| CVE-2021-47272 | redhat_vex | kernel: usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL | known affected: 2 known not affected: 196 | 2026-10-02T02:26:31+00:00 | Vulnerability · Source |
| CVE-2021-47266 | redhat_vex | kernel: RDMA/ipoib: Fix warning caused by destroying non-initial netns | known affected: 92 known not affected: 106 | 2026-10-02T02:26:27+00:00 | Vulnerability · Source |
| CVE-2021-47261 | redhat_vex | kernel: IB/mlx5: Fix initializing CQ fragments buffer | known affected: 92 known not affected: 106 | 2026-10-02T02:26:26+00:00 | Vulnerability · Source |
| CVE-2021-47250 | redhat_vex | kernel: net: ipv4: fix memory leak in netlbl_cipsov4_add_std | known affected: 92 known not affected: 106 | 2026-10-02T02:26:25+00:00 | Vulnerability · Source |
| CVE-2021-47241 | redhat_vex | kernel: ethtool: strset: fix message length calculation | known affected: 50 known not affected: 148 | 2026-10-02T02:24:35+00:00 | Vulnerability · Source |
| CVE-2021-47033 | redhat_vex | kernel: mt76: mt7615: fix tx skb dma unmap | known affected: 44 known not affected: 154 | 2026-10-02T02:24:34+00:00 | Vulnerability · Source |
| CVE-2021-47020 | redhat_vex | kernel: soundwire: stream: fix memory leak in stream config error path | known affected: 92 known not affected: 106 | 2026-10-02T02:24:29+00:00 | Vulnerability · Source |
| CVE-2021-46923 | redhat_vex | kernel: fs/mount_setattr: always cleanup mount_kattr | known affected: 44 known not affected: 154 | 2026-10-02T02:24:24+00:00 | Vulnerability · Source |
| CVE-2021-46920 | redhat_vex | kernel: clobbering of SWERR overflow bit on writeback | known affected: 50 known not affected: 148 | 2026-10-02T02:24:22+00:00 | Vulnerability · Source |
| CVE-2021-46918 | redhat_vex | kernel: MSIX permission entry on shutdown | known affected: 50 known not affected: 148 | 2026-10-02T02:24:20+00:00 | Vulnerability · Source |
| CVE-2026-102010 | redhat_vex | gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if | fixed: 83 known affected: 270 known not affected: 22 | 2026-10-02T02:22:52+00:00 | Vulnerability · Source |
| CVE-2026-102821 | redhat_vex | russh: russh: Denial of Service via unbounded memory exhaustion during stalled key renegotiation | fixed: 7 | 2026-10-02T02:22:47+00:00 | Vulnerability · Source |
| CVE-2026-102824 | redhat_vex | russh: russh: Cryptographic fallback bypass via missing public key validation | fixed: 7 | 2026-10-02T02:22:45+00:00 | Vulnerability · Source |
| CVE-2026-54411 | redhat_vex | linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module | fixed: 384 known affected: 5 | 2026-10-02T02:20:23+00:00 | Vulnerability · Source |
| CVE-2026-48864 | redhat_vex | libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data | fixed: 617 known affected: 1 known not affected: 503 | 2026-10-02T02:20:22+00:00 | Vulnerability · Source |
| CVE-2026-46483 | redhat_vex | vim: command injection when decompressing .tgz archives | fixed: 489 known affected: 1 known not affected: 206 | 2026-10-02T02:20:19+00:00 | Vulnerability · Source |
| CVE-2026-44431 | redhat_vex | urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers | fixed: 760 known affected: 44 known not affected: 1342 | 2026-10-02T02:20:16+00:00 | Vulnerability · Source |
| CVE-2026-42015 | redhat_vex | gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling | fixed: 816 known affected: 7 known not affected: 63 under investigation: 1 | 2026-10-02T02:20:15+00:00 | Vulnerability · Source |
| CVE-2026-42014 | redhat_vex | gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin | fixed: 816 known affected: 7 known not affected: 63 under investigation: 1 | 2026-10-02T02:20:12+00:00 | Vulnerability · Source |
| CVE-2026-42013 | redhat_vex | gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name | fixed: 833 known affected: 6 known not affected: 63 under investigation: 1 | 2026-10-02T02:20:09+00:00 | Vulnerability · Source |
| CVE-2026-42012 | redhat_vex | gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs | fixed: 816 known affected: 7 known not affected: 63 under investigation: 1 | 2026-10-02T02:20:07+00:00 | Vulnerability · Source |
| CVE-2026-42011 | redhat_vex | gnutls: gnutls: Security bypass due to incorrect name constraint handling | fixed: 833 known affected: 1 known not affected: 68 under investigation: 1 | 2026-10-02T02:20:03+00:00 | Vulnerability · Source |
| CVE-2026-41989 | redhat_vex | Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext | fixed: 212 known not affected: 204 | 2026-10-02T02:20:02+00:00 | Vulnerability · Source |