VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291911 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-16297 | redhat_vex | ghostscript: buffer overflow in FloydSteinbergDitheringC() in contrib/gdevbjca.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:59+00:00 | Vulnerability · Source |
| CVE-2020-16296 | redhat_vex | ghostscript: buffer overflow in GetNumWrongData() in contrib/lips4/gdevlips.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:55+00:00 | Vulnerability · Source |
| CVE-2020-16295 | redhat_vex | ghostscript: NULL pointer dereference in clj_media_size() in devices/gdevclj.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:54+00:00 | Vulnerability · Source |
| CVE-2020-16294 | redhat_vex | ghostscript: buffer overflow in epsc_print_page() in devices/gdevepsc.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:50+00:00 | Vulnerability · Source |
| CVE-2020-16293 | redhat_vex | ghostscript: NULL pointer dereference in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:46+00:00 | Vulnerability · Source |
| CVE-2020-16292 | redhat_vex | ghostscript: buffer overflow in mj_raster_cmd() in contrib/japanese/gdevmjc.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:46+00:00 | Vulnerability · Source |
| CVE-2020-16291 | redhat_vex | ghostscript: buffer overflow in contrib/gdevdj9.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:40+00:00 | Vulnerability · Source |
| CVE-2020-16290 | redhat_vex | ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:36+00:00 | Vulnerability · Source |
| CVE-2020-16287 | redhat_vex | ghostscript: buffer overflow in lprn_is_black() in contrib/lips4/gdevlprn.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:33+00:00 | Vulnerability · Source |
| CVE-2020-14388 | redhat_vex | 3scale-system: member role permissions bypass when editing services | known affected: 1 | 2026-08-08T16:39:31+00:00 | Vulnerability · Source |
| CVE-2020-14379 | redhat_vex | broker: XXE injection in configuration files | known affected: 1 | 2026-08-08T16:39:27+00:00 | Vulnerability · Source |
| CVE-2020-14373 | redhat_vex | ghostscript: use-after-free vulnerability in igc_reloc_struct_ptr() could result in DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:24+00:00 | Vulnerability · Source |
| CVE-2020-10727 | redhat_vex | broker: resetUsers operation stores password in plain text | fixed: 1 | 2026-08-08T16:39:20+00:00 | Vulnerability · Source |
| CVE-2017-16853 | redhat_vex | opensaml: The DynamicMetadataProvider class does not perform various security checks | known not affected: 7 | 2026-08-08T16:39:09+00:00 | Vulnerability · Source |
| CVE-2011-1497 | redhat_vex | rubygem-actionpack: Cross-site scripting in auto_link function | known not affected: 7 | 2026-08-08T16:39:08+00:00 | Vulnerability · Source |
| CVE-2019-3881 | redhat_vex | rubygem-bundler: Insecure permissions on directory in /tmp/ allows for execution of malicious code | fixed: 247 known affected: 6 known not affected: 34 | 2026-08-08T16:38:34+00:00 | Vulnerability · Source |
| CVE-2016-5682 | redhat_vex | hawtio-swagger-ui: XSS vulnerability in Definitions section | known affected: 3 under investigation: 1 | 2026-08-08T16:38:22+00:00 | Vulnerability · Source |
| CVE-2026-64570 | redhat_vex | kernel: wifi: mac80211: fix fils_discovery double free on alloc failure | known affected: 198 known not affected: 76 | 2026-08-08T16:35:14+00:00 | Vulnerability · Source |
| CVE-2026-64576 | redhat_vex | kernel: nexthop: initialize extack in nh_res_bucket_migrate() | known affected: 184 known not affected: 90 | 2026-08-08T16:35:12+00:00 | Vulnerability · Source |
| CVE-2026-64567 | redhat_vex | kernel: btrfs: reject free space cache with more entries than pages | known affected: 118 known not affected: 156 | 2026-08-08T16:35:09+00:00 | Vulnerability · Source |
| CVE-2026-64574 | redhat_vex | kernel: wifi: mac80211: tear down new links on vif update error path | known affected: 232 known not affected: 42 | 2026-08-08T16:34:58+00:00 | Vulnerability · Source |
| CVE-2026-64577 | redhat_vex | kernel: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() | known not affected: 274 | 2026-08-08T16:34:55+00:00 | Vulnerability · Source |
| CVE-2026-64575 | redhat_vex | kernel: bpf: tcp: fix double sock release on batch realloc | known not affected: 274 | 2026-08-08T16:34:52+00:00 | Vulnerability · Source |
| CVE-2024-21529 | redhat_vex | dset: Prototype Pollution | fixed: 1 known not affected: 4 | 2026-08-08T16:31:52+00:00 | Vulnerability · Source |
| CVE-2024-41818 | redhat_vex | fast-xml-parser: ReDOS at currency parsing in currency.js | fixed: 15 known affected: 5 known not affected: 390 | 2026-08-08T16:31:52+00:00 | Vulnerability · Source |
| CVE-2023-45133 | redhat_vex | babel: arbitrary code execution | known affected: 3 known not affected: 7 | 2026-08-08T16:31:45+00:00 | Vulnerability · Source |
| CVE-2022-4361 | redhat_vex | RHSSO: XSS due to lax URI scheme validation | fixed: 13 | 2026-08-08T16:31:39+00:00 | Vulnerability · Source |
| CVE-2021-44549 | redhat_vex | angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication | fixed: 18 known affected: 3 known not affected: 3 | 2026-08-08T16:31:36+00:00 | Vulnerability · Source |
| CVE-2021-31162 | redhat_vex | rust: double free in Vec::from_iter function if freeing the element panics | fixed: 140 known not affected: 16 | 2026-08-08T16:31:03+00:00 | Vulnerability · Source |
| CVE-2021-28879 | redhat_vex | rust: integer overflow in the Zip implementation can lead to a buffer overflow | fixed: 140 known not affected: 16 | 2026-08-08T16:30:59+00:00 | Vulnerability · Source |
| CVE-2021-28878 | redhat_vex | rust: memory safety violation in Zip implementation when next_back() and next() are used together | fixed: 140 known not affected: 16 | 2026-08-08T16:30:50+00:00 | Vulnerability · Source |
| CVE-2021-28877 | redhat_vex | rust: memory safety violation in Zip implementation for nested iter::Zips | fixed: 140 known not affected: 16 | 2026-08-08T16:30:44+00:00 | Vulnerability · Source |
| CVE-2021-28875 | redhat_vex | rust: heap-based buffer overflow in read_to_end() because it does not validate the return value from Read in an unsafe context | fixed: 140 known not affected: 16 | 2026-08-08T16:30:38+00:00 | Vulnerability · Source |
| CVE-2020-36323 | redhat_vex | rust: optimization for joining strings can cause uninitialized bytes to be exposed | fixed: 140 known not affected: 16 | 2026-08-08T16:30:34+00:00 | Vulnerability · Source |
| CVE-2024-5971 | redhat_vex | undertow: response write hangs in case of Java 17 TLSv1.3 NewSessionTicket | fixed: 11 known affected: 6 known not affected: 220 | 2026-08-08T16:25:26+00:00 | Vulnerability · Source |
| CVE-2023-34981 | redhat_vex | tomcat: response headers from the previous request leading to an information leak | known affected: 22 known not affected: 26 | 2026-08-08T16:25:24+00:00 | Vulnerability · Source |
| CVE-2023-5384 | redhat_vex | infinispan: Credentials returned from configuration as clear text | fixed: 1 | 2026-08-08T16:25:22+00:00 | Vulnerability · Source |
| CVE-2019-9517 | redhat_vex | HTTP/2: request for large response leads to denial of service | fixed: 840 known affected: 5 known not affected: 112 | 2026-08-08T16:25:19+00:00 | Vulnerability · Source |
| CVE-2019-9516 | redhat_vex | HTTP/2: 0-length headers lead to denial of service | fixed: 891 known affected: 5 known not affected: 116 | 2026-08-08T16:25:17+00:00 | Vulnerability · Source |
| CVE-2019-9513 | redhat_vex | HTTP/2: flood using PRIORITY frames results in excessive resource consumption | fixed: 1213 known affected: 2 known not affected: 98 | 2026-08-08T16:25:11+00:00 | Vulnerability · Source |
| CVE-2019-5443 | redhat_vex | curl: Windows OpenSSL engine code injection | known not affected: 29 | 2026-08-08T16:25:08+00:00 | Vulnerability · Source |
| CVE-2023-25690 | redhat_vex | httpd: HTTP request splitting with mod_rewrite and mod_proxy | fixed: 693 known affected: 1 known not affected: 103 | 2026-08-08T16:20:06+00:00 | Vulnerability · Source |
| CVE-2020-25649 | redhat_vex | jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) | fixed: 325 known affected: 26 known not affected: 134 | 2026-08-08T16:20:04+00:00 | Vulnerability · Source |
| CVE-2020-10746 | redhat_vex | Infinispan: REST and HotRod APIs unsecured locally by default | fixed: 1 known affected: 3 known not affected: 3 | 2026-08-08T16:20:03+00:00 | Vulnerability · Source |
| CVE-2018-25032 | redhat_vex | zlib: A flaw found in zlib when compressing (not decompressing) certain inputs | fixed: 467 known not affected: 26 | 2026-08-08T16:19:59+00:00 | Vulnerability · Source |
| CVE-2023-0456 | redhat_vex | APICast: APICast proxies the API call with incorrect JWT token to the API backend without proper authorization check | known affected: 1 | 2026-08-08T16:15:31+00:00 | Vulnerability · Source |
| CVE-2021-31597 | redhat_vex | xmlhttprequest-ssl: SSL certificate validation disabled by default | known affected: 1 known not affected: 1 | 2026-08-08T16:15:28+00:00 | Vulnerability · Source |
| CVE-2021-26118 | redhat_vex | 7: OpenWire can create destinations with an unpriviledged user | fixed: 2 known affected: 1 | 2026-08-08T16:15:26+00:00 | Vulnerability · Source |
| CVE-2021-3442 | redhat_vex | RHOAM: XSS in 3scale at various places | fixed: 10 | 2026-08-08T16:15:23+00:00 | Vulnerability · Source |
| CVE-2020-36327 | redhat_vex | rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source | fixed: 435 known affected: 5 known not affected: 1054 | 2026-08-08T16:15:21+00:00 | Vulnerability · Source |