VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291932 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-23437 | redhat_vex | xerces-j2: infinite loop when handling specially crafted XML document payloads | fixed: 6 known affected: 21 known not affected: 229 | 2026-08-04T21:35:45+00:00 | Vulnerability · Source |
| CVE-2022-2466 | redhat_vex | smallrye-graphql: Request Context not terminated with GraphQL | known not affected: 1 | 2026-08-04T21:35:43+00:00 | Vulnerability · Source |
| CVE-2022-26520 | redhat_vex | postgresql-jdbc: Arbitrary File Write Vulnerability | fixed: 3 known affected: 8 known not affected: 12 | 2026-08-04T21:35:40+00:00 | Vulnerability · Source |
| CVE-2022-35957 | redhat_vex | grafana: Escalation from admin to server admin when auth proxy is used | fixed: 16 known affected: 27 known not affected: 17 | 2026-08-04T21:35:24+00:00 | Vulnerability · Source |
| CVE-2022-36313 | redhat_vex | file-type: a malformed MKV file could cause the file type detector to get caught in an infinite loop | fixed: 1 known affected: 8 known not affected: 4 | 2026-08-04T21:35:24+00:00 | Vulnerability · Source |
| CVE-2022-36062 | redhat_vex | grafana: Grafana RBAC folders/dashboards privilege escalation | known not affected: 32 | 2026-08-04T21:35:19+00:00 | Vulnerability · Source |
| CVE-2022-3509 | redhat_vex | protobuf-java: Textformat parsing issue leads to DoS | fixed: 3 known affected: 10 known not affected: 19 | 2026-08-04T21:35:01+00:00 | Vulnerability · Source |
| CVE-2022-3171 | redhat_vex | protobuf-java: timeout in parser leads to DoS | fixed: 5 | 2026-08-04T21:34:51+00:00 | Vulnerability · Source |
| CVE-2022-38648 | redhat_vex | batik: Server-Side Request Forgery | fixed: 2 known affected: 8 | 2026-08-04T21:34:50+00:00 | Vulnerability · Source |
| CVE-2022-31130 | redhat_vex | grafana: data source and plugin proxy endpoints leaking authentication tokens to some destination plugins | fixed: 16 known affected: 22 known not affected: 18 | 2026-08-04T21:34:45+00:00 | Vulnerability · Source |
| CVE-2022-36033 | redhat_vex | jsoup: The jsoup cleaner may incorrectly sanitize crafted XSS attempts if SafeList.preserveRelativeLinks is enabled | fixed: 136 known affected: 25 known not affected: 12 | 2026-08-04T21:34:35+00:00 | Vulnerability · Source |
| CVE-2022-31123 | redhat_vex | grafana: plugin signature bypass | fixed: 16 known affected: 24 known not affected: 16 | 2026-08-04T21:34:32+00:00 | Vulnerability · Source |
| CVE-2022-31197 | redhat_vex | postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names | fixed: 5 known affected: 180 known not affected: 8 | 2026-08-04T21:34:30+00:00 | Vulnerability · Source |
| CVE-2022-4304 | redhat_vex | openssl: timing attack in RSA Decryption implementation | fixed: 210 known affected: 17 known not affected: 118 | 2026-08-04T21:34:23+00:00 | Vulnerability · Source |
| CVE-2023-22102 | redhat_vex | mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2023) | known affected: 8 known not affected: 11 | 2026-08-04T21:34:18+00:00 | Vulnerability · Source |
| CVE-2023-22490 | redhat_vex | git: data exfiltration with maliciously crafted repository | fixed: 153 known affected: 33 | 2026-08-04T21:34:08+00:00 | Vulnerability · Source |
| CVE-2022-45787 | redhat_vex | apache-james-mime4j: Temporary File Information Disclosure in MIME4J TempFileStorageProvider | fixed: 399 known affected: 13 known not affected: 883 | 2026-08-04T21:33:58+00:00 | Vulnerability · Source |
| CVE-2023-0466 | redhat_vex | openssl: Certificate policy check not enabled | fixed: 75 known affected: 32 known not affected: 152 | 2026-08-04T21:33:55+00:00 | Vulnerability · Source |
| CVE-2023-20862 | redhat_vex | spring-security: Empty SecurityContext Is Not Properly Saved Upon Logout | fixed: 2 known affected: 12 known not affected: 19 | 2026-08-04T21:33:52+00:00 | Vulnerability · Source |
| CVE-2022-4742 | redhat_vex | json-pointer: prototype pollution in json-pointer | fixed: 1 known affected: 2 | 2026-08-04T21:33:42+00:00 | Vulnerability · Source |
| CVE-2022-4147 | redhat_vex | quarkus-vertx-http: Security misconfiguration of CORS : OWASP A05_2021 level in Quarkus | fixed: 2 | 2026-08-04T21:33:40+00:00 | Vulnerability · Source |
| CVE-2022-4450 | redhat_vex | openssl: double free after calling PEM_read_bio_ex | fixed: 207 known affected: 3 known not affected: 132 | 2026-08-04T21:33:37+00:00 | Vulnerability · Source |
| CVE-2022-39229 | redhat_vex | grafana: using email as a username can block other users from signing in | fixed: 25 known affected: 9 known not affected: 16 | 2026-08-04T21:33:36+00:00 | Vulnerability · Source |
| CVE-2022-41946 | redhat_vex | postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions | fixed: 18 known affected: 12 known not affected: 1994 | 2026-08-04T21:33:31+00:00 | Vulnerability · Source |
| CVE-2022-39201 | redhat_vex | grafana: Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins | fixed: 16 known affected: 22 known not affected: 18 | 2026-08-04T21:33:24+00:00 | Vulnerability · Source |
| CVE-2023-0217 | redhat_vex | openssl: NULL dereference validating DSA public key | fixed: 98 known not affected: 42 | 2026-08-04T21:33:10+00:00 | Vulnerability · Source |
| CVE-2026-44898 | redhat_vex | mistune: Mistune: Arbitrary code execution via HTML injection in table of contents rendering | known affected: 24 | 2026-08-04T21:33:06+00:00 | Vulnerability · Source |
| CVE-2023-0216 | redhat_vex | openssl: invalid pointer dereference in d2i_PKCS7 functions | fixed: 98 known not affected: 42 | 2026-08-04T21:33:05+00:00 | Vulnerability · Source |
| CVE-2022-4203 | redhat_vex | openssl: read buffer overflow in X.509 certificate verification | fixed: 98 known not affected: 42 | 2026-08-04T21:33:02+00:00 | Vulnerability · Source |
| CVE-2023-23946 | redhat_vex | git: git apply: a path outside the working tree can be overwritten with crafted input | fixed: 153 known affected: 33 | 2026-08-04T21:32:57+00:00 | Vulnerability · Source |
| CVE-2023-0401 | redhat_vex | openssl: NULL dereference during PKCS7 data verification | fixed: 98 known not affected: 42 | 2026-08-04T21:32:56+00:00 | Vulnerability · Source |
| CVE-2023-0215 | redhat_vex | openssl: use-after-free following BIO_new_NDEF | fixed: 210 known affected: 22 known not affected: 113 | 2026-08-04T21:32:49+00:00 | Vulnerability · Source |
| CVE-2023-1436 | redhat_vex | jettison: Uncontrolled Recursion in JSONArray | fixed: 36 known affected: 32 known not affected: 2395 | 2026-08-04T21:32:38+00:00 | Vulnerability · Source |
| CVE-2023-1419 | redhat_vex | debezium: script injection via connector parameter | known affected: 1 known not affected: 1 | 2026-08-04T21:32:32+00:00 | Vulnerability · Source |
| CVE-2023-4639 | redhat_vex | undertow: Cookie Smuggling/Spoofing | fixed: 27 known affected: 1 known not affected: 2448 under investigation: 10 | 2026-08-04T21:32:20+00:00 | Vulnerability · Source |
| CVE-2023-34050 | redhat_vex | springframework-amqp: Deserialization Vulnerability | fixed: 1 known affected: 2 known not affected: 4 | 2026-08-04T21:32:19+00:00 | Vulnerability · Source |
| CVE-2023-28709 | redhat_vex | tomcat: Fix for CVE-2023-24998 was incomplete | fixed: 54 known affected: 34 known not affected: 10 | 2026-08-04T21:32:02+00:00 | Vulnerability · Source |
| CVE-2023-41835 | redhat_vex | struts: Excessive disk usage during file upload | known not affected: 29 | 2026-08-04T21:32:00+00:00 | Vulnerability · Source |
| CVE-2024-1979 | redhat_vex | quarkus: information leak in annotation | fixed: 1 known affected: 1 known not affected: 1051 | 2026-08-04T21:31:47+00:00 | Vulnerability · Source |
| CVE-2023-43642 | redhat_vex | snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact | fixed: 3 known affected: 17 known not affected: 2039 | 2026-08-04T21:31:39+00:00 | Vulnerability · Source |
| CVE-2023-6393 | redhat_vex | quarkus: Potential invalid reuse of context when @CacheResult on a Uni is used | fixed: 1 known affected: 1 known not affected: 992 | 2026-08-04T21:31:37+00:00 | Vulnerability · Source |
| CVE-2023-42503 | redhat_vex | apache-commons-compress: Denial of service via CPU consumption for malformed TAR file | known affected: 3 known not affected: 7 | 2026-08-04T21:31:34+00:00 | Vulnerability · Source |
| CVE-2023-6717 | redhat_vex | keycloak: XSS via assertion consumer service URL in SAML POST-binding flow | fixed: 36 known affected: 12 known not affected: 6 | 2026-08-04T21:31:29+00:00 | Vulnerability · Source |
| CVE-2023-6481 | redhat_vex | logback: A serialization vulnerability in logback receiver | fixed: 122 known affected: 14 known not affected: 10 | 2026-08-04T21:31:22+00:00 | Vulnerability · Source |
| CVE-2023-2650 | redhat_vex | openssl: Possible DoS translating ASN.1 object identifiers | fixed: 87 known affected: 35 known not affected: 144 | 2026-08-04T21:31:13+00:00 | Vulnerability · Source |
| CVE-2023-31582 | redhat_vex | jose4j: Insecure iteration count setting | fixed: 3 known affected: 12 known not affected: 1001 | 2026-08-04T21:31:12+00:00 | Vulnerability · Source |
| CVE-2023-5379 | redhat_vex | undertow: AJP Request closes connection exceeding maxRequestSize | fixed: 90 known affected: 7 known not affected: 3 | 2026-08-04T21:31:03+00:00 | Vulnerability · Source |
| CVE-2024-22234 | redhat_vex | spring-security: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated | fixed: 5 known affected: 8 known not affected: 58 | 2026-08-04T21:31:02+00:00 | Vulnerability · Source |
| CVE-2023-51079 | redhat_vex | mvel: TimeOut error when calling ParseTools.subCompileExpression() function | fixed: 1 known not affected: 22 | 2026-08-04T21:30:56+00:00 | Vulnerability · Source |
| CVE-2024-23076 | redhat_vex | jfreechart: Null pointer exception | known not affected: 18 | 2026-08-04T21:30:53+00:00 | Vulnerability · Source |