VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291932 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-34042 | redhat_vex | spring-security-config: Incorrect Permission Assignment for spring-security.xsd | known affected: 11 known not affected: 7 | 2026-08-04T21:30:52+00:00 | Vulnerability · Source |
| CVE-2024-1023 | redhat_vex | io.vertx/vertx-core: memory leak due to the use of Netty FastThreadLocal data structures in Vertx | fixed: 18 known affected: 8 known not affected: 1065 | 2026-08-04T21:30:47+00:00 | Vulnerability · Source |
| CVE-2023-6378 | redhat_vex | logback: serialization vulnerability in logback receiver | fixed: 6 known affected: 16 known not affected: 43 | 2026-08-04T21:30:44+00:00 | Vulnerability · Source |
| CVE-2023-51775 | redhat_vex | jose4j: denial of service via specially crafted JWE | fixed: 151 known affected: 9 known not affected: 7 | 2026-08-04T21:30:42+00:00 | Vulnerability · Source |
| CVE-2024-1300 | redhat_vex | io.vertx:vertx-core: memory leak when a TCP server is configured with TLS and SNI support | fixed: 33 known affected: 8 known not affected: 1064 | 2026-08-04T21:30:37+00:00 | Vulnerability · Source |
| CVE-2023-5590 | redhat_vex | selenium: potential null pointer access in CookieManager | known affected: 3 known not affected: 10 | 2026-08-04T21:30:36+00:00 | Vulnerability · Source |
| CVE-2023-33202 | redhat_vex | bc-java: Out of memory while parsing ASN.1 crafted data in org.bouncycastle.openssl.PEMParser class | fixed: 1 known affected: 18 known not affected: 31 under investigation: 2 | 2026-08-04T21:30:13+00:00 | Vulnerability · Source |
| CVE-2023-34454 | redhat_vex | snappy-java: Integer overflow in compress leads to DoS | fixed: 2 known affected: 18 known not affected: 995 | 2026-08-04T21:30:12+00:00 | Vulnerability · Source |
| CVE-2023-34453 | redhat_vex | snappy-java: Integer overflow in shuffle leads to DoS | fixed: 2 known affected: 8 known not affected: 1005 | 2026-08-04T21:29:53+00:00 | Vulnerability · Source |
| CVE-2024-22201 | redhat_vex | jetty: stop accepting new connections from valid clients | fixed: 18 known affected: 44 known not affected: 7 | 2026-08-04T21:29:49+00:00 | Vulnerability · Source |
| CVE-2023-5363 | redhat_vex | openssl: Incorrect cipher key and IV length processing | fixed: 246 known not affected: 42 | 2026-08-04T21:29:46+00:00 | Vulnerability · Source |
| CVE-2023-2974 | redhat_vex | quarkus-core: TLS protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported TLS protocol | fixed: 2 known affected: 1 known not affected: 877 | 2026-08-04T21:29:45+00:00 | Vulnerability · Source |
| CVE-2023-7272 | redhat_vex | parsson: stack overflow when parsing deeply nested input | known affected: 2 known not affected: 11 | 2026-08-04T21:29:39+00:00 | Vulnerability · Source |
| CVE-2023-45853 | redhat_vex | zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6 | fixed: 1 known affected: 15 known not affected: 11 | 2026-08-04T21:29:36+00:00 | Vulnerability · Source |
| CVE-2024-12397 | redhat_vex | io.quarkus.http/quarkus-http-core: Quarkus HTTP Cookie Smuggling | fixed: 24 known affected: 10 known not affected: 2 | 2026-08-04T21:29:34+00:00 | Vulnerability · Source |
| CVE-2023-5675 | redhat_vex | quarkus: Authorization flaw in Quarkus RestEasy Reactive and Classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used. | fixed: 4 known affected: 10 known not affected: 2041 | 2026-08-04T21:29:28+00:00 | Vulnerability · Source |
| CVE-2024-12798 | redhat_vex | logback-core: arbitrary code execution via JaninoEventEvaluator | fixed: 1 known affected: 14 known not affected: 5 | 2026-08-04T21:29:22+00:00 | Vulnerability · Source |
| CVE-2024-23081 | redhat_vex | threetenbp: null pointer exception | fixed: 1 known affected: 6 known not affected: 8 | 2026-08-04T21:28:45+00:00 | Vulnerability · Source |
| CVE-2024-38809 | redhat_vex | org.springframework:spring-web: Spring Framework DoS via conditional HTTP request | fixed: 1 known affected: 6 known not affected: 9 | 2026-08-04T21:28:27+00:00 | Vulnerability · Source |
| CVE-2024-38808 | redhat_vex | spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression | fixed: 17 known affected: 9 known not affected: 17 under investigation: 1 | 2026-08-04T21:28:19+00:00 | Vulnerability · Source |
| CVE-2024-41909 | redhat_vex | mina-sshd: integrity check bypass vulnerability | fixed: 1 known affected: 12 known not affected: 14 | 2026-08-04T21:28:15+00:00 | Vulnerability · Source |
| CVE-2024-40094 | redhat_vex | graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java | fixed: 47 known affected: 3 known not affected: 3 | 2026-08-04T21:28:13+00:00 | Vulnerability · Source |
| CVE-2024-36107 | redhat_vex | minio: sensitive information exposure | known affected: 3 known not affected: 2 | 2026-08-04T21:27:56+00:00 | Vulnerability · Source |
| CVE-2024-2700 | redhat_vex | quarkus-core: Leak of local configuration properties into Quarkus applications | fixed: 146 known affected: 7 known not affected: 2067 | 2026-08-04T21:27:51+00:00 | Vulnerability · Source |
| CVE-2024-30171 | redhat_vex | bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack) | fixed: 293 known affected: 5 known not affected: 1403 | 2026-08-04T21:27:45+00:00 | Vulnerability · Source |
| CVE-2024-23321 | redhat_vex | apache: RocketMQ: org.apache.rocketmq:rocketmq-all: Unauthorized Exposure of Sensitive Data | known not affected: 2 | 2026-08-04T21:27:44+00:00 | Vulnerability · Source |
| CVE-2025-27636 | redhat_vex | camel-http: org.apache.camel: bypass of header filters via specially crafted response | fixed: 2 known affected: 13 known not affected: 6 | 2026-08-04T21:27:41+00:00 | Vulnerability · Source |
| CVE-2024-9823 | redhat_vex | org.eclipse.jetty:jetty-servlets: jetty: Jetty DOS vulnerability on DosFilter | fixed: 1 known affected: 7 known not affected: 6 | 2026-08-04T21:27:40+00:00 | Vulnerability · Source |
| CVE-2024-41172 | redhat_vex | apache: cxf: org.apache.cxf:cxf-rt-transports-http: unrestricted memory consumption in CXF HTTP clients | fixed: 236 known affected: 2 known not affected: 9 | 2026-08-04T21:27:39+00:00 | Vulnerability · Source |
| CVE-2024-29651 | redhat_vex | json-schema-ref-parser: Prototype pollution issue | known affected: 3 known not affected: 3 | 2026-08-04T21:27:34+00:00 | Vulnerability · Source |
| CVE-2025-25193 | redhat_vex | netty: Denial of Service attack on windows app using Netty | fixed: 287 known affected: 1 known not affected: 1 | 2026-08-04T21:27:26+00:00 | Vulnerability · Source |
| CVE-2026-47825 | redhat_vex | spring-cloud-gateway: Spring Cloud Gateway Server: Security bypass due to untrusted header forwarding | known not affected: 2 | 2026-08-04T21:26:42+00:00 | Vulnerability · Source |
| CVE-2026-46678 | redhat_vex | pydantic-ai: pydantic-ai-slim: Pydantic AI: Server-Side Request Forgery (SSRF) bypass exposes cloud credentials. | known not affected: 5 | 2026-08-04T21:26:37+00:00 | Vulnerability · Source |
| CVE-2026-67216 | redhat_vex | cJSON: Denial of Service due to inefficient JSON object comparison | known affected: 2 known not affected: 1 | 2026-08-04T21:26:13+00:00 | Vulnerability · Source |
| CVE-2026-57236 | redhat_vex | nokogiri: Nokogiri: Denial of Service or Information Disclosure via invalid encoding handling | fixed: 40 known affected: 1 known not affected: 331 | 2026-08-04T21:24:28+00:00 | Vulnerability · Source |
| CVE-2026-12515 | redhat_vex | katello: missing repository authorization in content_uploads exposes cross-product content existence | fixed: 10 known affected: 1 known not affected: 362 | 2026-08-04T21:24:28+00:00 | Vulnerability · Source |
| CVE-2026-50560 | redhat_vex | netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling | fixed: 3 known affected: 42 known not affected: 4 | 2026-08-04T21:23:13+00:00 | Vulnerability · Source |
| CVE-2026-50020 | redhat_vex | netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder | fixed: 3 known affected: 45 known not affected: 9 | 2026-08-04T21:23:12+00:00 | Vulnerability · Source |
| CVE-2026-47244 | redhat_vex | netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams | fixed: 3 known affected: 42 known not affected: 4 | 2026-08-04T21:23:11+00:00 | Vulnerability · Source |
| CVE-2026-45673 | redhat_vex | netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs | fixed: 3 known affected: 43 | 2026-08-04T21:23:09+00:00 | Vulnerability · Source |
| CVE-2026-45536 | redhat_vex | netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling | fixed: 1 known affected: 38 known not affected: 9 | 2026-08-04T21:23:08+00:00 | Vulnerability · Source |
| CVE-2023-24532 | redhat_vex | golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results | fixed: 58 known affected: 24 known not affected: 151 | 2026-08-04T21:11:12+00:00 | Vulnerability · Source |
| CVE-2022-26148 | redhat_vex | grafana: An information leak issue was discovered in Grafana through 7.3.4, when integrated with Zabbix | fixed: 3 known affected: 12 known not affected: 48 | 2026-08-04T21:09:46+00:00 | Vulnerability · Source |
| CVE-2019-0205 | redhat_vex | thrift: Endless loop when feed with specific input data | fixed: 1203 known affected: 64 known not affected: 3 | 2026-08-04T20:59:43+00:00 | Vulnerability · Source |
| CVE-2018-14642 | redhat_vex | undertow: Infoleak in some circumstances where Undertow can serve data from a random buffer | fixed: 599 known affected: 4 known not affected: 3 | 2026-08-04T20:58:44+00:00 | Vulnerability · Source |
| CVE-2018-1000632 | redhat_vex | dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents | fixed: 1883 known affected: 22 known not affected: 5 | 2026-08-04T20:58:23+00:00 | Vulnerability · Source |
| CVE-2017-7554 | redhat_vex | RHMAP: Stored XSS in App Store | fixed: 105 | 2026-08-04T20:57:51+00:00 | Vulnerability · Source |
| CVE-2017-7553 | redhat_vex | RHMAP: SSRF via external_request feature of App Studio | fixed: 105 | 2026-08-04T20:57:49+00:00 | Vulnerability · Source |
| CVE-2017-7552 | redhat_vex | RHMAP Millicore IDE allows RCE on SCM | fixed: 105 | 2026-08-04T20:57:47+00:00 | Vulnerability · Source |
| CVE-2026-12383 | redhat_vex | eda-server: ExternalEventStreamViewSet trusts Subject header without validation and leaks expected DN | fixed: 20 known not affected: 381 | 2026-08-04T20:48:47+00:00 | Vulnerability · Source |