VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291935 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-4853 | redhat_vex | quarkus: HTTP security policy bypass | fixed: 49 known affected: 3 known not affected: 876 | 2026-08-04T17:40:14+00:00 | Vulnerability · Source |
| CVE-2023-34062 | redhat_vex | reactor-netty-http: directory traversal vulnerability | known affected: 1 known not affected: 7 | 2026-08-04T17:40:02+00:00 | Vulnerability · Source |
| CVE-2023-3223 | redhat_vex | undertow: OutOfMemoryError due to @MultipartConfig handling | fixed: 109 known affected: 7 known not affected: 2378 | 2026-08-04T17:39:47+00:00 | Vulnerability · Source |
| CVE-2024-50043 | redhat_vex | kernel: nfsd: fix possible badness in FREE_STATEID | known affected: 42 known not affected: 156 | 2026-08-04T17:38:43+00:00 | Vulnerability · Source |
| CVE-2024-50145 | redhat_vex | kernel: octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx() | known affected: 108 known not affected: 90 | 2026-08-04T17:38:37+00:00 | Vulnerability · Source |
| CVE-2024-50036 | redhat_vex | kernel: net: do not delay dst_entries_add() in dst_release() | known affected: 198 | 2026-08-04T17:38:33+00:00 | Vulnerability · Source |
| CVE-2024-49973 | redhat_vex | kernel: r8169: add tally counter fields added with RTL8125 | fixed: 305 known affected: 70 known not affected: 42 | 2026-08-04T17:38:30+00:00 | Vulnerability · Source |
| CVE-2024-50046 | redhat_vex | kernel: NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() | fixed: 305 known affected: 64 known not affected: 48 | 2026-08-04T17:38:25+00:00 | Vulnerability · Source |
| CVE-2024-50128 | redhat_vex | kernel: net: wwan: fix global oob in wwan_rtnl_policy | fixed: 305 known affected: 22 known not affected: 90 | 2026-08-04T17:38:19+00:00 | Vulnerability · Source |
| CVE-2024-50041 | redhat_vex | kernel: i40e: Fix macvlan leak by synchronizing access to mac_filter_hash | known affected: 184 known not affected: 14 | 2026-08-04T17:38:15+00:00 | Vulnerability · Source |
| CVE-2024-50059 | redhat_vex | kernel: ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition | known not affected: 198 | 2026-08-04T17:38:11+00:00 | Vulnerability · Source |
| CVE-2024-29736 | redhat_vex | apache: cxf: org.apache.cxf:cxf-rt-rs-service-description: SSRF via WADL stylesheet parameter | fixed: 2 known affected: 3 known not affected: 3 | 2026-08-04T17:38:08+00:00 | Vulnerability · Source |
| CVE-2024-47072 | redhat_vex | com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream | fixed: 36 known affected: 9 known not affected: 12 | 2026-08-04T17:38:01+00:00 | Vulnerability · Source |
| CVE-2024-7254 | redhat_vex | protobuf: StackOverflow vulnerability in Protocol Buffers | fixed: 65 known affected: 24 known not affected: 358 | 2026-08-04T17:37:51+00:00 | Vulnerability · Source |
| CVE-2024-28752 | redhat_vex | cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding | fixed: 252 known affected: 2 known not affected: 2719 | 2026-08-04T17:37:39+00:00 | Vulnerability · Source |
| CVE-2024-51132 | redhat_vex | org.hl7.fhir.convertors: org.hl7.fhir.dstu2: org.hl7.fhir.dstu2016may: org.hl7.fhir.dstu3: org.hl7.fhir.r4: org.hl7.fhir.r5: org.hl7.fhir.utilities: org.hl7.fhir.validation: org.hl7.fhir.core: FHIR arbitrary code execution via specially-crafted request | fixed: 2 known affected: 20 | 2026-08-04T17:37:34+00:00 | Vulnerability · Source |
| CVE-2024-52046 | redhat_vex | mina-core: Apache MINA: applications using unbounded deserialization may allow RCE | fixed: 1 known affected: 8 known not affected: 6 | 2026-08-04T17:37:25+00:00 | Vulnerability · Source |
| CVE-2024-4027 | redhat_vex | undertow: OutOfMemoryError in HttpServletRequestImpl.getParameterNames() can cause remote DoS attacks | known affected: 7 known not affected: 5 under investigation: 8 | 2026-08-04T17:37:19+00:00 | Vulnerability · Source |
| CVE-2024-56128 | redhat_vex | kafka: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption | fixed: 3 known affected: 4 known not affected: 7 | 2026-08-04T17:37:05+00:00 | Vulnerability · Source |
| CVE-2024-25638 | redhat_vex | dnsjava: Improper response validation allowing DNSSEC bypass | known affected: 4 known not affected: 5 | 2026-08-04T17:36:50+00:00 | Vulnerability · Source |
| CVE-2024-53677 | redhat_vex | struts: org.apache.struts: mixing setters for uploaded files and normal fields can allow bypass file upload checks | known not affected: 64 | 2026-08-04T17:36:35+00:00 | Vulnerability · Source |
| CVE-2024-52007 | redhat_vex | org.hl7.fhir.dstu2016may: org.hl7.fhir.dstu3: org.hl7.fhir.r4: org.hl7.fhir.r5: org.hl7.fhir.utilities: org.hl7.fhir.core: XXE vulnerability in XSLT parsing in `org.hl7.fhir.core` | fixed: 1 known affected: 15 | 2026-08-04T17:36:22+00:00 | Vulnerability · Source |
| CVE-2024-45294 | redhat_vex | org.hl7.fhir.core: org.hl7.fhir.dstu3: org.hl7.fhir.r4: org.hl7.fhir.r4b: org.hl7.fhir.r5: org.hl7.fhir.utilities: XXE vulnerability in XSLT transforms in `org.hl7.fhir.core` | fixed: 3 known affected: 11 known not affected: 5 | 2026-08-04T17:35:33+00:00 | Vulnerability · Source |
| CVE-2024-51504 | redhat_vex | org.apache.zookeeper: Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server | known not affected: 14 | 2026-08-04T17:35:22+00:00 | Vulnerability · Source |
| CVE-2024-51127 | redhat_vex | hornetq-core-client: Arbitrarily overwrite files or access sensitive information | fixed: 603 known affected: 2 known not affected: 2201 | 2026-08-04T17:35:11+00:00 | Vulnerability · Source |
| CVE-2026-37462 | redhat_vex | github.com/osrg/gobgp: gobgp: Denial of Service via crafted BGP UPDATE message | known affected: 1 known not affected: 1 | 2026-08-04T17:30:38+00:00 | Vulnerability · Source |
| CVE-2026-41731 | redhat_vex | spring-kafka: Spring for Apache Kafka: Arbitrary code execution via insecure deserialization of crafted header values | known affected: 1 known not affected: 1 | 2026-08-04T17:29:03+00:00 | Vulnerability · Source |
| CVE-2026-40987 | redhat_vex | Spring Integration: Spring Integration: Arbitrary file write via malicious server | known affected: 2 known not affected: 6 | 2026-08-04T17:28:45+00:00 | Vulnerability · Source |
| CVE-2020-25644 | redhat_vex | wildfly-openssl: memory leak per HTTP session creation in WildFly OpenSSL | fixed: 321 known affected: 1 known not affected: 2 | 2026-08-04T14:49:23+00:00 | Vulnerability · Source |
| CVE-2017-12174 | redhat_vex | artemis/hornetq: memory exhaustion via UDP and JGroups discovery | fixed: 793 known not affected: 1 | 2026-08-04T14:41:32+00:00 | Vulnerability · Source |
| CVE-2011-2487 | redhat_vex | jbossws: Prone to Bleichenbacher attack against to be distributed symmetric key | fixed: 884 known affected: 5 | 2026-08-04T14:28:09+00:00 | Vulnerability · Source |
| CVE-2026-41252 | redhat_vex | xrdp: heap-based buffer overflow in vnc-any mode | known not affected: 1 | 2026-08-04T14:21:07+00:00 | Vulnerability · Source |
| CVE-2024-49981 | redhat_vex | kernel: media: venus: fix use after free bug in venus_remove due to race condition | known not affected: 198 | 2026-08-04T14:18:41+00:00 | Vulnerability · Source |
| CVE-2024-50152 | redhat_vex | kernel: smb: client: fix possible double free in smb2_set_ea() | fixed: 305 known affected: 22 known not affected: 90 | 2026-08-04T14:18:37+00:00 | Vulnerability · Source |
| CVE-2024-50119 | redhat_vex | kernel: cifs: fix warning when destroy 'cifs_io_request_pool' | known not affected: 198 | 2026-08-04T14:18:32+00:00 | Vulnerability · Source |
| CVE-2024-50027 | redhat_vex | kernel: thermal: core: Free tzp copy along with the thermal zone | fixed: 305 known affected: 50 known not affected: 62 | 2026-08-04T14:18:27+00:00 | Vulnerability · Source |
| CVE-2024-50029 | redhat_vex | kernel: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync | fixed: 305 known affected: 64 known not affected: 48 | 2026-08-04T14:18:25+00:00 | Vulnerability · Source |
| CVE-2024-49984 | redhat_vex | kernel: drm/v3d: Prevent out of bounds access in performance query extensions | known not affected: 198 | 2026-08-04T14:18:21+00:00 | Vulnerability · Source |
| CVE-2024-50055 | redhat_vex | kernel: driver core: bus: Fix double free in driver API bus_register() | fixed: 305 known affected: 112 | 2026-08-04T14:18:15+00:00 | Vulnerability · Source |
| CVE-2024-50031 | redhat_vex | kernel: drm/v3d: Stop the active perfmon before being destroyed | known not affected: 198 | 2026-08-04T14:18:14+00:00 | Vulnerability · Source |
| CVE-2024-49986 | redhat_vex | kernel: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors | known not affected: 198 | 2026-08-04T14:18:08+00:00 | Vulnerability · Source |
| CVE-2024-50257 | redhat_vex | kernel: netfilter: Fix use-after-free in get_info() | known affected: 42 known not affected: 156 | 2026-08-04T14:18:04+00:00 | Vulnerability · Source |
| CVE-2024-50268 | redhat_vex | kernel: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() | known affected: 108 known not affected: 90 | 2026-08-04T14:18:04+00:00 | Vulnerability · Source |
| CVE-2024-50195 | redhat_vex | kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() | fixed: 303 known affected: 112 | 2026-08-04T14:17:58+00:00 | Vulnerability · Source |
| CVE-2024-50175 | redhat_vex | kernel: media: qcom: camss: Remove use_count guard in stop_streaming | known not affected: 198 | 2026-08-04T14:17:57+00:00 | Vulnerability · Source |
| CVE-2024-53080 | redhat_vex | kernel: drm/panthor: Lock XArray when getting entries for the VM | known not affected: 198 | 2026-08-04T14:17:51+00:00 | Vulnerability · Source |
| CVE-2024-53110 | redhat_vex | kernel: vp_vdpa: fix id_table array not null terminated error | fixed: 305 known affected: 22 known not affected: 90 | 2026-08-04T14:17:32+00:00 | Vulnerability · Source |
| CVE-2024-53107 | redhat_vex | kernel: fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args() | known affected: 42 known not affected: 156 | 2026-08-04T14:17:32+00:00 | Vulnerability · Source |
| CVE-2024-50164 | redhat_vex | kernel: bpf: Fix overloading of MEM_UNINIT's meaning | known affected: 136 known not affected: 62 | 2026-08-04T14:17:29+00:00 | Vulnerability · Source |
| CVE-2024-53073 | redhat_vex | kernel: NFSD: Never decrement pending_async_copies on error | known affected: 198 | 2026-08-04T14:17:20+00:00 | Vulnerability · Source |