VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
305792 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-45230 | redhat_vex | python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() | fixed: 8 known affected: 14 known not affected: 115 | 2026-10-08T11:57:07+00:00 | Vulnerability · Source |
| CVE-2024-39249 | redhat_vex | nodejs-async: Regular expression denial of service while parsing function in autoinject | fixed: 57 known affected: 28 known not affected: 453 | 2026-10-08T11:56:45+00:00 | Vulnerability · Source |
| CVE-2024-42461 | redhat_vex | elliptic: nodejs/elliptic: ECDSA implementation malleability due to BER-enconded signatures being allowed | fixed: 733 known affected: 41 known not affected: 362 | 2026-10-08T11:54:54+00:00 | Vulnerability · Source |
| CVE-2024-42460 | redhat_vex | elliptic: nodejs/elliptic: ECDSA signature malleability due to missing checks | fixed: 733 known affected: 36 known not affected: 352 | 2026-10-08T11:54:52+00:00 | Vulnerability · Source |
| CVE-2024-42459 | redhat_vex | elliptic: nodejs/elliptic: EDDSA signature malleability due to missing signature length check | fixed: 733 known affected: 19 known not affected: 381 | 2026-10-08T11:54:51+00:00 | Vulnerability · Source |
| CVE-2024-0874 | redhat_vex | coredns: CD bit response is cached and served later | fixed: 16 known affected: 1 known not affected: 2034 | 2026-10-08T11:54:39+00:00 | Vulnerability · Source |
| CVE-2024-42005 | redhat_vex | python-django: Potential SQL injection in QuerySet.values() and values_list() | fixed: 26 known affected: 4 known not affected: 3976 | 2026-10-08T11:54:32+00:00 | Vulnerability · Source |
| CVE-2024-41991 | redhat_vex | python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget | fixed: 22 known affected: 2 known not affected: 407 | 2026-10-08T11:54:26+00:00 | Vulnerability · Source |
| CVE-2024-41990 | redhat_vex | python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() | fixed: 14 known affected: 5 known not affected: 337 | 2026-10-08T11:54:23+00:00 | Vulnerability · Source |
| CVE-2024-41989 | redhat_vex | python-django: Memory exhaustion in django.utils.numberformat.floatformat() | fixed: 18 known affected: 7 known not affected: 450 | 2026-10-08T11:54:18+00:00 | Vulnerability · Source |
| CVE-2018-12608 | redhat_vex | moby: cert signing bypass | fixed: 40 known affected: 3 known not affected: 5 | 2026-10-08T11:54:09+00:00 | Vulnerability · Source |
| CVE-2024-45801 | redhat_vex | dompurify: XSS vulnerability via prototype pollution | fixed: 270 known affected: 19 known not affected: 768 | 2026-10-08T11:53:45+00:00 | Vulnerability · Source |
| CVE-2024-34158 | redhat_vex | go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion | fixed: 4783 known affected: 64 known not affected: 2270 | 2026-10-08T11:53:42+00:00 | Vulnerability · Source |
| CVE-2024-34155 | redhat_vex | go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion | fixed: 4833 known affected: 61 known not affected: 2308 | 2026-10-08T11:53:39+00:00 | Vulnerability · Source |
| CVE-2024-6104 | redhat_vex | go-retryablehttp: url might write sensitive information to log file | fixed: 1777 known affected: 32 known not affected: 14136 | 2026-10-08T11:50:23+00:00 | Vulnerability · Source |
| CVE-2023-45857 | redhat_vex | axios: exposure of confidential data stored in cookies | fixed: 71 known affected: 13 known not affected: 585 | 2026-10-08T11:50:18+00:00 | Vulnerability · Source |
| CVE-2023-26159 | redhat_vex | follow-redirects: Improper Input Validation due to the improper handling of URLs by the url.parse() | fixed: 165 known affected: 29 known not affected: 1365 | 2026-10-08T11:50:16+00:00 | Vulnerability · Source |
| CVE-2024-43788 | redhat_vex | webpack: DOM Clobbering vulnerability in AutoPublicPathRuntimeModule | fixed: 183 known affected: 41 known not affected: 326 | 2026-10-08T11:49:50+00:00 | Vulnerability · Source |
| CVE-2023-26136 | redhat_vex | tough-cookie: prototype pollution in cookie memstore | fixed: 383 known affected: 44 known not affected: 3506 | 2026-10-08T11:49:47+00:00 | Vulnerability · Source |
| CVE-2023-39322 | redhat_vex | golang: crypto/tls: lack of a limit on buffered post-handshake | fixed: 996 known affected: 70 known not affected: 1276 | 2026-10-08T11:49:33+00:00 | Vulnerability · Source |
| CVE-2023-39321 | redhat_vex | golang: crypto/tls: panic when processing post-handshake message on QUIC connections | fixed: 1022 known affected: 106 known not affected: 1213 | 2026-10-08T11:49:27+00:00 | Vulnerability · Source |
| CVE-2023-39319 | redhat_vex | golang: html/template: improper handling of special tags within script contexts | fixed: 946 known affected: 52 known not affected: 1278 under investigation: 2 | 2026-10-08T11:49:26+00:00 | Vulnerability · Source |
| CVE-2023-39318 | redhat_vex | golang: html/template: improper handling of HTML-like comments within script contexts | fixed: 972 known affected: 52 known not affected: 1252 | 2026-10-08T11:49:25+00:00 | Vulnerability · Source |
| CVE-2024-21501 | redhat_vex | sanitize-html: Information Exposure when used on the backend | fixed: 28 known affected: 4 known not affected: 910 | 2026-10-08T11:49:07+00:00 | Vulnerability · Source |
| CVE-2024-30255 | redhat_vex | envoy: HTTP/2 CPU exhaustion due to CONTINUATION frame flood | fixed: 53 known affected: 15 known not affected: 24 | 2026-10-08T11:49:00+00:00 | Vulnerability · Source |
| CVE-2024-28863 | redhat_vex | node-tar: denial of service while parsing a tar file due to lack of folders depth validation | fixed: 220 known affected: 37 known not affected: 240 | 2026-10-08T11:48:50+00:00 | Vulnerability · Source |
| CVE-2024-28849 | redhat_vex | follow-redirects: Possible credential leak | fixed: 341 known affected: 25 known not affected: 1370 | 2026-10-08T11:48:35+00:00 | Vulnerability · Source |
| CVE-2023-48631 | redhat_vex | css-tools: regular expression denial of service (ReDoS) when parsing CSS | fixed: 23 known affected: 10 known not affected: 106 | 2026-10-08T11:42:38+00:00 | Vulnerability · Source |
| CVE-2023-26364 | redhat_vex | css-tools: Improper Input Validation causes Denial of Service via Regular Expression | fixed: 31 known affected: 8 known not affected: 391 | 2026-10-08T11:42:33+00:00 | Vulnerability · Source |
| CVE-2024-24784 | redhat_vex | golang: net/mail: comments in display names are incorrectly handled | fixed: 1678 known affected: 57 known not affected: 714 | 2026-10-08T11:42:25+00:00 | Vulnerability · Source |
| CVE-2024-24788 | redhat_vex | golang: net: malformed DNS message can cause infinite loop | fixed: 895 known affected: 86 known not affected: 406 | 2026-10-08T11:42:24+00:00 | Vulnerability · Source |
| CVE-2026-103006 | redhat_vex | elasticsearch: Elasticsearch: Denial of Service via deeply nested search aggregations | known affected: 1 known not affected: 2 | 2026-10-08T11:35:45+00:00 | Vulnerability · Source |
| CVE-2026-102407 | redhat_vex | elasticsearch: elasticsearch: unauthorized data modification via Modify Data Streams API | known affected: 1 known not affected: 2 | 2026-10-08T11:35:43+00:00 | Vulnerability · Source |
| CVE-2026-98358 | redhat_vex | kernel: IB/iser: reject a remote invalidation of an unregistered direction | known affected: 277 | 2026-10-08T11:35:40+00:00 | Vulnerability · Source |
| CVE-2026-67241 | redhat_vex | rabbitmq-server: rabbitmq-server: Unauthorized message routing via missing alternate-exchange permission check | fixed: 3 known not affected: 8 | 2026-10-08T11:35:38+00:00 | Vulnerability · Source |
| CVE-2019-25210 | redhat_vex | helm: shows secrets with --dry-run option in clear text | fixed: 82 known affected: 2 known not affected: 1522 | 2026-10-08T11:35:01+00:00 | Vulnerability · Source |
| CVE-2026-103009 | redhat_vex | elasticsearch: Elasticsearch: Information disclosure via crafted cross-cluster search requests | known affected: 1 known not affected: 2 | 2026-10-08T11:34:57+00:00 | Vulnerability · Source |
| CVE-2026-91777 | redhat_vex | com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion | known affected: 22 known not affected: 144 | 2026-10-08T11:34:54+00:00 | Vulnerability · Source |
| CVE-2026-84637 | redhat_vex | thunderbird: Thunderbird: Arbitrary code execution via malicious calendar invitation attachments | known not affected: 6 | 2026-10-08T11:34:52+00:00 | Vulnerability · Source |
| CVE-2026-84125 | redhat_vex | firefox: Firefox: Arbitrary code execution via use-after-free in DOM: Core & HTML | known not affected: 9 | 2026-10-08T11:34:47+00:00 | Vulnerability · Source |
| CVE-2024-25620 | redhat_vex | helm: Dependency management path traversal | fixed: 82 known affected: 7 known not affected: 1181 | 2026-10-08T11:34:02+00:00 | Vulnerability · Source |
| CVE-2024-26147 | redhat_vex | helm: Missing YAML Content Leads To Panic | fixed: 122 known affected: 10 known not affected: 2499 | 2026-10-08T11:34:02+00:00 | Vulnerability · Source |
| CVE-2026-92000 | redhat_vex | adm-zip: adm-zip: Denial of Service via crafted ZIP archives with zero declared uncompressed size | fixed: 30 known affected: 18 known not affected: 77 | 2026-10-08T11:33:58+00:00 | Vulnerability · Source |
| CVE-2026-98364 | redhat_vex | kernel: xfrm: hold net_device reference under RCU in bundle creation | known affected: 263 under investigation: 14 | 2026-10-08T11:33:29+00:00 | Vulnerability · Source |
| CVE-2026-89059 | redhat_vex | resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS) | known affected: 91 | 2026-10-08T11:32:25+00:00 | Vulnerability · Source |
| CVE-2023-27561 | redhat_vex | runc: volume mount race condition (regression of CVE-2019-19921) | fixed: 556 known affected: 40 known not affected: 1666 | 2026-10-08T11:28:59+00:00 | Vulnerability · Source |
| CVE-2021-36157 | redhat_vex | cortex: Grafana Cortex directory traversal | fixed: 8 known affected: 3 known not affected: 830 | 2026-10-08T11:28:54+00:00 | Vulnerability · Source |
| CVE-2026-80521 | redhat_vex | kernel: af_unix: Unlink scc_entry in unix_del_edge() | fixed: 307 known affected: 77 known not affected: 198 | 2026-10-08T11:21:44+00:00 | Vulnerability · Source |
| CVE-2026-64007 | redhat_vex | kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable | fixed: 1235 known affected: 127 known not affected: 15 | 2026-10-08T11:21:41+00:00 | Vulnerability · Source |
| CVE-2026-52924 | redhat_vex | kernel: sctp: purge outqueue on stale COOKIE-ECHO handling | fixed: 2122 known affected: 22 known not affected: 42 | 2026-10-08T11:21:34+00:00 | Vulnerability · Source |