VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
292286 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-28493 | redhat_vex | python-jinja2: ReDoS vulnerability in the urlize filter | fixed: 711 known affected: 12 known not affected: 5 | 2026-07-03T02:08:15+00:00 | Vulnerability · Source |
| CVE-2020-28463 | redhat_vex | python-reportlab: Server-side request forgery via img tags | known affected: 9 | 2026-07-03T02:08:06+00:00 | Vulnerability · Source |
| CVE-2020-26291 | redhat_vex | urijs: Hostname spoofing via backslashes in URL | fixed: 1 known not affected: 9 | 2026-07-03T02:08:06+00:00 | Vulnerability · Source |
| CVE-2020-26237 | redhat_vex | nodejs-highlight-js: prototype pollution via a crafted HTML code block | fixed: 1 known not affected: 10 | 2026-07-03T02:08:03+00:00 | Vulnerability · Source |
| CVE-2020-25658 | redhat_vex | python-rsa: bleichenbacher timing oracle attack against RSA decryption | fixed: 6 known affected: 5 known not affected: 1492 | 2026-07-03T02:07:58+00:00 | Vulnerability · Source |
| CVE-2020-13529 | redhat_vex | systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured | fixed: 222 known affected: 29 known not affected: 40 | 2026-07-03T02:07:57+00:00 | Vulnerability · Source |
| CVE-2020-1747 | redhat_vex | PyYAML: arbitrary command execution through python/object/new when FullLoader is used | fixed: 221 known affected: 2 known not affected: 16 | 2026-07-03T02:07:49+00:00 | Vulnerability · Source |
| CVE-2021-32765 | redhat_vex | hiredis: an integer overflow may occur if provided maliciously crafted or corrupted RESP mult-bulk protocol data | known not affected: 2 | 2026-07-03T02:07:44+00:00 | Vulnerability · Source |
| CVE-2021-25741 | redhat_vex | kubernetes: Symlink exchange can allow host filesystem access | fixed: 42 known affected: 1 known not affected: 78 | 2026-07-03T02:07:30+00:00 | Vulnerability · Source |
| CVE-2021-23358 | redhat_vex | nodejs-underscore: Arbitrary code execution via the template function | fixed: 275 known affected: 55 known not affected: 115 | 2026-07-03T02:07:29+00:00 | Vulnerability · Source |
| CVE-2019-16789 | redhat_vex | waitress: HTTP Request Smuggling through Invalid whitespace characters in headers | fixed: 13 known affected: 7 | 2026-07-03T02:07:20+00:00 | Vulnerability · Source |
| CVE-2019-16786 | redhat_vex | waitress: HTTP request smuggling through invalid Transfer-Encoding | fixed: 13 known affected: 7 | 2026-07-03T02:07:16+00:00 | Vulnerability · Source |
| CVE-2019-3866 | redhat_vex | openstack-mistral: information disclosure in mistral log | fixed: 20 known affected: 33 known not affected: 2611 | 2026-07-03T02:07:15+00:00 | Vulnerability · Source |
| CVE-2019-16785 | redhat_vex | waitress: HTTP request smuggling through LF vs CRLF handling | fixed: 13 known affected: 7 | 2026-07-03T02:07:15+00:00 | Vulnerability · Source |
| CVE-2024-43168 | redhat_vex | unbound: Heap-Buffer-Overflow in Unbound | known affected: 33 known not affected: 2 | 2026-07-03T02:01:16+00:00 | Vulnerability · Source |
| CVE-2024-43167 | redhat_vex | unbound: NULL Pointer Dereference in Unbound | known affected: 31 known not affected: 2 | 2026-07-03T02:01:15+00:00 | Vulnerability · Source |
| CVE-2024-9683 | redhat_vex | quay: Quay allows successful authentication with trucated version of the password | known affected: 1 | 2026-07-03T02:01:07+00:00 | Vulnerability · Source |
| CVE-2023-6228 | redhat_vex | libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c | fixed: 84 known affected: 13 | 2026-07-03T02:01:03+00:00 | Vulnerability · Source |
| CVE-2023-4956 | redhat_vex | quay: Clickjacking on config-editor page Severity | known affected: 1 | 2026-07-03T02:00:57+00:00 | Vulnerability · Source |
| CVE-2023-2908 | redhat_vex | libtiff: null pointer dereference in tif_dir.c | known not affected: 21 | 2026-07-03T02:00:56+00:00 | Vulnerability · Source |
| CVE-2023-25588 | redhat_vex | binutils: Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab` | known affected: 15 known not affected: 7 | 2026-07-03T02:00:54+00:00 | Vulnerability · Source |
| CVE-2023-25586 | redhat_vex | binutils: Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized | known not affected: 41 | 2026-07-03T02:00:52+00:00 | Vulnerability · Source |
| CVE-2023-25585 | redhat_vex | binutils: Field `file_table` of `struct module *module` is uninitialized | known affected: 15 known not affected: 7 | 2026-07-03T02:00:49+00:00 | Vulnerability · Source |
| CVE-2023-0512 | redhat_vex | vim: divide by zero in adjust_skipcol() at move.ca | known affected: 24 | 2026-07-03T02:00:46+00:00 | Vulnerability · Source |
| CVE-2022-24859 | redhat_vex | PyPDF2: infinite loop vulnerability | known affected: 1 | 2026-07-03T02:00:44+00:00 | Vulnerability · Source |
| CVE-2022-3491 | redhat_vex | vim: Heap-based Buffer Overflow prior to 9.0.0742 | known not affected: 24 | 2026-07-03T02:00:33+00:00 | Vulnerability · Source |
| CVE-2022-1056 | redhat_vex | libtiff: heap-based buffer overflow in _TIFFmemcpy() in tif_unix.c | known affected: 21 | 2026-07-03T02:00:32+00:00 | Vulnerability · Source |
| CVE-2024-35195 | redhat_vex | requests: subsequent requests to the same host ignore cert verification | fixed: 205 known affected: 30 known not affected: 622 | 2026-07-03T01:54:31+00:00 | Vulnerability · Source |
| CVE-2024-34062 | redhat_vex | python-tqdm: non-boolean CLI arguments may lead to local code execution | known affected: 1 known not affected: 2 | 2026-07-03T01:54:29+00:00 | Vulnerability · Source |
| CVE-2024-31449 | redhat_vex | redis: Lua library commands may lead to stack overflow and RCE in Redis | fixed: 61 known affected: 2 known not affected: 6 | 2026-07-03T01:54:20+00:00 | Vulnerability · Source |
| CVE-2024-31228 | redhat_vex | redis: Denial-of-service due to unbounded pattern matching in Redis | fixed: 61 known affected: 2 | 2026-07-03T01:54:16+00:00 | Vulnerability · Source |
| CVE-2024-31227 | redhat_vex | redis: Denial-of-service due to malformed ACL selectors in Redis | fixed: 18 known affected: 9 known not affected: 2 | 2026-07-03T01:54:12+00:00 | Vulnerability · Source |
| CVE-2024-28835 | redhat_vex | gnutls: potential crash during chain building/verification | fixed: 225 known affected: 18 known not affected: 6 | 2026-07-03T01:53:53+00:00 | Vulnerability · Source |
| CVE-2024-28834 | redhat_vex | gnutls: vulnerable to Minerva side-channel information leak | fixed: 450 known affected: 18 | 2026-07-03T01:53:49+00:00 | Vulnerability · Source |
| CVE-2024-28219 | redhat_vex | python-pillow: buffer overflow in _imagingcms.c | fixed: 86 known affected: 8 known not affected: 342 | 2026-07-03T01:53:45+00:00 | Vulnerability · Source |
| CVE-2024-27982 | redhat_vex | nodejs: HTTP Request Smuggling via Content Length Obfuscation | fixed: 226 known affected: 20 known not affected: 3 | 2026-07-03T01:53:35+00:00 | Vulnerability · Source |
| CVE-2024-26256 | redhat_vex | libarchive: Heap based buffer overflow in rar e8 filter | known not affected: 20 | 2026-07-03T01:53:21+00:00 | Vulnerability · Source |
| CVE-2024-24806 | redhat_vex | libuv: Improper Domain Lookup that potentially leads to SSRF attacks | fixed: 93 known affected: 6 | 2026-07-03T01:53:16+00:00 | Vulnerability · Source |
| CVE-2024-23650 | redhat_vex | moby/buildkit: Possible race condition with accessing subpaths from cache mounts | fixed: 261 known affected: 6 known not affected: 15 | 2026-07-03T01:53:09+00:00 | Vulnerability · Source |
| CVE-2024-23451 | redhat_vex | elasticsearch: Incorrect authorization issue in Remote Cluster Security | known affected: 1 known not affected: 8 | 2026-07-03T01:53:03+00:00 | Vulnerability · Source |
| CVE-2024-23450 | redhat_vex | elasticsearch: Possible denial of service when processing documents in a deeply nested pipeline | known affected: 1 known not affected: 8 | 2026-07-03T01:52:59+00:00 | Vulnerability · Source |
| CVE-2024-23342 | redhat_vex | python-ecdsa: vulnerable to the Minerva attack | fixed: 6 known affected: 4 known not affected: 343 | 2026-07-03T01:52:57+00:00 | Vulnerability · Source |
| CVE-2024-22189 | redhat_vex | quic-go: memory exhaustion attack against QUIC's connection ID mechanism | fixed: 89 known affected: 1 known not affected: 790 | 2026-07-03T01:52:46+00:00 | Vulnerability · Source |
| CVE-2024-21484 | redhat_vex | jsrsasign: vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process | fixed: 1 known affected: 1 known not affected: 13 | 2026-07-03T01:52:28+00:00 | Vulnerability · Source |
| CVE-2024-3651 | redhat_vex | python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() | fixed: 251 known affected: 11 known not affected: 278 | 2026-07-03T01:52:13+00:00 | Vulnerability · Source |
| CVE-2024-3625 | redhat_vex | mirror-registry: Redis password stored in plain-text | known affected: 1 | 2026-07-03T01:52:09+00:00 | Vulnerability · Source |
| CVE-2024-3624 | redhat_vex | mirror-registry: Database user and password stored in plain-text | known affected: 1 | 2026-07-03T01:52:05+00:00 | Vulnerability · Source |
| CVE-2024-2236 | redhat_vex | libgcrypt: vulnerable to Marvin Attack | fixed: 123 known affected: 9 known not affected: 2 | 2026-07-03T01:52:04+00:00 | Vulnerability · Source |
| CVE-2024-0450 | redhat_vex | python: The zipfile module is vulnerable to zip-bombs leading to denial of service | fixed: 739 known affected: 16 known not affected: 105 | 2026-07-03T01:51:59+00:00 | Vulnerability · Source |
| CVE-2023-52356 | redhat_vex | libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service | fixed: 162 known affected: 13 known not affected: 62 | 2026-07-03T01:51:55+00:00 | Vulnerability · Source |