VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
293841 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-21484 | redhat_vex | jsrsasign: vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process | fixed: 1 known affected: 1 known not affected: 13 | 2026-07-03T01:52:28+00:00 | Vulnerability · Source |
| CVE-2024-3651 | redhat_vex | python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() | fixed: 251 known affected: 11 known not affected: 278 | 2026-07-03T01:52:13+00:00 | Vulnerability · Source |
| CVE-2024-3625 | redhat_vex | mirror-registry: Redis password stored in plain-text | known affected: 1 | 2026-07-03T01:52:09+00:00 | Vulnerability · Source |
| CVE-2024-3624 | redhat_vex | mirror-registry: Database user and password stored in plain-text | known affected: 1 | 2026-07-03T01:52:05+00:00 | Vulnerability · Source |
| CVE-2024-2236 | redhat_vex | libgcrypt: vulnerable to Marvin Attack | fixed: 123 known affected: 9 known not affected: 2 | 2026-07-03T01:52:04+00:00 | Vulnerability · Source |
| CVE-2024-0450 | redhat_vex | python: The zipfile module is vulnerable to zip-bombs leading to denial of service | fixed: 739 known affected: 16 known not affected: 105 | 2026-07-03T01:51:59+00:00 | Vulnerability · Source |
| CVE-2023-52356 | redhat_vex | libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service | fixed: 162 known affected: 13 known not affected: 62 | 2026-07-03T01:51:55+00:00 | Vulnerability · Source |
| CVE-2023-49921 | redhat_vex | elasticsearch: Insertion of Sensitive Information into Log File | known not affected: 9 | 2026-07-03T01:51:54+00:00 | Vulnerability · Source |
| CVE-2023-49083 | redhat_vex | python-cryptography: NULL-dereference when loading PKCS7 certificates | fixed: 234 known affected: 8 known not affected: 567 | 2026-07-03T01:51:49+00:00 | Vulnerability · Source |
| CVE-2023-46673 | redhat_vex | elasticsearch: Improper Handling of Exceptional Conditions | known affected: 1 known not affected: 2 | 2026-07-03T01:51:47+00:00 | Vulnerability · Source |
| CVE-2023-45803 | redhat_vex | urllib3: Request body not stripped after redirect from 303 status changes request method to GET | fixed: 898 known affected: 41 known not affected: 148 under investigation: 3 | 2026-07-03T01:51:39+00:00 | Vulnerability · Source |
| CVE-2023-41175 | redhat_vex | libtiff: potential integer overflow in raw2tiff.c | fixed: 42 known affected: 21 | 2026-07-03T01:51:28+00:00 | Vulnerability · Source |
| CVE-2023-40745 | redhat_vex | libtiff: integer overflow in tiffcp.c | fixed: 42 known affected: 21 | 2026-07-03T01:51:28+00:00 | Vulnerability · Source |
| CVE-2023-26118 | redhat_vex | angularjs: Regular Expression Denial of Service via the <input type="url"> element | known affected: 37 known not affected: 34 | 2026-07-03T01:51:04+00:00 | Vulnerability · Source |
| CVE-2023-26117 | redhat_vex | angularjs: Regular expression denial of service via the $resource service | known affected: 72 known not affected: 83 | 2026-07-03T01:51:00+00:00 | Vulnerability · Source |
| CVE-2023-26116 | redhat_vex | angularjs: Regular Expression Denial of Service via angular.copy() | known affected: 33 known not affected: 38 | 2026-07-03T01:50:58+00:00 | Vulnerability · Source |
| CVE-2023-7207 | redhat_vex | cpio: path traversal vulnerability | known affected: 6 | 2026-07-03T01:50:54+00:00 | Vulnerability · Source |
| CVE-2023-6277 | redhat_vex | libtiff: Out-of-memory in TIFFOpen via a craft file | known affected: 21 | 2026-07-03T01:50:50+00:00 | Vulnerability · Source |
| CVE-2023-5156 | redhat_vex | glibc: DoS due to memory leak in getaddrinfo.c | known affected: 20 known not affected: 431 | 2026-07-03T01:50:47+00:00 | Vulnerability · Source |
| CVE-2023-4959 | redhat_vex | quay: Cross-Site Request Forgery (CSRF) on config-editor page | known affected: 1 | 2026-07-03T01:50:45+00:00 | Vulnerability · Source |
| CVE-2023-4813 | redhat_vex | glibc: potential use-after-free in gaih_inet() | fixed: 4060 known affected: 20 | 2026-07-03T01:50:41+00:00 | Vulnerability · Source |
| CVE-2023-4785 | redhat_vex | gRPC: file descriptor exhaustion leads to denial of service | fixed: 2 known not affected: 85 | 2026-07-03T01:50:35+00:00 | Vulnerability · Source |
| CVE-2023-3618 | redhat_vex | libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c | fixed: 42 known affected: 17 | 2026-07-03T01:50:32+00:00 | Vulnerability · Source |
| CVE-2023-3316 | redhat_vex | libtiff: tiffcrop: null pointer dereference in TIFFClose() | fixed: 42 known affected: 17 | 2026-07-03T01:50:30+00:00 | Vulnerability · Source |
| CVE-2024-49769 | redhat_vex | waitress: Waitress has a denial of service leading to high CPU usage/resource exhaustion | fixed: 18 known affected: 4 known not affected: 149 | 2026-07-03T01:47:56+00:00 | Vulnerability · Source |
| CVE-2024-49768 | redhat_vex | waitress: python-waitress: request processing race condition in HTTP pipelining with invalid first request | fixed: 18 known affected: 4 known not affected: 149 | 2026-07-03T01:47:52+00:00 | Vulnerability · Source |
| CVE-2024-34069 | redhat_vex | python-werkzeug: user may execute code on a developer's machine | fixed: 1002 known affected: 22 known not affected: 443 | 2026-07-03T01:47:47+00:00 | Vulnerability · Source |
| CVE-2024-26130 | redhat_vex | python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override | fixed: 105 known not affected: 533 | 2026-07-03T01:47:29+00:00 | Vulnerability · Source |
| CVE-2024-3623 | redhat_vex | mirror-registry: Default database secret key stored in plain-text on initial configuration file | known affected: 1 | 2026-07-03T01:47:20+00:00 | Vulnerability · Source |
| CVE-2024-3622 | redhat_vex | mirror-registry: Plain-text default CSRF secret key | known affected: 1 | 2026-07-03T01:47:13+00:00 | Vulnerability · Source |
| CVE-2024-1135 | redhat_vex | python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers | fixed: 22 known affected: 6 known not affected: 2486 | 2026-07-03T01:47:10+00:00 | Vulnerability · Source |
| CVE-2023-30861 | redhat_vex | flask: Possible disclosure of permanent session cookie due to missing Vary: Cookie header | fixed: 20 known affected: 5 known not affected: 265 | 2026-07-03T01:46:50+00:00 | Vulnerability · Source |
| CVE-2023-4911 | redhat_vex | glibc: buffer overflow in ld.so leading to privilege escalation | fixed: 4066 known not affected: 18 | 2026-07-03T01:46:38+00:00 | Vulnerability · Source |
| CVE-2026-5160 | redhat_vex | github.com/yuin/goldmark/renderer/html: github.com/yuin/goldmark/renderer/html: Cross-site Scripting due to improper URL validation | known affected: 4 | 2026-07-03T01:45:40+00:00 | Vulnerability · Source |
| CVE-2025-69725 | redhat_vex | go-chi/chi: Go-chi/chi: Open Redirect vulnerability allows redirection to malicious websites | known affected: 93 | 2026-07-03T01:45:35+00:00 | Vulnerability · Source |
| CVE-2023-22745 | redhat_vex | tpm2-tss: Buffer Overlow in TSS2_RC_Decode | fixed: 112 known affected: 3 | 2026-07-03T01:41:54+00:00 | Vulnerability · Source |
| CVE-2022-41742 | redhat_vex | nginx: Memory disclosure in the ngx_http_mp4_module | fixed: 297 known affected: 45 known not affected: 1 | 2026-07-03T01:41:38+00:00 | Vulnerability · Source |
| CVE-2022-41741 | redhat_vex | nginx: Memory corruption in the ngx_http_mp4_module | fixed: 297 known affected: 45 known not affected: 1 | 2026-07-03T01:41:35+00:00 | Vulnerability · Source |
| CVE-2022-29217 | redhat_vex | python-jwt: Key confusion through non-blocklisted public key formats | known affected: 69 known not affected: 26 | 2026-07-03T01:41:18+00:00 | Vulnerability · Source |
| CVE-2022-24863 | redhat_vex | http-swagger: a denial of service attack consisting of memory exhaustion on the host system | known affected: 2 | 2026-07-03T01:41:08+00:00 | Vulnerability · Source |
| CVE-2022-24765 | redhat_vex | git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree | fixed: 153 known affected: 50 | 2026-07-03T01:40:58+00:00 | Vulnerability · Source |
| CVE-2022-21499 | redhat_vex | kernel: possible to use the debugger to write zero into a location of choice | fixed: 475 known affected: 28 known not affected: 14 | 2026-07-03T01:40:54+00:00 | Vulnerability · Source |
| CVE-2022-4645 | redhat_vex | libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c | fixed: 84 known affected: 13 | 2026-07-03T01:40:52+00:00 | Vulnerability · Source |
| CVE-2022-2953 | redhat_vex | libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c | fixed: 84 known affected: 13 | 2026-07-03T01:40:48+00:00 | Vulnerability · Source |
| CVE-2022-2929 | redhat_vex | dhcp: DHCP memory leak | fixed: 83 known affected: 11 | 2026-07-03T01:40:47+00:00 | Vulnerability · Source |
| CVE-2022-2928 | redhat_vex | dhcp: option refcount overflow when leasequery is enabled leading to dhcpd abort | fixed: 83 known affected: 11 | 2026-07-03T01:40:42+00:00 | Vulnerability · Source |
| CVE-2022-1678 | redhat_vex | kernel: improper update of sock reference in TCP pacing can lead to memory leak | known affected: 14 known not affected: 184 | 2026-07-03T01:40:35+00:00 | Vulnerability · Source |
| CVE-2022-2586 | redhat_vex | kernel: nf_tables cross-table potential use-after-free may lead to local privilege escalation | fixed: 475 known not affected: 42 | 2026-07-03T01:40:16+00:00 | Vulnerability · Source |
| CVE-2026-57918 | microsoft_vex | libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in rpc_read_from_socket in lib/socket.c during a connection to a crafted NFS server, when the expected pdu size exceeds the absolute pdu size from the xid/record-marker. | known not affected: 1 | 2026-07-03T01:10:48+00:00 | Vulnerability · Source |
| CVE-2026-57231 | microsoft_vex | Podman: Malformed Image can trick podman run into leaking host environment variables into the container | known not affected: 1 | 2026-07-03T01:10:42+00:00 | Vulnerability · Source |