VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294458 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-25081 | redhat_vex | fontforge: command injection via crafted filenames | fixed: 48 known affected: 5 | 2026-06-28T07:49:19+00:00 | Vulnerability · Source |
| CVE-2021-44531 | redhat_vex | nodejs: Improper handling of URI Subject Alternative Names | fixed: 242 known affected: 1 known not affected: 85 | 2026-06-28T07:49:18+00:00 | Vulnerability · Source |
| CVE-2021-44532 | redhat_vex | nodejs: Certificate Verification Bypass via String Injection | fixed: 242 known affected: 1 known not affected: 85 | 2026-06-28T07:49:17+00:00 | Vulnerability · Source |
| CVE-2021-43975 | redhat_vex | kernel: out-of-bounds write in hw_atl_utils_fw_rpc_wait() in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c | fixed: 399 known affected: 137 known not affected: 14 | 2026-06-28T07:49:12+00:00 | Vulnerability · Source |
| CVE-2021-43976 | redhat_vex | kernel: mwifiex_usb_recv() in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker to cause DoS via crafted USB device | fixed: 150 known affected: 28 known not affected: 120 | 2026-06-28T07:49:12+00:00 | Vulnerability · Source |
| CVE-2024-2466 | redhat_vex | curl: TLS certificate check bypass with mbedTLS | fixed: 77 known not affected: 28 | 2026-06-28T07:49:11+00:00 | Vulnerability · Source |
| CVE-2024-36902 | redhat_vex | kernel: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() | fixed: 709 known affected: 64 known not affected: 8 | 2026-06-28T07:49:10+00:00 | Vulnerability · Source |
| CVE-2021-42739 | redhat_vex | kernel: Heap buffer overflow in firedtv driver | fixed: 335 known affected: 122 known not affected: 20 | 2026-06-28T07:49:07+00:00 | Vulnerability · Source |
| CVE-2024-2398 | redhat_vex | curl: HTTP/2 push headers memory-leak | fixed: 342 known affected: 12 known not affected: 5 | 2026-06-28T07:49:07+00:00 | Vulnerability · Source |
| CVE-2021-42327 | redhat_vex | kernel: heap-based buffer overflow in dp_link_settings_write() in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | known not affected: 197 | 2026-06-28T07:49:07+00:00 | Vulnerability · Source |
| CVE-2021-42771 | redhat_vex | python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code | fixed: 711 known affected: 12 known not affected: 3 | 2026-06-28T07:49:07+00:00 | Vulnerability · Source |
| CVE-2021-41819 | redhat_vex | ruby: Cookie prefix spoofing in CGI::Cookie.parse | fixed: 1127 known affected: 26 known not affected: 23 | 2026-06-28T07:49:05+00:00 | Vulnerability · Source |
| CVE-2021-4189 | redhat_vex | python: ftplib should not use the host from the PASV response | fixed: 480 known affected: 23 known not affected: 168 | 2026-06-28T07:49:05+00:00 | Vulnerability · Source |
| CVE-2021-42008 | redhat_vex | kernel: slab out-of-bounds write in decode_data() in drivers/net/hamradio/6pack.c | known not affected: 197 | 2026-06-28T07:49:05+00:00 | Vulnerability · Source |
| CVE-2024-23445 | redhat_vex | elasticsearch: Remote Cluster Search Cross Cluster API Key insufficient restrictions | known not affected: 9 | 2026-06-28T07:49:05+00:00 | Vulnerability · Source |
| CVE-2024-22259 | redhat_vex | springframework: URL Parsing with Host Validation | fixed: 1 known affected: 4 known not affected: 13 | 2026-06-28T07:49:04+00:00 | Vulnerability · Source |
| CVE-2021-41817 | redhat_vex | ruby: Regular expression denial of service vulnerability of Date parsing methods | fixed: 1115 known affected: 26 known not affected: 23 | 2026-06-28T07:49:04+00:00 | Vulnerability · Source |
| CVE-2023-38545 | redhat_vex | curl: heap based buffer overflow in the SOCKS5 proxy handshake | fixed: 253 known not affected: 215 | 2026-06-28T07:49:03+00:00 | Vulnerability · Source |
| CVE-2021-4158 | redhat_vex | QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c | fixed: 1052 known affected: 27 known not affected: 37 | 2026-06-28T07:49:02+00:00 | Vulnerability · Source |
| CVE-2021-41524 | redhat_vex | httpd: NULL pointer dereference via crafted request during HTTP/2 request processing | fixed: 28 known affected: 7 known not affected: 180 | 2026-06-28T07:49:01+00:00 | Vulnerability · Source |
| CVE-2021-4095 | redhat_vex | kernel: KVM: NULL pointer dereference in kvm_dirty_ring_get() in virt/kvm/dirty_ring.c | known not affected: 197 | 2026-06-28T07:49:01+00:00 | Vulnerability · Source |
| CVE-2021-41035 | redhat_vex | JDK: IllegalAccessError exception not thrown for MethodHandles that invoke inaccessible interface methods | fixed: 97 | 2026-06-28T07:48:59+00:00 | Vulnerability · Source |
| CVE-2021-41041 | redhat_vex | java-11-openj9,java-1_8_0-openj9: unverified methods can be invoked using MethodHandles | fixed: 60 known not affected: 6 | 2026-06-28T07:48:59+00:00 | Vulnerability · Source |
| CVE-2021-4093 | redhat_vex | kernel: KVM: SVM: out-of-bounds read/write in sev_es_string_io | fixed: 150 known not affected: 149 | 2026-06-28T07:48:58+00:00 | Vulnerability · Source |
| CVE-2023-38264 | redhat_vex | JDK: Object Request Broker (ORB) denial of service | fixed: 60 known affected: 6 | 2026-06-28T07:48:57+00:00 | Vulnerability · Source |
| CVE-2024-42265 | redhat_vex | kernel: protect the fetch of ->fd[fd] in do_dup2() from mispredictions | fixed: 704 known affected: 80 | 2026-06-28T07:48:53+00:00 | Vulnerability · Source |
| CVE-2021-3947 | redhat_vex | QEMU: NVMe: out-of-bounds memory read in nvme_changed_nslist | known not affected: 109 | 2026-06-28T07:48:49+00:00 | Vulnerability · Source |
| CVE-2021-3975 | redhat_vex | libvirt: segmentation fault during VM shutdown can lead to vdsm hang | fixed: 1886 known affected: 101 known not affected: 34 | 2026-06-28T07:48:49+00:00 | Vulnerability · Source |
| CVE-2021-3930 | redhat_vex | QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c | fixed: 2515 known affected: 64 known not affected: 24 | 2026-06-28T07:48:48+00:00 | Vulnerability · Source |
| CVE-2021-39275 | redhat_vex | httpd: Out-of-bounds write in ap_escape_quotes() via malicious input | fixed: 218 known affected: 13 known not affected: 141 | 2026-06-28T07:48:46+00:00 | Vulnerability · Source |
| CVE-2021-39263 | redhat_vex | ntfs-3g: Heap buffer overflow in ntfs_get_attribute_value() caused by an unsanitized attribute | fixed: 2813 known affected: 8 | 2026-06-28T07:48:45+00:00 | Vulnerability · Source |
| CVE-2021-39262 | redhat_vex | ntfs-3g: Out-of-bounds access in ntfs_decompress() | fixed: 2813 known affected: 8 | 2026-06-28T07:48:42+00:00 | Vulnerability · Source |
| CVE-2021-39257 | redhat_vex | ntfs-3g: Endless recursion from ntfs_attr_pwrite() triggered by an unallocated bitmap | fixed: 2813 known affected: 8 | 2026-06-28T07:48:34+00:00 | Vulnerability · Source |
| CVE-2021-39261 | redhat_vex | ntfs-3g: Heap buffer overflow in ntfs_compressed_pwrite() | fixed: 2813 known affected: 8 | 2026-06-28T07:48:33+00:00 | Vulnerability · Source |
| CVE-2021-39260 | redhat_vex | ntfs-3g: Out-of-bounds access in ntfs_inode_sync_standard_information() | fixed: 2813 known affected: 8 | 2026-06-28T07:48:32+00:00 | Vulnerability · Source |
| CVE-2021-39256 | redhat_vex | ntfs-3g: Heap buffer overflow in ntfs_inode_lookup_by_name() | fixed: 2813 known affected: 8 | 2026-06-28T07:48:32+00:00 | Vulnerability · Source |
| CVE-2021-39254 | redhat_vex | ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in ntfs_attr_record_resize() | fixed: 2813 known affected: 8 | 2026-06-28T07:48:31+00:00 | Vulnerability · Source |
| CVE-2021-39255 | redhat_vex | ntfs-3g: Out-of-bounds read ntfs_attr_find_in_attrdef() triggered by an invalid attribute | fixed: 2813 known affected: 8 | 2026-06-28T07:48:31+00:00 | Vulnerability · Source |
| CVE-2021-39253 | redhat_vex | ntfs-3g: Out-of-bounds read in ntfs_runlists_merge_i() | fixed: 2813 known affected: 8 | 2026-06-28T07:48:30+00:00 | Vulnerability · Source |
| CVE-2021-39252 | redhat_vex | ntfs-3g: Out-of-bounds read in ntfs_ie_lookup() | fixed: 2813 known affected: 8 | 2026-06-28T07:48:30+00:00 | Vulnerability · Source |
| CVE-2021-39251 | redhat_vex | ntfs-3g: NULL pointer dereference in ntfs_extent_inode_open() | fixed: 2813 known affected: 8 | 2026-06-28T07:48:30+00:00 | Vulnerability · Source |
| CVE-2023-38039 | redhat_vex | curl: out of heap memory issue due to missing limit on header quantity | fixed: 12 known not affected: 132 | 2026-06-28T07:48:28+00:00 | Vulnerability · Source |
| CVE-2024-21057 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2024) | fixed: 206 known not affected: 144 | 2026-06-28T07:48:27+00:00 | Vulnerability · Source |
| CVE-2024-21061 | redhat_vex | mysql: Server: Audit Plug-in unspecified vulnerability (CPU Apr 2024) | fixed: 206 known not affected: 144 | 2026-06-28T07:48:27+00:00 | Vulnerability · Source |
| CVE-2024-21050 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Apr 2024) | fixed: 206 known not affected: 144 | 2026-06-28T07:48:25+00:00 | Vulnerability · Source |
| CVE-2024-21051 | redhat_vex | mysql: Server: DML unspecified vulnerability (CPU Apr 2024) | fixed: 206 known not affected: 144 | 2026-06-28T07:48:25+00:00 | Vulnerability · Source |
| CVE-2024-20981 | redhat_vex | mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) | fixed: 206 known not affected: 93 | 2026-06-28T07:48:24+00:00 | Vulnerability · Source |
| CVE-2024-20978 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2024) | fixed: 206 known not affected: 93 | 2026-06-28T07:48:23+00:00 | Vulnerability · Source |
| CVE-2024-20968 | redhat_vex | mysql: Server: Options unspecified vulnerability (CPU Jan 2024) | fixed: 206 known not affected: 93 | 2026-06-28T07:48:23+00:00 | Vulnerability · Source |
| CVE-2024-20977 | redhat_vex | mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2024) | fixed: 206 known not affected: 93 | 2026-06-28T07:48:22+00:00 | Vulnerability · Source |