VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2021-20303 | redhat_vex | OpenEXR: Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer | known affected: 13 | 2026-06-26T19:44:42+00:00 | Vulnerability · Source |
| CVE-2026-53023 | redhat_vex | kernel: fs/ntfs3: terminate the cached volume label after UTF-8 conversion | known not affected: 274 | 2026-06-26T19:40:14+00:00 | Vulnerability · Source |
| CVE-2021-23215 | redhat_vex | OpenEXR: Integer-overflow in Imf_2_5::DwaCompressor::initializeBuffers | known affected: 13 known not affected: 4 | 2026-06-26T19:36:13+00:00 | Vulnerability · Source |
| CVE-2021-23180 | redhat_vex | htmldoc: null pointer dereference in function in file_extension() | known not affected: 1 | 2026-06-26T19:35:54+00:00 | Vulnerability · Source |
| CVE-2021-22964 | redhat_vex | fastify-static: open redirect and DoS via an URL with double slash followed by a domain and with invalid characters | known not affected: 1 | 2026-06-26T19:35:50+00:00 | Vulnerability · Source |
| CVE-2021-23191 | redhat_vex | htmldoc: null pointer dereference in function image_load_jpeg() | known not affected: 1 | 2026-06-26T19:30:43+00:00 | Vulnerability · Source |
| CVE-2021-23206 | redhat_vex | htmldoc: stack-buffer-overflow in function parse_table() | known not affected: 1 | 2026-06-26T19:30:34+00:00 | Vulnerability · Source |
| CVE-2021-25736 | redhat_vex | kubernetes: LoadBalancer Service type don't create a HNS policy for empty or invalid external loadbalancer IP, what could lead to MITM | fixed: 2 | 2026-06-26T19:24:30+00:00 | Vulnerability · Source |
| CVE-2021-23980 | redhat_vex | python-bleach: Mutation cross-site scripting in bleach.clean | fixed: 26 | 2026-06-26T19:24:29+00:00 | Vulnerability · Source |
| CVE-2021-26272 | redhat_vex | ckeditor: Regular expression denial of service via crafted URL-like text | known not affected: 1 | 2026-06-26T19:19:58+00:00 | Vulnerability · Source |
| CVE-2021-26271 | redhat_vex | ckeditor: Regular expression denial of service via crafted text into the Styles input | known not affected: 1 | 2026-06-26T19:19:57+00:00 | Vulnerability · Source |
| CVE-2021-26260 | redhat_vex | OpenEXR: Integer-overflow in Imf_2_5::DwaCompressor::initializeBuffers | known affected: 13 known not affected: 4 | 2026-06-26T19:19:57+00:00 | Vulnerability · Source |
| CVE-2021-26945 | redhat_vex | OpenEXR: Integer-overflow in bool Imf_2_5::readDeepTile<Imf_2_5::DeepTiledInputPart> | known affected: 13 known not affected: 4 | 2026-06-26T19:19:56+00:00 | Vulnerability · Source |
| CVE-2021-26707 | redhat_vex | nodejs-merge-deep: Prototype pollution of Object.prototype via a constructor payload | known affected: 3 known not affected: 3 | 2026-06-26T19:19:52+00:00 | Vulnerability · Source |
| CVE-2021-26906 | redhat_vex | asterisk: remote crash vulnerability in PJSIP channel driver | known not affected: 1 | 2026-06-26T19:19:48+00:00 | Vulnerability · Source |
| CVE-2021-27668 | redhat_vex | vault: Vault Enterprise’s DR Secondaries Exposed License Metadata Without Authentication | known not affected: 14 | 2026-06-26T19:19:47+00:00 | Vulnerability · Source |
| CVE-2021-27025 | redhat_vex | puppet: silent configuration failure in agent | fixed: 170 known affected: 5 known not affected: 36 | 2026-06-26T19:19:43+00:00 | Vulnerability · Source |
| CVE-2021-27400 | redhat_vex | vault: TLS certificates not validated when connecting to Cassandra clusters | known not affected: 32 | 2026-06-26T19:19:42+00:00 | Vulnerability · Source |
| CVE-2021-26676 | redhat_vex | connman: remote stack information leak | known not affected: 1 | 2026-06-26T19:19:41+00:00 | Vulnerability · Source |
| CVE-2021-28689 | redhat_vex | xen: Speculative vulnerabilities with bare (non-shim) 32-bit PV guests (XSA-370) | known not affected: 1 | 2026-06-26T19:15:03+00:00 | Vulnerability · Source |
| CVE-2021-28651 | redhat_vex | squid: denial of service in URN processing | fixed: 51 known affected: 4 known not affected: 2 | 2026-06-26T19:15:00+00:00 | Vulnerability · Source |
| CVE-2021-28695 | redhat_vex | xen: discontinuous range is specified by firmware leads to vulnerability | known not affected: 1 | 2026-06-26T19:14:53+00:00 | Vulnerability · Source |
| CVE-2021-28694 | redhat_vex | xen: failed to prevent guests from undoing/replacing such mappings | known not affected: 1 | 2026-06-26T19:14:52+00:00 | Vulnerability · Source |
| CVE-2021-28696 | redhat_vex | xen: physical device from a guest allowing to access memory | known not affected: 1 | 2026-06-26T19:14:52+00:00 | Vulnerability · Source |
| CVE-2021-28905 | redhat_vex | libyang: reachable assertion in lys_node_free() | known affected: 2 known not affected: 4 | 2026-06-26T19:14:51+00:00 | Vulnerability · Source |
| CVE-2021-28021 | redhat_vex | stb: buffer overflow in stbi__extend_receive() in stb_image.h via a crafted JPEG file | known affected: 3 known not affected: 9 | 2026-06-26T19:14:45+00:00 | Vulnerability · Source |
| CVE-2021-28156 | redhat_vex | consul: Audit log requests bypass | known not affected: 25 | 2026-06-26T19:14:40+00:00 | Vulnerability · Source |
| CVE-2021-28918 | redhat_vex | nodejs-netmask: improper input validation of octal input data | known affected: 4 | 2026-06-26T19:14:39+00:00 | Vulnerability · Source |
| CVE-2021-28146 | redhat_vex | grafana: Authorization bypass via external groups | known not affected: 35 | 2026-06-26T19:14:33+00:00 | Vulnerability · Source |
| CVE-2021-28148 | redhat_vex | grafana: usage insights API endpoint doesn't limit number of requests which could result in DoS | known not affected: 35 | 2026-06-26T19:14:31+00:00 | Vulnerability · Source |
| CVE-2021-27962 | redhat_vex | grafana: users with editor role allows to bypass data source permissions | known affected: 2 known not affected: 33 | 2026-06-26T19:14:29+00:00 | Vulnerability · Source |
| CVE-2021-28147 | redhat_vex | grafana: Allows to bypass access control restrictions via external groups | known not affected: 35 | 2026-06-26T19:14:28+00:00 | Vulnerability · Source |
| CVE-2021-28091 | redhat_vex | lasso: XML signature wrapping vulnerability when parsing SAML responses | fixed: 104 known affected: 3 known not affected: 4 | 2026-06-26T19:14:05+00:00 | Vulnerability · Source |
| CVE-2021-29338 | redhat_vex | openjpeg: out-of-bounds write due to an integer overflow in opj_compress.c | fixed: 47 known affected: 23 known not affected: 4 | 2026-06-26T19:10:08+00:00 | Vulnerability · Source |
| CVE-2026-52979 | redhat_vex | kernel: net: psp: check for device unregister when creating assoc | known not affected: 274 | 2026-06-26T19:10:03+00:00 | Vulnerability · Source |
| CVE-2021-29653 | redhat_vex | vault: PKI Engine CRL May Exclude Revoked But Unexpired Certificates After Tidy | known not affected: 32 | 2026-06-26T19:10:01+00:00 | Vulnerability · Source |
| CVE-2021-29458 | redhat_vex | exiv2: Out-of-bounds read in Exiv2::Internal::CrwMap::encode | fixed: 46 known affected: 8 known not affected: 4 | 2026-06-26T19:10:00+00:00 | Vulnerability · Source |
| CVE-2021-29457 | redhat_vex | exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata | fixed: 46 known affected: 8 known not affected: 4 | 2026-06-26T19:09:55+00:00 | Vulnerability · Source |
| CVE-2026-53024 | redhat_vex | kernel: greybus: raw: fix use-after-free if write is called after disconnect | known not affected: 274 | 2026-06-26T19:05:04+00:00 | Vulnerability · Source |
| CVE-2021-3024 | redhat_vex | vault: API Endpoint Exposed Internal IP Address Without Authentication | known affected: 5 known not affected: 8 | 2026-06-26T19:05:02+00:00 | Vulnerability · Source |
| CVE-2021-30744 | redhat_vex | webkitgtk: Cross-origin issue with iframe elements leading to universal cross site scripting attack | fixed: 59 known affected: 9 known not affected: 379 | 2026-06-26T19:04:58+00:00 | Vulnerability · Source |
| CVE-2021-32292 | redhat_vex | json-c: stack-buffer-overflow in parseit() in json_parse.c | known not affected: 14 | 2026-06-26T18:56:31+00:00 | Vulnerability · Source |
| CVE-2021-3200 | redhat_vex | libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c | fixed: 97 known affected: 8 known not affected: 3482 | 2026-06-26T18:56:31+00:00 | Vulnerability · Source |
| CVE-2021-31292 | redhat_vex | exiv2: Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS | fixed: 62 known affected: 12 known not affected: 4 | 2026-06-26T18:56:28+00:00 | Vulnerability · Source |
| CVE-2021-32142 | redhat_vex | LibRaw: stack buffer overflow in LibRaw_buffer_datastream::gets() in src/libraw_datastream.cpp | fixed: 96 | 2026-06-26T18:56:04+00:00 | Vulnerability · Source |
| CVE-2021-31232 | redhat_vex | cortex: Alertmanager can expose local files content via specially crafted config | known affected: 2 known not affected: 32 | 2026-06-26T18:56:00+00:00 | Vulnerability · Source |
| CVE-2021-31920 | redhat_vex | istio/istio: HTTP request with escaped slash characters can bypass authorization mechanisms | fixed: 51 known not affected: 8 | 2026-06-26T18:54:44+00:00 | Vulnerability · Source |
| CVE-2021-32917 | redhat_vex | prosody: use of mod_proxy65 is unrestricted in default configuration | known not affected: 1 | 2026-06-26T18:49:21+00:00 | Vulnerability · Source |
| CVE-2021-32850 | redhat_vex | jquery-minicolors: cross-site scripting when handling untrusted color names | known not affected: 1 | 2026-06-26T18:49:20+00:00 | Vulnerability · Source |
| CVE-2021-3281 | redhat_vex | django: Potential directory-traversal via archive.extract() | fixed: 33 known affected: 21 known not affected: 1 | 2026-06-26T18:49:12+00:00 | Vulnerability · Source |