VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2021-3282 | redhat_vex | vault: Vault Enterprise’s DR Secondaries Allowed Raft Peer Removal Without Authentication | known not affected: 14 | 2026-06-26T18:49:09+00:00 | Vulnerability · Source |
| CVE-2021-3377 | redhat_vex | nodejs-ansi_up: XSS due to insufficient URL sanitization | known affected: 1 | 2026-06-26T18:44:27+00:00 | Vulnerability · Source |
| CVE-2021-3345 | redhat_vex | libgcrypt: Heap buffer overflow in the block buffer management code | known not affected: 12 | 2026-06-26T18:44:09+00:00 | Vulnerability · Source |
| CVE-2021-3477 | redhat_vex | OpenEXR: Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts | known affected: 13 | 2026-06-26T18:39:17+00:00 | Vulnerability · Source |
| CVE-2021-34338 | redhat_vex | ming: out-of-bounds access in getName() in util/decompile.c | known not affected: 1 | 2026-06-26T18:39:16+00:00 | Vulnerability · Source |
| CVE-2021-3447 | redhat_vex | ansible: multiple modules expose secured values | fixed: 21 known affected: 5 known not affected: 78 | 2026-06-26T18:39:12+00:00 | Vulnerability · Source |
| CVE-2021-34339 | redhat_vex | ming: out-of-bounds access in getString() in util/decompile.c | known not affected: 1 | 2026-06-26T18:39:10+00:00 | Vulnerability · Source |
| CVE-2021-3445 | redhat_vex | libdnf: Signature verification bypass via signature placed in the main RPM header | fixed: 71 known not affected: 4 | 2026-06-26T18:39:09+00:00 | Vulnerability · Source |
| CVE-2021-3420 | redhat_vex | newlib: improper validation in memory allocation functions could lead to heap-based buffer overflow | known not affected: 1 | 2026-06-26T18:39:09+00:00 | Vulnerability · Source |
| CVE-2021-3482 | redhat_vex | exiv2: Heap-based buffer overflow in Jp2Image::readMetadata() | fixed: 46 known affected: 8 known not affected: 4 | 2026-06-26T18:39:08+00:00 | Vulnerability · Source |
| CVE-2021-34340 | redhat_vex | ming: out-of-bounds access in decompileINCR_DECR() in util/decompile.c | known not affected: 1 | 2026-06-26T18:39:03+00:00 | Vulnerability · Source |
| CVE-2021-3481 | redhat_vex | qt: Out of bounds read in function QRadialFetchSimd from crafted svg file | fixed: 1262 known affected: 44 known not affected: 11 | 2026-06-26T18:39:01+00:00 | Vulnerability · Source |
| CVE-2021-3514 | redhat_vex | 389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control() | fixed: 110 known affected: 9 known not affected: 6 | 2026-06-26T18:34:36+00:00 | Vulnerability · Source |
| CVE-2021-3502 | redhat_vex | avahi: reachable assertion in avahi_s_host_name_resolver_start when trying to resolve badly-formatted hostnames | fixed: 245 known not affected: 63 | 2026-06-26T18:34:33+00:00 | Vulnerability · Source |
| CVE-2021-3529 | redhat_vex | noobaa-core: Cross-site scripting vulnerability with noobaa management URL | fixed: 24 | 2026-06-26T18:34:26+00:00 | Vulnerability · Source |
| CVE-2021-3499 | redhat_vex | openshift/ovn-kubernetes: Egress Firewall does not reliably apply firewall rules | fixed: 103 | 2026-06-26T18:34:22+00:00 | Vulnerability · Source |
| CVE-2021-3528 | redhat_vex | NooBaa: noobaa-operator leaking RPC AuthToken into log files | fixed: 6 known not affected: 36 | 2026-06-26T18:34:10+00:00 | Vulnerability · Source |
| CVE-2021-3557 | redhat_vex | argocd: ServiceAccount argocd-argocd-server is able to read all resources of the whole cluster | fixed: 6 | 2026-06-26T18:34:08+00:00 | Vulnerability · Source |
| CVE-2021-3598 | redhat_vex | OpenEXR: Heap buffer overflow in Imf_3_1::CharPtrIO::readChars | known affected: 13 known not affected: 4 | 2026-06-26T18:29:50+00:00 | Vulnerability · Source |
| CVE-2021-3605 | redhat_vex | OpenEXR: Heap buffer overflow in the rleUncompress function | known affected: 13 known not affected: 4 | 2026-06-26T18:29:49+00:00 | Vulnerability · Source |
| CVE-2021-35937 | redhat_vex | rpm: TOCTOU race in checks for unsafe symlinks | fixed: 1312 known affected: 19 | 2026-06-26T18:29:34+00:00 | Vulnerability · Source |
| CVE-2021-3580 | redhat_vex | nettle: Remote crash in RSA decryption via manipulated ciphertext | fixed: 106 known affected: 3 known not affected: 6 | 2026-06-26T18:29:33+00:00 | Vulnerability · Source |
| CVE-2021-3565 | redhat_vex | tpm2-tools: fixed AES wrapping key in tpm2_import | fixed: 13 known not affected: 3 | 2026-06-26T18:29:20+00:00 | Vulnerability · Source |
| CVE-2021-3583 | redhat_vex | ansible: Template Injection through yaml multi-line strings with ansible facts used in template. | fixed: 14 known affected: 1 known not affected: 293 | 2026-06-26T18:29:17+00:00 | Vulnerability · Source |
| CVE-2021-3673 | redhat_vex | radare2: improper input validation can lead to resource exhaustion when reading LE binary | known not affected: 1 | 2026-06-26T18:25:00+00:00 | Vulnerability · Source |
| CVE-2021-3670 | redhat_vex | samba: MaxQueryDuration not honoured in Samba AD DC LDAP | known not affected: 172 | 2026-06-26T18:24:54+00:00 | Vulnerability · Source |
| CVE-2021-3624 | redhat_vex | dcraw: Buffer overflow caused by integer-overflow in foveon_load_camf() | known affected: 11 known not affected: 6 | 2026-06-26T18:24:47+00:00 | Vulnerability · Source |
| CVE-2021-3684 | redhat_vex | assisted-installer: Image Pull Secret leaked through log files | fixed: 4 known not affected: 2 | 2026-06-26T18:24:37+00:00 | Vulnerability · Source |
| CVE-2021-36754 | redhat_vex | pdns: specific query crashes Authoritative Server | known not affected: 1 | 2026-06-26T18:24:36+00:00 | Vulnerability · Source |
| CVE-2021-3681 | redhat_vex | ansible: Secrets leakage vulnerability with ansible collections and ansible galaxy | known affected: 1 | 2026-06-26T18:24:27+00:00 | Vulnerability · Source |
| CVE-2021-37600 | redhat_vex | util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c | known affected: 9 known not affected: 31 | 2026-06-26T18:19:50+00:00 | Vulnerability · Source |
| CVE-2021-3782 | redhat_vex | wayland: libwayland-server wl_shm reference-count overflow | fixed: 61 known affected: 12 | 2026-06-26T18:19:45+00:00 | Vulnerability · Source |
| CVE-2021-38553 | redhat_vex | vault: Underlying database file with excessively broad filesystem permissions | known affected: 6 known not affected: 16 | 2026-06-26T18:10:11+00:00 | Vulnerability · Source |
| CVE-2021-38511 | redhat_vex | tar-crate: links in archive can create arbitrary directories | known not affected: 1 | 2026-06-26T18:09:37+00:00 | Vulnerability · Source |
| CVE-2021-38512 | redhat_vex | rust-actix-http: potential request smuggling capabilities due to lack of input validation | known not affected: 1 | 2026-06-26T18:09:34+00:00 | Vulnerability · Source |
| CVE-2021-39714 | redhat_vex | kernel: use-after-free due to an integer overflow in ion_buffer_kmap_get() in ion.c | known not affected: 198 | 2026-06-26T18:04:37+00:00 | Vulnerability · Source |
| CVE-2021-3935 | redhat_vex | pgbouncer: server processes unencrypted bytes from man-in-the-middle | known not affected: 1 | 2026-06-26T18:04:35+00:00 | Vulnerability · Source |
| CVE-2021-41229 | redhat_vex | bluez: memory leak in the SDP protocol | fixed: 111 known affected: 14 known not affected: 6 | 2026-06-26T17:59:23+00:00 | Vulnerability · Source |
| CVE-2021-41186 | redhat_vex | fluentd: ReDoS vulnerability in parser_apache2 | known affected: 10 | 2026-06-26T17:59:22+00:00 | Vulnerability · Source |
| CVE-2021-41571 | redhat_vex | pulsar: Pulsar Admin API allows access to data from other tenants using getMessageById API | known affected: 1 | 2026-06-26T17:55:03+00:00 | Vulnerability · Source |
| CVE-2021-4142 | redhat_vex | Satellite: Allow unintended SCA certificate to authenticate Candlepin | fixed: 11 known not affected: 3526 | 2026-06-26T17:54:57+00:00 | Vulnerability · Source |
| CVE-2021-41990 | redhat_vex | strongswan: gmp plugin: integer overflow via a crafted certificate with an RSASSA-PSS signature | known not affected: 1 | 2026-06-26T17:54:55+00:00 | Vulnerability · Source |
| CVE-2021-41991 | redhat_vex | strongswan: integer overflow when replacing certificates in cache | known affected: 1 | 2026-06-26T17:54:52+00:00 | Vulnerability · Source |
| CVE-2021-41802 | redhat_vex | vault: Incorrect Permission Assignment for Critical Resource | known not affected: 15 | 2026-06-26T17:54:39+00:00 | Vulnerability · Source |
| CVE-2021-42135 | redhat_vex | vault: Google Cloud credential disclosure | known not affected: 14 | 2026-06-26T17:53:32+00:00 | Vulnerability · Source |
| CVE-2026-53055 | redhat_vex | kernel: crypto: hisilicon/sec2 - prevent req used-after-free for sec | known not affected: 274 | 2026-06-26T17:49:07+00:00 | Vulnerability · Source |
| CVE-2021-42260 | redhat_vex | tinyxml: infinite loop causes crash | known not affected: 1 | 2026-06-26T17:49:06+00:00 | Vulnerability · Source |
| CVE-2021-4249 | redhat_vex | ghc-xml-conduit: infinite loop via crafted xml | known not affected: 1 | 2026-06-26T17:49:06+00:00 | Vulnerability · Source |
| CVE-2021-4218 | redhat_vex | kernel: sysctl parameter read causes kernel panic ( rpcrdma module ) | known not affected: 155 | 2026-06-26T17:49:04+00:00 | Vulnerability · Source |
| CVE-2021-43518 | redhat_vex | teeworlds: code execution via malicious map file | known not affected: 1 | 2026-06-26T17:44:24+00:00 | Vulnerability · Source |