VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2021-45346 | redhat_vex | sqlite: crafted SQL query allows a malicious user to obtain sensitive information | known affected: 17 known not affected: 10 | 2026-06-26T17:40:37+00:00 | Vulnerability · Source |
| CVE-2021-45095 | redhat_vex | kernel: refcount leak in pep_sock_accept() in net/phonet/pep.c | known affected: 14 known not affected: 182 | 2026-06-26T17:40:35+00:00 | Vulnerability · Source |
| CVE-2021-45042 | redhat_vex | vault: clusters using the integrated storage backend allowed an authenticated user to cause a DoS of the storage backend | known not affected: 18 | 2026-06-26T17:40:34+00:00 | Vulnerability · Source |
| CVE-2021-45940 | redhat_vex | libbpf: heap-based buffer overflow (4 bytes) in __bpf_object__open | known affected: 3 known not affected: 3 | 2026-06-26T17:35:48+00:00 | Vulnerability · Source |
| CVE-2026-53013 | redhat_vex | kernel: macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF | known affected: 246 known not affected: 28 | 2026-06-26T17:35:43+00:00 | Vulnerability · Source |
| CVE-2021-45847 | redhat_vex | slic3r: NULL pointer dereference in 3MF XML via a crafted 3MF input file | known not affected: 1 | 2026-06-26T17:35:42+00:00 | Vulnerability · Source |
| CVE-2021-46147 | redhat_vex | mediawiki: not checking for CSRF tokens | known not affected: 3 | 2026-06-26T17:35:40+00:00 | Vulnerability · Source |
| CVE-2021-46149 | redhat_vex | mediawiki: searching for a very long key may lead to DoS | known not affected: 3 | 2026-06-26T17:35:30+00:00 | Vulnerability · Source |
| CVE-2021-46148 | redhat_vex | mediawiki: unprivileged users can view confidential information | known not affected: 3 | 2026-06-26T17:35:29+00:00 | Vulnerability · Source |
| CVE-2026-53029 | redhat_vex | kernel: fs/ntfs3: prevent uninitialized lcn caused by zero len | known not affected: 274 | 2026-06-26T17:35:25+00:00 | Vulnerability · Source |
| CVE-2021-45941 | redhat_vex | libbpf: heap-based buffer overflow (8 bytes) in __bpf_object__open | known affected: 3 known not affected: 3 | 2026-06-26T17:35:15+00:00 | Vulnerability · Source |
| CVE-2021-46878 | redhat_vex | fluent-bit: type confusion causing use-after-free in flb_pack_msgpack_to_json_format | known not affected: 1 | 2026-06-26T17:34:25+00:00 | Vulnerability · Source |
| CVE-2021-46879 | redhat_vex | fluent-bit: heap overflow in flb_msgpack_gelf_value_ext | known not affected: 1 | 2026-06-26T17:33:36+00:00 | Vulnerability · Source |
| CVE-2026-53040 | redhat_vex | kernel: ocfs2: validate bg_bits during freefrag scan | known not affected: 274 | 2026-06-26T17:32:22+00:00 | Vulnerability · Source |
| CVE-2021-47047 | redhat_vex | kernel: spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails | known affected: 42 known not affected: 156 | 2026-06-26T17:26:54+00:00 | Vulnerability · Source |
| CVE-2026-53019 | redhat_vex | kernel: clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc() | known not affected: 274 | 2026-06-26T17:26:54+00:00 | Vulnerability · Source |
| CVE-2022-0544 | redhat_vex | blender: Out-of-bounds memory access due to malformed DDS image file | known not affected: 1 | 2026-06-26T16:44:36+00:00 | Vulnerability · Source |
| CVE-2022-0545 | redhat_vex | blender: Out-of-bounds memory access in IMB_flipy() due to large image dimensions | known not affected: 1 | 2026-06-26T16:44:19+00:00 | Vulnerability · Source |
| CVE-2022-0546 | redhat_vex | blender: Out-of-bounds memory access due to malformed HDR image file | known not affected: 1 | 2026-06-26T16:44:19+00:00 | Vulnerability · Source |
| CVE-2022-1195 | redhat_vex | kernel: A possible race condition (use-after-free) in drivers/net/hamradio/6pack ( mkiss.c) after unregister_netdev | known not affected: 198 | 2026-06-26T16:39:42+00:00 | Vulnerability · Source |
| CVE-2022-0959 | redhat_vex | pgadmin: Unrestricted file upload in pgAdmin | known not affected: 1 | 2026-06-26T16:39:41+00:00 | Vulnerability · Source |
| CVE-2022-0866 | redhat_vex | wildfly: Wildfly management of EJB Session context returns wrong caller principal with Elytron Security enabled | fixed: 35 known affected: 13 known not affected: 233 | 2026-06-26T16:39:36+00:00 | Vulnerability · Source |
| CVE-2022-0918 | redhat_vex | 389-ds-base: sending crafted message could result in DoS | fixed: 192 known affected: 5 | 2026-06-26T16:39:30+00:00 | Vulnerability · Source |
| CVE-2022-1615 | redhat_vex | samba: GnuTLS gnutls_rnd() can fail and give predictable random values | fixed: 1409 known affected: 94 known not affected: 70 | 2026-06-26T16:31:08+00:00 | Vulnerability · Source |
| CVE-2022-1616 | redhat_vex | vim: heap-buffer-overflow in append_command of src/ex_docmd.c | known affected: 6 known not affected: 24 | 2026-06-26T16:31:06+00:00 | Vulnerability · Source |
| CVE-2022-1677 | redhat_vex | openshift/router: route hijacking attack via crafted HAProxy configuration file | fixed: 18 known not affected: 1874 | 2026-06-26T16:30:51+00:00 | Vulnerability · Source |
| CVE-2022-1949 | redhat_vex | 389-ds-base: access control bypass by query (filter in LDAP terms) optimiser | known affected: 11 known not affected: 14 | 2026-06-26T16:25:25+00:00 | Vulnerability · Source |
| CVE-2022-2120 | redhat_vex | dcmtk: relative path traversal | known not affected: 1 | 2026-06-26T16:25:10+00:00 | Vulnerability · Source |
| CVE-2026-57918 | redhat_vex | libnfs: libnfs: Information disclosure and data manipulation vulnerability | known not affected: 1 | 2026-06-26T16:24:42+00:00 | Vulnerability · Source |
| CVE-2026-53017 | redhat_vex | kernel: f2fs: fix data loss caused by incorrect use of nat_entry flag | known not affected: 274 | 2026-06-26T16:20:20+00:00 | Vulnerability · Source |
| CVE-2022-21664 | redhat_vex | wordpress: SQL injection due to improper sanitization in WP_Meta_Query | known not affected: 1 | 2026-06-26T16:15:29+00:00 | Vulnerability · Source |
| CVE-2022-21723 | redhat_vex | pjsip: malformed SIP packets may cause out-of-bounds read access | known not affected: 1 | 2026-06-26T16:15:08+00:00 | Vulnerability · Source |
| CVE-2022-21722 | redhat_vex | pjsip: possible out-of-bound read access | known not affected: 1 | 2026-06-26T16:14:22+00:00 | Vulnerability · Source |
| CVE-2022-2238 | redhat_vex | search-api: SQL injection leads to remote denial of service | known affected: 1 | 2026-06-26T16:12:59+00:00 | Vulnerability · Source |
| CVE-2022-2220 | redhat_vex | openshfit-router: fails to verify subdomain ownership which can lead to route takeover | known not affected: 17 | 2026-06-26T16:12:59+00:00 | Vulnerability · Source |
| CVE-2022-23471 | redhat_vex | containerd: host memory exhaustion | known not affected: 1 | 2026-06-26T16:07:52+00:00 | Vulnerability · Source |
| CVE-2022-23536 | redhat_vex | cortex: Alertmanager can expose local files content via specially crafted config | known not affected: 34 | 2026-06-26T16:07:46+00:00 | Vulnerability · Source |
| CVE-2022-23639 | redhat_vex | rust-crossbeam: unaligned memory accesses and data races could lead to denial of service for 32-bit targets only | known not affected: 1 | 2026-06-26T16:06:25+00:00 | Vulnerability · Source |
| CVE-2022-23808 | redhat_vex | phpMyAdmin: multiple XSS and HTML injection attacks in setup script | known not affected: 1 | 2026-06-26T16:00:49+00:00 | Vulnerability · Source |
| CVE-2022-24721 | redhat_vex | cometd: Improper Authorization in org.cometd.oort | known affected: 3 known not affected: 4 | 2026-06-26T16:00:47+00:00 | Vulnerability · Source |
| CVE-2026-13434 | redhat_vex | virt-controller-rhel9: kubevirt: kubevirt: Multus default-network annotation injection via unvalidated tenant networkName when ExternalNetResourceInjection is enabled | known affected: 1 | 2026-06-26T16:00:39+00:00 | Vulnerability · Source |
| CVE-2022-24730 | redhat_vex | argocd: path traversal and improper access control allows leaking out-of-bound files | fixed: 4 known not affected: 23 | 2026-06-26T16:00:33+00:00 | Vulnerability · Source |
| CVE-2022-23711 | redhat_vex | kibana: Exposure of Sensitive Information (ESA-2022-05) | known affected: 2 known not affected: 10 | 2026-06-26T16:00:33+00:00 | Vulnerability · Source |
| CVE-2022-24348 | redhat_vex | gitops: Path traversal and dereference of symlinks when passing Helm value files | fixed: 27 | 2026-06-26T16:00:29+00:00 | Vulnerability · Source |
| CVE-2022-24731 | redhat_vex | argocd: path traversal allows leaking out-of-bound files | fixed: 4 known not affected: 23 | 2026-06-26T15:59:23+00:00 | Vulnerability · Source |
| CVE-2022-24720 | redhat_vex | rubygem-image_processing: remote shell execution via #apply method | known not affected: 1 | 2026-06-26T15:58:43+00:00 | Vulnerability · Source |
| CVE-2022-24904 | redhat_vex | argocd: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server | fixed: 28 | 2026-06-26T15:55:48+00:00 | Vulnerability · Source |
| CVE-2022-24882 | redhat_vex | freerdp: Server side NTLM does not properly check parameters | known not affected: 24 | 2026-06-26T15:55:44+00:00 | Vulnerability · Source |
| CVE-2022-24775 | redhat_vex | php-guzzlehttp-psr7: improper header parsing in php-guzzlehttp-psr7 | known not affected: 1 | 2026-06-26T15:55:40+00:00 | Vulnerability · Source |
| CVE-2022-24905 | redhat_vex | argocd: Login screen allows message spoofing if SSO is enabled | fixed: 28 | 2026-06-26T15:55:39+00:00 | Vulnerability · Source |