VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297693 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-21507 | redhat_vex | mysql2: Improper Input Validation | known not affected: 2 | 2026-06-26T04:12:18+00:00 | Vulnerability · Source |
| CVE-2024-21535 | redhat_vex | markdown-to-jsx: Cross-site Scripting vulnerability in markdown-to-jsx | known affected: 3 known not affected: 7 | 2026-06-26T04:12:15+00:00 | Vulnerability · Source |
| CVE-2024-21509 | redhat_vex | mysql2: Prototype Poisoning | known not affected: 2 | 2026-06-26T04:12:10+00:00 | Vulnerability · Source |
| CVE-2024-2176 | redhat_vex | chromium-browser: Use after free in FedCM | known not affected: 1 | 2026-06-26T04:12:09+00:00 | Vulnerability · Source |
| CVE-2024-21508 | redhat_vex | mysql2: Remote Code Execution | known not affected: 2 | 2026-06-26T04:12:08+00:00 | Vulnerability · Source |
| CVE-2024-22212 | redhat_vex | nextcloud: password verification method allows an attacker to authenticate as another user | known not affected: 1 | 2026-06-26T04:12:08+00:00 | Vulnerability · Source |
| CVE-2024-21661 | redhat_vex | argo-cd: Denial of Service Due to Unsafe Array Modification in Multi-threaded Environment | fixed: 115 known affected: 1 | 2026-06-26T04:11:40+00:00 | Vulnerability · Source |
| CVE-2024-21511 | redhat_vex | mysql2: Arbitrary Code Injection due to improper sanitization of the timezone parameter | known not affected: 2 | 2026-06-26T04:11:09+00:00 | Vulnerability · Source |
| CVE-2024-21512 | redhat_vex | mysql2: vulnerable to Prototype Pollution due to improper user input sanitization | known not affected: 2 | 2026-06-26T04:10:58+00:00 | Vulnerability · Source |
| CVE-2024-2174 | redhat_vex | chromium-browser: Inappropriate implementation in V8 | known not affected: 1 | 2026-06-26T04:10:51+00:00 | Vulnerability · Source |
| CVE-2024-2173 | redhat_vex | chromium-browser: Out of bounds memory access in V8 | known not affected: 1 | 2026-06-26T04:10:44+00:00 | Vulnerability · Source |
| CVE-2024-2400 | redhat_vex | chromium-browser: Use after free in Performance Manager | known not affected: 1 | 2026-06-26T04:08:09+00:00 | Vulnerability · Source |
| CVE-2024-23770 | redhat_vex | darkhttpd: allows local users to discover credentials | known not affected: 1 | 2026-06-26T04:08:07+00:00 | Vulnerability · Source |
| CVE-2024-23771 | redhat_vex | darkhttpd: uses strcmp to verify authentication to bypass authentication via a timing side channel | known not affected: 1 | 2026-06-26T04:08:07+00:00 | Vulnerability · Source |
| CVE-2024-23744 | redhat_vex | mbedtls: persistent handshake denial if a client sends a TLS | known not affected: 1 | 2026-06-26T04:08:06+00:00 | Vulnerability · Source |
| CVE-2024-22424 | redhat_vex | argo-cd: vulnerable to a cross-server request forgery (CSRF) attack | fixed: 99 | 2026-06-26T04:08:03+00:00 | Vulnerability · Source |
| CVE-2024-2408 | redhat_vex | php: potential exposure to Marvin attack via unsafe implementation of RSA decryption API | fixed: 34 known affected: 226 | 2026-06-26T04:08:00+00:00 | Vulnerability · Source |
| CVE-2024-23840 | redhat_vex | goreleaser: goreleaser release --debug shows secrets | known affected: 1 | 2026-06-26T04:07:59+00:00 | Vulnerability · Source |
| CVE-2024-24816 | redhat_vex | ckeditor: cross-site scripting vulnerability in samples with preview feature enabled | known not affected: 1 | 2026-06-26T04:03:58+00:00 | Vulnerability · Source |
| CVE-2024-24762 | redhat_vex | python-fastapi: regular expression denial of service vulnerability | known not affected: 1 | 2026-06-26T04:03:58+00:00 | Vulnerability · Source |
| CVE-2024-26142 | redhat_vex | rubygem-actionpack: Possible DoS vulnerability in Accept header | known affected: 1 known not affected: 1 | 2026-06-26T04:03:57+00:00 | Vulnerability · Source |
| CVE-2024-25112 | redhat_vex | Exiv2: Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder | known not affected: 23 | 2026-06-26T04:03:50+00:00 | Vulnerability · Source |
| CVE-2024-25617 | redhat_vex | squid: denial of service in HTTP header parser | fixed: 224 known affected: 4 | 2026-06-26T04:03:49+00:00 | Vulnerability · Source |
| CVE-2024-24815 | redhat_vex | ckeditor: cross-site scripting vulnerability via incorrect CDATA detection | known not affected: 1 | 2026-06-26T04:03:46+00:00 | Vulnerability · Source |
| CVE-2024-26134 | redhat_vex | cbor2: Potential buffer overflow in CBOR2 decoder | known not affected: 1 | 2026-06-26T04:03:42+00:00 | Vulnerability · Source |
| CVE-2024-26150 | redhat_vex | backstage/backend-common: path traversal through symlinks | known affected: 1 known not affected: 1 | 2026-06-26T03:52:07+00:00 | Vulnerability · Source |
| CVE-2024-2660 | redhat_vex | Vault: Vault TLS Cert Auth Method Did Not Correctly Validate OCSP Responses | known not affected: 12 | 2026-06-26T03:52:04+00:00 | Vulnerability · Source |
| CVE-2024-26955 | redhat_vex | kernel: nilfs2: prevent kernel bug at submit_bh_wbc() | known not affected: 198 | 2026-06-26T03:31:42+00:00 | Vulnerability · Source |
| CVE-2024-27088 | redhat_vex | node-es5-ext: regular expression denial of service in `function#copy` and `function#toStringTokens` | known not affected: 1 | 2026-06-26T03:27:56+00:00 | Vulnerability · Source |
| CVE-2024-27305 | redhat_vex | aio-libs/aiosmtpd: SMTP smuggling | known not affected: 1 | 2026-06-26T03:27:56+00:00 | Vulnerability · Source |
| CVE-2024-27137 | redhat_vex | org.apache.cassandra:cassandra-all: Apache Cassandra: unrestricted deserialization of JMX authentication credentials | known not affected: 9 | 2026-06-26T03:27:55+00:00 | Vulnerability · Source |
| CVE-2024-27135 | redhat_vex | apache-pulsar: Improper Input Validation in Pulsar Function Worker allows Remote Code Execution | known affected: 1 known not affected: 4 | 2026-06-26T03:26:58+00:00 | Vulnerability · Source |
| CVE-2024-28960 | redhat_vex | mbedtls: Insecure handling of shared memory in PSA Crypto APIs | known not affected: 1 | 2026-06-26T03:22:34+00:00 | Vulnerability · Source |
| CVE-2024-28085 | redhat_vex | util-linux: CVE-2024-28085: wall: escape sequence injection | known not affected: 62 | 2026-06-26T03:22:34+00:00 | Vulnerability · Source |
| CVE-2024-27919 | redhat_vex | envoy: CONTINUATION frames which enable DoS | known not affected: 26 | 2026-06-26T03:22:32+00:00 | Vulnerability · Source |
| CVE-2024-28869 | redhat_vex | traefik: denial of service | fixed: 4 known not affected: 50 | 2026-06-26T03:22:32+00:00 | Vulnerability · Source |
| CVE-2024-28246 | redhat_vex | katex: allow malicious input to generate `javascript:` links in the output | known not affected: 1 | 2026-06-26T03:22:32+00:00 | Vulnerability · Source |
| CVE-2024-28149 | redhat_vex | jenkins-2-plugins: Improper input sanitization in HTML Publisher Plugin | fixed: 16 known affected: 2 | 2026-06-26T03:22:27+00:00 | Vulnerability · Source |
| CVE-2024-27894 | redhat_vex | apache-pulsar: Pulsar Functions Worker Allows Unauthorized File Access and Unauthorized HTTP/HTTPS Proxying | known not affected: 5 | 2026-06-26T03:20:56+00:00 | Vulnerability · Source |
| CVE-2024-29894 | redhat_vex | cacti: XSS vulnerability when using JavaScript based messaging API | known not affected: 1 | 2026-06-26T03:18:01+00:00 | Vulnerability · Source |
| CVE-2024-29893 | redhat_vex | argo-cd: uncontrolled memory allocation vulnerability | fixed: 115 known not affected: 1 | 2026-06-26T03:17:59+00:00 | Vulnerability · Source |
| CVE-2024-29943 | redhat_vex | Mozilla: Out-of-bounds access via Range Analysis bypass | known not affected: 9 | 2026-06-26T03:17:11+00:00 | Vulnerability · Source |
| CVE-2024-32887 | redhat_vex | ruby-sidekiq: Reflected XSS in Metrics Web Page | known affected: 1 | 2026-06-26T03:13:30+00:00 | Vulnerability · Source |
| CVE-2024-31989 | redhat_vex | argocd: Use of Risky or Missing Cryptographic Algorithms in Redis Cache | fixed: 99 | 2026-06-26T03:12:33+00:00 | Vulnerability · Source |
| CVE-2024-32875 | redhat_vex | hugo: title arguments in Markdown for links and images not escaped in internal render hooks | known not affected: 1 | 2026-06-26T03:12:31+00:00 | Vulnerability · Source |
| CVE-2024-34703 | redhat_vex | botan: Denial of Service Due to Overly Large Elliptic Curve Parameters | known not affected: 1 | 2026-06-26T03:07:42+00:00 | Vulnerability · Source |
| CVE-2024-34997 | redhat_vex | python-joblib: Deserialization vulnerability via joblib.numpy_pickle::NumpyArrayWrapper().read_array() | known not affected: 10 | 2026-06-26T03:07:31+00:00 | Vulnerability · Source |
| CVE-2024-3374 | redhat_vex | mongodb: trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds certain memory sizes | known affected: 1 known not affected: 2 | 2026-06-26T03:07:30+00:00 | Vulnerability · Source |
| CVE-2024-34402 | redhat_vex | uriparser: integer overflow via long keys or values in ComposeQueryEngine() in UriQuery.c | known affected: 3 | 2026-06-26T03:07:29+00:00 | Vulnerability · Source |
| CVE-2024-32962 | redhat_vex | xml-crypto: XML signature verification bypass due improper verification of signature / signature spoofing | known not affected: 2 | 2026-06-26T03:07:21+00:00 | Vulnerability · Source |