VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288716 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2018-16842 | redhat_vex | curl: Heap-based buffer over-read in the curl tool warning formatting | fixed: 58 known affected: 15 known not affected: 6 | 2026-08-04T06:47:59+00:00 | Vulnerability · Source |
| CVE-2019-3822 | redhat_vex | curl: NTLMv2 type-3 header stack buffer overflow | fixed: 46 known affected: 14 known not affected: 10 | 2026-08-04T06:47:20+00:00 | Vulnerability · Source |
| CVE-2018-16890 | redhat_vex | curl: NTLM type-2 heap out-of-bounds buffer read | fixed: 46 known affected: 14 known not affected: 10 | 2026-08-04T06:46:52+00:00 | Vulnerability · Source |
| CVE-2019-6706 | redhat_vex | lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service | fixed: 58 known affected: 25 known not affected: 7 | 2026-08-04T06:46:31+00:00 | Vulnerability · Source |
| CVE-2022-28805 | redhat_vex | lua: heap buffer overread | fixed: 58 known not affected: 15 | 2026-08-04T06:43:34+00:00 | Vulnerability · Source |
| CVE-2024-24795 | redhat_vex | httpd: HTTP Response Splitting in multiple modules | fixed: 103 known affected: 42 known not affected: 113 | 2026-08-04T06:43:32+00:00 | Vulnerability · Source |
| CVE-2021-44647 | redhat_vex | lua: type confusion in funcnamefromcode in ldebug.c could result in local DoS | known not affected: 19 | 2026-08-04T06:43:25+00:00 | Vulnerability · Source |
| CVE-2024-36387 | redhat_vex | mod_http2: DoS by null pointer in websocket over HTTP/2 | fixed: 20 known not affected: 122 | 2026-08-04T06:43:21+00:00 | Vulnerability · Source |
| CVE-2024-34459 | redhat_vex | libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c | fixed: 459 known affected: 10 known not affected: 1 | 2026-08-04T06:43:15+00:00 | Vulnerability · Source |
| CVE-2024-41996 | redhat_vex | openssl: remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations | known affected: 41 | 2026-08-04T06:43:11+00:00 | Vulnerability · Source |
| CVE-2020-14155 | redhat_vex | pcre: Integer overflow when parsing callout numeric arguments | fixed: 234 known affected: 9 | 2026-08-04T06:43:08+00:00 | Vulnerability · Source |
| CVE-2021-23839 | redhat_vex | openssl: incorrect SSLv2 rollback protection | known affected: 7 known not affected: 24 | 2026-08-04T06:43:07+00:00 | Vulnerability · Source |
| CVE-2019-20838 | redhat_vex | pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1 | fixed: 234 known affected: 1 known not affected: 8 | 2026-08-04T06:42:58+00:00 | Vulnerability · Source |
| CVE-2001-0131 | redhat_vex | httpd: allows local users to overwrite arbitrary files via a symlink attack | known affected: 4 known not affected: 41 | 2026-08-04T06:42:55+00:00 | Vulnerability · Source |
| CVE-2025-68214 | redhat_vex | kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown | fixed: 612 known affected: 70 known not affected: 42 | 2026-08-04T06:42:40+00:00 | Vulnerability · Source |
| CVE-2022-33099 | redhat_vex | lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling | fixed: 58 known not affected: 15 | 2026-08-04T06:32:01+00:00 | Vulnerability · Source |
| CVE-2022-29824 | redhat_vex | libxml2: integer overflows in xmlBuf and xmlBuffer lead to out-of-bounds write | fixed: 91 known affected: 10 | 2026-08-04T06:31:59+00:00 | Vulnerability · Source |
| CVE-2023-52425 | redhat_vex | expat: parsing large tokens can trigger a denial of service | fixed: 223 known affected: 29 known not affected: 47 | 2026-08-04T06:28:18+00:00 | Vulnerability · Source |
| CVE-2020-13938 | redhat_vex | httpd: Improper Handling of Insufficient Privileges | known affected: 2 known not affected: 52 | 2026-08-04T06:28:14+00:00 | Vulnerability · Source |
| CVE-2023-52426 | redhat_vex | expat: recursive XML entity expansion vulnerability | known affected: 21 known not affected: 21 | 2026-08-04T06:28:13+00:00 | Vulnerability · Source |
| CVE-2024-25062 | redhat_vex | libxml2: use-after-free in XMLReader | fixed: 226 known affected: 12 | 2026-08-04T06:28:05+00:00 | Vulnerability · Source |
| CVE-2022-24048 | redhat_vex | mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer | fixed: 736 known affected: 19 known not affected: 36 | 2026-08-04T06:27:53+00:00 | Vulnerability · Source |
| CVE-2022-24051 | redhat_vex | mariadb: lack of proper validation of a user-supplied string before using it as a format specifier | fixed: 736 known affected: 19 known not affected: 36 | 2026-08-04T06:27:41+00:00 | Vulnerability · Source |
| CVE-2023-38709 | redhat_vex | httpd: HTTP response splitting | fixed: 188 known affected: 30 known not affected: 44 | 2026-08-04T06:27:18+00:00 | Vulnerability · Source |
| CVE-2022-24052 | redhat_vex | mariadb: CONNECT storage engine heap-based buffer overflow | fixed: 736 known affected: 19 known not affected: 36 | 2026-08-04T06:27:08+00:00 | Vulnerability · Source |
| CVE-2024-8176 | redhat_vex | libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat | fixed: 477 known affected: 31 known not affected: 150 | 2026-08-04T06:27:05+00:00 | Vulnerability · Source |
| CVE-2021-43519 | redhat_vex | lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file | fixed: 116 known affected: 6 known not affected: 9 | 2026-08-04T06:27:01+00:00 | Vulnerability · Source |
| CVE-2022-24050 | redhat_vex | mariadb: lack of validating the existence of an object prior to performing operations on the object | fixed: 736 known affected: 19 known not affected: 36 | 2026-08-04T06:26:49+00:00 | Vulnerability · Source |
| CVE-2006-20001 | redhat_vex | httpd: mod_dav: out-of-bounds read/write of zero byte | fixed: 188 known affected: 26 known not affected: 97 | 2026-08-04T06:26:45+00:00 | Vulnerability · Source |
| CVE-2023-24021 | redhat_vex | modsecurity: lacking the complete content in FILES_TMP_CONTENT leads to web application firewall bypass | fixed: 7 known affected: 10 known not affected: 99 | 2026-08-04T06:26:42+00:00 | Vulnerability · Source |
| CVE-2022-48279 | redhat_vex | mod_security: incorrect parsing of HTTP multipart requests leads to web application firewall bypass | fixed: 7 known affected: 10 known not affected: 99 | 2026-08-04T06:26:40+00:00 | Vulnerability · Source |
| CVE-2022-43680 | redhat_vex | expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate | fixed: 141 known affected: 29 known not affected: 27 | 2026-08-04T06:26:30+00:00 | Vulnerability · Source |
| CVE-2021-31618 | redhat_vex | httpd: NULL pointer dereference on specially crafted HTTP/2 request | known not affected: 54 | 2026-08-04T06:25:58+00:00 | Vulnerability · Source |
| CVE-2021-44964 | redhat_vex | lua: use after free allows Sandbox Escape | fixed: 116 known not affected: 15 | 2026-08-04T06:24:54+00:00 | Vulnerability · Source |
| CVE-2016-3709 | redhat_vex | libxml2: Incorrect server side include parsing can lead to XSS | fixed: 90 known affected: 10 known not affected: 5 | 2026-08-04T06:23:28+00:00 | Vulnerability · Source |
| CVE-2022-40304 | redhat_vex | libxml2: dict corruption caused by entity reference cycles | fixed: 136 known affected: 10 | 2026-08-04T06:23:24+00:00 | Vulnerability · Source |
| CVE-2022-36760 | redhat_vex | httpd: mod_proxy_ajp: Possible request smuggling | fixed: 188 known affected: 26 known not affected: 78 | 2026-08-04T06:23:17+00:00 | Vulnerability · Source |
| CVE-2022-40303 | redhat_vex | libxml2: integer overflows with XML_PARSE_HUGE | fixed: 136 known affected: 10 | 2026-08-04T06:23:16+00:00 | Vulnerability · Source |
| CVE-2022-37436 | redhat_vex | httpd: mod_proxy: HTTP response splitting | fixed: 188 known affected: 20 known not affected: 84 | 2026-08-04T06:23:13+00:00 | Vulnerability · Source |
| CVE-2020-11985 | redhat_vex | httpd: IP address spoofing when proxying using mod_remoteip and mod_rewrite | fixed: 138 known affected: 3 known not affected: 22 | 2026-08-04T06:22:34+00:00 | Vulnerability · Source |
| CVE-2020-12243 | redhat_vex | openldap: denial of service via nested boolean expressions in LDAP search filters | fixed: 74 known affected: 11 known not affected: 6 | 2026-08-04T06:22:29+00:00 | Vulnerability · Source |
| CVE-2020-25709 | redhat_vex | openldap: assertion failure in Certificate List syntax validation | fixed: 67 known affected: 12 known not affected: 6 | 2026-08-04T06:22:21+00:00 | Vulnerability · Source |
| CVE-2020-25710 | redhat_vex | openldap: assertion failure in CSN normalization with invalid input | fixed: 67 known affected: 12 known not affected: 6 | 2026-08-04T06:22:17+00:00 | Vulnerability · Source |
| CVE-2020-28196 | redhat_vex | krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS | fixed: 82 known affected: 9 known not affected: 29 | 2026-08-04T06:22:11+00:00 | Vulnerability · Source |
| CVE-2020-24977 | redhat_vex | libxml2: Buffer overflow vulnerability in xmlEncodeEntitiesInternal() in entities.c | fixed: 45 known affected: 11 known not affected: 1 | 2026-08-04T06:22:01+00:00 | Vulnerability · Source |
| CVE-2022-40674 | redhat_vex | expat: a use-after-free in the doContent function in xmlparse.c | fixed: 348 known affected: 9 known not affected: 12 | 2026-08-04T06:19:43+00:00 | Vulnerability · Source |
| CVE-2023-23931 | redhat_vex | python-cryptography: memory corruption via immutable objects | fixed: 354 known affected: 10 known not affected: 143 | 2026-08-04T06:17:00+00:00 | Vulnerability · Source |
| CVE-2020-9490 | redhat_vex | httpd: Push diary crash on specifically crafted HTTP/2 header | fixed: 341 known affected: 3 known not affected: 17 | 2026-08-04T06:16:22+00:00 | Vulnerability · Source |
| CVE-2024-45811 | redhat_vex | vite: server.fs.deny is bypassed when using `?import&raw` | fixed: 8 known affected: 2 known not affected: 65 | 2026-08-04T05:47:45+00:00 | Vulnerability · Source |
| CVE-2024-45812 | redhat_vex | vite: XSS via DOM Clobbering gadget found in vite bundled scripts | fixed: 8 known affected: 2 known not affected: 65 | 2026-08-04T05:47:30+00:00 | Vulnerability · Source |