VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
289480 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-35839 | redhat_vex | kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info | fixed: 663 known affected: 50 known not affected: 15 | 2026-08-04T19:02:35+00:00 | Vulnerability · Source |
| CVE-2024-35958 | redhat_vex | kernel: net: ena: Fix incorrect descriptor free behavior | fixed: 929 known affected: 50 known not affected: 23 | 2026-08-04T19:02:30+00:00 | Vulnerability · Source |
| CVE-2013-1976 | redhat_vex | tomcat: Improper TOMCAT_LOG management in init script (DoS, ACE) | fixed: 199 | 2026-08-04T19:02:28+00:00 | Vulnerability · Source |
| CVE-2013-4330 | redhat_vex | Camel: remote code execution via header field manipulation | fixed: 18 | 2026-08-04T19:02:23+00:00 | Vulnerability · Source |
| CVE-2013-0314 | redhat_vex | Portal: remote unauthenticated site import | fixed: 1 known affected: 1 | 2026-08-04T19:02:21+00:00 | Vulnerability · Source |
| CVE-2012-0062 | redhat_vex | JON: Unapproved agents can hijack an approved agent's endpoint by using a null security token | fixed: 2 known not affected: 1 | 2026-08-04T19:02:16+00:00 | Vulnerability · Source |
| CVE-2012-2379 | redhat_vex | apache-cxf: Apache CXF does not verify that elements were signed / encrypted by a particular Supporting Token | fixed: 1893 known affected: 2 | 2026-08-04T19:01:57+00:00 | Vulnerability · Source |
| CVE-2013-2185 | redhat_vex | Tomcat/JBossWeb: Arbitrary file upload via deserialization | fixed: 6 known affected: 1 known not affected: 27 | 2026-08-04T19:01:53+00:00 | Vulnerability · Source |
| CVE-2012-3546 | redhat_vex | Web: Bypass of security constraints | fixed: 1082 known affected: 5 known not affected: 3 | 2026-08-04T19:00:03+00:00 | Vulnerability · Source |
| CVE-2012-5629 | redhat_vex | JBoss: allows empty password to authenticate against LDAP | fixed: 40 known affected: 6 known not affected: 5 | 2026-08-04T18:59:55+00:00 | Vulnerability · Source |
| CVE-2013-4444 | redhat_vex | tomcat: remote code execution via uploaded JSP | known not affected: 48 | 2026-08-04T18:59:48+00:00 | Vulnerability · Source |
| CVE-2012-0803 | redhat_vex | CXF: improper validation of UsernameToken policies | known not affected: 1 | 2026-08-04T18:59:26+00:00 | Vulnerability · Source |
| CVE-2024-35932 | redhat_vex | kernel: drm/vc4: don't check if plane->state->fb == state->fb | known not affected: 198 | 2026-08-04T18:58:48+00:00 | Vulnerability · Source |
| CVE-2024-35967 | redhat_vex | kernel: Bluetooth: SCO: Fix not validating setsockopt user input | fixed: 305 known affected: 112 | 2026-08-04T18:58:43+00:00 | Vulnerability · Source |
| CVE-2024-35962 | redhat_vex | kernel: netfilter: complete validation of user input | fixed: 633 known affected: 80 known not affected: 1 | 2026-08-04T18:58:42+00:00 | Vulnerability · Source |
| CVE-2024-35949 | redhat_vex | kernel: btrfs: make sure that WRITTEN is set on all metadata blocks | known not affected: 198 | 2026-08-04T18:58:38+00:00 | Vulnerability · Source |
| CVE-2024-35857 | redhat_vex | kernel: icmp: prevent possible NULL dereferences from icmp_build_probe() | fixed: 513 known affected: 64 known not affected: 49 | 2026-08-04T18:58:37+00:00 | Vulnerability · Source |
| CVE-2024-35919 | redhat_vex | kernel: media: mediatek: vcodec: adding lock to protect encoder context list | known not affected: 198 | 2026-08-04T18:58:35+00:00 | Vulnerability · Source |
| CVE-2024-35889 | redhat_vex | kernel: idpf: fix kernel panic on unknown packet types | known not affected: 198 | 2026-08-04T18:58:32+00:00 | Vulnerability · Source |
| CVE-2024-35875 | redhat_vex | kernel: x86/coco: Require seeding RNG with RDRAND on CoCo systems | fixed: 513 known affected: 70 known not affected: 43 | 2026-08-04T18:58:31+00:00 | Vulnerability · Source |
| CVE-2024-35951 | redhat_vex | kernel: drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() | known not affected: 198 | 2026-08-04T18:58:28+00:00 | Vulnerability · Source |
| CVE-2024-35910 | redhat_vex | kernel: tcp: properly terminate timers for kernel sockets | fixed: 270 known affected: 42 known not affected: 116 | 2026-08-04T18:58:25+00:00 | Vulnerability · Source |
| CVE-2024-35856 | redhat_vex | kernel: Bluetooth: btusb: mediatek: Fix double free of skb in coredump | known affected: 42 known not affected: 156 | 2026-08-04T18:58:24+00:00 | Vulnerability · Source |
| CVE-2024-35882 | redhat_vex | kernel: SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP | known affected: 42 known not affected: 156 | 2026-08-04T18:58:21+00:00 | Vulnerability · Source |
| CVE-2024-35963 | redhat_vex | kernel: Bluetooth: hci_sock: Fix not validating setsockopt user input | fixed: 305 known affected: 112 | 2026-08-04T18:58:19+00:00 | Vulnerability · Source |
| CVE-2024-35874 | redhat_vex | kernel: aio: Fix null ptr deref in aio_complete() wakeup | known affected: 28 known not affected: 170 | 2026-08-04T18:58:15+00:00 | Vulnerability · Source |
| CVE-2024-35954 | redhat_vex | kernel: scsi: sg: Avoid sg device teardown race | fixed: 280 known affected: 42 known not affected: 78 | 2026-08-04T18:58:09+00:00 | Vulnerability · Source |
| CVE-2024-35858 | redhat_vex | kernel: net: bcmasp: fix memory leak when bringing down interface | known not affected: 198 | 2026-08-04T18:58:05+00:00 | Vulnerability · Source |
| CVE-2024-35969 | redhat_vex | kernel: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr | fixed: 779 known affected: 112 known not affected: 9 | 2026-08-04T18:58:03+00:00 | Vulnerability · Source |
| CVE-2024-35905 | redhat_vex | kernel: bpf: Protect against int overflow for stack access size | fixed: 280 known affected: 64 known not affected: 56 | 2026-08-04T18:58:00+00:00 | Vulnerability · Source |
| CVE-2024-35921 | redhat_vex | kernel: media: mediatek: vcodec: Fix oops when HEVC init fails | known not affected: 198 | 2026-08-04T18:57:47+00:00 | Vulnerability · Source |
| CVE-2024-35848 | redhat_vex | kernel: eeprom: at24: fix memory corruption race condition | fixed: 279 known affected: 64 known not affected: 56 | 2026-08-04T18:57:46+00:00 | Vulnerability · Source |
| CVE-2024-36884 | redhat_vex | kernel: iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault() | fixed: 280 known affected: 112 known not affected: 8 | 2026-08-04T18:57:40+00:00 | Vulnerability · Source |
| CVE-2024-38538 | redhat_vex | kernel: net: bridge: xmit: make sure we have at least eth header len bytes | fixed: 784 known affected: 64 known not affected: 8 | 2026-08-04T18:57:37+00:00 | Vulnerability · Source |
| CVE-2024-36013 | redhat_vex | kernel: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() | fixed: 305 known affected: 98 known not affected: 14 | 2026-08-04T18:57:35+00:00 | Vulnerability · Source |
| CVE-2024-36883 | redhat_vex | kernel: net: fix out-of-bounds access in ops_init | fixed: 783 known affected: 64 known not affected: 1 | 2026-08-04T18:57:32+00:00 | Vulnerability · Source |
| CVE-2024-36928 | redhat_vex | kernel: s390/qeth: Fix kernel panic after setting hsuid | fixed: 880 known affected: 38 known not affected: 50 | 2026-08-04T18:57:30+00:00 | Vulnerability · Source |
| CVE-2024-36009 | redhat_vex | kernel: ax25: Fix netdev refcount issue | known not affected: 198 | 2026-08-04T18:57:27+00:00 | Vulnerability · Source |
| CVE-2024-38381 | redhat_vex | kernel: nfc: nci: Fix uninit-value in nci_rx_work | known not affected: 198 | 2026-08-04T18:57:24+00:00 | Vulnerability · Source |
| CVE-2024-35987 | redhat_vex | kernel: riscv: Fix loading 64-bit NOMMU kernels past the start of RAM | known affected: 28 known not affected: 170 | 2026-08-04T18:57:22+00:00 | Vulnerability · Source |
| CVE-2024-36974 | redhat_vex | kernel: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP | fixed: 280 known affected: 22 known not affected: 98 | 2026-08-04T18:57:19+00:00 | Vulnerability · Source |
| CVE-2024-36286 | redhat_vex | kernel: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() | fixed: 150 known affected: 122 known not affected: 28 | 2026-08-04T18:57:17+00:00 | Vulnerability · Source |
| CVE-2024-36890 | redhat_vex | kernel: mm/slab: make __free(kfree) accept error pointers | known not affected: 198 | 2026-08-04T18:57:15+00:00 | Vulnerability · Source |
| CVE-2024-38555 | redhat_vex | kernel: net/mlx5: Discard command completions in internal error | fixed: 1210 known affected: 50 known not affected: 30 | 2026-08-04T18:57:12+00:00 | Vulnerability · Source |
| CVE-2024-36904 | redhat_vex | kernel: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). | fixed: 926 known affected: 64 known not affected: 4 | 2026-08-04T18:57:08+00:00 | Vulnerability · Source |
| CVE-2024-36288 | redhat_vex | kernel: SUNRPC: Fix loop termination condition in gss_free_in_token_pages() | known affected: 42 known not affected: 156 | 2026-08-04T18:57:07+00:00 | Vulnerability · Source |
| CVE-2024-36968 | redhat_vex | kernel: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() | fixed: 305 known affected: 112 | 2026-08-04T18:57:06+00:00 | Vulnerability · Source |
| CVE-2024-35998 | redhat_vex | kernel: smb3: fix lock ordering potential deadlock in cifs_sync_mid_result | known not affected: 198 | 2026-08-04T18:57:02+00:00 | Vulnerability · Source |
| CVE-2024-38578 | redhat_vex | kernel: ecryptfs: Fix buffer size for tag 66 packet | known affected: 14 known not affected: 184 | 2026-08-04T18:56:59+00:00 | Vulnerability · Source |
| CVE-2024-36979 | redhat_vex | kernel: net: bridge: mst: fix vlan use-after-free | fixed: 783 known affected: 64 known not affected: 1 | 2026-08-04T18:56:57+00:00 | Vulnerability · Source |