VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
289758 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-35808 | redhat_vex | kernel: md/dm-raid: don't call md_reap_sync_thread() directly | fixed: 280 known affected: 112 known not affected: 8 | 2026-08-04T19:07:19+00:00 | Vulnerability · Source |
| CVE-2024-35793 | redhat_vex | kernel: debugfs: fix wait/cancellation handling during remove | known affected: 42 known not affected: 156 | 2026-08-04T19:07:15+00:00 | Vulnerability · Source |
| CVE-2024-35789 | redhat_vex | kernel: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes | fixed: 930 known affected: 64 known not affected: 16 | 2026-08-04T19:07:12+00:00 | Vulnerability · Source |
| CVE-2024-35792 | redhat_vex | kernel: crypto: rk3288 - Fix use after free in unprepare | known not affected: 198 | 2026-08-04T19:07:08+00:00 | Vulnerability · Source |
| CVE-2024-27396 | redhat_vex | kernel: net: gtp: Fix Use-After-Free in gtp_dellink | known not affected: 198 | 2026-08-04T19:07:05+00:00 | Vulnerability · Source |
| CVE-2024-35791 | redhat_vex | kernel: KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() | fixed: 513 known affected: 70 known not affected: 43 | 2026-08-04T19:07:01+00:00 | Vulnerability · Source |
| CVE-2024-35830 | redhat_vex | kernel: media: tc358743: register v4l2 async device only after successful setup | known not affected: 198 | 2026-08-04T19:06:59+00:00 | Vulnerability · Source |
| CVE-2024-27062 | redhat_vex | kernel: nouveau: lock the client object tree. | fixed: 942 known affected: 64 known not affected: 10 | 2026-08-04T19:06:52+00:00 | Vulnerability · Source |
| CVE-2024-35810 | redhat_vex | kernel: drm/vmwgfx: Fix the lifetime of the bo cursor memory | fixed: 709 known affected: 64 known not affected: 8 | 2026-08-04T19:06:45+00:00 | Vulnerability · Source |
| CVE-2024-27434 | redhat_vex | kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK | fixed: 429 known affected: 50 known not affected: 22 | 2026-08-04T19:06:40+00:00 | Vulnerability · Source |
| CVE-2024-27066 | redhat_vex | kernel: virtio: packed: fix unmap leak for indirect desc table | known affected: 42 known not affected: 156 | 2026-08-04T19:06:37+00:00 | Vulnerability · Source |
| CVE-2024-27056 | redhat_vex | kernel: wifi: iwlwifi: mvm: ensure offloading TID queue exists | fixed: 429 known affected: 136 known not affected: 14 | 2026-08-04T19:06:25+00:00 | Vulnerability · Source |
| CVE-2024-35787 | redhat_vex | kernel: md/md-bitmap: fix incorrect usage for sb_index | fixed: 280 known affected: 50 known not affected: 70 | 2026-08-04T19:06:22+00:00 | Vulnerability · Source |
| CVE-2024-27404 | redhat_vex | kernel: mptcp: fix data races on remote_id | fixed: 280 known affected: 22 known not affected: 98 | 2026-08-04T19:06:17+00:00 | Vulnerability · Source |
| CVE-2024-27415 | redhat_vex | kernel: netfilter: bridge: confirm multicast packets before passing them up the stack | fixed: 513 known affected: 112 known not affected: 1 | 2026-08-04T19:06:13+00:00 | Vulnerability · Source |
| CVE-2024-35813 | redhat_vex | kernel: mmc: core: Avoid negative index with array access | known affected: 28 known not affected: 170 | 2026-08-04T19:06:06+00:00 | Vulnerability · Source |
| CVE-2024-27401 | redhat_vex | kernel: firewire: nosy: ensure user_length is taken into account when fetching packet contents | known not affected: 198 | 2026-08-04T19:06:04+00:00 | Vulnerability · Source |
| CVE-2011-2729 | redhat_vex | jakarta-commons-daemon: jsvc does not drop capabilities allowing access to files and directories owned by the superuser | fixed: 1 known affected: 1 known not affected: 4 | 2026-08-04T19:05:28+00:00 | Vulnerability · Source |
| CVE-2011-4608 | redhat_vex | mod_cluster: malicious worker nodes can register on any vhost | fixed: 61 known not affected: 10 | 2026-08-04T19:05:21+00:00 | Vulnerability · Source |
| CVE-2011-1096 | redhat_vex | jbossws: Prone to character encoding pattern attack (XML Encryption flaw) | fixed: 887 known affected: 3 | 2026-08-04T19:05:14+00:00 | Vulnerability · Source |
| CVE-2010-2076 | redhat_vex | CXF: Insufficient constraints on Document Type Declarations (DTDs) | known not affected: 1 | 2026-08-04T19:05:02+00:00 | Vulnerability · Source |
| CVE-2011-4343 | redhat_vex | 2: EL injection, includeViewParameters re-evaluates param/model values as EL expressions | known not affected: 1 | 2026-08-04T19:04:49+00:00 | Vulnerability · Source |
| CVE-2011-2730 | redhat_vex | Framework: Information (internal server information, classpath, local working directories, session IDs) disclosure | fixed: 884 known affected: 3 | 2026-08-04T19:04:33+00:00 | Vulnerability · Source |
| CVE-2011-4358 | redhat_vex | injection: includeViewParameters re-evaluates param/model values as EL expressions | known not affected: 2 | 2026-08-04T19:04:32+00:00 | Vulnerability · Source |
| CVE-2024-35899 | redhat_vex | kernel: netfilter: nf_tables: flush pending destroy work before exit_net release | fixed: 663 known affected: 50 known not affected: 23 | 2026-08-04T19:03:20+00:00 | Vulnerability · Source |
| CVE-2024-35937 | redhat_vex | kernel: wifi: cfg80211: check A-MSDU format more carefully | fixed: 784 known affected: 64 known not affected: 8 | 2026-08-04T19:03:18+00:00 | Vulnerability · Source |
| CVE-2024-35920 | redhat_vex | kernel: media: mediatek: vcodec: adding lock to protect decoder context list | known not affected: 198 | 2026-08-04T19:03:16+00:00 | Vulnerability · Source |
| CVE-2024-35896 | redhat_vex | kernel: netfilter: validate user input for expected length | fixed: 663 known affected: 64 known not affected: 1 | 2026-08-04T19:03:12+00:00 | Vulnerability · Source |
| CVE-2024-35971 | redhat_vex | kernel: net: ks8851: Handle softirqs at the end of IRQ thread to fix hang | known not affected: 198 | 2026-08-04T19:03:09+00:00 | Vulnerability · Source |
| CVE-2024-35897 | redhat_vex | kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion | fixed: 827 known affected: 50 known not affected: 15 | 2026-08-04T19:03:08+00:00 | Vulnerability · Source |
| CVE-2024-35890 | redhat_vex | kernel: gro: fix ownership transfer | fixed: 1030 known affected: 64 known not affected: 8 | 2026-08-04T19:03:02+00:00 | Vulnerability · Source |
| CVE-2024-35835 | redhat_vex | kernel: net/mlx5e: fix a double-free in arfs_create_groups | fixed: 709 known affected: 50 known not affected: 30 | 2026-08-04T19:02:58+00:00 | Vulnerability · Source |
| CVE-2024-35950 | redhat_vex | kernel: drm/client: Fully protect modes[] with dev->mode_config.mutex | fixed: 793 known affected: 70 known not affected: 51 | 2026-08-04T19:02:55+00:00 | Vulnerability · Source |
| CVE-2024-35968 | redhat_vex | kernel: pds_core: Fix pdsc_check_pci_health function to use work thread | known not affected: 198 | 2026-08-04T19:02:54+00:00 | Vulnerability · Source |
| CVE-2024-35980 | redhat_vex | kernel: arm64: tlb: Fix TLBI RANGE operand | known affected: 108 known not affected: 90 | 2026-08-04T19:02:49+00:00 | Vulnerability · Source |
| CVE-2024-35880 | redhat_vex | kernel: io_uring/kbuf: hold io_buffer_list reference over mmap | fixed: 280 known affected: 22 known not affected: 98 | 2026-08-04T19:02:41+00:00 | Vulnerability · Source |
| CVE-2024-35872 | redhat_vex | kernel: mm/secretmem: fix GUP-fast succeeding on secretmem folios | fixed: 280 known affected: 42 known not affected: 78 | 2026-08-04T19:02:41+00:00 | Vulnerability · Source |
| CVE-2024-35958 | redhat_vex | kernel: net: ena: Fix incorrect descriptor free behavior | fixed: 929 known affected: 50 known not affected: 23 | 2026-08-04T19:02:30+00:00 | Vulnerability · Source |
| CVE-2013-1976 | redhat_vex | tomcat: Improper TOMCAT_LOG management in init script (DoS, ACE) | fixed: 199 | 2026-08-04T19:02:28+00:00 | Vulnerability · Source |
| CVE-2013-4330 | redhat_vex | Camel: remote code execution via header field manipulation | fixed: 18 | 2026-08-04T19:02:23+00:00 | Vulnerability · Source |
| CVE-2013-0314 | redhat_vex | Portal: remote unauthenticated site import | fixed: 1 known affected: 1 | 2026-08-04T19:02:21+00:00 | Vulnerability · Source |
| CVE-2012-0062 | redhat_vex | JON: Unapproved agents can hijack an approved agent's endpoint by using a null security token | fixed: 2 known not affected: 1 | 2026-08-04T19:02:16+00:00 | Vulnerability · Source |
| CVE-2012-2379 | redhat_vex | apache-cxf: Apache CXF does not verify that elements were signed / encrypted by a particular Supporting Token | fixed: 1893 known affected: 2 | 2026-08-04T19:01:57+00:00 | Vulnerability · Source |
| CVE-2013-2185 | redhat_vex | Tomcat/JBossWeb: Arbitrary file upload via deserialization | fixed: 6 known affected: 1 known not affected: 27 | 2026-08-04T19:01:53+00:00 | Vulnerability · Source |
| CVE-2012-3546 | redhat_vex | Web: Bypass of security constraints | fixed: 1082 known affected: 5 known not affected: 3 | 2026-08-04T19:00:03+00:00 | Vulnerability · Source |
| CVE-2012-5629 | redhat_vex | JBoss: allows empty password to authenticate against LDAP | fixed: 40 known affected: 6 known not affected: 5 | 2026-08-04T18:59:55+00:00 | Vulnerability · Source |
| CVE-2013-4444 | redhat_vex | tomcat: remote code execution via uploaded JSP | known not affected: 48 | 2026-08-04T18:59:48+00:00 | Vulnerability · Source |
| CVE-2012-0803 | redhat_vex | CXF: improper validation of UsernameToken policies | known not affected: 1 | 2026-08-04T18:59:26+00:00 | Vulnerability · Source |
| CVE-2024-35932 | redhat_vex | kernel: drm/vc4: don't check if plane->state->fb == state->fb | known not affected: 198 | 2026-08-04T18:58:48+00:00 | Vulnerability · Source |
| CVE-2024-35967 | redhat_vex | kernel: Bluetooth: SCO: Fix not validating setsockopt user input | fixed: 305 known affected: 112 | 2026-08-04T18:58:43+00:00 | Vulnerability · Source |