VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
289835 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-27404 | redhat_vex | kernel: mptcp: fix data races on remote_id | fixed: 280 known affected: 22 known not affected: 98 | 2026-08-04T19:06:17+00:00 | Vulnerability · Source |
| CVE-2024-27415 | redhat_vex | kernel: netfilter: bridge: confirm multicast packets before passing them up the stack | fixed: 513 known affected: 112 known not affected: 1 | 2026-08-04T19:06:13+00:00 | Vulnerability · Source |
| CVE-2024-35813 | redhat_vex | kernel: mmc: core: Avoid negative index with array access | known affected: 28 known not affected: 170 | 2026-08-04T19:06:06+00:00 | Vulnerability · Source |
| CVE-2024-27401 | redhat_vex | kernel: firewire: nosy: ensure user_length is taken into account when fetching packet contents | known not affected: 198 | 2026-08-04T19:06:04+00:00 | Vulnerability · Source |
| CVE-2011-2729 | redhat_vex | jakarta-commons-daemon: jsvc does not drop capabilities allowing access to files and directories owned by the superuser | fixed: 1 known affected: 1 known not affected: 4 | 2026-08-04T19:05:28+00:00 | Vulnerability · Source |
| CVE-2011-4608 | redhat_vex | mod_cluster: malicious worker nodes can register on any vhost | fixed: 61 known not affected: 10 | 2026-08-04T19:05:21+00:00 | Vulnerability · Source |
| CVE-2011-1096 | redhat_vex | jbossws: Prone to character encoding pattern attack (XML Encryption flaw) | fixed: 887 known affected: 3 | 2026-08-04T19:05:14+00:00 | Vulnerability · Source |
| CVE-2010-2076 | redhat_vex | CXF: Insufficient constraints on Document Type Declarations (DTDs) | known not affected: 1 | 2026-08-04T19:05:02+00:00 | Vulnerability · Source |
| CVE-2011-4343 | redhat_vex | 2: EL injection, includeViewParameters re-evaluates param/model values as EL expressions | known not affected: 1 | 2026-08-04T19:04:49+00:00 | Vulnerability · Source |
| CVE-2011-2730 | redhat_vex | Framework: Information (internal server information, classpath, local working directories, session IDs) disclosure | fixed: 884 known affected: 3 | 2026-08-04T19:04:33+00:00 | Vulnerability · Source |
| CVE-2011-4358 | redhat_vex | injection: includeViewParameters re-evaluates param/model values as EL expressions | known not affected: 2 | 2026-08-04T19:04:32+00:00 | Vulnerability · Source |
| CVE-2024-35899 | redhat_vex | kernel: netfilter: nf_tables: flush pending destroy work before exit_net release | fixed: 663 known affected: 50 known not affected: 23 | 2026-08-04T19:03:20+00:00 | Vulnerability · Source |
| CVE-2024-35937 | redhat_vex | kernel: wifi: cfg80211: check A-MSDU format more carefully | fixed: 784 known affected: 64 known not affected: 8 | 2026-08-04T19:03:18+00:00 | Vulnerability · Source |
| CVE-2024-35920 | redhat_vex | kernel: media: mediatek: vcodec: adding lock to protect decoder context list | known not affected: 198 | 2026-08-04T19:03:16+00:00 | Vulnerability · Source |
| CVE-2024-35896 | redhat_vex | kernel: netfilter: validate user input for expected length | fixed: 663 known affected: 64 known not affected: 1 | 2026-08-04T19:03:12+00:00 | Vulnerability · Source |
| CVE-2024-35971 | redhat_vex | kernel: net: ks8851: Handle softirqs at the end of IRQ thread to fix hang | known not affected: 198 | 2026-08-04T19:03:09+00:00 | Vulnerability · Source |
| CVE-2024-35897 | redhat_vex | kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion | fixed: 827 known affected: 50 known not affected: 15 | 2026-08-04T19:03:08+00:00 | Vulnerability · Source |
| CVE-2024-35890 | redhat_vex | kernel: gro: fix ownership transfer | fixed: 1030 known affected: 64 known not affected: 8 | 2026-08-04T19:03:02+00:00 | Vulnerability · Source |
| CVE-2024-35835 | redhat_vex | kernel: net/mlx5e: fix a double-free in arfs_create_groups | fixed: 709 known affected: 50 known not affected: 30 | 2026-08-04T19:02:58+00:00 | Vulnerability · Source |
| CVE-2024-35950 | redhat_vex | kernel: drm/client: Fully protect modes[] with dev->mode_config.mutex | fixed: 793 known affected: 70 known not affected: 51 | 2026-08-04T19:02:55+00:00 | Vulnerability · Source |
| CVE-2024-35968 | redhat_vex | kernel: pds_core: Fix pdsc_check_pci_health function to use work thread | known not affected: 198 | 2026-08-04T19:02:54+00:00 | Vulnerability · Source |
| CVE-2024-35980 | redhat_vex | kernel: arm64: tlb: Fix TLBI RANGE operand | known affected: 108 known not affected: 90 | 2026-08-04T19:02:49+00:00 | Vulnerability · Source |
| CVE-2024-35880 | redhat_vex | kernel: io_uring/kbuf: hold io_buffer_list reference over mmap | fixed: 280 known affected: 22 known not affected: 98 | 2026-08-04T19:02:41+00:00 | Vulnerability · Source |
| CVE-2024-35872 | redhat_vex | kernel: mm/secretmem: fix GUP-fast succeeding on secretmem folios | fixed: 280 known affected: 42 known not affected: 78 | 2026-08-04T19:02:41+00:00 | Vulnerability · Source |
| CVE-2024-35958 | redhat_vex | kernel: net: ena: Fix incorrect descriptor free behavior | fixed: 929 known affected: 50 known not affected: 23 | 2026-08-04T19:02:30+00:00 | Vulnerability · Source |
| CVE-2013-1976 | redhat_vex | tomcat: Improper TOMCAT_LOG management in init script (DoS, ACE) | fixed: 199 | 2026-08-04T19:02:28+00:00 | Vulnerability · Source |
| CVE-2013-4330 | redhat_vex | Camel: remote code execution via header field manipulation | fixed: 18 | 2026-08-04T19:02:23+00:00 | Vulnerability · Source |
| CVE-2013-0314 | redhat_vex | Portal: remote unauthenticated site import | fixed: 1 known affected: 1 | 2026-08-04T19:02:21+00:00 | Vulnerability · Source |
| CVE-2012-0062 | redhat_vex | JON: Unapproved agents can hijack an approved agent's endpoint by using a null security token | fixed: 2 known not affected: 1 | 2026-08-04T19:02:16+00:00 | Vulnerability · Source |
| CVE-2012-2379 | redhat_vex | apache-cxf: Apache CXF does not verify that elements were signed / encrypted by a particular Supporting Token | fixed: 1893 known affected: 2 | 2026-08-04T19:01:57+00:00 | Vulnerability · Source |
| CVE-2013-2185 | redhat_vex | Tomcat/JBossWeb: Arbitrary file upload via deserialization | fixed: 6 known affected: 1 known not affected: 27 | 2026-08-04T19:01:53+00:00 | Vulnerability · Source |
| CVE-2012-3546 | redhat_vex | Web: Bypass of security constraints | fixed: 1082 known affected: 5 known not affected: 3 | 2026-08-04T19:00:03+00:00 | Vulnerability · Source |
| CVE-2012-5629 | redhat_vex | JBoss: allows empty password to authenticate against LDAP | fixed: 40 known affected: 6 known not affected: 5 | 2026-08-04T18:59:55+00:00 | Vulnerability · Source |
| CVE-2013-4444 | redhat_vex | tomcat: remote code execution via uploaded JSP | known not affected: 48 | 2026-08-04T18:59:48+00:00 | Vulnerability · Source |
| CVE-2012-0803 | redhat_vex | CXF: improper validation of UsernameToken policies | known not affected: 1 | 2026-08-04T18:59:26+00:00 | Vulnerability · Source |
| CVE-2024-35932 | redhat_vex | kernel: drm/vc4: don't check if plane->state->fb == state->fb | known not affected: 198 | 2026-08-04T18:58:48+00:00 | Vulnerability · Source |
| CVE-2024-35967 | redhat_vex | kernel: Bluetooth: SCO: Fix not validating setsockopt user input | fixed: 305 known affected: 112 | 2026-08-04T18:58:43+00:00 | Vulnerability · Source |
| CVE-2024-35962 | redhat_vex | kernel: netfilter: complete validation of user input | fixed: 633 known affected: 80 known not affected: 1 | 2026-08-04T18:58:42+00:00 | Vulnerability · Source |
| CVE-2024-35949 | redhat_vex | kernel: btrfs: make sure that WRITTEN is set on all metadata blocks | known not affected: 198 | 2026-08-04T18:58:38+00:00 | Vulnerability · Source |
| CVE-2024-35857 | redhat_vex | kernel: icmp: prevent possible NULL dereferences from icmp_build_probe() | fixed: 513 known affected: 64 known not affected: 49 | 2026-08-04T18:58:37+00:00 | Vulnerability · Source |
| CVE-2024-35919 | redhat_vex | kernel: media: mediatek: vcodec: adding lock to protect encoder context list | known not affected: 198 | 2026-08-04T18:58:35+00:00 | Vulnerability · Source |
| CVE-2024-35889 | redhat_vex | kernel: idpf: fix kernel panic on unknown packet types | known not affected: 198 | 2026-08-04T18:58:32+00:00 | Vulnerability · Source |
| CVE-2024-35875 | redhat_vex | kernel: x86/coco: Require seeding RNG with RDRAND on CoCo systems | fixed: 513 known affected: 70 known not affected: 43 | 2026-08-04T18:58:31+00:00 | Vulnerability · Source |
| CVE-2024-35951 | redhat_vex | kernel: drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() | known not affected: 198 | 2026-08-04T18:58:28+00:00 | Vulnerability · Source |
| CVE-2024-35910 | redhat_vex | kernel: tcp: properly terminate timers for kernel sockets | fixed: 270 known affected: 42 known not affected: 116 | 2026-08-04T18:58:25+00:00 | Vulnerability · Source |
| CVE-2024-35856 | redhat_vex | kernel: Bluetooth: btusb: mediatek: Fix double free of skb in coredump | known affected: 42 known not affected: 156 | 2026-08-04T18:58:24+00:00 | Vulnerability · Source |
| CVE-2024-35882 | redhat_vex | kernel: SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP | known affected: 42 known not affected: 156 | 2026-08-04T18:58:21+00:00 | Vulnerability · Source |
| CVE-2024-35963 | redhat_vex | kernel: Bluetooth: hci_sock: Fix not validating setsockopt user input | fixed: 305 known affected: 112 | 2026-08-04T18:58:19+00:00 | Vulnerability · Source |
| CVE-2024-35874 | redhat_vex | kernel: aio: Fix null ptr deref in aio_complete() wakeup | known affected: 28 known not affected: 170 | 2026-08-04T18:58:15+00:00 | Vulnerability · Source |
| CVE-2024-35954 | redhat_vex | kernel: scsi: sg: Avoid sg device teardown race | fixed: 280 known affected: 42 known not affected: 78 | 2026-08-04T18:58:09+00:00 | Vulnerability · Source |