VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290275 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-21363 | redhat_vex | mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors | fixed: 14 known affected: 10 known not affected: 224 | 2026-08-04T21:36:35+00:00 | Vulnerability · Source |
| CVE-2022-0722 | redhat_vex | parse-url: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url | fixed: 1 known affected: 12 known not affected: 4 | 2026-08-04T21:36:29+00:00 | Vulnerability · Source |
| CVE-2021-43859 | redhat_vex | xstream: Injecting highly recursive collections or maps can cause a DoS | fixed: 4 known affected: 19 known not affected: 80 | 2026-08-04T21:36:26+00:00 | Vulnerability · Source |
| CVE-2022-21680 | redhat_vex | marked: regular expression block.def may lead Denial of Service | fixed: 3 known affected: 24 known not affected: 99 | 2026-08-04T21:36:21+00:00 | Vulnerability · Source |
| CVE-2022-21713 | redhat_vex | grafana: IDOR vulnerability can lead to information disclosure | fixed: 18 known affected: 17 known not affected: 3 | 2026-08-04T21:36:21+00:00 | Vulnerability · Source |
| CVE-2021-46908 | redhat_vex | kernel: unknown scalars with mixed signed bounds masking mitigation | known affected: 90 known not affected: 108 | 2026-08-04T21:36:16+00:00 | Vulnerability · Source |
| CVE-2021-46960 | redhat_vex | kernel: cifs: Return correct error code from smb2_get_enc_key | fixed: 146 known affected: 74 known not affected: 124 | 2026-08-04T21:36:16+00:00 | Vulnerability · Source |
| CVE-2021-40797 | redhat_vex | openstack-neutron: Routes middleware memory leak for nonexistent controllers | fixed: 22 known affected: 23 known not affected: 1 | 2026-08-04T21:36:04+00:00 | Vulnerability · Source |
| CVE-2022-2447 | redhat_vex | Openstack: Application credential token remains valid longer than expected | known affected: 19 known not affected: 60 | 2026-08-04T21:35:59+00:00 | Vulnerability · Source |
| CVE-2022-24772 | redhat_vex | node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery | fixed: 11 known affected: 30 known not affected: 89 | 2026-08-04T21:35:56+00:00 | Vulnerability · Source |
| CVE-2022-2237 | redhat_vex | Adapter: Open redirect vulnerability in checkSSO | fixed: 1 known affected: 2 known not affected: 10 | 2026-08-04T21:35:52+00:00 | Vulnerability · Source |
| CVE-2022-23437 | redhat_vex | xerces-j2: infinite loop when handling specially crafted XML document payloads | fixed: 6 known affected: 21 known not affected: 229 | 2026-08-04T21:35:45+00:00 | Vulnerability · Source |
| CVE-2022-2466 | redhat_vex | smallrye-graphql: Request Context not terminated with GraphQL | known not affected: 1 | 2026-08-04T21:35:43+00:00 | Vulnerability · Source |
| CVE-2022-26520 | redhat_vex | postgresql-jdbc: Arbitrary File Write Vulnerability | fixed: 3 known affected: 8 known not affected: 12 | 2026-08-04T21:35:40+00:00 | Vulnerability · Source |
| CVE-2022-35957 | redhat_vex | grafana: Escalation from admin to server admin when auth proxy is used | fixed: 16 known affected: 27 known not affected: 17 | 2026-08-04T21:35:24+00:00 | Vulnerability · Source |
| CVE-2022-36313 | redhat_vex | file-type: a malformed MKV file could cause the file type detector to get caught in an infinite loop | fixed: 1 known affected: 8 known not affected: 4 | 2026-08-04T21:35:24+00:00 | Vulnerability · Source |
| CVE-2022-36062 | redhat_vex | grafana: Grafana RBAC folders/dashboards privilege escalation | known not affected: 32 | 2026-08-04T21:35:19+00:00 | Vulnerability · Source |
| CVE-2022-3509 | redhat_vex | protobuf-java: Textformat parsing issue leads to DoS | fixed: 3 known affected: 10 known not affected: 19 | 2026-08-04T21:35:01+00:00 | Vulnerability · Source |
| CVE-2022-3171 | redhat_vex | protobuf-java: timeout in parser leads to DoS | fixed: 5 | 2026-08-04T21:34:51+00:00 | Vulnerability · Source |
| CVE-2022-38648 | redhat_vex | batik: Server-Side Request Forgery | fixed: 2 known affected: 8 | 2026-08-04T21:34:50+00:00 | Vulnerability · Source |
| CVE-2022-31130 | redhat_vex | grafana: data source and plugin proxy endpoints leaking authentication tokens to some destination plugins | fixed: 16 known affected: 22 known not affected: 18 | 2026-08-04T21:34:45+00:00 | Vulnerability · Source |
| CVE-2022-36033 | redhat_vex | jsoup: The jsoup cleaner may incorrectly sanitize crafted XSS attempts if SafeList.preserveRelativeLinks is enabled | fixed: 136 known affected: 25 known not affected: 12 | 2026-08-04T21:34:35+00:00 | Vulnerability · Source |
| CVE-2022-31123 | redhat_vex | grafana: plugin signature bypass | fixed: 16 known affected: 24 known not affected: 16 | 2026-08-04T21:34:32+00:00 | Vulnerability · Source |
| CVE-2022-31197 | redhat_vex | postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names | fixed: 5 known affected: 180 known not affected: 8 | 2026-08-04T21:34:30+00:00 | Vulnerability · Source |
| CVE-2022-4304 | redhat_vex | openssl: timing attack in RSA Decryption implementation | fixed: 210 known affected: 17 known not affected: 118 | 2026-08-04T21:34:23+00:00 | Vulnerability · Source |
| CVE-2023-22102 | redhat_vex | mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2023) | known affected: 8 known not affected: 11 | 2026-08-04T21:34:18+00:00 | Vulnerability · Source |
| CVE-2023-22490 | redhat_vex | git: data exfiltration with maliciously crafted repository | fixed: 153 known affected: 33 | 2026-08-04T21:34:08+00:00 | Vulnerability · Source |
| CVE-2022-45787 | redhat_vex | apache-james-mime4j: Temporary File Information Disclosure in MIME4J TempFileStorageProvider | fixed: 399 known affected: 13 known not affected: 883 | 2026-08-04T21:33:58+00:00 | Vulnerability · Source |
| CVE-2023-0466 | redhat_vex | openssl: Certificate policy check not enabled | fixed: 75 known affected: 32 known not affected: 152 | 2026-08-04T21:33:55+00:00 | Vulnerability · Source |
| CVE-2023-20862 | redhat_vex | spring-security: Empty SecurityContext Is Not Properly Saved Upon Logout | fixed: 2 known affected: 12 known not affected: 19 | 2026-08-04T21:33:52+00:00 | Vulnerability · Source |
| CVE-2022-4742 | redhat_vex | json-pointer: prototype pollution in json-pointer | fixed: 1 known affected: 2 | 2026-08-04T21:33:42+00:00 | Vulnerability · Source |
| CVE-2022-4147 | redhat_vex | quarkus-vertx-http: Security misconfiguration of CORS : OWASP A05_2021 level in Quarkus | fixed: 2 | 2026-08-04T21:33:40+00:00 | Vulnerability · Source |
| CVE-2022-4450 | redhat_vex | openssl: double free after calling PEM_read_bio_ex | fixed: 207 known affected: 3 known not affected: 132 | 2026-08-04T21:33:37+00:00 | Vulnerability · Source |
| CVE-2022-39229 | redhat_vex | grafana: using email as a username can block other users from signing in | fixed: 25 known affected: 9 known not affected: 16 | 2026-08-04T21:33:36+00:00 | Vulnerability · Source |
| CVE-2022-41946 | redhat_vex | postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions | fixed: 18 known affected: 12 known not affected: 1994 | 2026-08-04T21:33:31+00:00 | Vulnerability · Source |
| CVE-2022-39201 | redhat_vex | grafana: Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins | fixed: 16 known affected: 22 known not affected: 18 | 2026-08-04T21:33:24+00:00 | Vulnerability · Source |
| CVE-2023-0217 | redhat_vex | openssl: NULL dereference validating DSA public key | fixed: 98 known not affected: 42 | 2026-08-04T21:33:10+00:00 | Vulnerability · Source |
| CVE-2026-44898 | redhat_vex | mistune: Mistune: Arbitrary code execution via HTML injection in table of contents rendering | known affected: 24 | 2026-08-04T21:33:06+00:00 | Vulnerability · Source |
| CVE-2023-0216 | redhat_vex | openssl: invalid pointer dereference in d2i_PKCS7 functions | fixed: 98 known not affected: 42 | 2026-08-04T21:33:05+00:00 | Vulnerability · Source |
| CVE-2022-4203 | redhat_vex | openssl: read buffer overflow in X.509 certificate verification | fixed: 98 known not affected: 42 | 2026-08-04T21:33:02+00:00 | Vulnerability · Source |
| CVE-2023-23946 | redhat_vex | git: git apply: a path outside the working tree can be overwritten with crafted input | fixed: 153 known affected: 33 | 2026-08-04T21:32:57+00:00 | Vulnerability · Source |
| CVE-2023-0401 | redhat_vex | openssl: NULL dereference during PKCS7 data verification | fixed: 98 known not affected: 42 | 2026-08-04T21:32:56+00:00 | Vulnerability · Source |
| CVE-2023-0215 | redhat_vex | openssl: use-after-free following BIO_new_NDEF | fixed: 210 known affected: 22 known not affected: 113 | 2026-08-04T21:32:49+00:00 | Vulnerability · Source |
| CVE-2023-1436 | redhat_vex | jettison: Uncontrolled Recursion in JSONArray | fixed: 36 known affected: 32 known not affected: 2395 | 2026-08-04T21:32:38+00:00 | Vulnerability · Source |
| CVE-2023-1419 | redhat_vex | debezium: script injection via connector parameter | known affected: 1 known not affected: 1 | 2026-08-04T21:32:32+00:00 | Vulnerability · Source |
| CVE-2023-4639 | redhat_vex | undertow: Cookie Smuggling/Spoofing | fixed: 27 known affected: 1 known not affected: 2448 under investigation: 10 | 2026-08-04T21:32:20+00:00 | Vulnerability · Source |
| CVE-2023-34050 | redhat_vex | springframework-amqp: Deserialization Vulnerability | fixed: 1 known affected: 2 known not affected: 4 | 2026-08-04T21:32:19+00:00 | Vulnerability · Source |
| CVE-2023-28709 | redhat_vex | tomcat: Fix for CVE-2023-24998 was incomplete | fixed: 54 known affected: 34 known not affected: 10 | 2026-08-04T21:32:02+00:00 | Vulnerability · Source |
| CVE-2023-41835 | redhat_vex | struts: Excessive disk usage during file upload | known not affected: 29 | 2026-08-04T21:32:00+00:00 | Vulnerability · Source |
| CVE-2024-1979 | redhat_vex | quarkus: information leak in annotation | fixed: 1 known affected: 1 known not affected: 1051 | 2026-08-04T21:31:47+00:00 | Vulnerability · Source |