VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290335 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2021-43045 | redhat_vex | apache-avro: allows attackers to allocate excessive resources potentially causing a DoS | known not affected: 15 | 2026-08-04T21:38:19+00:00 | Vulnerability · Source |
| CVE-2022-2068 | redhat_vex | openssl: the c_rehash script allows command injection | fixed: 144 known affected: 27 known not affected: 2328 | 2026-08-04T21:38:15+00:00 | Vulnerability · Source |
| CVE-2021-42550 | redhat_vex | logback: remote code execution through JNDI call from within its configuration file | fixed: 7 known affected: 4 known not affected: 3483 | 2026-08-04T21:38:13+00:00 | Vulnerability · Source |
| CVE-2022-2097 | redhat_vex | openssl: AES OCB fails to encrypt some bytes | fixed: 83 known affected: 7 known not affected: 34 | 2026-08-04T21:38:06+00:00 | Vulnerability · Source |
| CVE-2022-21681 | redhat_vex | marked: regular expression inline.reflinkSearch may lead Denial of Service | fixed: 3 known affected: 24 known not affected: 99 | 2026-08-04T21:38:06+00:00 | Vulnerability · Source |
| CVE-2022-1415 | redhat_vex | drools: unsafe data deserialization in StreamUtils | fixed: 1 known affected: 5 known not affected: 9 | 2026-08-04T21:38:02+00:00 | Vulnerability · Source |
| CVE-2021-46977 | redhat_vex | kernel: KVM: VMX: Disable preemption when probing user return MSRs | known affected: 42 known not affected: 156 | 2026-08-04T21:37:58+00:00 | Vulnerability · Source |
| CVE-2021-42392 | redhat_vex | h2: Remote Code Execution in Console | fixed: 82 known affected: 13 known not affected: 233 | 2026-08-04T21:37:55+00:00 | Vulnerability · Source |
| CVE-2021-46936 | redhat_vex | kernel: net: fix use-after-free in tw_timer_handler | known affected: 42 known not affected: 156 | 2026-08-04T21:37:54+00:00 | Vulnerability · Source |
| CVE-2021-46974 | redhat_vex | kernel: bpf: Fix masking negation logic upon negative dst register | known affected: 42 known not affected: 156 | 2026-08-04T21:37:50+00:00 | Vulnerability · Source |
| CVE-2021-46958 | redhat_vex | kernel: btrfs: fix race between transaction aborts and fsyncs leading to use-after-free | known not affected: 198 | 2026-08-04T21:37:50+00:00 | Vulnerability · Source |
| CVE-2021-46973 | redhat_vex | kernel: net: qrtr: Avoid potential use after free in MHI send | known affected: 90 known not affected: 108 | 2026-08-04T21:37:42+00:00 | Vulnerability · Source |
| CVE-2021-41973 | redhat_vex | mina-core: infinite loop may lead to DoS | known affected: 9 known not affected: 3 | 2026-08-04T21:37:39+00:00 | Vulnerability · Source |
| CVE-2022-21703 | redhat_vex | grafana: CSRF vulnerability can lead to privilege escalation | fixed: 18 known affected: 17 known not affected: 3 | 2026-08-04T21:37:35+00:00 | Vulnerability · Source |
| CVE-2022-1343 | redhat_vex | openssl: Signer certificate verification returns inaccurate response when using OCSP_NOCHECKS | fixed: 49 known not affected: 47 | 2026-08-04T21:37:29+00:00 | Vulnerability · Source |
| CVE-2021-46983 | redhat_vex | kernel: nvmet-rdma: Fix NULL deref when SEND is completed with error | fixed: 120 known affected: 58 known not affected: 108 | 2026-08-04T21:37:27+00:00 | Vulnerability · Source |
| CVE-2021-46913 | redhat_vex | kernel: netfilter: nftables: clone set element expression template | known affected: 42 known not affected: 156 | 2026-08-04T21:37:21+00:00 | Vulnerability · Source |
| CVE-2021-42581 | redhat_vex | ramda: prototype poisoning | fixed: 3 known affected: 7 known not affected: 38 | 2026-08-04T21:37:16+00:00 | Vulnerability · Source |
| CVE-2022-21702 | redhat_vex | grafana: XSS vulnerability in data source handling | fixed: 18 known affected: 16 known not affected: 4 | 2026-08-04T21:37:15+00:00 | Vulnerability · Source |
| CVE-2021-46967 | redhat_vex | kernel: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping | known affected: 42 known not affected: 156 | 2026-08-04T21:37:12+00:00 | Vulnerability · Source |
| CVE-2022-2217 | redhat_vex | npm: XSS in parse-url | known affected: 7 known not affected: 6 | 2026-08-04T21:37:11+00:00 | Vulnerability · Source |
| CVE-2021-46955 | redhat_vex | kernel: openvswitch: fix stack OOB read while fragmenting IPv4 packets | known affected: 42 known not affected: 156 | 2026-08-04T21:37:01+00:00 | Vulnerability · Source |
| CVE-2022-1473 | redhat_vex | openssl: OPENSSL_LH_flush() breaks reuse of memory | fixed: 49 known not affected: 47 | 2026-08-04T21:36:56+00:00 | Vulnerability · Source |
| CVE-2021-4178 | redhat_vex | kubernetes-client: Insecure deserialization in unmarshalYaml method | fixed: 8 known affected: 7 known not affected: 3 | 2026-08-04T21:36:54+00:00 | Vulnerability · Source |
| CVE-2022-1292 | redhat_vex | openssl: c_rehash script allows command injection | fixed: 144 known affected: 26 known not affected: 2329 | 2026-08-04T21:36:47+00:00 | Vulnerability · Source |
| CVE-2022-21363 | redhat_vex | mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors | fixed: 14 known affected: 10 known not affected: 224 | 2026-08-04T21:36:35+00:00 | Vulnerability · Source |
| CVE-2022-0722 | redhat_vex | parse-url: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url | fixed: 1 known affected: 12 known not affected: 4 | 2026-08-04T21:36:29+00:00 | Vulnerability · Source |
| CVE-2021-43859 | redhat_vex | xstream: Injecting highly recursive collections or maps can cause a DoS | fixed: 4 known affected: 19 known not affected: 80 | 2026-08-04T21:36:26+00:00 | Vulnerability · Source |
| CVE-2022-21680 | redhat_vex | marked: regular expression block.def may lead Denial of Service | fixed: 3 known affected: 24 known not affected: 99 | 2026-08-04T21:36:21+00:00 | Vulnerability · Source |
| CVE-2022-21713 | redhat_vex | grafana: IDOR vulnerability can lead to information disclosure | fixed: 18 known affected: 17 known not affected: 3 | 2026-08-04T21:36:21+00:00 | Vulnerability · Source |
| CVE-2021-46908 | redhat_vex | kernel: unknown scalars with mixed signed bounds masking mitigation | known affected: 90 known not affected: 108 | 2026-08-04T21:36:16+00:00 | Vulnerability · Source |
| CVE-2021-46960 | redhat_vex | kernel: cifs: Return correct error code from smb2_get_enc_key | fixed: 146 known affected: 74 known not affected: 124 | 2026-08-04T21:36:16+00:00 | Vulnerability · Source |
| CVE-2021-40797 | redhat_vex | openstack-neutron: Routes middleware memory leak for nonexistent controllers | fixed: 22 known affected: 23 known not affected: 1 | 2026-08-04T21:36:04+00:00 | Vulnerability · Source |
| CVE-2022-2447 | redhat_vex | Openstack: Application credential token remains valid longer than expected | known affected: 19 known not affected: 60 | 2026-08-04T21:35:59+00:00 | Vulnerability · Source |
| CVE-2022-24772 | redhat_vex | node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery | fixed: 11 known affected: 30 known not affected: 89 | 2026-08-04T21:35:56+00:00 | Vulnerability · Source |
| CVE-2022-2237 | redhat_vex | Adapter: Open redirect vulnerability in checkSSO | fixed: 1 known affected: 2 known not affected: 10 | 2026-08-04T21:35:52+00:00 | Vulnerability · Source |
| CVE-2022-23437 | redhat_vex | xerces-j2: infinite loop when handling specially crafted XML document payloads | fixed: 6 known affected: 21 known not affected: 229 | 2026-08-04T21:35:45+00:00 | Vulnerability · Source |
| CVE-2022-2466 | redhat_vex | smallrye-graphql: Request Context not terminated with GraphQL | known not affected: 1 | 2026-08-04T21:35:43+00:00 | Vulnerability · Source |
| CVE-2022-26520 | redhat_vex | postgresql-jdbc: Arbitrary File Write Vulnerability | fixed: 3 known affected: 8 known not affected: 12 | 2026-08-04T21:35:40+00:00 | Vulnerability · Source |
| CVE-2022-35957 | redhat_vex | grafana: Escalation from admin to server admin when auth proxy is used | fixed: 16 known affected: 27 known not affected: 17 | 2026-08-04T21:35:24+00:00 | Vulnerability · Source |
| CVE-2022-36313 | redhat_vex | file-type: a malformed MKV file could cause the file type detector to get caught in an infinite loop | fixed: 1 known affected: 8 known not affected: 4 | 2026-08-04T21:35:24+00:00 | Vulnerability · Source |
| CVE-2022-36062 | redhat_vex | grafana: Grafana RBAC folders/dashboards privilege escalation | known not affected: 32 | 2026-08-04T21:35:19+00:00 | Vulnerability · Source |
| CVE-2022-3509 | redhat_vex | protobuf-java: Textformat parsing issue leads to DoS | fixed: 3 known affected: 10 known not affected: 19 | 2026-08-04T21:35:01+00:00 | Vulnerability · Source |
| CVE-2022-3171 | redhat_vex | protobuf-java: timeout in parser leads to DoS | fixed: 5 | 2026-08-04T21:34:51+00:00 | Vulnerability · Source |
| CVE-2022-38648 | redhat_vex | batik: Server-Side Request Forgery | fixed: 2 known affected: 8 | 2026-08-04T21:34:50+00:00 | Vulnerability · Source |
| CVE-2022-31130 | redhat_vex | grafana: data source and plugin proxy endpoints leaking authentication tokens to some destination plugins | fixed: 16 known affected: 22 known not affected: 18 | 2026-08-04T21:34:45+00:00 | Vulnerability · Source |
| CVE-2022-36033 | redhat_vex | jsoup: The jsoup cleaner may incorrectly sanitize crafted XSS attempts if SafeList.preserveRelativeLinks is enabled | fixed: 136 known affected: 25 known not affected: 12 | 2026-08-04T21:34:35+00:00 | Vulnerability · Source |
| CVE-2022-31123 | redhat_vex | grafana: plugin signature bypass | fixed: 16 known affected: 24 known not affected: 16 | 2026-08-04T21:34:32+00:00 | Vulnerability · Source |
| CVE-2022-31197 | redhat_vex | postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names | fixed: 5 known affected: 180 known not affected: 8 | 2026-08-04T21:34:30+00:00 | Vulnerability · Source |
| CVE-2022-4304 | redhat_vex | openssl: timing attack in RSA Decryption implementation | fixed: 210 known affected: 17 known not affected: 118 | 2026-08-04T21:34:23+00:00 | Vulnerability · Source |