VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290382 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-56715 | redhat_vex | kernel: ionic: Fix netdev notifier unregister on failure | known affected: 156 known not affected: 42 | 2026-08-04T22:40:13+00:00 | Vulnerability · Source |
| CVE-2024-57952 | redhat_vex | kernel: Revert "libfs: fix infinite directory reads for offset dir" | known affected: 274 | 2026-08-04T22:40:10+00:00 | Vulnerability · Source |
| CVE-2024-57999 | redhat_vex | kernel: powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW | known affected: 226 known not affected: 48 | 2026-08-04T22:40:07+00:00 | Vulnerability · Source |
| CVE-2024-56669 | redhat_vex | kernel: iommu/vt-d: Remove cache tags before disabling ATS | known affected: 108 known not affected: 90 | 2026-08-04T22:40:04+00:00 | Vulnerability · Source |
| CVE-2024-58086 | redhat_vex | kernel: drm/v3d: Stop active perfmon if it is being destroyed | known not affected: 274 | 2026-08-04T22:39:58+00:00 | Vulnerability · Source |
| CVE-2024-56720 | redhat_vex | kernel: bpf, sockmap: Several fixes to bpf_msg_pop_data | known affected: 198 | 2026-08-04T22:39:56+00:00 | Vulnerability · Source |
| CVE-2024-57804 | redhat_vex | kernel: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs | known affected: 156 known not affected: 42 | 2026-08-04T22:39:53+00:00 | Vulnerability · Source |
| CVE-2024-58079 | redhat_vex | kernel: media: uvcvideo: Fix crash during unbind if gpio unit is in use | known affected: 260 known not affected: 14 | 2026-08-04T22:39:51+00:00 | Vulnerability · Source |
| CVE-2024-58070 | redhat_vex | kernel: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT | known affected: 184 known not affected: 90 | 2026-08-04T22:39:47+00:00 | Vulnerability · Source |
| CVE-2024-57973 | redhat_vex | kernel: rdma/cxgb4: Prevent potential integer overflow on 32bit | known affected: 274 | 2026-08-04T22:39:46+00:00 | Vulnerability · Source |
| CVE-2024-50284 | redhat_vex | kernel: ksmbd: Fix the missing xa_store error check | known not affected: 198 | 2026-08-04T22:39:42+00:00 | Vulnerability · Source |
| CVE-2024-56706 | redhat_vex | kernel: s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex | known affected: 76 known not affected: 198 | 2026-08-04T22:39:41+00:00 | Vulnerability · Source |
| CVE-2024-50285 | redhat_vex | kernel: ksmbd: check outstanding simultaneous SMB operations | known not affected: 198 | 2026-08-04T22:39:35+00:00 | Vulnerability · Source |
| CVE-2024-53164 | redhat_vex | kernel: net: sched: fix ordering of qlen adjustment | fixed: 305 known affected: 98 known not affected: 14 | 2026-08-04T22:39:31+00:00 | Vulnerability · Source |
| CVE-2024-53217 | redhat_vex | kernel: NFSD: Prevent NULL dereference in nfsd4_process_cb_update() | known affected: 198 | 2026-08-04T22:39:27+00:00 | Vulnerability · Source |
| CVE-2024-56624 | redhat_vex | kernel: iommufd: Fix out_fput in iommufd_fault_alloc() | known affected: 108 known not affected: 90 | 2026-08-04T22:39:26+00:00 | Vulnerability · Source |
| CVE-2026-1035 | redhat_vex | org.keycloak.protocol.oidc: Keycloak Refresh Token Reuse Bypass via TOCTOU Race Condition | fixed: 10 known not affected: 3 | 2026-08-04T22:39:22+00:00 | Vulnerability · Source |
| CVE-2026-1190 | redhat_vex | org.keycloak/keycloak-services: Keycloak SAML brokering: Response delay due to unchecked NotOnOrAfter in SubjectConfirmationData | fixed: 10 known affected: 3 | 2026-08-04T22:39:20+00:00 | Vulnerability · Source |
| CVE-2026-24733 | redhat_vex | tomcat: security constraint bypass with HTTP/0.9 | fixed: 47 known affected: 56 | 2026-08-04T22:39:17+00:00 | Vulnerability · Source |
| CVE-2026-2366 | redhat_vex | keycloak: Keycloak: Information disclosure via authorization bypass in Admin API | fixed: 10 | 2026-08-04T22:39:14+00:00 | Vulnerability · Source |
| CVE-2026-2733 | redhat_vex | org.keycloak/keycloak-services: Keycloak: Missing Check on Disabled Client for Docker Registry Protocol | fixed: 10 known affected: 5 | 2026-08-04T22:39:12+00:00 | Vulnerability · Source |
| CVE-2026-3911 | redhat_vex | org.keycloak.services.resources.admin.UserResource: Keycloak: Information disclosure of disabled user attributes via administrative endpoint | fixed: 10 | 2026-08-04T22:39:09+00:00 | Vulnerability · Source |
| CVE-2026-51302 | redhat_vex | sqlite: SQLite: Arbitrary code execution via malicious SQL statement | fixed: 4 known affected: 1 known not affected: 106 | 2026-08-04T22:39:08+00:00 | Vulnerability · Source |
| CVE-2026-51303 | redhat_vex | sqlite: SQLite: Arbitrary code execution via specially crafted SQL queries | known not affected: 108 | 2026-08-04T22:39:03+00:00 | Vulnerability · Source |
| CVE-2026-51296 | redhat_vex | sqlite: SQLite: Use-after-free vulnerability leads to denial of service and information disclosure | known not affected: 108 | 2026-08-04T22:38:56+00:00 | Vulnerability · Source |
| CVE-2026-51300 | redhat_vex | sqlite: SQLite: Application crash and information leakage due to use-after-free | known not affected: 108 | 2026-08-04T22:38:54+00:00 | Vulnerability · Source |
| CVE-2026-51304 | redhat_vex | sqlite: sqlite: Arbitrary code execution via malicious SQL statement | fixed: 4 known affected: 1 known not affected: 106 | 2026-08-04T22:38:45+00:00 | Vulnerability · Source |
| CVE-2026-51297 | redhat_vex | sqlite: sqlite: Arbitrary code execution via use-after-free in JSON parsing | fixed: 4 known not affected: 107 | 2026-08-04T22:38:42+00:00 | Vulnerability · Source |
| CVE-2022-2232 | redhat_vex | keycloak: LDAP injection on username input | known affected: 1 | 2026-08-04T22:38:37+00:00 | Vulnerability · Source |
| CVE-2026-4874 | redhat_vex | org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: Keycloak: Server-Side Request Forgery via OIDC token endpoint manipulation | fixed: 20 known affected: 5 | 2026-08-04T22:38:17+00:00 | Vulnerability · Source |
| CVE-2024-9666 | redhat_vex | org.keycloak/keycloak-quarkus-server: Keycloak proxy header handling Denial-of-Service (DoS) vulnerability | fixed: 16 known not affected: 1 | 2026-08-04T22:38:14+00:00 | Vulnerability · Source |
| CVE-2025-10939 | redhat_vex | org.keycloak/keycloak-quarkus-server: Unable to restrict access to the admin console | fixed: 10 | 2026-08-04T22:37:33+00:00 | Vulnerability · Source |
| CVE-2021-3807 | redhat_vex | nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes | fixed: 129 known affected: 157 known not affected: 287 | 2026-08-04T22:22:48+00:00 | Vulnerability · Source |
| CVE-2021-41089 | redhat_vex | moby: `docker cp` allows unexpected chmod of host file | fixed: 1 known affected: 8 known not affected: 14 | 2026-08-04T22:15:28+00:00 | Vulnerability · Source |
| CVE-2022-39324 | redhat_vex | grafana: Spoofing of the originalUrl parameter of snapshots | fixed: 16 known affected: 32 known not affected: 23 | 2026-08-04T22:15:26+00:00 | Vulnerability · Source |
| CVE-2021-23362 | redhat_vex | nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl() | fixed: 203 known affected: 53 known not affected: 388 | 2026-08-04T22:15:07+00:00 | Vulnerability · Source |
| CVE-2020-28469 | redhat_vex | nodejs-glob-parent: Regular expression denial of service | fixed: 145 known affected: 28 known not affected: 518 | 2026-08-04T22:15:02+00:00 | Vulnerability · Source |
| CVE-2022-24785 | redhat_vex | Moment.js: Path traversal in moment.locale | fixed: 743 known affected: 92 known not affected: 475 | 2026-08-04T22:14:40+00:00 | Vulnerability · Source |
| CVE-2026-67856 | redhat_vex | open62541: open62541: Denial of Service via crafted subscription requests | known not affected: 1 | 2026-08-04T22:14:10+00:00 | Vulnerability · Source |
| CVE-2024-1102 | redhat_vex | jberet: jberet-core logging database credentials | fixed: 24 known affected: 11 known not affected: 2767 | 2026-08-04T22:10:34+00:00 | Vulnerability · Source |
| CVE-2011-4580 | redhat_vex | Platform: Multiple XSS flaws | fixed: 1 known not affected: 1 | 2026-08-04T22:07:02+00:00 | Vulnerability · Source |
| CVE-2011-4575 | redhat_vex | Console: XSS in invoke operation | fixed: 883 known affected: 2 | 2026-08-04T22:07:01+00:00 | Vulnerability · Source |
| CVE-2011-4317 | redhat_vex | httpd: uri scheme bypass of the reverse proxy vulnerability CVE-2011-3368 fix | fixed: 64 known not affected: 4 | 2026-08-04T22:06:57+00:00 | Vulnerability · Source |
| CVE-2010-5298 | redhat_vex | openssl: freelist misuse causing a possible use-after-free | fixed: 154 known not affected: 14 | 2026-08-04T22:06:57+00:00 | Vulnerability · Source |
| CVE-2011-3559 | redhat_vex | JBEWS: Unspecified vulnerability in GlassFish Enterprise Server 2.1.1 | under investigation: 1 | 2026-08-04T22:06:54+00:00 | Vulnerability · Source |
| CVE-2011-2260 | redhat_vex | glassfish: Unspecified vulnerability affecting confidentiality and integrity via unspecified vectors | under investigation: 1 | 2026-08-04T22:06:53+00:00 | Vulnerability · Source |
| CVE-2006-7248 | redhat_vex | openssl: mime_hdr_cmp NULL dereference crash | known affected: 4 known not affected: 8 | 2026-08-04T22:06:47+00:00 | Vulnerability · Source |
| CVE-1999-0428 | redhat_vex | openssl: allow remote attackers to reuse SSL sessions and bypass access controls | known not affected: 36 | 2026-08-04T22:06:46+00:00 | Vulnerability · Source |
| CVE-2000-1254 | redhat_vex | openssl: Mishandling C bitwise-shift operations making easier to bypass protection mechanisms | known not affected: 21 | 2026-08-04T22:06:38+00:00 | Vulnerability · Source |
| CVE-2011-4858 | redhat_vex | tomcat: hash table collisions CPU usage DoS (oCERT-2011-003) | fixed: 230 known not affected: 12 | 2026-08-04T22:06:37+00:00 | Vulnerability · Source |