VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290399 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-1436 | redhat_vex | jettison: Uncontrolled Recursion in JSONArray | fixed: 36 known affected: 32 known not affected: 2395 | 2026-08-04T21:32:38+00:00 | Vulnerability · Source |
| CVE-2023-1419 | redhat_vex | debezium: script injection via connector parameter | known affected: 1 known not affected: 1 | 2026-08-04T21:32:32+00:00 | Vulnerability · Source |
| CVE-2023-4639 | redhat_vex | undertow: Cookie Smuggling/Spoofing | fixed: 27 known affected: 1 known not affected: 2448 under investigation: 10 | 2026-08-04T21:32:20+00:00 | Vulnerability · Source |
| CVE-2023-34050 | redhat_vex | springframework-amqp: Deserialization Vulnerability | fixed: 1 known affected: 2 known not affected: 4 | 2026-08-04T21:32:19+00:00 | Vulnerability · Source |
| CVE-2023-28709 | redhat_vex | tomcat: Fix for CVE-2023-24998 was incomplete | fixed: 54 known affected: 34 known not affected: 10 | 2026-08-04T21:32:02+00:00 | Vulnerability · Source |
| CVE-2023-41835 | redhat_vex | struts: Excessive disk usage during file upload | known not affected: 29 | 2026-08-04T21:32:00+00:00 | Vulnerability · Source |
| CVE-2024-1979 | redhat_vex | quarkus: information leak in annotation | fixed: 1 known affected: 1 known not affected: 1051 | 2026-08-04T21:31:47+00:00 | Vulnerability · Source |
| CVE-2023-43642 | redhat_vex | snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact | fixed: 3 known affected: 17 known not affected: 2039 | 2026-08-04T21:31:39+00:00 | Vulnerability · Source |
| CVE-2023-6393 | redhat_vex | quarkus: Potential invalid reuse of context when @CacheResult on a Uni is used | fixed: 1 known affected: 1 known not affected: 992 | 2026-08-04T21:31:37+00:00 | Vulnerability · Source |
| CVE-2023-42503 | redhat_vex | apache-commons-compress: Denial of service via CPU consumption for malformed TAR file | known affected: 3 known not affected: 7 | 2026-08-04T21:31:34+00:00 | Vulnerability · Source |
| CVE-2023-6717 | redhat_vex | keycloak: XSS via assertion consumer service URL in SAML POST-binding flow | fixed: 36 known affected: 12 known not affected: 6 | 2026-08-04T21:31:29+00:00 | Vulnerability · Source |
| CVE-2023-6481 | redhat_vex | logback: A serialization vulnerability in logback receiver | fixed: 122 known affected: 14 known not affected: 10 | 2026-08-04T21:31:22+00:00 | Vulnerability · Source |
| CVE-2023-2650 | redhat_vex | openssl: Possible DoS translating ASN.1 object identifiers | fixed: 87 known affected: 35 known not affected: 144 | 2026-08-04T21:31:13+00:00 | Vulnerability · Source |
| CVE-2023-31582 | redhat_vex | jose4j: Insecure iteration count setting | fixed: 3 known affected: 12 known not affected: 1001 | 2026-08-04T21:31:12+00:00 | Vulnerability · Source |
| CVE-2023-5379 | redhat_vex | undertow: AJP Request closes connection exceeding maxRequestSize | fixed: 90 known affected: 7 known not affected: 3 | 2026-08-04T21:31:03+00:00 | Vulnerability · Source |
| CVE-2024-22234 | redhat_vex | spring-security: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated | fixed: 5 known affected: 8 known not affected: 58 | 2026-08-04T21:31:02+00:00 | Vulnerability · Source |
| CVE-2023-51079 | redhat_vex | mvel: TimeOut error when calling ParseTools.subCompileExpression() function | fixed: 1 known not affected: 22 | 2026-08-04T21:30:56+00:00 | Vulnerability · Source |
| CVE-2024-23076 | redhat_vex | jfreechart: Null pointer exception | known not affected: 18 | 2026-08-04T21:30:53+00:00 | Vulnerability · Source |
| CVE-2023-34042 | redhat_vex | spring-security-config: Incorrect Permission Assignment for spring-security.xsd | known affected: 11 known not affected: 7 | 2026-08-04T21:30:52+00:00 | Vulnerability · Source |
| CVE-2024-1023 | redhat_vex | io.vertx/vertx-core: memory leak due to the use of Netty FastThreadLocal data structures in Vertx | fixed: 18 known affected: 8 known not affected: 1065 | 2026-08-04T21:30:47+00:00 | Vulnerability · Source |
| CVE-2023-6378 | redhat_vex | logback: serialization vulnerability in logback receiver | fixed: 6 known affected: 16 known not affected: 43 | 2026-08-04T21:30:44+00:00 | Vulnerability · Source |
| CVE-2023-51775 | redhat_vex | jose4j: denial of service via specially crafted JWE | fixed: 151 known affected: 9 known not affected: 7 | 2026-08-04T21:30:42+00:00 | Vulnerability · Source |
| CVE-2024-1300 | redhat_vex | io.vertx:vertx-core: memory leak when a TCP server is configured with TLS and SNI support | fixed: 33 known affected: 8 known not affected: 1064 | 2026-08-04T21:30:37+00:00 | Vulnerability · Source |
| CVE-2023-5590 | redhat_vex | selenium: potential null pointer access in CookieManager | known affected: 3 known not affected: 10 | 2026-08-04T21:30:36+00:00 | Vulnerability · Source |
| CVE-2023-33202 | redhat_vex | bc-java: Out of memory while parsing ASN.1 crafted data in org.bouncycastle.openssl.PEMParser class | fixed: 1 known affected: 18 known not affected: 31 under investigation: 2 | 2026-08-04T21:30:13+00:00 | Vulnerability · Source |
| CVE-2023-34454 | redhat_vex | snappy-java: Integer overflow in compress leads to DoS | fixed: 2 known affected: 18 known not affected: 995 | 2026-08-04T21:30:12+00:00 | Vulnerability · Source |
| CVE-2023-34453 | redhat_vex | snappy-java: Integer overflow in shuffle leads to DoS | fixed: 2 known affected: 8 known not affected: 1005 | 2026-08-04T21:29:53+00:00 | Vulnerability · Source |
| CVE-2024-22201 | redhat_vex | jetty: stop accepting new connections from valid clients | fixed: 18 known affected: 44 known not affected: 7 | 2026-08-04T21:29:49+00:00 | Vulnerability · Source |
| CVE-2023-5363 | redhat_vex | openssl: Incorrect cipher key and IV length processing | fixed: 246 known not affected: 42 | 2026-08-04T21:29:46+00:00 | Vulnerability · Source |
| CVE-2023-2974 | redhat_vex | quarkus-core: TLS protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported TLS protocol | fixed: 2 known affected: 1 known not affected: 877 | 2026-08-04T21:29:45+00:00 | Vulnerability · Source |
| CVE-2023-7272 | redhat_vex | parsson: stack overflow when parsing deeply nested input | known affected: 2 known not affected: 11 | 2026-08-04T21:29:39+00:00 | Vulnerability · Source |
| CVE-2023-45853 | redhat_vex | zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6 | fixed: 1 known affected: 15 known not affected: 11 | 2026-08-04T21:29:36+00:00 | Vulnerability · Source |
| CVE-2024-12397 | redhat_vex | io.quarkus.http/quarkus-http-core: Quarkus HTTP Cookie Smuggling | fixed: 24 known affected: 10 known not affected: 2 | 2026-08-04T21:29:34+00:00 | Vulnerability · Source |
| CVE-2023-5675 | redhat_vex | quarkus: Authorization flaw in Quarkus RestEasy Reactive and Classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used. | fixed: 4 known affected: 10 known not affected: 2041 | 2026-08-04T21:29:28+00:00 | Vulnerability · Source |
| CVE-2024-12798 | redhat_vex | logback-core: arbitrary code execution via JaninoEventEvaluator | fixed: 1 known affected: 14 known not affected: 5 | 2026-08-04T21:29:22+00:00 | Vulnerability · Source |
| CVE-2024-23081 | redhat_vex | threetenbp: null pointer exception | fixed: 1 known affected: 6 known not affected: 8 | 2026-08-04T21:28:45+00:00 | Vulnerability · Source |
| CVE-2024-38809 | redhat_vex | org.springframework:spring-web: Spring Framework DoS via conditional HTTP request | fixed: 1 known affected: 6 known not affected: 9 | 2026-08-04T21:28:27+00:00 | Vulnerability · Source |
| CVE-2024-38808 | redhat_vex | spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression | fixed: 17 known affected: 9 known not affected: 17 under investigation: 1 | 2026-08-04T21:28:19+00:00 | Vulnerability · Source |
| CVE-2024-41909 | redhat_vex | mina-sshd: integrity check bypass vulnerability | fixed: 1 known affected: 12 known not affected: 14 | 2026-08-04T21:28:15+00:00 | Vulnerability · Source |
| CVE-2024-40094 | redhat_vex | graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java | fixed: 47 known affected: 3 known not affected: 3 | 2026-08-04T21:28:13+00:00 | Vulnerability · Source |
| CVE-2024-36107 | redhat_vex | minio: sensitive information exposure | known affected: 3 known not affected: 2 | 2026-08-04T21:27:56+00:00 | Vulnerability · Source |
| CVE-2024-2700 | redhat_vex | quarkus-core: Leak of local configuration properties into Quarkus applications | fixed: 146 known affected: 7 known not affected: 2067 | 2026-08-04T21:27:51+00:00 | Vulnerability · Source |
| CVE-2024-30171 | redhat_vex | bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack) | fixed: 293 known affected: 5 known not affected: 1403 | 2026-08-04T21:27:45+00:00 | Vulnerability · Source |
| CVE-2024-23321 | redhat_vex | apache: RocketMQ: org.apache.rocketmq:rocketmq-all: Unauthorized Exposure of Sensitive Data | known not affected: 2 | 2026-08-04T21:27:44+00:00 | Vulnerability · Source |
| CVE-2025-27636 | redhat_vex | camel-http: org.apache.camel: bypass of header filters via specially crafted response | fixed: 2 known affected: 13 known not affected: 6 | 2026-08-04T21:27:41+00:00 | Vulnerability · Source |
| CVE-2024-9823 | redhat_vex | org.eclipse.jetty:jetty-servlets: jetty: Jetty DOS vulnerability on DosFilter | fixed: 1 known affected: 7 known not affected: 6 | 2026-08-04T21:27:40+00:00 | Vulnerability · Source |
| CVE-2024-41172 | redhat_vex | apache: cxf: org.apache.cxf:cxf-rt-transports-http: unrestricted memory consumption in CXF HTTP clients | fixed: 236 known affected: 2 known not affected: 9 | 2026-08-04T21:27:39+00:00 | Vulnerability · Source |
| CVE-2024-29651 | redhat_vex | json-schema-ref-parser: Prototype pollution issue | known affected: 3 known not affected: 3 | 2026-08-04T21:27:34+00:00 | Vulnerability · Source |
| CVE-2025-25193 | redhat_vex | netty: Denial of Service attack on windows app using Netty | fixed: 287 known affected: 1 known not affected: 1 | 2026-08-04T21:27:26+00:00 | Vulnerability · Source |
| CVE-2026-47825 | redhat_vex | spring-cloud-gateway: Spring Cloud Gateway Server: Security bypass due to untrusted header forwarding | known not affected: 2 | 2026-08-04T21:26:42+00:00 | Vulnerability · Source |