VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290399 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-46678 | redhat_vex | pydantic-ai: pydantic-ai-slim: Pydantic AI: Server-Side Request Forgery (SSRF) bypass exposes cloud credentials. | known not affected: 5 | 2026-08-04T21:26:37+00:00 | Vulnerability · Source |
| CVE-2026-67216 | redhat_vex | cJSON: Denial of Service due to inefficient JSON object comparison | known affected: 2 known not affected: 1 | 2026-08-04T21:26:13+00:00 | Vulnerability · Source |
| CVE-2026-57236 | redhat_vex | nokogiri: Nokogiri: Denial of Service or Information Disclosure via invalid encoding handling | fixed: 40 known affected: 1 known not affected: 331 | 2026-08-04T21:24:28+00:00 | Vulnerability · Source |
| CVE-2026-12515 | redhat_vex | katello: missing repository authorization in content_uploads exposes cross-product content existence | fixed: 10 known affected: 1 known not affected: 362 | 2026-08-04T21:24:28+00:00 | Vulnerability · Source |
| CVE-2026-50560 | redhat_vex | netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling | fixed: 3 known affected: 42 known not affected: 4 | 2026-08-04T21:23:13+00:00 | Vulnerability · Source |
| CVE-2026-50020 | redhat_vex | netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder | fixed: 3 known affected: 45 known not affected: 9 | 2026-08-04T21:23:12+00:00 | Vulnerability · Source |
| CVE-2026-47244 | redhat_vex | netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams | fixed: 3 known affected: 42 known not affected: 4 | 2026-08-04T21:23:11+00:00 | Vulnerability · Source |
| CVE-2026-45673 | redhat_vex | netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs | fixed: 3 known affected: 43 | 2026-08-04T21:23:09+00:00 | Vulnerability · Source |
| CVE-2026-45536 | redhat_vex | netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling | fixed: 1 known affected: 38 known not affected: 9 | 2026-08-04T21:23:08+00:00 | Vulnerability · Source |
| CVE-2023-24532 | redhat_vex | golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results | fixed: 58 known affected: 24 known not affected: 151 | 2026-08-04T21:11:12+00:00 | Vulnerability · Source |
| CVE-2022-26148 | redhat_vex | grafana: An information leak issue was discovered in Grafana through 7.3.4, when integrated with Zabbix | fixed: 3 known affected: 12 known not affected: 48 | 2026-08-04T21:09:46+00:00 | Vulnerability · Source |
| CVE-2019-0205 | redhat_vex | thrift: Endless loop when feed with specific input data | fixed: 1203 known affected: 64 known not affected: 3 | 2026-08-04T20:59:43+00:00 | Vulnerability · Source |
| CVE-2018-14642 | redhat_vex | undertow: Infoleak in some circumstances where Undertow can serve data from a random buffer | fixed: 599 known affected: 4 known not affected: 3 | 2026-08-04T20:58:44+00:00 | Vulnerability · Source |
| CVE-2018-1000632 | redhat_vex | dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents | fixed: 1883 known affected: 22 known not affected: 5 | 2026-08-04T20:58:23+00:00 | Vulnerability · Source |
| CVE-2017-7554 | redhat_vex | RHMAP: Stored XSS in App Store | fixed: 105 | 2026-08-04T20:57:51+00:00 | Vulnerability · Source |
| CVE-2017-7553 | redhat_vex | RHMAP: SSRF via external_request feature of App Studio | fixed: 105 | 2026-08-04T20:57:49+00:00 | Vulnerability · Source |
| CVE-2017-7552 | redhat_vex | RHMAP Millicore IDE allows RCE on SCM | fixed: 105 | 2026-08-04T20:57:47+00:00 | Vulnerability · Source |
| CVE-2026-12383 | redhat_vex | eda-server: ExternalEventStreamViewSet trusts Subject header without validation and leaks expected DN | fixed: 20 known not affected: 381 | 2026-08-04T20:48:47+00:00 | Vulnerability · Source |
| CVE-2021-47132 | redhat_vex | kernel: mptcp: fix sk_forward_memory corruption on retransmission | known affected: 42 known not affected: 156 | 2026-08-04T20:10:07+00:00 | Vulnerability · Source |
| CVE-2021-47041 | redhat_vex | kernel: nvmet-tcp: fix incorrect locking in state_change sk callback | known affected: 198 | 2026-08-04T20:10:05+00:00 | Vulnerability · Source |
| CVE-2021-47083 | redhat_vex | kernel: pinctrl: mediatek: fix global-out-of-bounds issue | known affected: 42 known not affected: 156 | 2026-08-04T20:10:02+00:00 | Vulnerability · Source |
| CVE-2021-46993 | redhat_vex | kernel: sched: Fix out-of-bound access in uclamp | known affected: 42 known not affected: 156 | 2026-08-04T20:09:56+00:00 | Vulnerability · Source |
| CVE-2021-47066 | redhat_vex | kernel: async_xor: increase src_offs when dropping destination page cause data corruption | known affected: 28 known not affected: 170 | 2026-08-04T20:09:55+00:00 | Vulnerability · Source |
| CVE-2021-47061 | redhat_vex | kernel: KVM: use-after-free while destroy I/O bus devices on unregister failure | known not affected: 198 | 2026-08-04T20:09:52+00:00 | Vulnerability · Source |
| CVE-2021-47123 | redhat_vex | kernel: io_uring: fix ltout double free on completion race | known affected: 42 known not affected: 156 | 2026-08-04T20:09:44+00:00 | Vulnerability · Source |
| CVE-2021-47012 | redhat_vex | kernel: RDMA/siw: Fix a use after free in siw_alloc_mr | known affected: 90 known not affected: 108 | 2026-08-04T20:09:41+00:00 | Vulnerability · Source |
| CVE-2021-47175 | redhat_vex | kernel: net/sched: fq_pie: fix OOB access in the traffic path | known not affected: 198 | 2026-08-04T20:09:40+00:00 | Vulnerability · Source |
| CVE-2021-47103 | redhat_vex | kernel: inet: fully convert sk->sk_rx_dst to RCU rules | fixed: 286 known affected: 80 | 2026-08-04T20:08:39+00:00 | Vulnerability · Source |
| CVE-2021-46992 | redhat_vex | kernel: netfilter: nftables: avoid overflows in nft_hash_buckets() | known affected: 42 known not affected: 156 | 2026-08-04T20:06:57+00:00 | Vulnerability · Source |
| CVE-2021-47148 | redhat_vex | kernel: octeontx2-pf: fix a buffer overflow in otx2_set_rxfh_context() | known not affected: 198 | 2026-08-04T20:06:57+00:00 | Vulnerability · Source |
| CVE-2021-47081 | redhat_vex | kernel: habanalabs/gaudi: Fix a potential use after free in gaudi_memset_device_memory | known affected: 42 known not affected: 156 | 2026-08-04T20:06:54+00:00 | Vulnerability · Source |
| CVE-2021-47017 | redhat_vex | kernel: use after free in ath10k_htc_send_bundle | known affected: 198 | 2026-08-04T20:06:42+00:00 | Vulnerability · Source |
| CVE-2021-47179 | redhat_vex | kernel: NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() | known not affected: 198 | 2026-08-04T20:06:41+00:00 | Vulnerability · Source |
| CVE-2011-0419 | redhat_vex | apr: unconstrained recursion in apr_fnmatch | fixed: 838 | 2026-08-04T20:06:36+00:00 | Vulnerability · Source |
| CVE-2011-0013 | redhat_vex | tomcat: XSS vulnerability in HTML Manager interface | fixed: 838 | 2026-08-04T20:06:33+00:00 | Vulnerability · Source |
| CVE-2010-4172 | redhat_vex | tomcat: cross-site-scripting vulnerability in the manager application | fixed: 747 known not affected: 1 | 2026-08-04T20:06:31+00:00 | Vulnerability · Source |
| CVE-2010-3718 | redhat_vex | tomcat: file permission bypass flaw | fixed: 838 | 2026-08-04T20:06:28+00:00 | Vulnerability · Source |
| CVE-2010-1623 | redhat_vex | apr-util: high memory consumption in apr_brigade_split_line() | fixed: 896 | 2026-08-04T20:06:27+00:00 | Vulnerability · Source |
| CVE-2021-47102 | redhat_vex | kernel: net: marvell: prestera: fix incorrect structure access | known not affected: 198 | 2026-08-04T20:06:24+00:00 | Vulnerability · Source |
| CVE-2021-47036 | redhat_vex | kernel: udp: skip L4 aggregation for UDP tunnel packets | known affected: 90 known not affected: 108 | 2026-08-04T20:06:24+00:00 | Vulnerability · Source |
| CVE-2021-46998 | redhat_vex | kernel: ethernet:enic: Fix a use after free bug in enic_hard_start_xmit | known affected: 42 known not affected: 156 | 2026-08-04T20:06:18+00:00 | Vulnerability · Source |
| CVE-2021-46999 | redhat_vex | kernel: sctp: do asoc update earlier in sctp_sf_do_dupcook_a | known affected: 198 | 2026-08-04T20:06:10+00:00 | Vulnerability · Source |
| CVE-2021-47106 | redhat_vex | kernel: netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy() | known affected: 44 known not affected: 154 | 2026-08-04T20:06:08+00:00 | Vulnerability · Source |
| CVE-2021-47152 | redhat_vex | kernel: mptcp: fix data stream corruption | known affected: 16 known not affected: 182 | 2026-08-04T20:06:08+00:00 | Vulnerability · Source |
| CVE-2021-47184 | redhat_vex | kernel: i40e: Fix NULL ptr dereference on VSI filter sync | known affected: 44 known not affected: 154 | 2026-08-04T20:06:03+00:00 | Vulnerability · Source |
| CVE-2021-47013 | redhat_vex | kernel: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send | fixed: 399 known affected: 42 known not affected: 108 | 2026-08-04T20:05:59+00:00 | Vulnerability · Source |
| CVE-2021-46989 | redhat_vex | kernel: hfsplus: prevent corruption in shrinking truncate | known affected: 42 known not affected: 156 | 2026-08-04T20:05:57+00:00 | Vulnerability · Source |
| CVE-2021-47200 | redhat_vex | kernel: drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap | known affected: 42 known not affected: 156 | 2026-08-04T20:05:56+00:00 | Vulnerability · Source |
| CVE-2021-47004 | redhat_vex | kernel: f2fs: fix to avoid touching checkpointed data in get_victim() | known affected: 42 known not affected: 156 | 2026-08-04T20:05:51+00:00 | Vulnerability · Source |
| CVE-2021-47159 | redhat_vex | kernel: net: dsa: fix a crash if ->get_sset_count() fails | known not affected: 198 | 2026-08-04T20:05:49+00:00 | Vulnerability · Source |