VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290590 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2021-43527 | redhat_vex | nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS) | fixed: 580 known not affected: 35 | 2026-08-07T01:08:18+00:00 | Vulnerability · Source |
| CVE-2021-42574 | redhat_vex | environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks | fixed: 1925 known affected: 79 known not affected: 59 | 2026-08-07T01:08:14+00:00 | Vulnerability · Source |
| CVE-2021-37576 | redhat_vex | kernel: powerpc: KVM guest OS users can cause host OS memory corruption | fixed: 1089 known affected: 16 known not affected: 147 | 2026-08-07T01:08:07+00:00 | Vulnerability · Source |
| CVE-2021-4155 | redhat_vex | kernel: xfs: raw block device data leak in XFS_IOC_ALLOCSP IOCTL | fixed: 1349 known not affected: 126 | 2026-08-07T01:08:03+00:00 | Vulnerability · Source |
| CVE-2021-4083 | redhat_vex | kernel: fget: check that the fd still exists after getting a ref to it | fixed: 1294 known not affected: 146 | 2026-08-07T01:08:02+00:00 | Vulnerability · Source |
| CVE-2021-4034 | redhat_vex | polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector | fixed: 251 known not affected: 20 | 2026-08-07T01:07:56+00:00 | Vulnerability · Source |
| CVE-2021-4028 | redhat_vex | kernel: use-after-free in RDMA listen() | fixed: 1320 known affected: 14 known not affected: 132 | 2026-08-07T01:07:53+00:00 | Vulnerability · Source |
| CVE-2021-22555 | redhat_vex | kernel: out-of-bounds write in xt_compat_target_from_user() in net/netfilter/x_tables.c | fixed: 1259 known affected: 16 known not affected: 115 | 2026-08-07T01:07:47+00:00 | Vulnerability · Source |
| CVE-2019-9192 | microsoft_vex | In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion | fixed: 1 known affected: 1 under investigation: 2 | 2026-08-07T01:07:47+00:00 | Vulnerability · Source |
| CVE-2021-22543 | redhat_vex | kernel: Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks | fixed: 1259 known affected: 16 known not affected: 115 | 2026-08-07T01:07:42+00:00 | Vulnerability · Source |
| CVE-2021-20305 | redhat_vex | nettle: Out of bounds memory access in signature verification | fixed: 446 known not affected: 6 | 2026-08-07T01:07:38+00:00 | Vulnerability · Source |
| CVE-2021-20277 | redhat_vex | samba: Out of bounds read in AD DC LDAP server | fixed: 312 known affected: 41 known not affected: 5 | 2026-08-07T01:07:34+00:00 | Vulnerability · Source |
| CVE-2021-0920 | redhat_vex | kernel: Use After Free in unix_gc() which could result in a local privilege escalation | fixed: 1364 known not affected: 115 | 2026-08-07T01:07:31+00:00 | Vulnerability · Source |
| CVE-2022-22720 | redhat_vex | httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling | fixed: 662 known affected: 7 known not affected: 12 | 2026-08-07T01:07:17+00:00 | Vulnerability · Source |
| CVE-2022-2588 | redhat_vex | kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation | fixed: 1091 known affected: 14 known not affected: 114 | 2026-08-07T01:07:11+00:00 | Vulnerability · Source |
| CVE-2022-1729 | redhat_vex | kernel: race condition in perf_event_open leads to privilege escalation | fixed: 1145 known not affected: 23 | 2026-08-07T01:07:07+00:00 | Vulnerability · Source |
| CVE-2021-33909 | redhat_vex | kernel: size_t-to-int conversion vulnerability in the filesystem layer | fixed: 1348 known affected: 16 known not affected: 129 | 2026-08-07T01:07:00+00:00 | Vulnerability · Source |
| CVE-2021-32399 | redhat_vex | kernel: race condition for removal of the HCI controller | fixed: 1247 known not affected: 130 | 2026-08-07T01:06:52+00:00 | Vulnerability · Source |
| CVE-2021-25217 | redhat_vex | dhcp: stack-based buffer overflow when parsing statements with colon-separated hex digits in config or lease files in dhcpd and dhclient | fixed: 447 known not affected: 8 | 2026-08-07T01:06:47+00:00 | Vulnerability · Source |
| CVE-2021-3347 | redhat_vex | kernel: Use after free via PI futex state | fixed: 1310 known not affected: 108 | 2026-08-07T01:06:39+00:00 | Vulnerability · Source |
| CVE-2020-25211 | redhat_vex | kernel: Local buffer overflow in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c | fixed: 991 known affected: 32 known not affected: 52 | 2026-08-07T01:06:30+00:00 | Vulnerability · Source |
| CVE-2020-24489 | redhat_vex | hw: vt-d related privilege escalation | fixed: 101 known not affected: 6 | 2026-08-07T01:06:27+00:00 | Vulnerability · Source |
| CVE-2020-36385 | redhat_vex | kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free | fixed: 1260 known affected: 16 known not affected: 109 | 2026-08-07T01:06:16+00:00 | Vulnerability · Source |
| CVE-2010-4052 | microsoft_vex | Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent repetition operators, as demonstrated by a {10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD. | under investigation: 2 | 2026-08-07T01:05:02+00:00 | Vulnerability · Source |
| CVE-2019-6706 | microsoft_vex | Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships. | fixed: 2 known affected: 2 under investigation: 1 | 2026-08-07T01:03:44+00:00 | Vulnerability · Source |
| CVE-2018-6829 | microsoft_vex | cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for Libgcrypt's ElGamal implementation. | under investigation: 1 | 2026-08-07T00:59:42+00:00 | Vulnerability · Source |
| CVE-2018-1128 | microsoft_vex | It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable. | under investigation: 2 | 2026-08-07T00:42:03+00:00 | Vulnerability · Source |
| CVE-2006-7254 | suse_vex | SUSE CVE CVE-2006-7254 | known not affected: 233 | 2026-08-07T00:34:30+00:00 | Vulnerability · Source |
| CVE-2007-2447 | suse_vex | SUSE CVE CVE-2007-2447 | recommended: 297 | 2026-08-07T00:34:28+00:00 | Vulnerability · Source |
| CVE-2008-0891 | suse_vex | SUSE CVE CVE-2008-0891 | known not affected: 322 recommended: 64 | 2026-08-07T00:34:21+00:00 | Vulnerability · Source |
| CVE-2008-1673 | suse_vex | SUSE CVE CVE-2008-1673 | known affected: 30 known not affected: 51 recommended: 76 | 2026-08-07T00:34:19+00:00 | Vulnerability · Source |
| CVE-2008-3272 | suse_vex | SUSE CVE CVE-2008-3272 | known not affected: 144 | 2026-08-07T00:34:16+00:00 | Vulnerability · Source |
| CVE-2008-4226 | suse_vex | SUSE CVE CVE-2008-4226 | known affected: 2 recommended: 238 | 2026-08-07T00:34:14+00:00 | Vulnerability · Source |
| CVE-2009-0846 | suse_vex | SUSE CVE CVE-2009-0846 | recommended: 273 | 2026-08-07T00:34:11+00:00 | Vulnerability · Source |
| CVE-2009-0946 | suse_vex | SUSE CVE CVE-2009-0946 | known affected: 3 recommended: 187 | 2026-08-07T00:34:10+00:00 | Vulnerability · Source |
| CVE-2009-1046 | suse_vex | SUSE CVE CVE-2009-1046 | known not affected: 385 | 2026-08-07T00:34:08+00:00 | Vulnerability · Source |
| CVE-2009-1255 | suse_vex | SUSE CVE CVE-2009-1255 | known affected: 16 | 2026-08-07T00:34:05+00:00 | Vulnerability · Source |
| CVE-2009-1302 | suse_vex | SUSE CVE CVE-2009-1302 | known affected: 1 recommended: 193 | 2026-08-07T00:34:03+00:00 | Vulnerability · Source |
| CVE-2009-1310 | suse_vex | SUSE CVE CVE-2009-1310 | known affected: 1 recommended: 119 | 2026-08-07T00:34:01+00:00 | Vulnerability · Source |
| CVE-2009-1389 | suse_vex | SUSE CVE CVE-2009-1389 | known not affected: 497 recommended: 42 | 2026-08-07T00:33:57+00:00 | Vulnerability · Source |
| CVE-2009-1888 | suse_vex | SUSE CVE CVE-2009-1888 | recommended: 1787 | 2026-08-07T00:33:55+00:00 | Vulnerability · Source |
| CVE-2009-4026 | suse_vex | SUSE CVE CVE-2009-4026 | known not affected: 458 recommended: 353 | 2026-08-07T00:33:51+00:00 | Vulnerability · Source |
| CVE-2010-0168 | suse_vex | SUSE CVE CVE-2010-0168 | known affected: 21 known not affected: 137 recommended: 129 | 2026-08-07T00:33:49+00:00 | Vulnerability · Source |
| CVE-2010-0307 | suse_vex | SUSE CVE CVE-2010-0307 | known not affected: 495 recommended: 42 | 2026-08-07T00:33:47+00:00 | Vulnerability · Source |
| CVE-2010-2252 | suse_vex | SUSE CVE CVE-2010-2252 | recommended: 32 | 2026-08-07T00:33:43+00:00 | Vulnerability · Source |
| CVE-2010-4352 | suse_vex | SUSE CVE CVE-2010-4352 | recommended: 205 | 2026-08-07T00:33:38+00:00 | Vulnerability · Source |
| CVE-2011-1176 | suse_vex | SUSE CVE CVE-2011-1176 | recommended: 206 | 2026-08-07T00:33:33+00:00 | Vulnerability · Source |
| CVE-2011-1473 | suse_vex | SUSE CVE CVE-2011-1473 | known affected: 3 known not affected: 266 recommended: 34 | 2026-08-07T00:33:31+00:00 | Vulnerability · Source |
| CVE-2011-1581 | suse_vex | SUSE CVE CVE-2011-1581 | known not affected: 94 recommended: 114 | 2026-08-07T00:33:29+00:00 | Vulnerability · Source |
| CVE-2011-2689 | suse_vex | SUSE CVE CVE-2011-2689 | known not affected: 496 | 2026-08-07T00:33:23+00:00 | Vulnerability · Source |