VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290590 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-47304 | redhat_vex | dotnet: .NET Security Feature Bypass Vulnerability | fixed: 943 known affected: 1 known not affected: 2 | 2026-08-06T22:16:12+00:00 | Vulnerability · Source |
| CVE-2022-1271 | redhat_vex | gzip: arbitrary-file-write vulnerability | fixed: 402 known affected: 6 known not affected: 26 | 2026-08-06T22:16:04+00:00 | Vulnerability · Source |
| CVE-2026-50506 | redhat_vex | dotnet: odata: ASP.NET Core: Denial of Service due to uncontrolled resource allocation | known not affected: 3 | 2026-08-06T22:16:01+00:00 | Vulnerability · Source |
| CVE-2026-45363 | redhat_vex | ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification | known affected: 4 known not affected: 1 | 2026-08-06T22:15:55+00:00 | Vulnerability · Source |
| CVE-2026-50646 | redhat_vex | dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure | fixed: 943 known not affected: 2 | 2026-08-06T22:15:34+00:00 | Vulnerability · Source |
| CVE-2022-25315 | redhat_vex | expat: Integer overflow in storeRawNames() | fixed: 314 known affected: 4 known not affected: 34 | 2026-08-06T22:15:18+00:00 | Vulnerability · Source |
| CVE-2026-50650 | redhat_vex | dotnet: .NET Framework: Privilege escalation via code injection | fixed: 943 known not affected: 2 | 2026-08-06T22:15:17+00:00 | Vulnerability · Source |
| CVE-2022-25235 | redhat_vex | expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution | fixed: 597 known affected: 4 known not affected: 28 | 2026-08-06T22:14:22+00:00 | Vulnerability · Source |
| CVE-2022-25236 | redhat_vex | expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution | fixed: 283 known affected: 4 known not affected: 37 | 2026-08-06T22:14:13+00:00 | Vulnerability · Source |
| CVE-2026-50649 | redhat_vex | dotnet: .NET: Local code execution via deserialization of untrusted data | fixed: 943 known not affected: 2 | 2026-08-06T22:13:56+00:00 | Vulnerability · Source |
| CVE-2022-3647 | redhat_vex | redis: crash in sigsegvHandler debug function | known affected: 21 | 2026-08-06T22:10:22+00:00 | Vulnerability · Source |
| CVE-2024-21012 | redhat_vex | OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) | fixed: 2268 known affected: 6 known not affected: 141 | 2026-08-06T22:07:16+00:00 | Vulnerability · Source |
| CVE-2024-4317 | redhat_vex | postgresql: PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks | fixed: 745 known affected: 24 known not affected: 144 | 2026-08-06T22:03:12+00:00 | Vulnerability · Source |
| CVE-2024-21085 | redhat_vex | OpenJDK: Pack200 excessive memory allocation (8322114) | fixed: 1996 known affected: 63 known not affected: 124 | 2026-08-06T22:03:09+00:00 | Vulnerability · Source |
| CVE-2024-21520 | redhat_vex | djangorestframework: Cross-site Scripting (XSS) via break_long_headers | fixed: 8 known affected: 4 known not affected: 30 | 2026-08-06T22:03:07+00:00 | Vulnerability · Source |
| CVE-2024-21068 | redhat_vex | OpenJDK: integer overflow in C1 compiler address generation (8322122) | fixed: 3186 known affected: 47 known not affected: 44 | 2026-08-06T22:02:57+00:00 | Vulnerability · Source |
| CVE-2024-21011 | redhat_vex | OpenJDK: long Exception message leading to crash (8319851) | fixed: 3186 known affected: 47 known not affected: 44 | 2026-08-06T22:02:54+00:00 | Vulnerability · Source |
| CVE-2024-4340 | redhat_vex | sqlparse: parsing heavily nested list leads to denial of service | fixed: 14 known affected: 3 known not affected: 558 | 2026-08-06T22:02:47+00:00 | Vulnerability · Source |
| CVE-2024-2410 | redhat_vex | protobuf: Use-after-free in JsonToBinaryStream() | known affected: 4 known not affected: 93 | 2026-08-06T22:02:42+00:00 | Vulnerability · Source |
| CVE-2026-14534 | redhat_vex | fickling: python: fickling: Arbitrary code execution due to incomplete denylist in deserialization | known affected: 2 known not affected: 3 | 2026-08-06T22:00:57+00:00 | Vulnerability · Source |
| CVE-2024-21144 | redhat_vex | OpenJDK: Pack200 increase loading time due to improper header validation (8322106) | fixed: 1568 known affected: 57 known not affected: 124 | 2026-08-06T21:57:28+00:00 | Vulnerability · Source |
| CVE-2026-53422 | redhat_vex | erlang: ssh: Erlang OTP ssh: Information disclosure via SFTP REALPATH handler | fixed: 3 known affected: 41 known not affected: 1 | 2026-08-06T21:57:19+00:00 | Vulnerability · Source |
| CVE-2026-51537 | redhat_vex | OpENer: OpENer: Out-of-bounds read via malformed ForwardOpen requests | known not affected: 2 | 2026-08-06T21:57:08+00:00 | Vulnerability · Source |
| CVE-2026-43186 | redhat_vex | kernel: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() | fixed: 309 known affected: 14 known not affected: 184 | 2026-08-06T21:54:58+00:00 | Vulnerability · Source |
| CVE-2022-28199 | redhat_vex | dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service | fixed: 183 known affected: 84 | 2026-08-06T21:40:06+00:00 | Vulnerability · Source |
| CVE-2022-28693 | redhat_vex | hw: cpu: Intel: information disclosure via local access | fixed: 736 known affected: 14 | 2026-08-06T21:35:21+00:00 | Vulnerability · Source |
| CVE-2022-40133 | redhat_vex | kernel: vmwgfx: use-after-free in vmw_execbuf_tie_context | fixed: 900 known affected: 64 known not affected: 1 | 2026-08-06T21:31:35+00:00 | Vulnerability · Source |
| CVE-2022-25887 | redhat_vex | sanitize-html: insecure global regular expression replacement logic may lead to ReDoS | known affected: 9 | 2026-08-06T21:26:32+00:00 | Vulnerability · Source |
| CVE-2022-3435 | redhat_vex | kernel: out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c | fixed: 235 known not affected: 90 | 2026-08-06T21:25:56+00:00 | Vulnerability · Source |
| CVE-2026-38969 | redhat_vex | webrick: rubygem-webrick: WEBrick: Request smuggling via re-parsing of Content-Length header | fixed: 4 known affected: 8 | 2026-08-06T21:20:26+00:00 | Vulnerability · Source |
| CVE-2021-25749 | redhat_vex | kubelet: runAsNonRoot logic bypass for Windows containers | fixed: 1 known affected: 15 known not affected: 1 | 2026-08-06T21:20:25+00:00 | Vulnerability · Source |
| CVE-2022-38096 | redhat_vex | kernel: vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query | fixed: 1425 known affected: 64 known not affected: 1 | 2026-08-06T21:19:52+00:00 | Vulnerability · Source |
| CVE-2022-2785 | redhat_vex | kernel: out-of-bounds read due to improper check of bpf_sys_bpf() arguments | known affected: 108 known not affected: 90 | 2026-08-06T21:19:46+00:00 | Vulnerability · Source |
| CVE-2022-36280 | redhat_vex | kernel: vmwgfx: out-of-bounds write in vmw_kms_cursor_snoop | fixed: 235 known affected: 90 | 2026-08-06T21:19:40+00:00 | Vulnerability · Source |
| CVE-2022-3172 | redhat_vex | kube-apiserver: Aggregated API server can cause clients to be redirected (SSRF) | fixed: 28 known affected: 16 known not affected: 2043 | 2026-08-06T21:19:31+00:00 | Vulnerability · Source |
| CVE-2022-38457 | redhat_vex | kernel: vmwgfx: use-after-free in vmw_cmd_res_check | fixed: 900 known affected: 64 known not affected: 1 | 2026-08-06T21:15:43+00:00 | Vulnerability · Source |
| CVE-2022-36402 | redhat_vex | kernel: vmwgfx: integer overflow in vmwgfx_execbuf.c | fixed: 900 known affected: 64 known not affected: 1 | 2026-08-06T21:15:30+00:00 | Vulnerability · Source |
| CVE-2022-42895 | redhat_vex | kernel: Information leak in l2cap_parse_conf_req in net/bluetooth/l2cap_core.c | fixed: 666 known affected: 50 known not affected: 14 | 2026-08-06T21:11:38+00:00 | Vulnerability · Source |
| CVE-2022-3625 | redhat_vex | kernel: use-after-free after failed devlink reload in devlink_param_get | fixed: 514 known not affected: 42 | 2026-08-06T21:10:13+00:00 | Vulnerability · Source |
| CVE-2022-4145 | redhat_vex | openshift: content spoofing | known affected: 8 | 2026-08-06T21:06:41+00:00 | Vulnerability · Source |
| CVE-2022-3606 | redhat_vex | kernel: libbpf: NULL pointer dereference in find_prog_by_sec_insn | known affected: 159 known not affected: 45 | 2026-08-06T21:06:41+00:00 | Vulnerability · Source |
| CVE-2022-46149 | redhat_vex | capnproto: out of bounds read when handling a list of lists. | fixed: 10 known not affected: 132 | 2026-08-06T21:06:25+00:00 | Vulnerability · Source |
| CVE-2022-3640 | redhat_vex | kernel: use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c | fixed: 739 known not affected: 14 | 2026-08-06T21:06:16+00:00 | Vulnerability · Source |
| CVE-2022-2602 | redhat_vex | kernel: use-after-free when an io_uring request is being processed | known not affected: 198 | 2026-08-06T21:06:02+00:00 | Vulnerability · Source |
| CVE-2026-44294 | redhat_vex | protobufjs: protobufjs: Denial of Service due to unescaped control characters in field names | known affected: 37 known not affected: 25 | 2026-08-06T21:06:02+00:00 | Vulnerability · Source |
| CVE-2022-3567 | redhat_vex | kernel: data races around sk->sk_prot | fixed: 514 known affected: 42 | 2026-08-06T21:04:54+00:00 | Vulnerability · Source |
| CVE-2022-3594 | redhat_vex | kernel: Rate limit overflow messages in r8152 in intr_callback | fixed: 666 known affected: 50 known not affected: 14 | 2026-08-06T21:04:47+00:00 | Vulnerability · Source |
| CVE-2021-4294 | redhat_vex | osin: manipulation of the argument secret leads to observable timing discrepancy | fixed: 12 known not affected: 1907 | 2026-08-06T21:02:57+00:00 | Vulnerability · Source |
| CVE-2022-23551 | redhat_vex | aad-pod-identity: authentication bypass via backslash | known affected: 3 | 2026-08-06T21:02:56+00:00 | Vulnerability · Source |
| CVE-2022-3545 | redhat_vex | kernel: nfp: use-after-free in area_cache_get() | fixed: 1350 known affected: 50 known not affected: 15 | 2026-08-06T21:02:44+00:00 | Vulnerability · Source |