VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290590 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-44291 | redhat_vex | protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution | fixed: 3 known affected: 15 known not affected: 46 | 2026-08-06T20:59:47+00:00 | Vulnerability · Source |
| CVE-2026-44290 | redhat_vex | protobufjs: protobufjs: Denial of Service via crafted schema | fixed: 3 known affected: 15 known not affected: 46 | 2026-08-06T20:59:44+00:00 | Vulnerability · Source |
| CVE-2022-39353 | redhat_vex | xmldom: Allows multiple root elements in a DOM tree | known not affected: 2 | 2026-08-06T20:56:15+00:00 | Vulnerability · Source |
| CVE-2022-41912 | redhat_vex | crewjam/saml: Authentication bypass when processing SAML responses containing multiple Assertion elements | fixed: 18 known affected: 1 known not affected: 673 | 2026-08-06T20:55:02+00:00 | Vulnerability · Source |
| CVE-2026-59898 | redhat_vex | io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket) | fixed: 2 known affected: 57 | 2026-08-06T20:50:53+00:00 | Vulnerability · Source |
| CVE-2026-44292 | redhat_vex | protobufjs: protobufjs: Data integrity impact due to prototype pollution | fixed: 3 known affected: 16 known not affected: 45 | 2026-08-06T20:50:35+00:00 | Vulnerability · Source |
| CVE-2022-3524 | redhat_vex | kernel: memory leak in ipv6_renew_options() | fixed: 514 known affected: 42 | 2026-08-06T20:48:13+00:00 | Vulnerability · Source |
| CVE-2022-41854 | redhat_vex | dev-java/snakeyaml: DoS via stack overflow | fixed: 38 known affected: 48 known not affected: 408 | 2026-08-06T20:47:57+00:00 | Vulnerability · Source |
| CVE-2022-3619 | redhat_vex | kernel: memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c | fixed: 514 known affected: 42 | 2026-08-06T20:47:47+00:00 | Vulnerability · Source |
| CVE-2022-23498 | redhat_vex | grafana: Use of Cache Containing Sensitive Information | fixed: 21 known affected: 2 known not affected: 37 | 2026-08-06T20:47:38+00:00 | Vulnerability · Source |
| CVE-2023-1192 | redhat_vex | kernel: use-after-free in smb2_is_status_io_timeout() | fixed: 1350 known affected: 22 known not affected: 43 | 2026-08-06T20:42:34+00:00 | Vulnerability · Source |
| CVE-2023-0045 | redhat_vex | kernel: Bypassing Spectre-BTI User Space Mitigations | known affected: 156 known not affected: 42 | 2026-08-06T20:42:30+00:00 | Vulnerability · Source |
| CVE-2023-32082 | redhat_vex | etcd: Key name can be accessed via LeaseTimeToLive API | fixed: 4 known affected: 9 | 2026-08-06T20:42:28+00:00 | Vulnerability · Source |
| CVE-2023-4039 | redhat_vex | gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 | known affected: 88 known not affected: 156 | 2026-08-06T20:42:26+00:00 | Vulnerability · Source |
| CVE-2023-39194 | redhat_vex | kernel: xfrm: out-of-bounds read in __xfrm_state_filter_match() | fixed: 429 known affected: 22 known not affected: 42 | 2026-08-06T20:42:25+00:00 | Vulnerability · Source |
| CVE-2023-37920 | redhat_vex | python-certifi: Removal of e-Tugra root certificate | fixed: 1268 known affected: 7 known not affected: 194 | 2026-08-06T20:42:24+00:00 | Vulnerability · Source |
| CVE-2023-4194 | redhat_vex | kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid | fixed: 267 known affected: 72 known not affected: 42 | 2026-08-06T20:42:19+00:00 | Vulnerability · Source |
| CVE-2023-6176 | redhat_vex | kernel: local dos vulnerability in scatterwalk_copychunks | fixed: 429 known affected: 22 known not affected: 31 | 2026-08-06T20:42:19+00:00 | Vulnerability · Source |
| CVE-2022-3543 | redhat_vex | kernel: A flaw in unix_sock_destructor/unix_release_sock in net/unix/af_unix.c leads to memory leak | known affected: 42 known not affected: 156 | 2026-08-06T20:41:47+00:00 | Vulnerability · Source |
| CVE-2022-2503 | redhat_vex | kernel: LoadPin bypass via dm-verity table reload | fixed: 475 known affected: 28 known not affected: 14 | 2026-08-06T20:41:36+00:00 | Vulnerability · Source |
| CVE-2022-3565 | redhat_vex | kernel: use-after-free in l1oip timer handlers | fixed: 417 known affected: 22 known not affected: 42 | 2026-08-06T20:41:21+00:00 | Vulnerability · Source |
| CVE-2023-24998 | redhat_vex | FileUpload: FileUpload DoS with excessive parts | fixed: 58 known affected: 67 known not affected: 18 | 2026-08-06T20:41:17+00:00 | Vulnerability · Source |
| CVE-2023-22462 | redhat_vex | grafana: stored XSS vulnerability affecting the core plugin "Text" | fixed: 3 known affected: 25 known not affected: 14 | 2026-08-06T20:41:15+00:00 | Vulnerability · Source |
| CVE-2018-25079 | redhat_vex | is-url: inefficient regular expression complexity | known affected: 2 | 2026-08-06T20:40:57+00:00 | Vulnerability · Source |
| CVE-2023-29469 | redhat_vex | libxml2: Hashing of empty dict strings isn't deterministic | fixed: 136 known affected: 10 known not affected: 6 | 2026-08-06T20:40:55+00:00 | Vulnerability · Source |
| CVE-2022-3623 | redhat_vex | kernel: denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry | fixed: 514 known not affected: 42 | 2026-08-06T20:40:47+00:00 | Vulnerability · Source |
| CVE-2023-28484 | redhat_vex | libxml2: NULL dereference in xmlSchemaFixupComplexType | fixed: 136 known affected: 10 known not affected: 6 | 2026-08-06T20:40:43+00:00 | Vulnerability · Source |
| CVE-2022-23541 | redhat_vex | jsonwebtoken: Insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC | fixed: 4 known affected: 2 known not affected: 79 | 2026-08-06T20:40:40+00:00 | Vulnerability · Source |
| CVE-2022-33972 | redhat_vex | kernel: Intel firmware update for incorrect calculation in microcode keying mechanism | known affected: 10 | 2026-08-06T20:40:36+00:00 | Vulnerability · Source |
| CVE-2022-23540 | redhat_vex | jsonwebtoken: Insecure default algorithm in jwt.verify() could lead to signature validation bypass | fixed: 4 known affected: 2 known not affected: 79 | 2026-08-06T20:40:32+00:00 | Vulnerability · Source |
| CVE-2023-0266 | redhat_vex | ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF | fixed: 1221 known not affected: 46 | 2026-08-06T20:39:03+00:00 | Vulnerability · Source |
| CVE-2023-28642 | redhat_vex | runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration | fixed: 805 known affected: 19 known not affected: 633 | 2026-08-06T20:37:23+00:00 | Vulnerability · Source |
| CVE-2022-38090 | redhat_vex | kernel: Intel firmware update for improper isolation of shared resources | known affected: 10 | 2026-08-06T20:37:22+00:00 | Vulnerability · Source |
| CVE-2023-30608 | redhat_vex | sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) | fixed: 6 known affected: 7 known not affected: 1928 | 2026-08-06T20:37:06+00:00 | Vulnerability · Source |
| CVE-2023-0458 | redhat_vex | kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c | fixed: 829 known affected: 28 known not affected: 15 | 2026-08-06T20:36:53+00:00 | Vulnerability · Source |
| CVE-2021-46877 | redhat_vex | jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode | fixed: 1984 known affected: 31 known not affected: 2399 | 2026-08-06T20:36:10+00:00 | Vulnerability · Source |
| CVE-2023-28410 | redhat_vex | hw: Intel: Improper restriction in memory buffer in graphics drivers cause escalation of privilege | fixed: 166 known affected: 98 known not affected: 14 | 2026-08-06T20:36:08+00:00 | Vulnerability · Source |
| CVE-2022-21216 | redhat_vex | kernel: Intel firmware update for insufficient granularity of access control in out-of-band management in some Intel Atom and Intel Xeon Scalable Processors | fixed: 15 known affected: 2 known not affected: 4 | 2026-08-06T20:35:33+00:00 | Vulnerability · Source |
| CVE-2023-26464 | redhat_vex | log4j1-socketappender: DoS via hashmap logging | fixed: 441 known affected: 26 known not affected: 39 | 2026-08-06T20:34:11+00:00 | Vulnerability · Source |
| CVE-2023-1387 | redhat_vex | grafana: JWT token leak to data source | fixed: 6 known affected: 26 known not affected: 28 | 2026-08-06T20:30:45+00:00 | Vulnerability · Source |
| CVE-2022-33196 | redhat_vex | kernel: Intel firmware update for Incorrect default permissions in some memory controller configurations | fixed: 15 known affected: 2 known not affected: 4 | 2026-08-06T20:30:01+00:00 | Vulnerability · Source |
| CVE-2023-1370 | redhat_vex | json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) | fixed: 20 known affected: 14 known not affected: 32 | 2026-08-06T20:29:06+00:00 | Vulnerability · Source |
| CVE-2023-2183 | redhat_vex | grafana: missing access control allows test alerts by underprivileged user | fixed: 160 known affected: 12 known not affected: 31 | 2026-08-06T20:27:49+00:00 | Vulnerability · Source |
| CVE-2023-2801 | redhat_vex | grafana: data source proxy race condition | fixed: 160 known affected: 12 known not affected: 31 | 2026-08-06T20:27:46+00:00 | Vulnerability · Source |
| CVE-2023-1998 | redhat_vex | kernel: Spectre v2 SMT mitigations problem | fixed: 830 known affected: 42 | 2026-08-06T20:27:41+00:00 | Vulnerability · Source |
| CVE-2023-2727 | redhat_vex | kube-apiserver: Bypassing policies imposed by the ImagePolicyWebhook admission plugin | fixed: 1035 known affected: 14 known not affected: 1 | 2026-08-06T20:27:02+00:00 | Vulnerability · Source |
| CVE-2023-2728 | redhat_vex | kube-apiserver: Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin | fixed: 1035 known affected: 14 known not affected: 1 | 2026-08-06T20:26:58+00:00 | Vulnerability · Source |
| CVE-2023-25809 | redhat_vex | runc: Rootless runc makes `/sys/fs/cgroup` writable | fixed: 542 known affected: 30 known not affected: 622 | 2026-08-06T20:26:29+00:00 | Vulnerability · Source |
| CVE-2023-3108 | redhat_vex | kernel: A race condition in crypto module in the function skcipher_recvmsg | known affected: 28 known not affected: 170 | 2026-08-06T20:26:10+00:00 | Vulnerability · Source |
| CVE-2023-3567 | redhat_vex | kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race | fixed: 1108 known affected: 50 known not affected: 15 | 2026-08-06T20:26:05+00:00 | Vulnerability · Source |