VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290590 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-3772 | redhat_vex | kernel: xfrm: NULL pointer dereference in xfrm_update_ae_params() | fixed: 666 known affected: 64 | 2026-08-06T20:26:04+00:00 | Vulnerability · Source |
| CVE-2023-33951 | redhat_vex | kernel: vmwgfx: race condition leading to information disclosure vulnerability | fixed: 771 known affected: 22 known not affected: 43 | 2026-08-06T20:25:54+00:00 | Vulnerability · Source |
| CVE-2023-2911 | redhat_vex | bind: Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0 | known not affected: 68 | 2026-08-06T20:25:52+00:00 | Vulnerability · Source |
| CVE-2023-3773 | redhat_vex | kernel: xfrm: out-of-bounds read of XFRMA_MTIMER_THRESH nlattr | fixed: 267 known affected: 22 known not affected: 90 | 2026-08-06T20:25:44+00:00 | Vulnerability · Source |
| CVE-2024-0874 | redhat_vex | coredns: CD bit response is cached and served later | fixed: 16 known affected: 1 known not affected: 2034 | 2026-08-06T20:25:37+00:00 | Vulnerability · Source |
| CVE-2023-4010 | redhat_vex | kernel: usb: hcd: malformed USB descriptor leads to infinite loop in usb_giveback_urb() | known affected: 42 known not affected: 156 | 2026-08-06T20:25:07+00:00 | Vulnerability · Source |
| CVE-2023-4132 | redhat_vex | kernel: smsusb: use-after-free caused by do_submit_urb() | fixed: 399 known affected: 42 known not affected: 108 | 2026-08-06T20:25:04+00:00 | Vulnerability · Source |
| CVE-2023-1260 | redhat_vex | kube-apiserver: PrivEsc | fixed: 39 known not affected: 511 | 2026-08-06T20:24:51+00:00 | Vulnerability · Source |
| CVE-2023-0461 | redhat_vex | kernel: net/ulp: use-after-free in listening ULP sockets | fixed: 1218 known not affected: 46 | 2026-08-06T20:24:43+00:00 | Vulnerability · Source |
| CVE-2023-39192 | redhat_vex | kernel: netfilter: xtables out-of-bounds read in u32_match_it() | fixed: 150 known affected: 42 known not affected: 108 | 2026-08-06T20:22:19+00:00 | Vulnerability · Source |
| CVE-2023-42755 | redhat_vex | kernel: rsvp: out-of-bounds read in rsvp_classify() | fixed: 150 known affected: 42 known not affected: 108 | 2026-08-06T20:22:12+00:00 | Vulnerability · Source |
| CVE-2023-4133 | redhat_vex | kernel: cxgb4: use-after-free in ch_flower_stats_cb() | fixed: 429 known affected: 64 | 2026-08-06T20:22:05+00:00 | Vulnerability · Source |
| CVE-2022-25243 | redhat_vex | vault: PKI Secrets Engine Policy Results In Incorrect Wildcard Certificate Issuance | known affected: 6 known not affected: 5 | 2026-08-06T20:22:04+00:00 | Vulnerability · Source |
| CVE-2023-32261 | redhat_vex | jenkins-2-plugins: dimensionsscm: Missing permission check in Dimensions Plugin allows enumerating credentials IDs | known affected: 5 known not affected: 2 | 2026-08-06T20:21:56+00:00 | Vulnerability · Source |
| CVE-2023-25775 | redhat_vex | kernel: irdma: Improper access control | fixed: 614 known affected: 22 | 2026-08-06T20:21:51+00:00 | Vulnerability · Source |
| CVE-2023-3153 | redhat_vex | ovn: service monitor MAC flow is not rate limited | fixed: 82 known affected: 78 known not affected: 1966 | 2026-08-06T20:21:37+00:00 | Vulnerability · Source |
| CVE-2023-4155 | redhat_vex | kernel: KVM: SEV-ES / SEV-SNP VMGEXIT double fetch vulnerability | fixed: 683 known affected: 22 known not affected: 42 | 2026-08-06T20:21:33+00:00 | Vulnerability · Source |
| CVE-2023-32732 | redhat_vex | gRPC: denial of service | known affected: 6 | 2026-08-06T20:21:32+00:00 | Vulnerability · Source |
| CVE-2023-2235 | redhat_vex | kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events | fixed: 716 known not affected: 43 | 2026-08-06T20:20:34+00:00 | Vulnerability · Source |
| CVE-2023-3089 | redhat_vex | openshift: OCP & FIPS mode | fixed: 4022 known affected: 1 known not affected: 2176 | 2026-08-06T20:20:04+00:00 | Vulnerability · Source |
| CVE-2023-32262 | redhat_vex | jenkins-2-plugins: dimensionsscm: Exposure of system-scoped credentials in Dimensions Plugin | known affected: 5 known not affected: 2 | 2026-08-06T20:17:52+00:00 | Vulnerability · Source |
| CVE-2023-4459 | redhat_vex | kernel: vmxnet3: NULL pointer dereference in vmxnet3_rq_cleanup() | fixed: 579 known affected: 198 | 2026-08-06T20:17:46+00:00 | Vulnerability · Source |
| CVE-2023-4385 | redhat_vex | kernel: jfs: NULL pointer dereference in dbFree() | known affected: 14 known not affected: 184 | 2026-08-06T20:17:42+00:00 | Vulnerability · Source |
| CVE-2023-39197 | redhat_vex | kernel: DCCP: conntrack out-of-bounds read in nf_conntrack_dccp_packet() | known affected: 42 known not affected: 156 | 2026-08-06T20:17:41+00:00 | Vulnerability · Source |
| CVE-2023-4389 | redhat_vex | kernel: btrfs: double free in btrfs_get_root_ref() | known not affected: 198 | 2026-08-06T20:17:38+00:00 | Vulnerability · Source |
| CVE-2023-4512 | redhat_vex | wireshark: DoS (crash) via packet injection or crafted capture file | known affected: 16 known not affected: 1 | 2026-08-06T20:17:24+00:00 | Vulnerability · Source |
| CVE-2023-4387 | redhat_vex | kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf() | fixed: 286 known affected: 80 | 2026-08-06T20:17:18+00:00 | Vulnerability · Source |
| CVE-2023-4394 | redhat_vex | kernel: btrfs: memory leak in btrfs_get_dev_args_from_path() | known not affected: 198 | 2026-08-06T20:17:15+00:00 | Vulnerability · Source |
| CVE-2023-33952 | redhat_vex | kernel: vmwgfx: double free within the handling of vmw_buffer_object objects | fixed: 771 known affected: 22 known not affected: 43 | 2026-08-06T20:17:12+00:00 | Vulnerability · Source |
| CVE-2023-3389 | redhat_vex | kernel: Racing a io_uring cancel poll request with a linked timeout can cause a UAF in a hrtimer | known not affected: 198 | 2026-08-06T20:17:11+00:00 | Vulnerability · Source |
| CVE-2023-39198 | redhat_vex | kernel: QXL: race condition leading to use-after-free in qxl_mode_dumb_create() | fixed: 429 known affected: 64 | 2026-08-06T20:17:03+00:00 | Vulnerability · Source |
| CVE-2023-4513 | redhat_vex | wireshark: DoS (memory leak) via packet injection or crafted capture file | known affected: 16 known not affected: 1 | 2026-08-06T20:17:00+00:00 | Vulnerability · Source |
| CVE-2023-4511 | redhat_vex | wireshark: DoS (infinite loop) via packet injection or crafted capture file | known affected: 16 known not affected: 1 | 2026-08-06T20:16:58+00:00 | Vulnerability · Source |
| CVE-2023-39193 | redhat_vex | kernel: netfilter: xtables sctp out-of-bounds read in match_flags() | fixed: 429 known affected: 64 | 2026-08-06T20:16:52+00:00 | Vulnerability · Source |
| CVE-2024-1312 | redhat_vex | kernel: Race condition leads to use after free during VMA lock in lock_vma_under_rcu | known not affected: 198 | 2026-08-06T20:16:26+00:00 | Vulnerability · Source |
| CVE-2026-58459 | redhat_vex | gpsd: gpsd: Command Injection via GPS device subtype allows arbitrary code execution | fixed: 50 | 2026-08-06T20:11:44+00:00 | Vulnerability · Source |
| CVE-2023-37264 | redhat_vex | tektoncd: pipelines do not validate child UIDs | known not affected: 23 | 2026-08-06T20:10:14+00:00 | Vulnerability · Source |
| CVE-2023-3090 | redhat_vex | kernel: ipvlan: out-of-bounds write caused by unclear skb->cb | fixed: 1307 known not affected: 42 | 2026-08-06T20:09:55+00:00 | Vulnerability · Source |
| CVE-2024-0793 | redhat_vex | kube-controller-manager: malformed HPA v1 manifest causes crash | fixed: 14 known affected: 16 known not affected: 738 | 2026-08-06T20:09:51+00:00 | Vulnerability · Source |
| CVE-2023-3812 | redhat_vex | kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags | fixed: 1607 known affected: 22 known not affected: 43 | 2026-08-06T20:04:23+00:00 | Vulnerability · Source |
| CVE-2023-3635 | redhat_vex | okio: GzipSource class improper exception handling | fixed: 41 known affected: 11 known not affected: 5 | 2026-08-06T20:00:30+00:00 | Vulnerability · Source |
| CVE-2023-3966 | redhat_vex | openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet | fixed: 98 known affected: 94 known not affected: 1 | 2026-08-06T19:59:08+00:00 | Vulnerability · Source |
| CVE-2023-2828 | redhat_vex | bind: named's configured cache size limit can be significantly exceeded | fixed: 1456 known not affected: 12 | 2026-08-06T19:54:26+00:00 | Vulnerability · Source |
| CVE-2023-34623 | redhat_vex | jtidy: denial of service via crafted object that uses cyclic dependencies | known affected: 8 known not affected: 23 | 2026-08-06T19:54:21+00:00 | Vulnerability · Source |
| CVE-2023-1295 | redhat_vex | kernel: io_uring: TOCTOU vulnerability in IORING_OP_CLOSE operation | known not affected: 198 | 2026-08-06T19:54:06+00:00 | Vulnerability · Source |
| CVE-2023-31248 | redhat_vex | kernel: nf_tables: use-after-free in nft_chain_lookup_byid() | fixed: 493 known not affected: 91 | 2026-08-06T19:53:49+00:00 | Vulnerability · Source |
| CVE-2023-4004 | redhat_vex | kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() | fixed: 1217 known not affected: 43 | 2026-08-06T19:52:28+00:00 | Vulnerability · Source |
| CVE-2023-4147 | redhat_vex | kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free | fixed: 486 known not affected: 91 | 2026-08-06T19:52:13+00:00 | Vulnerability · Source |
| CVE-2023-3610 | redhat_vex | kernel: netfilter: nf_tables: fix chain binding transaction logic in the abort path of NFT_MSG_NEWRULE | fixed: 255 known not affected: 91 | 2026-08-06T19:49:12+00:00 | Vulnerability · Source |
| CVE-2026-59921 | redhat_vex | io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder | fixed: 2 known affected: 57 | 2026-08-06T19:47:29+00:00 | Vulnerability · Source |