VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290591 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-4369 | redhat_vex | cluster-image-registry-operator: Exposes a secret via env variable in pod definition on Azure | fixed: 8 known not affected: 617 | 2026-08-06T17:02:50+00:00 | Vulnerability · Source |
| CVE-2024-2182 | redhat_vex | ovn: insufficient validation of BFD packets may lead to denial of service | fixed: 370 known affected: 48 | 2026-08-06T17:02:37+00:00 | Vulnerability · Source |
| CVE-2024-35329 | redhat_vex | libyaml: vulnerable to a heap-based Buffer Overflow in yaml_document_add_sequence in api.c | known not affected: 16 | 2026-08-06T16:57:01+00:00 | Vulnerability · Source |
| CVE-2024-35328 | redhat_vex | libyaml: denial of service in yaml_parser_parse of the file /src/libyaml/src/parser.c. | known not affected: 16 | 2026-08-06T16:56:54+00:00 | Vulnerability · Source |
| CVE-2024-6257 | redhat_vex | hashicorp/go-getter: Arbitrary command execution through local git config file | known affected: 2 | 2026-08-06T16:51:32+00:00 | Vulnerability · Source |
| CVE-2024-35325 | redhat_vex | libyaml: double-free in yaml_event_delete in /src/libyaml/src/api.c | known not affected: 16 | 2026-08-06T16:51:05+00:00 | Vulnerability · Source |
| CVE-2024-5569 | redhat_vex | github.com/jaraco/zipp: Denial of Service (infinite loop) via crafted zip file in jaraco/zipp | fixed: 27 known affected: 3 known not affected: 4324 | 2026-08-06T16:50:59+00:00 | Vulnerability · Source |
| CVE-2024-24859 | redhat_vex | kernel: bluetooth: race condition in sniff_{min,max}_interval_set() | fixed: 280 known affected: 98 known not affected: 22 | 2026-08-06T16:50:49+00:00 | Vulnerability · Source |
| CVE-2026-16108 | redhat_vex | keycloak-services: keycloak-services: Realm default-group reads disclose hidden groups under FGAP v2 | known affected: 3 known not affected: 3 | 2026-08-06T16:47:02+00:00 | Vulnerability · Source |
| CVE-2026-16104 | redhat_vex | keycloak-services: keycloak-services: Authenticator config endpoint exposes raw reCAPTCHA secrets to view-only admins | known affected: 3 known not affected: 3 | 2026-08-06T16:47:02+00:00 | Vulnerability · Source |
| CVE-2026-34966 | redhat_vex | code.gitea.io/gitea: Gitea: Information disclosure via Server-Side Request Forgery (SSRF) bypass | known not affected: 6 | 2026-08-06T16:45:37+00:00 | Vulnerability · Source |
| CVE-2026-54463 | redhat_vex | websocket-driver: websocket-driver: Denial of Service via unbounded memory consumption in WebSocket length header | known not affected: 1 | 2026-08-06T16:27:34+00:00 | Vulnerability · Source |
| CVE-2026-58040 | redhat_vex | nodejs: HTTPS Agent TLS session reuse skips hostname verification | fixed: 12 known affected: 56 | 2026-08-06T16:05:14+00:00 | Vulnerability · Source |
| CVE-2026-54465 | redhat_vex | websocket-driver: websocket-driver: Denial of Service via unbounded memory consumption | known not affected: 1 | 2026-08-06T16:04:01+00:00 | Vulnerability · Source |
| CVE-2026-65600 | redhat_vex | traefik: Traefik: Authentication bypass via path traversal in ReplacePathRegex middleware | known affected: 1 | 2026-08-06T15:53:37+00:00 | Vulnerability · Source |
| CVE-2023-4733 | redhat_vex | vim: use-after-free in function buflist_altfpos | known affected: 6 known not affected: 6 | 2026-08-06T15:51:06+00:00 | Vulnerability · Source |
| CVE-2023-4750 | redhat_vex | vim: use-after-free in function bt_quickfix | known affected: 6 known not affected: 6 | 2026-08-06T15:51:05+00:00 | Vulnerability · Source |
| CVE-2023-4752 | redhat_vex | vim: use-after-free in function ins_compl_get_exp in vim/vim | fixed: 68 known affected: 6 known not affected: 2 | 2026-08-06T15:51:02+00:00 | Vulnerability · Source |
| CVE-2023-41053 | redhat_vex | redis: Redis SORT_RO may bypass ACL configuration | fixed: 18 known affected: 5 | 2026-08-06T15:51:00+00:00 | Vulnerability · Source |
| CVE-2024-3096 | redhat_vex | php: password_verify can erroneously return true, opening ATO risk | fixed: 1303 known affected: 101 known not affected: 26 | 2026-08-06T15:50:58+00:00 | Vulnerability · Source |
| CVE-2020-27792 | redhat_vex | ghostscript: heap buffer over write vulnerability in GhostScript's lp8000_print_page() in gdevlp8k.c | fixed: 82 known affected: 13 known not affected: 9 | 2026-08-06T15:50:53+00:00 | Vulnerability · Source |
| CVE-2023-3247 | redhat_vex | php: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP | fixed: 1045 known affected: 84 | 2026-08-06T15:50:51+00:00 | Vulnerability · Source |
| CVE-2023-3824 | redhat_vex | php: phar Buffer mismanagement | fixed: 1045 known affected: 30 known not affected: 55 | 2026-08-06T15:50:48+00:00 | Vulnerability · Source |
| CVE-2023-3823 | redhat_vex | php: XML loading external entity without being enabled | fixed: 1045 known affected: 30 known not affected: 55 | 2026-08-06T15:50:43+00:00 | Vulnerability · Source |
| CVE-2024-21131 | redhat_vex | OpenJDK: potential UTF8 size overflow (8314794) | fixed: 2635 known affected: 61 known not affected: 24 | 2026-08-06T15:50:42+00:00 | Vulnerability · Source |
| CVE-2023-51589 | redhat_vex | bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability | fixed: 245 known affected: 14 known not affected: 5 | 2026-08-06T15:50:41+00:00 | Vulnerability · Source |
| CVE-2024-42226 | redhat_vex | kernel: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB | fixed: 709 known affected: 64 known not affected: 8 | 2026-08-06T15:47:20+00:00 | Vulnerability · Source |
| CVE-2024-21140 | redhat_vex | OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) | fixed: 2635 known affected: 71 known not affected: 14 | 2026-08-06T15:47:10+00:00 | Vulnerability · Source |
| CVE-2023-27349 | redhat_vex | BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability | fixed: 245 known affected: 14 known not affected: 5 | 2026-08-06T15:46:57+00:00 | Vulnerability · Source |
| CVE-2024-21138 | redhat_vex | OpenJDK: Excessive symbol length can lead to infinite loop (8319859) | fixed: 2635 known affected: 47 known not affected: 38 | 2026-08-06T15:46:56+00:00 | Vulnerability · Source |
| CVE-2024-8775 | redhat_vex | ansible-core: Exposure of Sensitive Information in Ansible Vault Files Due to Improper Logging | fixed: 73 known affected: 3 known not affected: 92 | 2026-08-06T15:46:53+00:00 | Vulnerability · Source |
| CVE-2023-5517 | redhat_vex | bind9: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled | fixed: 580 known affected: 9 known not affected: 47 | 2026-08-06T15:46:38+00:00 | Vulnerability · Source |
| CVE-2023-4408 | redhat_vex | bind9: Parsing large DNS messages may cause excessive CPU load | fixed: 2047 known affected: 9 known not affected: 103 | 2026-08-06T15:46:33+00:00 | Vulnerability · Source |
| CVE-2026-65601 | redhat_vex | github.com/traefik/traefik/v3: traefik: Traefik: Privilege Escalation via Kubernetes Gateway API Namespace Confusion | known affected: 1 | 2026-08-06T15:46:28+00:00 | Vulnerability · Source |
| CVE-2024-21147 | redhat_vex | OpenJDK: RangeCheckElimination array index overflow (8323231) | fixed: 2635 known affected: 33 known not affected: 52 | 2026-08-06T15:44:07+00:00 | Vulnerability · Source |
| CVE-2024-21232 | redhat_vex | mysql: Components Services unspecified vulnerability (CPU Oct 2024) | known affected: 9 known not affected: 23 | 2026-08-06T15:41:03+00:00 | Vulnerability · Source |
| CVE-2024-21244 | redhat_vex | mysql: Telemetry unspecified vulnerability (CPU Oct 2024) | known affected: 9 known not affected: 23 | 2026-08-06T15:41:01+00:00 | Vulnerability · Source |
| CVE-2024-21209 | redhat_vex | mysql: mysqldump unspecified vulnerability (CPU Oct 2024) | known affected: 9 known not affected: 23 | 2026-08-06T15:41:00+00:00 | Vulnerability · Source |
| CVE-2024-21243 | redhat_vex | mysql: Telemetry unspecified vulnerability (CPU Oct 2024) | known affected: 9 known not affected: 23 | 2026-08-06T15:40:59+00:00 | Vulnerability · Source |
| CVE-2024-5458 | redhat_vex | php: Filter bypass in filter_var (FILTER_VALIDATE_URL) | fixed: 1303 known affected: 101 known not affected: 26 | 2026-08-06T15:40:49+00:00 | Vulnerability · Source |
| CVE-2024-2756 | redhat_vex | php: host/secure cookie bypass due to partial CVE-2022-31629 fix | fixed: 1303 known affected: 101 known not affected: 26 | 2026-08-06T15:40:44+00:00 | Vulnerability · Source |
| CVE-2024-31081 | redhat_vex | xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice | fixed: 758 known affected: 9 known not affected: 5 | 2026-08-06T15:40:39+00:00 | Vulnerability · Source |
| CVE-2024-47175 | redhat_vex | cups: libppd: remote command injection via attacker controlled data in PPD file | fixed: 528 known affected: 8 known not affected: 11 | 2026-08-06T15:40:38+00:00 | Vulnerability · Source |
| CVE-2024-45802 | redhat_vex | squid: Denial of Service processing ESI response content | fixed: 224 known affected: 4 known not affected: 2 | 2026-08-06T15:38:52+00:00 | Vulnerability · Source |
| CVE-2026-59083 | redhat_vex | tomcat: Apache Tomcat: Security constraint bypass via improper URL encoding in rewrite valve | fixed: 38 known affected: 89 | 2026-08-06T15:36:17+00:00 | Vulnerability · Source |
| CVE-2025-3193 | redhat_vex | algoliasearch-helper: algoliasearch-helper prototype pollution | known affected: 6 | 2026-08-06T15:36:11+00:00 | Vulnerability · Source |
| CVE-2024-8925 | redhat_vex | php: Erroneous parsing of multipart form data | fixed: 1303 known affected: 73 known not affected: 26 | 2026-08-06T15:36:05+00:00 | Vulnerability · Source |
| CVE-2024-47076 | redhat_vex | cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes | fixed: 338 known not affected: 3 | 2026-08-06T15:35:39+00:00 | Vulnerability · Source |
| CVE-2024-21231 | redhat_vex | mysql: Client programs unspecified vulnerability (CPU Oct 2024) | fixed: 156 known affected: 9 | 2026-08-06T15:32:20+00:00 | Vulnerability · Source |
| CVE-2024-21237 | redhat_vex | mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) | fixed: 156 known affected: 9 | 2026-08-06T15:32:16+00:00 | Vulnerability · Source |