VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291221 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-53395 | suse_vex | SUSE CVE CVE-2023-53395 | known affected: 405 known not affected: 5 recommended: 679 | 2026-08-08T23:33:01+00:00 | Vulnerability · Source |
| CVE-2025-13609 | suse_vex | SUSE CVE CVE-2025-13609 | known affected: 45 recommended: 217 | 2026-08-08T23:31:25+00:00 | Vulnerability · Source |
| CVE-2025-58142 | suse_vex | SUSE CVE CVE-2025-58142 | known affected: 56 known not affected: 62 recommended: 148 | 2026-08-08T23:30:46+00:00 | Vulnerability · Source |
| CVE-2025-67725 | suse_vex | SUSE CVE CVE-2025-67725 | first fixed: 1 known affected: 399 known not affected: 13 recommended: 469 | 2026-08-08T23:30:43+00:00 | Vulnerability · Source |
| CVE-2026-45808 | suse_vex | SUSE CVE CVE-2026-45808 | recommended: 8 | 2026-08-08T23:29:56+00:00 | Vulnerability · Source |
| CVE-2026-46358 | suse_vex | SUSE CVE CVE-2026-46358 | recommended: 8 | 2026-08-08T23:29:52+00:00 | Vulnerability · Source |
| CVE-2026-46405 | suse_vex | SUSE CVE CVE-2026-46405 | recommended: 8 | 2026-08-08T23:29:50+00:00 | Vulnerability · Source |
| CVE-2026-47243 | suse_vex | SUSE CVE CVE-2026-47243 | No product status | 2026-08-08T23:29:48+00:00 | Vulnerability · Source |
| CVE-2026-47249 | suse_vex | SUSE CVE CVE-2026-47249 | No product status | 2026-08-08T23:29:46+00:00 | Vulnerability · Source |
| CVE-2026-49343 | suse_vex | SUSE CVE CVE-2026-49343 | No product status | 2026-08-08T23:29:43+00:00 | Vulnerability · Source |
| CVE-2026-52878 | suse_vex | SUSE CVE CVE-2026-52878 | No product status | 2026-08-08T23:29:41+00:00 | Vulnerability · Source |
| CVE-2026-52879 | suse_vex | SUSE CVE CVE-2026-52879 | No product status | 2026-08-08T23:29:39+00:00 | Vulnerability · Source |
| CVE-2026-52880 | suse_vex | SUSE CVE CVE-2026-52880 | No product status | 2026-08-08T23:29:38+00:00 | Vulnerability · Source |
| CVE-2026-59725 | redhat_vex | socket.io: engine.io: Socket.IO: Denial of Service via invalid binary POST requests | fixed: 3 known affected: 4 | 2026-08-08T23:04:10+00:00 | Vulnerability · Source |
| CVE-2021-40438 | redhat_vex | httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:" | fixed: 532 known not affected: 25 | 2026-08-08T20:49:08+00:00 | Vulnerability · Source |
| CVE-2024-22233 | redhat_vex | spring-boot: Crafted HTTP requests may lead to debial-of-service (DOS) | known affected: 6 known not affected: 22 | 2026-08-08T18:28:13+00:00 | Vulnerability · Source |
| CVE-2023-51074 | redhat_vex | json-path: stack-based buffer overflow in Criteria.parse method | fixed: 4 known affected: 10 known not affected: 18 | 2026-08-08T18:28:11+00:00 | Vulnerability · Source |
| CVE-2023-45648 | redhat_vex | tomcat: incorrectly parsed http trailer headers can cause request smuggling | fixed: 58 known affected: 26 known not affected: 43 | 2026-08-08T18:28:07+00:00 | Vulnerability · Source |
| CVE-2023-42795 | redhat_vex | tomcat: improper cleaning of recycled objects could lead to information leak | fixed: 55 known affected: 26 known not affected: 9 | 2026-08-08T18:28:03+00:00 | Vulnerability · Source |
| CVE-2023-42794 | redhat_vex | tomcat: FileUpload: DoS due to accumulation of temporary files on Windows | fixed: 20 known affected: 10 known not affected: 25 | 2026-08-08T18:28:01+00:00 | Vulnerability · Source |
| CVE-2023-35887 | redhat_vex | apache-mina-sshd: information exposure in SFTP server implementations | fixed: 72 known affected: 9 known not affected: 1207 | 2026-08-08T18:27:53+00:00 | Vulnerability · Source |
| CVE-2023-34455 | redhat_vex | snappy-java: Unchecked chunk length leads to DoS | fixed: 7 known affected: 22 known not affected: 1000 | 2026-08-08T18:27:53+00:00 | Vulnerability · Source |
| CVE-2023-34055 | redhat_vex | spring-boot: org.springframework.boot: spring-boot-actuator class vulnerable to denial of service | fixed: 1 known affected: 10 known not affected: 17 | 2026-08-08T18:27:47+00:00 | Vulnerability · Source |
| CVE-2023-28867 | redhat_vex | graphql-java: crafted GraphQL query causes stack consumption | fixed: 2 known affected: 2 known not affected: 881 | 2026-08-08T18:27:43+00:00 | Vulnerability · Source |
| CVE-2023-26049 | redhat_vex | jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies | fixed: 54 known affected: 23 known not affected: 295 | 2026-08-08T18:27:39+00:00 | Vulnerability · Source |
| CVE-2023-26048 | redhat_vex | jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() | fixed: 258 known affected: 23 known not affected: 14 | 2026-08-08T18:27:34+00:00 | Vulnerability · Source |
| CVE-2023-24815 | redhat_vex | vertx-web: StaticHandler disclosure of classpath resources on Windows when mounted on a wildcard route | fixed: 13 known affected: 7 known not affected: 9 | 2026-08-08T18:27:33+00:00 | Vulnerability · Source |
| CVE-2023-21971 | redhat_vex | mysql-connector-java: Connector/J unspecified vulnerability (CPU April 2023) | known affected: 10 known not affected: 10 | 2026-08-08T18:27:29+00:00 | Vulnerability · Source |
| CVE-2022-46751 | redhat_vex | apache-ivy: XML External Entity vulnerability | fixed: 9 known affected: 7 known not affected: 12 | 2026-08-08T18:27:27+00:00 | Vulnerability · Source |
| CVE-2022-40154 | redhat_vex | xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks | fixed: 1 known affected: 7 known not affected: 27 | 2026-08-08T18:27:24+00:00 | Vulnerability · Source |
| CVE-2022-37865 | redhat_vex | apache-ivy: Directory Traversal | fixed: 1 known affected: 10 known not affected: 7 | 2026-08-08T18:27:12+00:00 | Vulnerability · Source |
| CVE-2022-22950 | redhat_vex | spring-expression: Denial of service via specially crafted SpEL expression | fixed: 5 known affected: 11 known not affected: 49 | 2026-08-08T18:27:08+00:00 | Vulnerability · Source |
| CVE-2022-2191 | redhat_vex | jetty-server: Improper release of ByteBuffers in SslConnections | fixed: 1 known affected: 6 known not affected: 18 | 2026-08-08T18:27:00+00:00 | Vulnerability · Source |
| CVE-2022-1365 | redhat_vex | cross-fetch: Exposure of Private Personal Information to an Unauthorized Actor | fixed: 2 known affected: 6 known not affected: 23 | 2026-08-08T18:26:56+00:00 | Vulnerability · Source |
| CVE-2021-38153 | redhat_vex | Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients | fixed: 9 known affected: 8 known not affected: 5 | 2026-08-08T18:26:53+00:00 | Vulnerability · Source |
| CVE-2021-31684 | redhat_vex | json-smart: Denial of Service in JSONParserByteArray function | fixed: 1 known affected: 9 known not affected: 12 | 2026-08-08T18:26:52+00:00 | Vulnerability · Source |
| CVE-2021-20293 | redhat_vex | RESTEasy: PathParam in RESTEasy can lead to a reflected XSS attack | fixed: 2 known affected: 29 | 2026-08-08T18:26:44+00:00 | Vulnerability · Source |
| CVE-2021-20250 | redhat_vex | wildfly: Information disclosure due to publicly accessible privileged actions in JBoss EJB Client | fixed: 294 known affected: 5 known not affected: 4 | 2026-08-08T18:26:39+00:00 | Vulnerability · Source |
| CVE-2020-35217 | redhat_vex | vertx-web: performs an incorrect CSRF verification | known not affected: 6 | 2026-08-08T18:26:37+00:00 | Vulnerability · Source |
| CVE-2019-16335 | redhat_vex | jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource | fixed: 440 known affected: 22 known not affected: 2 | 2026-08-08T18:26:32+00:00 | Vulnerability · Source |
| CVE-2019-12399 | redhat_vex | kafka: Connect REST API exposes plaintext secrets in tasks endpoint | fixed: 1 known not affected: 6 | 2026-08-08T18:26:28+00:00 | Vulnerability · Source |
| CVE-2019-10158 | redhat_vex | infinispan: Session fixation protection broken for Spring Session integration | fixed: 1 known not affected: 14 | 2026-08-08T18:26:22+00:00 | Vulnerability · Source |
| CVE-2018-20433 | redhat_vex | c3p0: XML external entity processing in extractXmlConfigFromInputStream | known affected: 16 known not affected: 8 | 2026-08-08T18:23:38+00:00 | Vulnerability · Source |
| CVE-2018-17187 | redhat_vex | qpid-proton-java: Hostname verification mode not implemented in transport TLS wrapper | known affected: 4 known not affected: 1 | 2026-08-08T18:23:26+00:00 | Vulnerability · Source |
| CVE-2018-1324 | redhat_vex | apache-commons-compress: Infinite loop via extra field parser in ZipFile and ZipArchiveInputStream classes | known affected: 5 known not affected: 18 | 2026-08-08T18:23:16+00:00 | Vulnerability · Source |
| CVE-2018-1288 | redhat_vex | kafka: Users can perform Broker actions via crafted fetch requests, interfering with data replication and causing data lass | fixed: 1 known affected: 1 known not affected: 2 | 2026-08-08T18:23:14+00:00 | Vulnerability · Source |
| CVE-2017-12610 | redhat_vex | kafka: Clients authenticated with SASL/PLAIN or SASL/SCRAM can impersonate other users | known affected: 1 known not affected: 3 | 2026-08-08T18:23:09+00:00 | Vulnerability · Source |
| CVE-2024-21733 | redhat_vex | tomcat: Leaking of unrelated request bodies in default error page | fixed: 2 known not affected: 66 | 2026-08-08T18:21:30+00:00 | Vulnerability · Source |
| CVE-2023-46589 | redhat_vex | tomcat: HTTP request smuggling via malformed trailer headers | fixed: 96 known affected: 13 known not affected: 30 | 2026-08-08T18:21:26+00:00 | Vulnerability · Source |
| CVE-2023-44981 | redhat_vex | zookeeper: Authorization Bypass in Apache ZooKeeper | fixed: 4 known affected: 7 known not affected: 3 | 2026-08-08T18:21:25+00:00 | Vulnerability · Source |