VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291247 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-8419 | redhat_vex | org.keycloak/keycloak-services: Keycloak SMTP Inject Vulnerability | fixed: 18 | 2026-08-08T17:15:33+00:00 | Vulnerability · Source |
| CVE-2025-7962 | redhat_vex | com.sun.mail/jakarta.mail: Jakarta Mail SMTP Injection Vulnerability | known affected: 8 known not affected: 18 | 2026-08-08T17:15:29+00:00 | Vulnerability · Source |
| CVE-2025-7365 | redhat_vex | keycloak: Phishing attack via email verification step in first login flow | fixed: 17 | 2026-08-08T17:15:24+00:00 | Vulnerability · Source |
| CVE-2024-47535 | redhat_vex | netty: Denial of Service attack on windows app using Netty | fixed: 289 known not affected: 9 | 2026-08-08T17:15:20+00:00 | Vulnerability · Source |
| CVE-2024-34447 | redhat_vex | org.bouncycastle: Use of Incorrectly-Resolved Name or Reference | fixed: 3 known affected: 6 known not affected: 972 | 2026-08-08T17:15:14+00:00 | Vulnerability · Source |
| CVE-2024-24750 | redhat_vex | undici: memory leak | known not affected: 5 | 2026-08-08T17:14:39+00:00 | Vulnerability · Source |
| CVE-2024-10973 | redhat_vex | keycloak: CLI option for encrypted JGroups ignored | known not affected: 3 | 2026-08-08T17:14:36+00:00 | Vulnerability · Source |
| CVE-2024-9621 | redhat_vex | io.quarkiverse.cxf:quarkus-cxf: Quarkus CXF may log user password and secret to application log | fixed: 1 | 2026-08-08T17:14:32+00:00 | Vulnerability · Source |
| CVE-2024-7260 | redhat_vex | keycloak-core: Open Redirect on Account page | fixed: 8 | 2026-08-08T17:14:30+00:00 | Vulnerability · Source |
| CVE-2023-6927 | redhat_vex | keycloak: open redirect via "form_post.jwt" JARM response mode | fixed: 30 known not affected: 5 | 2026-08-08T17:14:29+00:00 | Vulnerability · Source |
| CVE-2019-19956 | redhat_vex | libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c | fixed: 225 known affected: 6 known not affected: 1 | 2026-08-08T17:14:22+00:00 | Vulnerability · Source |
| CVE-2019-5482 | redhat_vex | curl: heap buffer overflow in function tftp_receive_packet() | fixed: 396 known affected: 8 known not affected: 9 | 2026-08-08T17:14:20+00:00 | Vulnerability · Source |
| CVE-2019-5481 | redhat_vex | curl: double free due to subsequent call of realloc() | fixed: 229 known affected: 4 known not affected: 17 | 2026-08-08T17:14:17+00:00 | Vulnerability · Source |
| CVE-2019-1547 | redhat_vex | openssl: side-channel weak encryption vulnerability | fixed: 124 known affected: 17 known not affected: 6 | 2026-08-08T17:14:08+00:00 | Vulnerability · Source |
| CVE-2019-1559 | redhat_vex | openssl: 0-byte record padding oracle | fixed: 253 known affected: 14 known not affected: 6 | 2026-08-08T17:14:08+00:00 | Vulnerability · Source |
| CVE-2023-43622 | redhat_vex | httpd: mod_http2: DoS in HTTP/2 with initial window size 0 | fixed: 13 known not affected: 3 | 2026-08-08T17:12:16+00:00 | Vulnerability · Source |
| CVE-2023-38285 | redhat_vex | mod_security: DoS Vulnerability in Four Transformations | known not affected: 12 | 2026-08-08T17:12:14+00:00 | Vulnerability · Source |
| CVE-2023-31122 | redhat_vex | httpd: mod_macro: out-of-bounds read vulnerability | fixed: 188 known affected: 29 known not affected: 101 | 2026-08-08T17:12:05+00:00 | Vulnerability · Source |
| CVE-2023-28882 | redhat_vex | mod_security: a segfault and a resultant crash of a worker process in some configurations with certain inputs | known not affected: 9 | 2026-08-08T17:11:58+00:00 | Vulnerability · Source |
| CVE-2022-39328 | redhat_vex | grafana: race condition allowing privilege escalation | known not affected: 43 | 2026-08-08T17:11:44+00:00 | Vulnerability · Source |
| CVE-2023-50780 | redhat_vex | artemis: Apache ActiveMQ Artemis: Authenticated users could perform RCE via Jolokia MBeans | known affected: 2 known not affected: 5 | 2026-08-08T17:09:55+00:00 | Vulnerability · Source |
| CVE-2023-27522 | redhat_vex | httpd: mod_proxy_uwsgi HTTP response splitting | fixed: 348 known affected: 16 known not affected: 101 | 2026-08-08T16:42:39+00:00 | Vulnerability · Source |
| CVE-2022-23990 | redhat_vex | expat: integer overflow in the doProlog function | fixed: 80 known affected: 13 known not affected: 90 | 2026-08-08T16:42:35+00:00 | Vulnerability · Source |
| CVE-2020-25711 | redhat_vex | infinispan: authorization check missing for server management operations | fixed: 1 known not affected: 5 | 2026-08-08T16:42:17+00:00 | Vulnerability · Source |
| CVE-2020-10714 | redhat_vex | wildfly-elytron: session fixation when using FORM authentication | fixed: 645 known affected: 1 known not affected: 1 | 2026-08-08T16:42:12+00:00 | Vulnerability · Source |
| CVE-2020-10693 | redhat_vex | hibernate-validator: Improper input validation in the interpolation of constraint error messages | fixed: 1896 known affected: 15 known not affected: 1 | 2026-08-08T16:42:01+00:00 | Vulnerability · Source |
| CVE-2016-5300 | redhat_vex | expat: Little entropy used for hash initialization | known affected: 12 known not affected: 20 under investigation: 1 | 2026-08-08T16:42:00+00:00 | Vulnerability · Source |
| CVE-2012-6702 | redhat_vex | expat: Using XML_Parse before rand() results into non-random output | known affected: 12 known not affected: 20 under investigation: 1 | 2026-08-08T16:41:56+00:00 | Vulnerability · Source |
| CVE-2023-23913 | redhat_vex | rails: DOM Based Cross-site Scripting in rails-ujs for contenteditable HTML Elements | known affected: 1 | 2026-08-08T16:41:23+00:00 | Vulnerability · Source |
| CVE-2022-27777 | redhat_vex | tfm-rubygem-actionview: Possible cross-site scripting vulnerability in Action View tag helpers | fixed: 2 known affected: 2 known not affected: 1936 | 2026-08-08T16:41:17+00:00 | Vulnerability · Source |
| CVE-2022-22577 | redhat_vex | rubygem-actionpack: Possible cross-site scripting vulnerability in Action Pack | fixed: 2 known affected: 2 known not affected: 1936 | 2026-08-08T16:41:15+00:00 | Vulnerability · Source |
| CVE-2021-41098 | redhat_vex | rubygem-nokogiri: XEE on JRuby | known affected: 1 known not affected: 8 | 2026-08-08T16:41:13+00:00 | Vulnerability · Source |
| CVE-2021-33587 | redhat_vex | nodejs-css-what: does not ensure that attribute parsing has linear time complexity relative to the size of the input | known affected: 19 | 2026-08-08T16:41:09+00:00 | Vulnerability · Source |
| CVE-2021-32762 | redhat_vex | redis: Integer overflow in redis-cli, redis-sentinel on some platforms | known affected: 4 known not affected: 19 | 2026-08-08T16:41:07+00:00 | Vulnerability · Source |
| CVE-2021-32740 | redhat_vex | rubygem-addressable: ReDoS in templates | fixed: 5 known affected: 9 known not affected: 1513 | 2026-08-08T16:41:03+00:00 | Vulnerability · Source |
| CVE-2021-31799 | redhat_vex | rubygem-rdoc: Command injection vulnerability in RDoc | fixed: 1081 known affected: 17 known not affected: 33 | 2026-08-08T16:40:59+00:00 | Vulnerability · Source |
| CVE-2021-29509 | redhat_vex | rubygem-puma: incomplete fix for CVE-2019-16770 allows Denial of Service (DoS) | fixed: 2 known affected: 7 known not affected: 1488 | 2026-08-08T16:40:57+00:00 | Vulnerability · Source |
| CVE-2021-22904 | redhat_vex | rails: Possible DoS Vulnerability in Action Controller Token Authentication | fixed: 2 known affected: 5 known not affected: 1486 | 2026-08-08T16:40:53+00:00 | Vulnerability · Source |
| CVE-2021-22885 | redhat_vex | rubygem-actionpack: Possible Information Disclosure / Unintended Method Execution in Action Pack | fixed: 2 known affected: 5 known not affected: 1486 | 2026-08-08T16:40:49+00:00 | Vulnerability · Source |
| CVE-2021-22880 | redhat_vex | rubygem-activerecord: crafted input may cause a regular expression DoS | known affected: 8 | 2026-08-08T16:40:47+00:00 | Vulnerability · Source |
| CVE-2021-20252 | redhat_vex | 3scale: missing date range handling on database query | known affected: 1 | 2026-08-08T16:40:44+00:00 | Vulnerability · Source |
| CVE-2021-3523 | redhat_vex | apicast: permits auth bypass with connection reuse | known not affected: 1 | 2026-08-08T16:40:42+00:00 | Vulnerability · Source |
| CVE-2021-3425 | redhat_vex | Broker: discloses JDBC username and password in the application log file | fixed: 2 | 2026-08-08T16:40:39+00:00 | Vulnerability · Source |
| CVE-2021-3412 | redhat_vex | 3scale: lack of brute force protection on dev portal login | known affected: 1 | 2026-08-08T16:40:36+00:00 | Vulnerability · Source |
| CVE-2020-26247 | redhat_vex | rubygem-nokogiri: XML external entity injection via Nokogiri::XML::Schema | fixed: 24 known affected: 5 known not affected: 1484 | 2026-08-08T16:40:28+00:00 | Vulnerability · Source |
| CVE-2020-25634 | redhat_vex | 3scale-system: API docs accessible without permissions | known affected: 1 | 2026-08-08T16:40:26+00:00 | Vulnerability · Source |
| CVE-2020-25613 | redhat_vex | ruby: Potential HTTP request smuggling in WEBrick | fixed: 1033 known affected: 50 | 2026-08-08T16:40:22+00:00 | Vulnerability · Source |
| CVE-2020-21468 | redhat_vex | redis: Segmentation fault in the redis-server component | known not affected: 23 | 2026-08-08T16:40:19+00:00 | Vulnerability · Source |
| CVE-2020-16310 | redhat_vex | ghostscript: division by zero in dot24_print_page() in devices/gdevdm24.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:40:17+00:00 | Vulnerability · Source |
| CVE-2020-16307 | redhat_vex | ghostscript: NULL pointer dereference in devices/vector/gdevtxtw.c and psi/zbfont.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:40:12+00:00 | Vulnerability · Source |