VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291265 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2012-6702 | redhat_vex | expat: Using XML_Parse before rand() results into non-random output | known affected: 12 known not affected: 20 under investigation: 1 | 2026-08-08T16:41:56+00:00 | Vulnerability · Source |
| CVE-2023-23913 | redhat_vex | rails: DOM Based Cross-site Scripting in rails-ujs for contenteditable HTML Elements | known affected: 1 | 2026-08-08T16:41:23+00:00 | Vulnerability · Source |
| CVE-2022-27777 | redhat_vex | tfm-rubygem-actionview: Possible cross-site scripting vulnerability in Action View tag helpers | fixed: 2 known affected: 2 known not affected: 1936 | 2026-08-08T16:41:17+00:00 | Vulnerability · Source |
| CVE-2022-22577 | redhat_vex | rubygem-actionpack: Possible cross-site scripting vulnerability in Action Pack | fixed: 2 known affected: 2 known not affected: 1936 | 2026-08-08T16:41:15+00:00 | Vulnerability · Source |
| CVE-2021-41098 | redhat_vex | rubygem-nokogiri: XEE on JRuby | known affected: 1 known not affected: 8 | 2026-08-08T16:41:13+00:00 | Vulnerability · Source |
| CVE-2021-33587 | redhat_vex | nodejs-css-what: does not ensure that attribute parsing has linear time complexity relative to the size of the input | known affected: 19 | 2026-08-08T16:41:09+00:00 | Vulnerability · Source |
| CVE-2021-32762 | redhat_vex | redis: Integer overflow in redis-cli, redis-sentinel on some platforms | known affected: 4 known not affected: 19 | 2026-08-08T16:41:07+00:00 | Vulnerability · Source |
| CVE-2021-32740 | redhat_vex | rubygem-addressable: ReDoS in templates | fixed: 5 known affected: 9 known not affected: 1513 | 2026-08-08T16:41:03+00:00 | Vulnerability · Source |
| CVE-2021-31799 | redhat_vex | rubygem-rdoc: Command injection vulnerability in RDoc | fixed: 1081 known affected: 17 known not affected: 33 | 2026-08-08T16:40:59+00:00 | Vulnerability · Source |
| CVE-2021-29509 | redhat_vex | rubygem-puma: incomplete fix for CVE-2019-16770 allows Denial of Service (DoS) | fixed: 2 known affected: 7 known not affected: 1488 | 2026-08-08T16:40:57+00:00 | Vulnerability · Source |
| CVE-2021-22904 | redhat_vex | rails: Possible DoS Vulnerability in Action Controller Token Authentication | fixed: 2 known affected: 5 known not affected: 1486 | 2026-08-08T16:40:53+00:00 | Vulnerability · Source |
| CVE-2021-22885 | redhat_vex | rubygem-actionpack: Possible Information Disclosure / Unintended Method Execution in Action Pack | fixed: 2 known affected: 5 known not affected: 1486 | 2026-08-08T16:40:49+00:00 | Vulnerability · Source |
| CVE-2021-22880 | redhat_vex | rubygem-activerecord: crafted input may cause a regular expression DoS | known affected: 8 | 2026-08-08T16:40:47+00:00 | Vulnerability · Source |
| CVE-2021-20252 | redhat_vex | 3scale: missing date range handling on database query | known affected: 1 | 2026-08-08T16:40:44+00:00 | Vulnerability · Source |
| CVE-2021-3523 | redhat_vex | apicast: permits auth bypass with connection reuse | known not affected: 1 | 2026-08-08T16:40:42+00:00 | Vulnerability · Source |
| CVE-2021-3425 | redhat_vex | Broker: discloses JDBC username and password in the application log file | fixed: 2 | 2026-08-08T16:40:39+00:00 | Vulnerability · Source |
| CVE-2021-3412 | redhat_vex | 3scale: lack of brute force protection on dev portal login | known affected: 1 | 2026-08-08T16:40:36+00:00 | Vulnerability · Source |
| CVE-2020-26247 | redhat_vex | rubygem-nokogiri: XML external entity injection via Nokogiri::XML::Schema | fixed: 24 known affected: 5 known not affected: 1484 | 2026-08-08T16:40:28+00:00 | Vulnerability · Source |
| CVE-2020-25634 | redhat_vex | 3scale-system: API docs accessible without permissions | known affected: 1 | 2026-08-08T16:40:26+00:00 | Vulnerability · Source |
| CVE-2020-25613 | redhat_vex | ruby: Potential HTTP request smuggling in WEBrick | fixed: 1033 known affected: 50 | 2026-08-08T16:40:22+00:00 | Vulnerability · Source |
| CVE-2020-21468 | redhat_vex | redis: Segmentation fault in the redis-server component | known not affected: 23 | 2026-08-08T16:40:19+00:00 | Vulnerability · Source |
| CVE-2020-16310 | redhat_vex | ghostscript: division by zero in dot24_print_page() in devices/gdevdm24.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:40:17+00:00 | Vulnerability · Source |
| CVE-2020-16307 | redhat_vex | ghostscript: NULL pointer dereference in devices/vector/gdevtxtw.c and psi/zbfont.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:40:12+00:00 | Vulnerability · Source |
| CVE-2020-16306 | redhat_vex | ghostscript: NULL pointer dereference in devices/gdevtsep.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:40:08+00:00 | Vulnerability · Source |
| CVE-2020-16301 | redhat_vex | ghostscript: buffer overflow in okiibm_print_page1() in devices/gdevokii.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:40:05+00:00 | Vulnerability · Source |
| CVE-2020-16299 | redhat_vex | ghostscript: division by zero in bj10v_print_page() in contrib/japanese/gdev10v.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:40:03+00:00 | Vulnerability · Source |
| CVE-2020-16297 | redhat_vex | ghostscript: buffer overflow in FloydSteinbergDitheringC() in contrib/gdevbjca.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:59+00:00 | Vulnerability · Source |
| CVE-2020-16296 | redhat_vex | ghostscript: buffer overflow in GetNumWrongData() in contrib/lips4/gdevlips.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:55+00:00 | Vulnerability · Source |
| CVE-2020-16295 | redhat_vex | ghostscript: NULL pointer dereference in clj_media_size() in devices/gdevclj.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:54+00:00 | Vulnerability · Source |
| CVE-2020-16294 | redhat_vex | ghostscript: buffer overflow in epsc_print_page() in devices/gdevepsc.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:50+00:00 | Vulnerability · Source |
| CVE-2020-16293 | redhat_vex | ghostscript: NULL pointer dereference in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:46+00:00 | Vulnerability · Source |
| CVE-2020-16292 | redhat_vex | ghostscript: buffer overflow in mj_raster_cmd() in contrib/japanese/gdevmjc.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:46+00:00 | Vulnerability · Source |
| CVE-2020-16291 | redhat_vex | ghostscript: buffer overflow in contrib/gdevdj9.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:40+00:00 | Vulnerability · Source |
| CVE-2020-16290 | redhat_vex | ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:36+00:00 | Vulnerability · Source |
| CVE-2020-16287 | redhat_vex | ghostscript: buffer overflow in lprn_is_black() in contrib/lips4/gdevlprn.c could result in a DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:33+00:00 | Vulnerability · Source |
| CVE-2020-14388 | redhat_vex | 3scale-system: member role permissions bypass when editing services | known affected: 1 | 2026-08-08T16:39:31+00:00 | Vulnerability · Source |
| CVE-2020-14379 | redhat_vex | broker: XXE injection in configuration files | known affected: 1 | 2026-08-08T16:39:27+00:00 | Vulnerability · Source |
| CVE-2020-14373 | redhat_vex | ghostscript: use-after-free vulnerability in igc_reloc_struct_ptr() could result in DoS | fixed: 82 known affected: 14 known not affected: 1 | 2026-08-08T16:39:24+00:00 | Vulnerability · Source |
| CVE-2020-10727 | redhat_vex | broker: resetUsers operation stores password in plain text | fixed: 1 | 2026-08-08T16:39:20+00:00 | Vulnerability · Source |
| CVE-2019-8331 | redhat_vex | bootstrap: XSS in the tooltip or popover data-template attribute | fixed: 399 known affected: 24 known not affected: 355 | 2026-08-08T16:39:14+00:00 | Vulnerability · Source |
| CVE-2017-16853 | redhat_vex | opensaml: The DynamicMetadataProvider class does not perform various security checks | known not affected: 7 | 2026-08-08T16:39:09+00:00 | Vulnerability · Source |
| CVE-2011-1497 | redhat_vex | rubygem-actionpack: Cross-site scripting in auto_link function | known not affected: 7 | 2026-08-08T16:39:08+00:00 | Vulnerability · Source |
| CVE-2019-3881 | redhat_vex | rubygem-bundler: Insecure permissions on directory in /tmp/ allows for execution of malicious code | fixed: 247 known affected: 6 known not affected: 34 | 2026-08-08T16:38:34+00:00 | Vulnerability · Source |
| CVE-2018-14042 | redhat_vex | bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip | fixed: 379 known affected: 20 known not affected: 201 | 2026-08-08T16:38:26+00:00 | Vulnerability · Source |
| CVE-2018-14040 | redhat_vex | bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute | fixed: 373 known affected: 23 known not affected: 202 | 2026-08-08T16:38:22+00:00 | Vulnerability · Source |
| CVE-2016-5682 | redhat_vex | hawtio-swagger-ui: XSS vulnerability in Definitions section | known affected: 3 under investigation: 1 | 2026-08-08T16:38:22+00:00 | Vulnerability · Source |
| CVE-2026-64570 | redhat_vex | kernel: wifi: mac80211: fix fils_discovery double free on alloc failure | known affected: 198 known not affected: 76 | 2026-08-08T16:35:14+00:00 | Vulnerability · Source |
| CVE-2026-64576 | redhat_vex | kernel: nexthop: initialize extack in nh_res_bucket_migrate() | known affected: 184 known not affected: 90 | 2026-08-08T16:35:12+00:00 | Vulnerability · Source |
| CVE-2026-64567 | redhat_vex | kernel: btrfs: reject free space cache with more entries than pages | known affected: 118 known not affected: 156 | 2026-08-08T16:35:09+00:00 | Vulnerability · Source |
| CVE-2026-64574 | redhat_vex | kernel: wifi: mac80211: tear down new links on vif update error path | known affected: 232 known not affected: 42 | 2026-08-08T16:34:58+00:00 | Vulnerability · Source |