VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291265 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64574 | redhat_vex | kernel: wifi: mac80211: tear down new links on vif update error path | known affected: 232 known not affected: 42 | 2026-08-08T16:34:58+00:00 | Vulnerability · Source |
| CVE-2026-64577 | redhat_vex | kernel: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() | known not affected: 274 | 2026-08-08T16:34:55+00:00 | Vulnerability · Source |
| CVE-2026-64575 | redhat_vex | kernel: bpf: tcp: fix double sock release on batch realloc | known not affected: 274 | 2026-08-08T16:34:52+00:00 | Vulnerability · Source |
| CVE-2024-21529 | redhat_vex | dset: Prototype Pollution | fixed: 1 known not affected: 4 | 2026-08-08T16:31:52+00:00 | Vulnerability · Source |
| CVE-2024-41818 | redhat_vex | fast-xml-parser: ReDOS at currency parsing in currency.js | fixed: 15 known affected: 5 known not affected: 390 | 2026-08-08T16:31:52+00:00 | Vulnerability · Source |
| CVE-2023-45133 | redhat_vex | babel: arbitrary code execution | known affected: 3 known not affected: 7 | 2026-08-08T16:31:45+00:00 | Vulnerability · Source |
| CVE-2022-4361 | redhat_vex | RHSSO: XSS due to lax URI scheme validation | fixed: 13 | 2026-08-08T16:31:39+00:00 | Vulnerability · Source |
| CVE-2021-44549 | redhat_vex | angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication | fixed: 18 known affected: 3 known not affected: 3 | 2026-08-08T16:31:36+00:00 | Vulnerability · Source |
| CVE-2021-31162 | redhat_vex | rust: double free in Vec::from_iter function if freeing the element panics | fixed: 140 known not affected: 16 | 2026-08-08T16:31:03+00:00 | Vulnerability · Source |
| CVE-2021-28879 | redhat_vex | rust: integer overflow in the Zip implementation can lead to a buffer overflow | fixed: 140 known not affected: 16 | 2026-08-08T16:30:59+00:00 | Vulnerability · Source |
| CVE-2021-28878 | redhat_vex | rust: memory safety violation in Zip implementation when next_back() and next() are used together | fixed: 140 known not affected: 16 | 2026-08-08T16:30:50+00:00 | Vulnerability · Source |
| CVE-2021-28877 | redhat_vex | rust: memory safety violation in Zip implementation for nested iter::Zips | fixed: 140 known not affected: 16 | 2026-08-08T16:30:44+00:00 | Vulnerability · Source |
| CVE-2021-28875 | redhat_vex | rust: heap-based buffer overflow in read_to_end() because it does not validate the return value from Read in an unsafe context | fixed: 140 known not affected: 16 | 2026-08-08T16:30:38+00:00 | Vulnerability · Source |
| CVE-2020-36323 | redhat_vex | rust: optimization for joining strings can cause uninitialized bytes to be exposed | fixed: 140 known not affected: 16 | 2026-08-08T16:30:34+00:00 | Vulnerability · Source |
| CVE-2024-5971 | redhat_vex | undertow: response write hangs in case of Java 17 TLSv1.3 NewSessionTicket | fixed: 11 known affected: 6 known not affected: 220 | 2026-08-08T16:25:26+00:00 | Vulnerability · Source |
| CVE-2023-34981 | redhat_vex | tomcat: response headers from the previous request leading to an information leak | known affected: 22 known not affected: 26 | 2026-08-08T16:25:24+00:00 | Vulnerability · Source |
| CVE-2023-5384 | redhat_vex | infinispan: Credentials returned from configuration as clear text | fixed: 1 | 2026-08-08T16:25:22+00:00 | Vulnerability · Source |
| CVE-2019-9517 | redhat_vex | HTTP/2: request for large response leads to denial of service | fixed: 840 known affected: 5 known not affected: 112 | 2026-08-08T16:25:19+00:00 | Vulnerability · Source |
| CVE-2019-9516 | redhat_vex | HTTP/2: 0-length headers lead to denial of service | fixed: 891 known affected: 5 known not affected: 116 | 2026-08-08T16:25:17+00:00 | Vulnerability · Source |
| CVE-2019-9513 | redhat_vex | HTTP/2: flood using PRIORITY frames results in excessive resource consumption | fixed: 1213 known affected: 2 known not affected: 98 | 2026-08-08T16:25:11+00:00 | Vulnerability · Source |
| CVE-2019-5443 | redhat_vex | curl: Windows OpenSSL engine code injection | known not affected: 29 | 2026-08-08T16:25:08+00:00 | Vulnerability · Source |
| CVE-2023-25690 | redhat_vex | httpd: HTTP request splitting with mod_rewrite and mod_proxy | fixed: 693 known affected: 1 known not affected: 103 | 2026-08-08T16:20:06+00:00 | Vulnerability · Source |
| CVE-2020-25649 | redhat_vex | jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) | fixed: 325 known affected: 26 known not affected: 134 | 2026-08-08T16:20:04+00:00 | Vulnerability · Source |
| CVE-2020-10746 | redhat_vex | Infinispan: REST and HotRod APIs unsecured locally by default | fixed: 1 known affected: 3 known not affected: 3 | 2026-08-08T16:20:03+00:00 | Vulnerability · Source |
| CVE-2018-25032 | redhat_vex | zlib: A flaw found in zlib when compressing (not decompressing) certain inputs | fixed: 467 known not affected: 26 | 2026-08-08T16:19:59+00:00 | Vulnerability · Source |
| CVE-2023-0456 | redhat_vex | APICast: APICast proxies the API call with incorrect JWT token to the API backend without proper authorization check | known affected: 1 | 2026-08-08T16:15:31+00:00 | Vulnerability · Source |
| CVE-2021-31597 | redhat_vex | xmlhttprequest-ssl: SSL certificate validation disabled by default | known affected: 1 known not affected: 1 | 2026-08-08T16:15:28+00:00 | Vulnerability · Source |
| CVE-2021-26118 | redhat_vex | 7: OpenWire can create destinations with an unpriviledged user | fixed: 2 known affected: 1 | 2026-08-08T16:15:26+00:00 | Vulnerability · Source |
| CVE-2021-3442 | redhat_vex | RHOAM: XSS in 3scale at various places | fixed: 10 | 2026-08-08T16:15:23+00:00 | Vulnerability · Source |
| CVE-2020-36327 | redhat_vex | rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source | fixed: 435 known affected: 5 known not affected: 1054 | 2026-08-08T16:15:21+00:00 | Vulnerability · Source |
| CVE-2020-36049 | redhat_vex | yarnpkg-socket.io-parser: a denial of service (memory consumption) via a large packet because a concatenation approach is used | known affected: 2 known not affected: 1 | 2026-08-08T16:15:16+00:00 | Vulnerability · Source |
| CVE-2020-8165 | redhat_vex | rubygem-activesupport: potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore | fixed: 1445 known affected: 9 known not affected: 3 | 2026-08-08T16:15:14+00:00 | Vulnerability · Source |
| CVE-2017-7512 | redhat_vex | AMP: validation bypass in oauth | fixed: 1 | 2026-08-08T16:08:53+00:00 | Vulnerability · Source |
| CVE-2026-42170 | redhat_vex | gimp: GIMP DDS plug-in heap-based buffer overflow via BPP mismatch in load_layer() (ddsread.c) | known affected: 29 under investigation: 3 | 2026-08-08T16:03:55+00:00 | Vulnerability · Source |
| CVE-2025-59425 | redhat_vex | vllm: Timing Attack in vLLM API Token Verification Leading to Authentication Bypass | fixed: 29 known affected: 18 known not affected: 418 | 2026-08-08T15:32:26+00:00 | Vulnerability · Source |
| CVE-2026-64582 | redhat_vex | kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap | known affected: 184 known not affected: 90 | 2026-08-08T15:31:05+00:00 | Vulnerability · Source |
| CVE-2026-64549 | redhat_vex | kernel: Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() | known affected: 246 known not affected: 28 | 2026-08-08T13:04:01+00:00 | Vulnerability · Source |
| CVE-2026-64500 | redhat_vex | kernel: iio: adc: lpc32xx: Initialize completion before requesting IRQ | known not affected: 274 | 2026-08-08T13:03:59+00:00 | Vulnerability · Source |
| CVE-2026-64446 | redhat_vex | kernel: staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() | known not affected: 274 | 2026-08-08T13:03:56+00:00 | Vulnerability · Source |
| CVE-2026-64371 | redhat_vex | kernel: proc: protect ptrace_may_access() with exec_update_lock (part 1) | known affected: 274 | 2026-08-08T13:03:49+00:00 | Vulnerability · Source |
| CVE-2026-31767 | redhat_vex | kernel: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode | known affected: 198 known not affected: 76 | 2026-08-08T13:00:58+00:00 | Vulnerability · Source |
| CVE-2026-23468 | redhat_vex | kernel: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion | known affected: 274 | 2026-08-08T11:19:07+00:00 | Vulnerability · Source |
| CVE-2026-46237 | redhat_vex | kernel: drm/amdgpu/vcn3: Avoid overflow on msg bound check | known affected: 14 known not affected: 260 | 2026-08-08T11:02:38+00:00 | Vulnerability · Source |
| CVE-2026-63878 | redhat_vex | kernel: drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO | known affected: 198 known not affected: 76 | 2026-08-08T09:23:47+00:00 | Vulnerability · Source |
| CVE-2026-27820 | redhat_vex | zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader | fixed: 12 known affected: 220 | 2026-08-08T09:13:51+00:00 | Vulnerability · Source |
| CVE-2014-3608 | redhat_vex | openstack-nova: incomplete fix for CVE-2014-2573, Nova VMware driver still leaks rescued images | fixed: 30 known affected: 1 | 2026-08-08T08:44:27+00:00 | Vulnerability · Source |
| CVE-2014-2573 | redhat_vex | openstack-nova: Nova VMware driver leaks rescued images | known affected: 2 known not affected: 1 | 2026-08-08T08:44:23+00:00 | Vulnerability · Source |
| CVE-2014-0204 | redhat_vex | openstack-keystone: user and group id mismatch | known not affected: 2 | 2026-08-08T08:44:21+00:00 | Vulnerability · Source |
| CVE-2013-4469 | redhat_vex | Nova: Incomplete fix for CVE-2013-2096 | known affected: 1 known not affected: 1 | 2026-08-08T08:44:14+00:00 | Vulnerability · Source |
| CVE-2013-1865 | redhat_vex | keystone: online validation of Keystone PKI tokens bypasses revocation check | fixed: 4 | 2026-08-08T08:44:11+00:00 | Vulnerability · Source |