VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291348 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2021-23727 | redhat_vex | celery: stored command injection vulnerability may allow privileges escalation | known not affected: 6 | 2026-08-06T22:24:40+00:00 | Vulnerability · Source |
| CVE-2024-0646 | redhat_vex | kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination | fixed: 1627 known affected: 22 known not affected: 42 | 2026-08-06T22:24:38+00:00 | Vulnerability · Source |
| CVE-2024-1488 | redhat_vex | unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation | fixed: 410 known affected: 8 known not affected: 10 | 2026-08-06T22:24:35+00:00 | Vulnerability · Source |
| CVE-2021-4166 | redhat_vex | vim: out-of-bounds read in do_arg_all() in src/arglist.c | known affected: 24 | 2026-08-06T22:22:01+00:00 | Vulnerability · Source |
| CVE-2021-47576 | redhat_vex | kernel: scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() | known affected: 92 known not affected: 106 | 2026-08-06T22:22:01+00:00 | Vulnerability · Source |
| CVE-2021-43818 | redhat_vex | python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through | fixed: 695 known affected: 8 known not affected: 3594 | 2026-08-06T22:21:34+00:00 | Vulnerability · Source |
| CVE-2022-0155 | redhat_vex | follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor | fixed: 496 known affected: 10 known not affected: 106 | 2026-08-06T22:20:52+00:00 | Vulnerability · Source |
| CVE-2026-15037 | redhat_vex | qt: Qt XML: XML injection via improper output neutralization in QDom serialization. | known affected: 2 | 2026-08-06T22:20:48+00:00 | Vulnerability · Source |
| CVE-2026-45646 | redhat_vex | dotnet: ASP.NET Core: Denial of Service via uncontrolled resource allocation | known not affected: 3 | 2026-08-06T22:19:26+00:00 | Vulnerability · Source |
| CVE-2026-16552 | redhat_vex | systemd: systemd-tmpfiles symlink-redirected arbitrary file overwrite via a CHASE_SAFE root-to-unprivileged ownership transition bypass | known not affected: 63 | 2026-08-06T22:17:08+00:00 | Vulnerability · Source |
| CVE-2022-24735 | redhat_vex | redis: Code injection via Lua script execution environment | fixed: 39 known affected: 15 | 2026-08-06T22:17:06+00:00 | Vulnerability · Source |
| CVE-2022-24736 | redhat_vex | redis: Malformed Lua script can crash Redis | fixed: 39 known affected: 15 | 2026-08-06T22:17:06+00:00 | Vulnerability · Source |
| CVE-2026-59890 | redhat_vex | setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) | fixed: 2 known not affected: 270 | 2026-08-06T22:17:03+00:00 | Vulnerability · Source |
| CVE-2026-2950 | redhat_vex | lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass | fixed: 12 known affected: 385 known not affected: 6 | 2026-08-06T22:17:00+00:00 | Vulnerability · Source |
| CVE-2022-0413 | redhat_vex | vim: Use after free in src/ex_cmds.c | fixed: 132 known not affected: 12 | 2026-08-06T22:16:53+00:00 | Vulnerability · Source |
| CVE-2022-0408 | redhat_vex | vim: Stack-based Buffer Overflow in spellsuggest.c | known not affected: 24 | 2026-08-06T22:16:52+00:00 | Vulnerability · Source |
| CVE-2022-25313 | redhat_vex | expat: Stack exhaustion in doctype parsing | fixed: 64 known affected: 24 known not affected: 32 | 2026-08-06T22:16:22+00:00 | Vulnerability · Source |
| CVE-2022-25314 | redhat_vex | expat: Integer overflow in copyString() | fixed: 64 known affected: 4 known not affected: 52 | 2026-08-06T22:16:18+00:00 | Vulnerability · Source |
| CVE-2022-1271 | redhat_vex | gzip: arbitrary-file-write vulnerability | fixed: 402 known affected: 6 known not affected: 26 | 2026-08-06T22:16:04+00:00 | Vulnerability · Source |
| CVE-2026-50506 | redhat_vex | dotnet: odata: ASP.NET Core: Denial of Service due to uncontrolled resource allocation | known not affected: 3 | 2026-08-06T22:16:01+00:00 | Vulnerability · Source |
| CVE-2026-45363 | redhat_vex | ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification | known affected: 4 known not affected: 1 | 2026-08-06T22:15:55+00:00 | Vulnerability · Source |
| CVE-2022-25315 | redhat_vex | expat: Integer overflow in storeRawNames() | fixed: 314 known affected: 4 known not affected: 34 | 2026-08-06T22:15:18+00:00 | Vulnerability · Source |
| CVE-2022-25235 | redhat_vex | expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution | fixed: 597 known affected: 4 known not affected: 28 | 2026-08-06T22:14:22+00:00 | Vulnerability · Source |
| CVE-2022-25236 | redhat_vex | expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution | fixed: 283 known affected: 4 known not affected: 37 | 2026-08-06T22:14:13+00:00 | Vulnerability · Source |
| CVE-2022-3647 | redhat_vex | redis: crash in sigsegvHandler debug function | known affected: 21 | 2026-08-06T22:10:22+00:00 | Vulnerability · Source |
| CVE-2024-21012 | redhat_vex | OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) | fixed: 2268 known affected: 6 known not affected: 141 | 2026-08-06T22:07:16+00:00 | Vulnerability · Source |
| CVE-2024-4317 | redhat_vex | postgresql: PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks | fixed: 745 known affected: 24 known not affected: 144 | 2026-08-06T22:03:12+00:00 | Vulnerability · Source |
| CVE-2024-21085 | redhat_vex | OpenJDK: Pack200 excessive memory allocation (8322114) | fixed: 1996 known affected: 63 known not affected: 124 | 2026-08-06T22:03:09+00:00 | Vulnerability · Source |
| CVE-2024-21520 | redhat_vex | djangorestframework: Cross-site Scripting (XSS) via break_long_headers | fixed: 8 known affected: 4 known not affected: 30 | 2026-08-06T22:03:07+00:00 | Vulnerability · Source |
| CVE-2024-21068 | redhat_vex | OpenJDK: integer overflow in C1 compiler address generation (8322122) | fixed: 3186 known affected: 47 known not affected: 44 | 2026-08-06T22:02:57+00:00 | Vulnerability · Source |
| CVE-2024-21011 | redhat_vex | OpenJDK: long Exception message leading to crash (8319851) | fixed: 3186 known affected: 47 known not affected: 44 | 2026-08-06T22:02:54+00:00 | Vulnerability · Source |
| CVE-2024-4340 | redhat_vex | sqlparse: parsing heavily nested list leads to denial of service | fixed: 14 known affected: 3 known not affected: 558 | 2026-08-06T22:02:47+00:00 | Vulnerability · Source |
| CVE-2024-2410 | redhat_vex | protobuf: Use-after-free in JsonToBinaryStream() | known affected: 4 known not affected: 93 | 2026-08-06T22:02:42+00:00 | Vulnerability · Source |
| CVE-2026-14534 | redhat_vex | fickling: python: fickling: Arbitrary code execution due to incomplete denylist in deserialization | known affected: 2 known not affected: 3 | 2026-08-06T22:00:57+00:00 | Vulnerability · Source |
| CVE-2024-21144 | redhat_vex | OpenJDK: Pack200 increase loading time due to improper header validation (8322106) | fixed: 1568 known affected: 57 known not affected: 124 | 2026-08-06T21:57:28+00:00 | Vulnerability · Source |
| CVE-2026-53422 | redhat_vex | erlang: ssh: Erlang OTP ssh: Information disclosure via SFTP REALPATH handler | fixed: 3 known affected: 41 known not affected: 1 | 2026-08-06T21:57:19+00:00 | Vulnerability · Source |
| CVE-2026-51537 | redhat_vex | OpENer: OpENer: Out-of-bounds read via malformed ForwardOpen requests | known not affected: 2 | 2026-08-06T21:57:08+00:00 | Vulnerability · Source |
| CVE-2026-43186 | redhat_vex | kernel: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() | fixed: 309 known affected: 14 known not affected: 184 | 2026-08-06T21:54:58+00:00 | Vulnerability · Source |
| CVE-2022-28199 | redhat_vex | dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service | fixed: 183 known affected: 84 | 2026-08-06T21:40:06+00:00 | Vulnerability · Source |
| CVE-2022-28693 | redhat_vex | hw: cpu: Intel: information disclosure via local access | fixed: 736 known affected: 14 | 2026-08-06T21:35:21+00:00 | Vulnerability · Source |
| CVE-2022-40133 | redhat_vex | kernel: vmwgfx: use-after-free in vmw_execbuf_tie_context | fixed: 900 known affected: 64 known not affected: 1 | 2026-08-06T21:31:35+00:00 | Vulnerability · Source |
| CVE-2022-25887 | redhat_vex | sanitize-html: insecure global regular expression replacement logic may lead to ReDoS | known affected: 9 | 2026-08-06T21:26:32+00:00 | Vulnerability · Source |
| CVE-2022-3435 | redhat_vex | kernel: out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c | fixed: 235 known not affected: 90 | 2026-08-06T21:25:56+00:00 | Vulnerability · Source |
| CVE-2026-38969 | redhat_vex | webrick: rubygem-webrick: WEBrick: Request smuggling via re-parsing of Content-Length header | fixed: 4 known affected: 8 | 2026-08-06T21:20:26+00:00 | Vulnerability · Source |
| CVE-2021-25749 | redhat_vex | kubelet: runAsNonRoot logic bypass for Windows containers | fixed: 1 known affected: 15 known not affected: 1 | 2026-08-06T21:20:25+00:00 | Vulnerability · Source |
| CVE-2022-38096 | redhat_vex | kernel: vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query | fixed: 1425 known affected: 64 known not affected: 1 | 2026-08-06T21:19:52+00:00 | Vulnerability · Source |
| CVE-2022-2785 | redhat_vex | kernel: out-of-bounds read due to improper check of bpf_sys_bpf() arguments | known affected: 108 known not affected: 90 | 2026-08-06T21:19:46+00:00 | Vulnerability · Source |
| CVE-2022-36280 | redhat_vex | kernel: vmwgfx: out-of-bounds write in vmw_kms_cursor_snoop | fixed: 235 known affected: 90 | 2026-08-06T21:19:40+00:00 | Vulnerability · Source |
| CVE-2022-3172 | redhat_vex | kube-apiserver: Aggregated API server can cause clients to be redirected (SSRF) | fixed: 28 known affected: 16 known not affected: 2043 | 2026-08-06T21:19:31+00:00 | Vulnerability · Source |
| CVE-2022-38457 | redhat_vex | kernel: vmwgfx: use-after-free in vmw_cmd_res_check | fixed: 900 known affected: 64 known not affected: 1 | 2026-08-06T21:15:43+00:00 | Vulnerability · Source |