VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291348 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-3090 | redhat_vex | kernel: ipvlan: out-of-bounds write caused by unclear skb->cb | fixed: 1307 known not affected: 42 | 2026-08-06T20:09:55+00:00 | Vulnerability · Source |
| CVE-2024-0793 | redhat_vex | kube-controller-manager: malformed HPA v1 manifest causes crash | fixed: 14 known affected: 16 known not affected: 738 | 2026-08-06T20:09:51+00:00 | Vulnerability · Source |
| CVE-2023-3812 | redhat_vex | kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags | fixed: 1607 known affected: 22 known not affected: 43 | 2026-08-06T20:04:23+00:00 | Vulnerability · Source |
| CVE-2023-3635 | redhat_vex | okio: GzipSource class improper exception handling | fixed: 41 known affected: 11 known not affected: 5 | 2026-08-06T20:00:30+00:00 | Vulnerability · Source |
| CVE-2023-3966 | redhat_vex | openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet | fixed: 98 known affected: 94 known not affected: 1 | 2026-08-06T19:59:08+00:00 | Vulnerability · Source |
| CVE-2023-2828 | redhat_vex | bind: named's configured cache size limit can be significantly exceeded | fixed: 1456 known not affected: 12 | 2026-08-06T19:54:26+00:00 | Vulnerability · Source |
| CVE-2023-34623 | redhat_vex | jtidy: denial of service via crafted object that uses cyclic dependencies | known affected: 8 known not affected: 23 | 2026-08-06T19:54:21+00:00 | Vulnerability · Source |
| CVE-2023-1295 | redhat_vex | kernel: io_uring: TOCTOU vulnerability in IORING_OP_CLOSE operation | known not affected: 198 | 2026-08-06T19:54:06+00:00 | Vulnerability · Source |
| CVE-2023-31248 | redhat_vex | kernel: nf_tables: use-after-free in nft_chain_lookup_byid() | fixed: 493 known not affected: 91 | 2026-08-06T19:53:49+00:00 | Vulnerability · Source |
| CVE-2023-4004 | redhat_vex | kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() | fixed: 1217 known not affected: 43 | 2026-08-06T19:52:28+00:00 | Vulnerability · Source |
| CVE-2023-4147 | redhat_vex | kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free | fixed: 486 known not affected: 91 | 2026-08-06T19:52:13+00:00 | Vulnerability · Source |
| CVE-2023-3610 | redhat_vex | kernel: netfilter: nf_tables: fix chain binding transaction logic in the abort path of NFT_MSG_NEWRULE | fixed: 255 known not affected: 91 | 2026-08-06T19:49:12+00:00 | Vulnerability · Source |
| CVE-2026-59921 | redhat_vex | io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder | fixed: 2 known affected: 57 | 2026-08-06T19:47:29+00:00 | Vulnerability · Source |
| CVE-2022-41804 | redhat_vex | hw: Intel: Unauthorized error injection in Intel SGX or Intel TDX | fixed: 13 known affected: 2 known not affected: 184 | 2026-08-06T19:47:20+00:00 | Vulnerability · Source |
| CVE-2022-38076 | redhat_vex | hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi | fixed: 94 | 2026-08-06T19:41:49+00:00 | Vulnerability · Source |
| CVE-2023-5197 | redhat_vex | kernel: netfilter: nf_tables: use-after-free due to addition and removal of rules from chain bindings within the same transaction | known affected: 108 known not affected: 90 | 2026-08-06T19:41:41+00:00 | Vulnerability · Source |
| CVE-2022-27635 | redhat_vex | hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi | fixed: 134 | 2026-08-06T19:40:58+00:00 | Vulnerability · Source |
| CVE-2023-5345 | redhat_vex | kernel: use-after-free vulnerability in the smb client component | fixed: 274 known affected: 22 known not affected: 90 | 2026-08-06T19:40:36+00:00 | Vulnerability · Source |
| CVE-2023-5625 | redhat_vex | python-eventlet: patch regression for CVE-2021-21419 in some Red Hat builds | fixed: 10 known not affected: 292 | 2026-08-06T19:35:50+00:00 | Vulnerability · Source |
| CVE-2023-31417 | redhat_vex | elasticsearch: Sensitive information in audit logs | known affected: 2 known not affected: 1 | 2026-08-06T19:35:45+00:00 | Vulnerability · Source |
| CVE-2023-39615 | redhat_vex | libxml2: crafted xml can cause global buffer overflow | fixed: 272 known affected: 10 | 2026-08-06T19:35:27+00:00 | Vulnerability · Source |
| CVE-2023-39189 | redhat_vex | kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one() | fixed: 429 known affected: 22 known not affected: 42 | 2026-08-06T19:21:13+00:00 | Vulnerability · Source |
| CVE-2023-4732 | redhat_vex | kernel: Race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode BUG in include/linux/swapops.h | fixed: 399 known not affected: 150 | 2026-08-06T19:20:45+00:00 | Vulnerability · Source |
| CVE-2022-36351 | redhat_vex | hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi | fixed: 94 | 2026-08-06T19:20:43+00:00 | Vulnerability · Source |
| CVE-2023-42754 | redhat_vex | kernel: ipv4: NULL pointer dereference in ipv4_send_dest_unreach() | fixed: 429 known affected: 22 known not affected: 42 | 2026-08-06T19:20:32+00:00 | Vulnerability · Source |
| CVE-2023-5408 | redhat_vex | OpenShift: modification of node role labels | fixed: 16 known not affected: 2511 | 2026-08-06T19:20:08+00:00 | Vulnerability · Source |
| CVE-2023-5178 | redhat_vex | kernel: use after free in nvmet_tcp_free_crypto in NVMe | fixed: 1581 known affected: 22 known not affected: 43 | 2026-08-06T19:19:43+00:00 | Vulnerability · Source |
| CVE-2022-46329 | redhat_vex | hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi | fixed: 262 | 2026-08-06T19:19:27+00:00 | Vulnerability · Source |
| CVE-2023-2163 | redhat_vex | kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe | fixed: 1258 known not affected: 151 | 2026-08-06T19:19:23+00:00 | Vulnerability · Source |
| CVE-2023-42753 | redhat_vex | kernel: netfilter: potential slab-out-of-bound access due to integer underflow | fixed: 1792 known affected: 22 known not affected: 15 | 2026-08-06T19:18:38+00:00 | Vulnerability · Source |
| CVE-2022-40964 | redhat_vex | hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi | fixed: 134 | 2026-08-06T19:18:26+00:00 | Vulnerability · Source |
| CVE-2023-49082 | redhat_vex | aiohttp: CRLF injection if user controls the HTTP method using aiohttp client | fixed: 38 known affected: 1 known not affected: 2505 | 2026-08-06T19:17:39+00:00 | Vulnerability · Source |
| CVE-2023-45322 | redhat_vex | libxml2: use-after-free in xmlUnlinkNode() in tree.c | known affected: 19 | 2026-08-06T19:17:36+00:00 | Vulnerability · Source |
| CVE-2023-46737 | redhat_vex | cosign: potential denial of service by an attacker-controlled registry | known affected: 8 | 2026-08-06T19:17:35+00:00 | Vulnerability · Source |
| CVE-2023-6121 | redhat_vex | kernel: NVMe: info leak due to out-of-bounds read in nvmet_ctrl_find_get | fixed: 429 known affected: 64 | 2026-08-06T19:17:30+00:00 | Vulnerability · Source |
| CVE-2023-47641 | redhat_vex | python-aiohttp: inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` | known not affected: 5 | 2026-08-06T19:17:27+00:00 | Vulnerability · Source |
| CVE-2024-23196 | redhat_vex | kernel: Race condition in snd_hdac_regmap_sync() in sound/hda | known affected: 198 | 2026-08-06T19:17:25+00:00 | Vulnerability · Source |
| CVE-2023-7042 | redhat_vex | kernel: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() | known affected: 198 | 2026-08-06T19:17:22+00:00 | Vulnerability · Source |
| CVE-2024-0564 | redhat_vex | kernel: max page sharing of Kernel Samepage Merging (KSM) may cause memory deduplication | known affected: 198 | 2026-08-06T19:17:21+00:00 | Vulnerability · Source |
| CVE-2021-46975 | redhat_vex | kernel: netfilter: conntrack: Make global sysctls readonly in non-init netns | known affected: 74 known not affected: 124 | 2026-08-06T19:17:19+00:00 | Vulnerability · Source |
| CVE-2023-41040 | redhat_vex | GitPython: Blind local file inclusion | fixed: 20 known affected: 5 known not affected: 225 | 2026-08-06T19:17:03+00:00 | Vulnerability · Source |
| CVE-2023-45683 | redhat_vex | github.com/crewjam/saml: Cross-Site-Scripting (XSS) in github.com/crewjam/saml | known not affected: 1 | 2026-08-06T19:16:56+00:00 | Vulnerability · Source |
| CVE-2023-5090 | redhat_vex | kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs | fixed: 663 known affected: 22 known not affected: 51 | 2026-08-06T19:16:42+00:00 | Vulnerability · Source |
| CVE-2023-5717 | redhat_vex | kernel: A heap out-of-bounds write when function perf_read_group is called and sibling_list is smaller than its child's sibling_list | fixed: 1155 known affected: 50 known not affected: 15 | 2026-08-06T19:16:40+00:00 | Vulnerability · Source |
| CVE-2023-6356 | redhat_vex | kernel: NULL pointer dereference in nvmet_tcp_build_iovec | fixed: 960 known affected: 22 known not affected: 42 | 2026-08-06T19:16:23+00:00 | Vulnerability · Source |
| CVE-2023-7192 | redhat_vex | kernel: refcount leak in ctnetlink_create_conntrack() | fixed: 934 known affected: 198 | 2026-08-06T19:16:00+00:00 | Vulnerability · Source |
| CVE-2023-6535 | redhat_vex | kernel: NULL pointer dereference in nvmet_tcp_execute_request | fixed: 960 known affected: 22 known not affected: 42 | 2026-08-06T19:15:57+00:00 | Vulnerability · Source |
| CVE-2024-0562 | redhat_vex | kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c | fixed: 129 known affected: 32 known not affected: 166 | 2026-08-06T19:15:39+00:00 | Vulnerability · Source |
| CVE-2024-0641 | redhat_vex | kernel: deadlock leading to denial of service in tipc_crypto_key_revoke | known not affected: 198 | 2026-08-06T19:15:34+00:00 | Vulnerability · Source |
| CVE-2024-21664 | redhat_vex | jwx: parsing JSON serialized payload without protected field can lead to panic | known affected: 1 | 2026-08-06T19:15:31+00:00 | Vulnerability · Source |