VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291352 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-45683 | redhat_vex | github.com/crewjam/saml: Cross-Site-Scripting (XSS) in github.com/crewjam/saml | known not affected: 1 | 2026-08-06T19:16:56+00:00 | Vulnerability · Source |
| CVE-2023-5090 | redhat_vex | kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs | fixed: 663 known affected: 22 known not affected: 51 | 2026-08-06T19:16:42+00:00 | Vulnerability · Source |
| CVE-2023-5717 | redhat_vex | kernel: A heap out-of-bounds write when function perf_read_group is called and sibling_list is smaller than its child's sibling_list | fixed: 1155 known affected: 50 known not affected: 15 | 2026-08-06T19:16:40+00:00 | Vulnerability · Source |
| CVE-2023-6356 | redhat_vex | kernel: NULL pointer dereference in nvmet_tcp_build_iovec | fixed: 960 known affected: 22 known not affected: 42 | 2026-08-06T19:16:23+00:00 | Vulnerability · Source |
| CVE-2023-7192 | redhat_vex | kernel: refcount leak in ctnetlink_create_conntrack() | fixed: 934 known affected: 198 | 2026-08-06T19:16:00+00:00 | Vulnerability · Source |
| CVE-2023-6535 | redhat_vex | kernel: NULL pointer dereference in nvmet_tcp_execute_request | fixed: 960 known affected: 22 known not affected: 42 | 2026-08-06T19:15:57+00:00 | Vulnerability · Source |
| CVE-2024-0562 | redhat_vex | kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c | fixed: 129 known affected: 32 known not affected: 166 | 2026-08-06T19:15:39+00:00 | Vulnerability · Source |
| CVE-2024-0641 | redhat_vex | kernel: deadlock leading to denial of service in tipc_crypto_key_revoke | known not affected: 198 | 2026-08-06T19:15:34+00:00 | Vulnerability · Source |
| CVE-2024-21664 | redhat_vex | jwx: parsing JSON serialized payload without protected field can lead to panic | known affected: 1 | 2026-08-06T19:15:31+00:00 | Vulnerability · Source |
| CVE-2023-6040 | redhat_vex | kernel: netfilter: nf_tables: out-of-bounds access in nf_tables_newtable() | fixed: 429 known affected: 64 | 2026-08-06T19:15:22+00:00 | Vulnerability · Source |
| CVE-2020-22217 | redhat_vex | c-ares: Heap buffer over read in ares_parse_soa_reply | fixed: 63 known affected: 5 known not affected: 70 | 2026-08-06T19:15:20+00:00 | Vulnerability · Source |
| CVE-2023-5633 | redhat_vex | kernel: vmwgfx: reference count issue leads to use-after-free in surface handling | fixed: 771 known affected: 22 known not affected: 43 | 2026-08-06T19:14:22+00:00 | Vulnerability · Source |
| CVE-2023-6596 | redhat_vex | openshift: incomplete fix for Rapid Reset (CVE-2023-44487/CVE-2023-39325) | fixed: 8 known not affected: 1241 | 2026-08-06T19:14:20+00:00 | Vulnerability · Source |
| CVE-2023-5528 | redhat_vex | kubernetes: Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windows nodes | fixed: 11 | 2026-08-06T19:14:10+00:00 | Vulnerability · Source |
| CVE-2023-6240 | redhat_vex | kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation | fixed: 859 known affected: 64 known not affected: 1 | 2026-08-06T19:12:43+00:00 | Vulnerability · Source |
| CVE-2026-54911 | redhat_vex | UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps() | known affected: 14 known not affected: 4 | 2026-08-06T19:12:42+00:00 | Vulnerability · Source |
| CVE-2026-54619 | redhat_vex | sqlite3-ruby: sqlite3: sqlite3-ruby: Use-after-free when redefining SQLite functions with different arity | known affected: 2 | 2026-08-06T19:12:39+00:00 | Vulnerability · Source |
| CVE-2023-6931 | redhat_vex | kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size | fixed: 1171 known affected: 50 known not affected: 15 | 2026-08-06T19:12:39+00:00 | Vulnerability · Source |
| CVE-2023-6476 | redhat_vex | cri-o: Pods are able to break out of resource confinement on cgroupv2 | fixed: 52 known affected: 2 known not affected: 459 | 2026-08-06T19:12:35+00:00 | Vulnerability · Source |
| CVE-2023-6536 | redhat_vex | kernel: NULL pointer dereference in __nvmet_req_complete | fixed: 960 known affected: 22 known not affected: 42 | 2026-08-06T19:12:33+00:00 | Vulnerability · Source |
| CVE-2023-6606 | redhat_vex | kernel: Out-Of-Bounds Read vulnerability in smbCalcSize | fixed: 960 known affected: 64 | 2026-08-06T19:12:32+00:00 | Vulnerability · Source |
| CVE-2023-6531 | redhat_vex | kernel: GC's deletion of an SKB races with unix_stream_read_generic() leading to UAF | fixed: 279 known affected: 22 known not affected: 90 | 2026-08-06T19:12:25+00:00 | Vulnerability · Source |
| CVE-2023-49081 | redhat_vex | aiohttp: HTTP request modification | fixed: 46 known affected: 2 known not affected: 2573 | 2026-08-06T19:12:22+00:00 | Vulnerability · Source |
| CVE-2023-49290 | redhat_vex | jwx: Malicious parameters in JWE can cause denial of service | known affected: 3 known not affected: 3 | 2026-08-06T19:12:20+00:00 | Vulnerability · Source |
| CVE-2023-6622 | redhat_vex | kernel: null pointer dereference vulnerability in nft_dynset_init() | fixed: 429 known affected: 22 known not affected: 42 | 2026-08-06T19:12:17+00:00 | Vulnerability · Source |
| CVE-2024-0841 | redhat_vex | kernel: hugetlbfs: Null pointer dereference in hugetlbfs_fill_super function | fixed: 429 known affected: 50 known not affected: 14 | 2026-08-06T19:10:56+00:00 | Vulnerability · Source |
| CVE-2023-6915 | redhat_vex | kernel: Null Pointer Dereference vulnerability in ida_free in lib/idr.c | fixed: 429 known affected: 22 known not affected: 42 | 2026-08-06T19:10:55+00:00 | Vulnerability · Source |
| CVE-2023-53666 | redhat_vex | kernel: Linux kernel: Denial of Service in ASoC wcd938x codec due to improper error handling | fixed: 279 known affected: 22 known not affected: 166 | 2026-08-06T19:10:54+00:00 | Vulnerability · Source |
| CVE-2023-6817 | redhat_vex | kernel: inactive elements in nft_pipapo_walk | fixed: 1409 known affected: 22 known not affected: 43 | 2026-08-06T19:08:57+00:00 | Vulnerability · Source |
| CVE-2023-6546 | redhat_vex | kernel: GSM multiplexing race condition leads to privilege escalation | fixed: 1477 known affected: 22 known not affected: 43 | 2026-08-06T19:08:42+00:00 | Vulnerability · Source |
| CVE-2024-1085 | redhat_vex | kernel: nf_tables: use-after-free vulnerability in the nft_setelem_catchall_deactivate() function | fixed: 514 known affected: 22 known not affected: 90 | 2026-08-06T19:07:27+00:00 | Vulnerability · Source |
| CVE-2024-0607 | redhat_vex | kernel: nf_tables: pointer math issue in nft_byteorder_eval() | known affected: 156 known not affected: 42 | 2026-08-06T19:07:25+00:00 | Vulnerability · Source |
| CVE-2021-33630 | redhat_vex | kernel: net/sched: cbs NULL pointer dereference when offloading is enabled | fixed: 150 known affected: 42 known not affected: 108 | 2026-08-06T19:06:50+00:00 | Vulnerability · Source |
| CVE-2023-52323 | redhat_vex | pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex | fixed: 554 known affected: 53 known not affected: 2262 | 2026-08-06T19:06:36+00:00 | Vulnerability · Source |
| CVE-2024-21803 | redhat_vex | kernel: bluetooth: use-after-free vulnerability in af_bluetooth.c | known not affected: 198 | 2026-08-06T19:06:35+00:00 | Vulnerability · Source |
| CVE-2021-33631 | redhat_vex | kernel: ext4: kernel bug in ext4_write_inline_data_end() | fixed: 893 known affected: 42 | 2026-08-06T19:06:28+00:00 | Vulnerability · Source |
| CVE-2024-1151 | redhat_vex | kernel: stack overflow problem in Open vSwitch kernel module leading to DoS | fixed: 514 known affected: 70 known not affected: 51 | 2026-08-06T19:06:24+00:00 | Vulnerability · Source |
| CVE-2024-24858 | redhat_vex | kernel: net/bluetooth: race condition in {conn,adv}_{min,max}_interval_set() function | fixed: 280 known affected: 112 known not affected: 8 | 2026-08-06T19:06:23+00:00 | Vulnerability · Source |
| CVE-2024-22099 | redhat_vex | kernel: NULL Pointer dereference bluetooth allows Overflow Buffers | fixed: 280 known affected: 112 known not affected: 8 | 2026-08-06T19:05:56+00:00 | Vulnerability · Source |
| CVE-2024-26624 | redhat_vex | kernel: af_unix: fix lockdep positive in sk_diag_dump_icons() | known affected: 28 known not affected: 170 | 2026-08-06T19:05:55+00:00 | Vulnerability · Source |
| CVE-2023-52466 | redhat_vex | kernel: out-of-bounds read in pci_dev_for_each_resource() | fixed: 280 known affected: 112 known not affected: 8 | 2026-08-06T19:01:11+00:00 | Vulnerability · Source |
| CVE-2023-6932 | redhat_vex | kernel: use-after-free in IPv4 IGMP | fixed: 1109 known affected: 53 | 2026-08-06T19:01:01+00:00 | Vulnerability · Source |
| CVE-2023-43490 | redhat_vex | kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode | fixed: 4 known affected: 6 known not affected: 199 | 2026-08-06T19:00:59+00:00 | Vulnerability · Source |
| CVE-2023-52496 | redhat_vex | kernel: mtd: maps: vmu-flash: Fix the (mtd core) switch to ref counters | known not affected: 198 | 2026-08-06T19:00:56+00:00 | Vulnerability · Source |
| CVE-2023-39368 | redhat_vex | kernel: Possible Denial of Service on Intel(R) Processors | fixed: 4 known affected: 6 known not affected: 199 | 2026-08-06T19:00:47+00:00 | Vulnerability · Source |
| CVE-2023-28746 | redhat_vex | kernel: Local information disclosure on Intel(R) Atom(R) processors | fixed: 637 known affected: 59 known not affected: 29 | 2026-08-06T19:00:42+00:00 | Vulnerability · Source |
| CVE-2023-22655 | redhat_vex | kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) | fixed: 4 known affected: 6 known not affected: 199 | 2026-08-06T19:00:38+00:00 | Vulnerability · Source |
| CVE-2023-38575 | redhat_vex | kernel: Local information disclosure in some Intel(R) processors | fixed: 4 known affected: 6 known not affected: 199 | 2026-08-06T19:00:30+00:00 | Vulnerability · Source |
| CVE-2024-26609 | redhat_vex | kernel: netfilter: nf_tables: reject QUEUE/DROP verdict parameters | fixed: 429 known affected: 50 known not affected: 14 | 2026-08-06T19:00:24+00:00 | Vulnerability · Source |
| CVE-2026-12482 | redhat_vex | keras: Keras: Arbitrary File Operations via Malicious Tar Archive Processing | known affected: 9 | 2026-08-06T18:57:40+00:00 | Vulnerability · Source |