VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291387 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-17894 | redhat_vex | chromium-browser: chromium-browser: Use after free in Views | known not affected: 1 | 2026-08-06T07:58:23+00:00 | Vulnerability · Source |
| CVE-2026-7482 | redhat_vex | github.com/ollama/ollama: ollama: Ollama: Information disclosure via heap out-of-bounds read in GGUF model loader | known not affected: 7 | 2026-08-06T07:38:22+00:00 | Vulnerability · Source |
| CVE-2026-70368 | redhat_vex | stunnel: Stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message | known affected: 4 known not affected: 3 | 2026-08-06T07:33:27+00:00 | Vulnerability · Source |
| CVE-2026-70367 | redhat_vex | stunnel: SSRF bypass in stunnel SOCKS proxy via IPv4-mapped IPv6 loopback and unspecified addresses allows access to loopback-only services | known affected: 4 known not affected: 3 | 2026-08-06T07:28:08+00:00 | Vulnerability · Source |
| CVE-2019-15890 | redhat_vex | QEMU: Slirp: use-after-free during packet reassembly | fixed: 1937 known affected: 54 known not affected: 3 | 2026-08-06T07:18:23+00:00 | Vulnerability · Source |
| CVE-2021-26691 | redhat_vex | httpd: mod_session: Heap overflow via a crafted SessionHeader value | fixed: 297 known affected: 12 known not affected: 18 | 2026-08-06T07:13:41+00:00 | Vulnerability · Source |
| CVE-2023-2700 | redhat_vex | libvirt: Memory leak in virPCIVirtualFunctionList cleanup | fixed: 2141 known affected: 101 | 2026-08-06T07:13:23+00:00 | Vulnerability · Source |
| CVE-2026-3260 | redhat_vex | undertow: Undertow: Denial of Service due to premature multipart/form-data parsing in GET requests | known affected: 26 | 2026-08-06T07:03:07+00:00 | Vulnerability · Source |
| CVE-2021-3903 | redhat_vex | vim: heap-based buffer overflow vulnerability | fixed: 66 known affected: 12 known not affected: 7 | 2026-08-06T06:53:12+00:00 | Vulnerability · Source |
| CVE-2026-71311 | redhat_vex | github.com/rclone/rclone: rclone: FTP command injection via CRLF in filename encoding | known not affected: 1 | 2026-08-06T06:18:07+00:00 | Vulnerability · Source |
| CVE-2026-67863 | redhat_vex | open62541: open62541: Denial of Service via use-after-free vulnerability | known not affected: 1 | 2026-08-06T06:13:07+00:00 | Vulnerability · Source |
| CVE-2026-71310 | redhat_vex | github.com/rclone/rclone: rclone: Denial of Service via unbounded HTTP CONNECT response headers | known affected: 1 | 2026-08-06T06:10:15+00:00 | Vulnerability · Source |
| CVE-2026-71312 | redhat_vex | github.com/rclone/rclone: rclone: Server-Side Command Execution via Malicious SFTP Filenames | known not affected: 1 | 2026-08-06T06:03:13+00:00 | Vulnerability · Source |
| CVE-2026-71309 | redhat_vex | github.com/rclone/rclone: rclone: Backend Root Escape via Incomplete Path Validation | known not affected: 1 | 2026-08-06T05:53:30+00:00 | Vulnerability · Source |
| CVE-2026-71267 | redhat_vex | microtar: microtar: Stack buffer overflow via overly long filenames | known not affected: 1 | 2026-08-06T04:43:08+00:00 | Vulnerability · Source |
| CVE-2026-67870 | redhat_vex | open62541: open62541: Denial of Service via incomplete validation in AddReferences | known not affected: 1 | 2026-08-06T04:23:43+00:00 | Vulnerability · Source |
| CVE-2026-67869 | redhat_vex | open62541: open62541: Denial of Service via buffer overflow in Service_Call | known not affected: 1 | 2026-08-06T04:18:31+00:00 | Vulnerability · Source |
| CVE-2026-16729 | redhat_vex | undici: Undici: Cookie attribute injection allows bypassing security protections | fixed: 8 known affected: 1 known not affected: 4 | 2026-08-06T03:49:54+00:00 | Vulnerability · Source |
| CVE-2026-39244 | redhat_vex | adm-zip: adm-zip: Denial of Service via crafted ZIP file leading to excessive memory allocation | known affected: 20 known not affected: 2 | 2026-08-06T03:49:52+00:00 | Vulnerability · Source |
| CVE-2026-67550 | redhat_vex | re2: Denial of Service via out-of-bounds read | known affected: 1 known not affected: 1 | 2026-08-06T03:34:33+00:00 | Vulnerability · Source |
| CVE-2022-21299 | redhat_vex | OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646) | fixed: 1072 known affected: 53 known not affected: 228 | 2026-08-06T03:03:22+00:00 | Vulnerability · Source |
| CVE-2022-21360 | redhat_vex | OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8273756) | fixed: 1127 known affected: 39 | 2026-08-06T02:58:41+00:00 | Vulnerability · Source |
| CVE-2022-21296 | redhat_vex | OpenJDK: Incorrect access checks in XMLEntityManager (JAXP, 8270498) | fixed: 1030 known affected: 40 | 2026-08-06T02:58:35+00:00 | Vulnerability · Source |
| CVE-2022-21366 | redhat_vex | OpenJDK: Excessive memory allocation in TIFF*Decompressor (ImageIO, 8274096) | fixed: 616 known not affected: 79 | 2026-08-06T02:58:30+00:00 | Vulnerability · Source |
| CVE-2022-21341 | redhat_vex | OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream (Serialization, 8272236) | fixed: 1127 known affected: 39 | 2026-08-06T02:55:00+00:00 | Vulnerability · Source |
| CVE-2022-21496 | redhat_vex | OpenJDK: URI parsing inconsistencies (JNDI, 8278972) | fixed: 1451 known affected: 40 | 2026-08-06T02:54:58+00:00 | Vulnerability · Source |
| CVE-2022-21540 | redhat_vex | OpenJDK: class compilation issue (Hotspot, 8281859) | fixed: 1420 known affected: 39 | 2026-08-06T02:54:55+00:00 | Vulnerability · Source |
| CVE-2022-21443 | redhat_vex | OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) | fixed: 1451 known affected: 40 | 2026-08-06T02:54:52+00:00 | Vulnerability · Source |
| CVE-2022-21541 | redhat_vex | OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) | fixed: 1420 known affected: 39 | 2026-08-06T02:54:50+00:00 | Vulnerability · Source |
| CVE-2022-21293 | redhat_vex | OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (Libraries, 8270392) | fixed: 1127 known affected: 39 | 2026-08-06T02:54:50+00:00 | Vulnerability · Source |
| CVE-2022-21434 | redhat_vex | OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) | fixed: 1451 known affected: 40 | 2026-08-06T02:54:46+00:00 | Vulnerability · Source |
| CVE-2022-21248 | redhat_vex | OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934) | fixed: 1127 known affected: 39 | 2026-08-06T02:54:45+00:00 | Vulnerability · Source |
| CVE-2022-21291 | redhat_vex | OpenJDK: Incorrect marking of writeable fields (Hotspot, 8270386) | fixed: 616 known not affected: 79 | 2026-08-06T02:54:44+00:00 | Vulnerability · Source |
| CVE-2022-21282 | redhat_vex | OpenJDK: Insufficient URI checks in the XSLT TransformerImpl (JAXP, 8270492) | fixed: 1030 known affected: 39 | 2026-08-06T02:54:31+00:00 | Vulnerability · Source |
| CVE-2022-21277 | redhat_vex | OpenJDK: Incorrect reading of TIFF files in TIFFNullDecompressor (ImageIO, 8270952) | fixed: 616 known not affected: 79 | 2026-08-06T02:54:29+00:00 | Vulnerability · Source |
| CVE-2022-21340 | redhat_vex | OpenJDK: Excessive resource use when reading JAR manifest attributes (Libraries, 8272026) | fixed: 1127 known affected: 39 | 2026-08-06T02:54:27+00:00 | Vulnerability · Source |
| CVE-2022-21305 | redhat_vex | OpenJDK: Array indexing issues in LIRGenerator (Hotspot, 8272014) | fixed: 1030 known affected: 39 | 2026-08-06T02:54:26+00:00 | Vulnerability · Source |
| CVE-2022-21365 | redhat_vex | OpenJDK: Integer overflow in BMPImageReader (ImageIO, 8273838) | fixed: 1127 known affected: 39 | 2026-08-06T02:54:17+00:00 | Vulnerability · Source |
| CVE-2022-21426 | redhat_vex | OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504) | fixed: 1392 known affected: 54 | 2026-08-06T02:54:16+00:00 | Vulnerability · Source |
| CVE-2022-21283 | redhat_vex | OpenJDK: Unexpected exception thrown in regex Pattern (Libraries, 8268813) | fixed: 1030 known affected: 39 | 2026-08-06T02:54:14+00:00 | Vulnerability · Source |
| CVE-2022-21294 | redhat_vex | OpenJDK: Incorrect IdentityHashMap size checks during deserialization (Libraries, 8270416) | fixed: 1127 known affected: 39 | 2026-08-06T02:54:05+00:00 | Vulnerability · Source |
| CVE-2022-21449 | redhat_vex | OpenJDK: Improper ECDSA signature verification (Libraries, 8277233) | fixed: 258 known not affected: 185 | 2026-08-06T02:53:59+00:00 | Vulnerability · Source |
| CVE-2022-34169 | redhat_vex | OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) | fixed: 1862 known affected: 48 known not affected: 27 | 2026-08-06T02:53:57+00:00 | Vulnerability · Source |
| CVE-2022-21476 | redhat_vex | OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008) | fixed: 1354 known affected: 40 known not affected: 20 | 2026-08-06T02:53:54+00:00 | Vulnerability · Source |
| CVE-2024-20945 | redhat_vex | OpenJDK: logging of digital signature private keys (8316976) | fixed: 3560 known affected: 51 | 2026-08-06T02:49:38+00:00 | Vulnerability · Source |
| CVE-2023-22081 | redhat_vex | OpenJDK: certificate path validation issue during client authentication (8309966) | fixed: 2659 known affected: 44 known not affected: 6 | 2026-08-06T02:49:24+00:00 | Vulnerability · Source |
| CVE-2024-20919 | redhat_vex | OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) | fixed: 3500 known affected: 45 known not affected: 20 | 2026-08-06T02:49:21+00:00 | Vulnerability · Source |
| CVE-2024-20921 | redhat_vex | OpenJDK: range check loop optimization issue (8314307) | fixed: 3560 known affected: 51 | 2026-08-06T02:49:18+00:00 | Vulnerability · Source |
| CVE-2024-21094 | redhat_vex | OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) | fixed: 3506 known affected: 47 known not affected: 44 | 2026-08-06T02:49:12+00:00 | Vulnerability · Source |
| CVE-2023-22025 | redhat_vex | OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) | fixed: 985 known affected: 1 known not affected: 185 | 2026-08-06T02:49:05+00:00 | Vulnerability · Source |