VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291709 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-50386 | redhat_vex | kernel: Bluetooth: L2CAP: Fix user-after-free | fixed: 913 known affected: 108 known not affected: 90 | 2026-08-05T11:47:20+00:00 | Vulnerability · Source |
| CVE-2023-53429 | redhat_vex | kernel: btrfs: don't check PageError in __extent_writepage | known affected: 42 known not affected: 232 | 2026-08-05T11:27:29+00:00 | Vulnerability · Source |
| CVE-2023-53431 | redhat_vex | kernel: Linux kernel: Denial of Service in scsi_ses due to enclosure with no components | known affected: 198 known not affected: 76 | 2026-08-05T11:27:26+00:00 | Vulnerability · Source |
| CVE-2023-53333 | redhat_vex | kernel: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one | known affected: 198 known not affected: 76 | 2026-08-05T11:27:25+00:00 | Vulnerability · Source |
| CVE-2023-53378 | redhat_vex | kernel: drm/i915/dpt: Treat the DPT BO as a framebuffer | known affected: 156 known not affected: 118 | 2026-08-05T11:27:22+00:00 | Vulnerability · Source |
| CVE-2023-53315 | redhat_vex | kernel: wifi: ath11k: Fix SKB corruption in REO destination ring | known affected: 156 known not affected: 118 | 2026-08-05T11:27:17+00:00 | Vulnerability · Source |
| CVE-2023-53338 | redhat_vex | kernel: lwt: Fix return values of BPF xmit ops | fixed: 279 known affected: 70 known not affected: 118 | 2026-08-05T11:27:15+00:00 | Vulnerability · Source |
| CVE-2021-47555 | redhat_vex | kernel: net: vlan: fix underflow for the real_dev refcnt | known affected: 42 known not affected: 156 | 2026-08-05T11:12:49+00:00 | Vulnerability · Source |
| CVE-2021-47368 | redhat_vex | kernel: enetc: Fix illegal access when reading affinity_hint | known not affected: 198 | 2026-08-05T11:12:46+00:00 | Vulnerability · Source |
| CVE-2021-47580 | redhat_vex | kernel: scsi: scsi_debug: Fix type in min_t to avoid stack OOB | fixed: 346 known affected: 42 | 2026-08-05T11:04:20+00:00 | Vulnerability · Source |
| CVE-2022-49931 | redhat_vex | kernel: IB/hfi1: Correctly move list in sc_disable() | known affected: 184 known not affected: 90 | 2026-08-05T10:27:02+00:00 | Vulnerability · Source |
| CVE-2026-17993 | redhat_vex | chromium-browser: chromium-browser: Race in Updater | known not affected: 1 | 2026-08-05T09:46:30+00:00 | Vulnerability · Source |
| CVE-2026-17992 | redhat_vex | chromium-browser: chromium-browser: Uninitialized Use in Skia | known not affected: 1 | 2026-08-05T09:46:27+00:00 | Vulnerability · Source |
| CVE-2026-17802 | redhat_vex | chromium-browser: chromium-browser: Side-channel information leakage in GPU | known not affected: 1 | 2026-08-05T09:25:14+00:00 | Vulnerability · Source |
| CVE-2026-11998 | redhat_vex | angularjs: AngularJS: Arbitrary JavaScript execution due to Strict Contextual Escaping (SCE) bypass | known affected: 1 known not affected: 47 | 2026-08-05T08:58:10+00:00 | Vulnerability · Source |
| CVE-2024-41123 | redhat_vex | rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, >] and ]> | fixed: 598 known affected: 80 known not affected: 49 | 2026-08-05T08:55:11+00:00 | Vulnerability · Source |
| CVE-2024-39908 | redhat_vex | rexml: DoS vulnerability in REXML | fixed: 558 known affected: 80 known not affected: 49 | 2026-08-05T08:47:02+00:00 | Vulnerability · Source |
| CVE-2026-53704 | redhat_vex | gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer FILEINFO metadata parser | fixed: 36 known affected: 2 known not affected: 4 | 2026-08-05T08:42:24+00:00 | Vulnerability · Source |
| CVE-2026-53703 | redhat_vex | gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer audio stream header parser | fixed: 46 known not affected: 4 | 2026-08-05T08:38:52+00:00 | Vulnerability · Source |
| CVE-2026-59939 | redhat_vex | httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies | fixed: 1223 known affected: 45 known not affected: 298 | 2026-08-05T08:28:41+00:00 | Vulnerability · Source |
| CVE-2026-16728 | redhat_vex | undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length | fixed: 8 known affected: 1 known not affected: 4 | 2026-08-05T06:27:44+00:00 | Vulnerability · Source |
| CVE-2026-15157 | redhat_vex | undici: undici: HTTP header injection via unvalidated blob-like body type property | fixed: 8 known affected: 1 known not affected: 4 | 2026-08-05T06:27:41+00:00 | Vulnerability · Source |
| CVE-2026-14643 | redhat_vex | undici: undici: Cross-user information disclosure due to improper Cache-Control directive parsing | fixed: 8 known affected: 1 known not affected: 4 | 2026-08-05T06:27:40+00:00 | Vulnerability · Source |
| CVE-2026-67326 | redhat_vex | gitpython: GitPython: Remote Code Execution via Newline Injection in config_writer() | fixed: 11 known not affected: 1 | 2026-08-05T06:27:31+00:00 | Vulnerability · Source |
| CVE-2026-13697 | redhat_vex | undici: undici: Information disclosure and Denial of Service via malformed Cache-Control directives | fixed: 8 known affected: 1 known not affected: 4 | 2026-08-05T06:27:00+00:00 | Vulnerability · Source |
| CVE-2022-31684 | redhat_vex | reactor-netty-http: Log request headers in some cases of invalid HTTP requests | fixed: 2 known affected: 7 | 2026-08-05T05:20:21+00:00 | Vulnerability · Source |
| CVE-2022-40156 | redhat_vex | xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks | fixed: 3 known affected: 4 known not affected: 27 | 2026-08-05T05:20:03+00:00 | Vulnerability · Source |
| CVE-2022-38752 | redhat_vex | snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode | fixed: 28 known affected: 40 known not affected: 2319 | 2026-08-05T05:18:12+00:00 | Vulnerability · Source |
| CVE-2020-12135 | redhat_vex | bson: integer overflow in bson_ensure_space() parameter bytesNeeded | known not affected: 12 | 2026-08-05T05:18:04+00:00 | Vulnerability · Source |
| CVE-2021-0341 | redhat_vex | okhttp: information disclosure via improperly used cryptographic function | fixed: 19 known affected: 14 known not affected: 46 | 2026-08-05T05:17:52+00:00 | Vulnerability · Source |
| CVE-2020-7610 | redhat_vex | bson: Deserialization of Untrusted Data could result in Code injection or Excessive CPU load | known not affected: 1 | 2026-08-05T05:17:31+00:00 | Vulnerability · Source |
| CVE-2022-37866 | redhat_vex | Ivy: Ivy Path traversal | fixed: 1 known affected: 13 known not affected: 5 | 2026-08-05T05:17:25+00:00 | Vulnerability · Source |
| CVE-2022-40153 | redhat_vex | xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks | fixed: 1 known affected: 3 known not affected: 29 | 2026-08-05T05:17:21+00:00 | Vulnerability · Source |
| CVE-2022-40151 | redhat_vex | xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks | fixed: 5 known affected: 20 known not affected: 11 | 2026-08-05T05:17:20+00:00 | Vulnerability · Source |
| CVE-2022-40155 | redhat_vex | xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks | fixed: 1 known affected: 4 known not affected: 28 | 2026-08-05T05:17:10+00:00 | Vulnerability · Source |
| CVE-2022-41853 | redhat_vex | hsqldb: Untrusted input may lead to RCE attack | fixed: 500 known affected: 14 known not affected: 359 | 2026-08-05T05:17:05+00:00 | Vulnerability · Source |
| CVE-2022-1471 | redhat_vex | SnakeYaml: Constructor Deserialization Remote Code Execution | fixed: 122 known affected: 28 known not affected: 2407 | 2026-08-05T05:17:01+00:00 | Vulnerability · Source |
| CVE-2022-41966 | redhat_vex | xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow | fixed: 13 known affected: 15 known not affected: 202 | 2026-08-05T05:17:00+00:00 | Vulnerability · Source |
| CVE-2020-36184 | redhat_vex | jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource | fixed: 6 known affected: 11 known not affected: 175 | 2026-08-05T05:12:38+00:00 | Vulnerability · Source |
| CVE-2021-20190 | redhat_vex | jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing | fixed: 6 known affected: 11 known not affected: 174 | 2026-08-05T05:12:34+00:00 | Vulnerability · Source |
| CVE-2020-10969 | redhat_vex | jackson-databind: Serialization gadgets in javax.swing.JEditorPane | fixed: 1371 known affected: 3 known not affected: 4 | 2026-08-05T05:12:31+00:00 | Vulnerability · Source |
| CVE-2020-36189 | redhat_vex | jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource | fixed: 6 known affected: 11 known not affected: 175 | 2026-08-05T05:11:03+00:00 | Vulnerability · Source |
| CVE-2024-29131 | redhat_vex | commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() | fixed: 3 known affected: 9 known not affected: 15 | 2026-08-05T05:08:43+00:00 | Vulnerability · Source |
| CVE-2024-29133 | redhat_vex | commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree | fixed: 3 known affected: 9 known not affected: 15 | 2026-08-05T05:08:39+00:00 | Vulnerability · Source |
| CVE-2024-22371 | redhat_vex | camel-core: Exposure of sensitive data by crafting a malicious EventFactory | fixed: 26 known affected: 9 known not affected: 7 | 2026-08-05T05:08:37+00:00 | Vulnerability · Source |
| CVE-2020-10688 | redhat_vex | RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack | fixed: 769 known affected: 3 | 2026-08-05T05:08:24+00:00 | Vulnerability · Source |
| CVE-2024-25710 | redhat_vex | commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file | fixed: 35 known affected: 11 known not affected: 2061 | 2026-08-05T05:08:21+00:00 | Vulnerability · Source |
| CVE-2020-14338 | redhat_vex | wildfly: XML validation manipulation due to incomplete application of use-grammar-pool-only in xercesImpl | fixed: 374 known affected: 12 known not affected: 1 | 2026-08-05T05:08:15+00:00 | Vulnerability · Source |
| CVE-2024-26308 | redhat_vex | commons-compress: OutOfMemoryError unpacking broken Pack200 file | fixed: 48 known affected: 11 known not affected: 2061 | 2026-08-05T05:08:07+00:00 | Vulnerability · Source |
| CVE-2019-14892 | redhat_vex | jackson-databind: Serialization gadgets in classes of the commons-configuration package | fixed: 313 known affected: 24 known not affected: 6 | 2026-08-05T05:07:56+00:00 | Vulnerability · Source |