VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291864 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2017-7376 | redhat_vex | libxml2: Incorrect limit used for port values | known not affected: 23 | 2026-08-04T23:13:38+00:00 | Vulnerability · Source |
| CVE-2018-0735 | redhat_vex | openssl: timing side channel attack in the ECDSA signature generation | fixed: 144 known affected: 6 known not affected: 15 | 2026-08-04T23:13:34+00:00 | Vulnerability · Source |
| CVE-2018-1301 | redhat_vex | httpd: Out of bounds access after failure in reading the HTTP request | fixed: 544 known affected: 11 known not affected: 15 | 2026-08-04T23:13:34+00:00 | Vulnerability · Source |
| CVE-2017-3589 | redhat_vex | mysql-connector-java: Connector/J unspecified vulnerability (CPU Apr 2017) | known affected: 6 known not affected: 1 | 2026-08-04T23:13:32+00:00 | Vulnerability · Source |
| CVE-2018-17189 | redhat_vex | httpd: mod_http2: DoS via slow, unneeded request bodies | fixed: 577 known not affected: 31 | 2026-08-04T23:13:27+00:00 | Vulnerability · Source |
| CVE-2018-1312 | redhat_vex | httpd: Weak Digest auth nonce generation in mod_auth_digest | fixed: 573 known affected: 10 known not affected: 16 | 2026-08-04T23:13:25+00:00 | Vulnerability · Source |
| CVE-2018-1257 | redhat_vex | spring-framework: ReDoS Attack with spring-messaging | fixed: 2 known affected: 3 known not affected: 14 | 2026-08-04T23:13:21+00:00 | Vulnerability · Source |
| CVE-2018-1115 | redhat_vex | postgresql: Too-permissive access control list on function pg_logfile_rotate() | fixed: 540 known affected: 1 known not affected: 89 | 2026-08-04T23:13:19+00:00 | Vulnerability · Source |
| CVE-2018-1302 | redhat_vex | httpd: Use-after-free on HTTP/2 stream shutdown | fixed: 139 known not affected: 45 | 2026-08-04T23:13:14+00:00 | Vulnerability · Source |
| CVE-2018-14618 | redhat_vex | curl: NTLM password overflow via integer overflow | fixed: 409 known affected: 11 known not affected: 7 | 2026-08-04T23:13:13+00:00 | Vulnerability · Source |
| CVE-2018-12122 | redhat_vex | nodejs: Slowloris HTTP Denial of Service | fixed: 206 known affected: 40 known not affected: 15 | 2026-08-04T23:13:09+00:00 | Vulnerability · Source |
| CVE-2018-1272 | redhat_vex | spring-framework: Multipart content pollution | fixed: 2 known affected: 13 known not affected: 26 | 2026-08-04T23:13:07+00:00 | Vulnerability · Source |
| CVE-2019-0221 | redhat_vex | tomcat: XSS in SSI printenv | fixed: 145 known affected: 32 known not affected: 2 | 2026-08-04T23:13:05+00:00 | Vulnerability · Source |
| CVE-2018-5710 | redhat_vex | krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c | known not affected: 28 | 2026-08-04T23:13:04+00:00 | Vulnerability · Source |
| CVE-2019-10209 | redhat_vex | postgresql: Memory disclosure in cross-type comparison for hashed subplan | known not affected: 110 | 2026-08-04T23:13:02+00:00 | Vulnerability · Source |
| CVE-2018-8034 | redhat_vex | tomcat: Host name verification missing in WebSocket client | fixed: 704 known affected: 6 known not affected: 36 | 2026-08-04T23:12:59+00:00 | Vulnerability · Source |
| CVE-2018-9251 | redhat_vex | libxml2: infinite loop in xz_decomp function in xzlib.c | fixed: 45 known not affected: 13 | 2026-08-04T23:12:56+00:00 | Vulnerability · Source |
| CVE-2019-10184 | redhat_vex | undertow: Information leak in requests for directories without trailing slashes | fixed: 509 known affected: 4 known not affected: 2 | 2026-08-04T23:12:52+00:00 | Vulnerability · Source |
| CVE-2018-5709 | redhat_vex | krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c | known not affected: 28 | 2026-08-04T23:12:52+00:00 | Vulnerability · Source |
| CVE-2019-7614 | redhat_vex | elasticsearch: Race condition in response headers on systems with multiple submitting requests | known affected: 20 known not affected: 1 | 2026-08-04T23:12:48+00:00 | Vulnerability · Source |
| CVE-2020-1698 | redhat_vex | keycloak: Password leak by logged exception in HttpMethod class | fixed: 3 known affected: 5 known not affected: 2 | 2026-08-04T23:12:46+00:00 | Vulnerability · Source |
| CVE-2020-15250 | redhat_vex | junit4: TemporaryFolder is shared between all users across system which could result in information disclosure | fixed: 1 known affected: 8 known not affected: 17 | 2026-08-04T23:12:42+00:00 | Vulnerability · Source |
| CVE-2019-25162 | redhat_vex | kernel: use after free in i2c | fixed: 709 known affected: 22 known not affected: 50 | 2026-08-04T23:12:40+00:00 | Vulnerability · Source |
| CVE-2019-5427 | redhat_vex | c3p0: loading XML configuration leads to denial of service | fixed: 1 known affected: 8 known not affected: 4 | 2026-08-04T23:12:38+00:00 | Vulnerability · Source |
| CVE-2019-1543 | redhat_vex | openssl: ChaCha20-Poly1305 with long nonces | fixed: 34 known not affected: 28 | 2026-08-04T23:12:35+00:00 | Vulnerability · Source |
| CVE-2019-7619 | redhat_vex | elasticsearch: Username disclosure in API Key service | known affected: 1 known not affected: 20 | 2026-08-04T23:12:34+00:00 | Vulnerability · Source |
| CVE-2019-17563 | redhat_vex | tomcat: Session fixation when using FORM authentication | fixed: 229 known affected: 17 known not affected: 8 | 2026-08-04T23:12:31+00:00 | Vulnerability · Source |
| CVE-2019-2708 | redhat_vex | libdb: Denial of service in the Data Store component | fixed: 156 known affected: 26 | 2026-08-04T23:12:27+00:00 | Vulnerability · Source |
| CVE-2019-17569 | redhat_vex | tomcat: Regression in handling of Transfer-Encoding header allows for HTTP request smuggling | fixed: 45 known affected: 5 known not affected: 31 | 2026-08-04T23:12:25+00:00 | Vulnerability · Source |
| CVE-2019-1552 | redhat_vex | openssl: Insecure path defaults vulnerability in mingw builds | known not affected: 24 | 2026-08-04T23:12:23+00:00 | Vulnerability · Source |
| CVE-2020-36785 | redhat_vex | kernel: media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs() | known affected: 42 known not affected: 156 | 2026-08-04T23:12:21+00:00 | Vulnerability · Source |
| CVE-2020-1934 | redhat_vex | httpd: mod_proxy_ftp use of uninitialized value | fixed: 257 known affected: 17 known not affected: 3 | 2026-08-04T23:12:19+00:00 | Vulnerability · Source |
| CVE-2020-2934 | redhat_vex | mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete | fixed: 3 known affected: 5 known not affected: 5 | 2026-08-04T23:12:14+00:00 | Vulnerability · Source |
| CVE-2020-7019 | redhat_vex | elasticsearch: scrolling search can leak fields that should be hidden allowing access restriction bypass | known not affected: 7 | 2026-08-04T23:12:14+00:00 | Vulnerability · Source |
| CVE-2020-29582 | redhat_vex | kotlin: vulnerable Java API was used for temporary file and folder creation which could result in information disclosure | fixed: 3 known affected: 1 known not affected: 1 | 2026-08-04T23:12:11+00:00 | Vulnerability · Source |
| CVE-2020-7021 | redhat_vex | elasticsearch: Information disclosure via audit logging with emit_request_body option enabled | known affected: 3 known not affected: 5 | 2026-08-04T23:12:08+00:00 | Vulnerability · Source |
| CVE-2020-2933 | redhat_vex | mysql-connector-java: allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized partial DoS | fixed: 2 known affected: 6 known not affected: 5 | 2026-08-04T23:12:07+00:00 | Vulnerability · Source |
| CVE-2020-1729 | redhat_vex | SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader | fixed: 1399 known affected: 1 known not affected: 2 | 2026-08-04T23:12:04+00:00 | Vulnerability · Source |
| CVE-2020-1720 | redhat_vex | postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks | fixed: 1483 known not affected: 32 | 2026-08-04T23:12:00+00:00 | Vulnerability · Source |
| CVE-2020-8908 | redhat_vex | guava: local information disclosure via temporary directory created with unsafe permissions | fixed: 298 known affected: 45 known not affected: 1489 | 2026-08-04T23:11:57+00:00 | Vulnerability · Source |
| CVE-2020-1935 | redhat_vex | tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling | fixed: 349 known affected: 17 known not affected: 2 | 2026-08-04T23:11:56+00:00 | Vulnerability · Source |
| CVE-2020-2875 | redhat_vex | mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete | fixed: 3 known affected: 5 known not affected: 5 | 2026-08-04T23:11:54+00:00 | Vulnerability · Source |
| CVE-2021-21639 | redhat_vex | jenkins: lack of type validation in agent related REST API | fixed: 4 known affected: 2 known not affected: 421 | 2026-08-04T23:11:48+00:00 | Vulnerability · Source |
| CVE-2021-22134 | redhat_vex | elasticsearch: requests do not properly apply security permissions when executing a query against a recently updated document | known not affected: 11 | 2026-08-04T23:11:45+00:00 | Vulnerability · Source |
| CVE-2021-20229 | redhat_vex | postgresql: single-column SELECT privilege enables reading all columns | known affected: 24 known not affected: 121 | 2026-08-04T23:11:44+00:00 | Vulnerability · Source |
| CVE-2021-21640 | redhat_vex | jenkins: view name validation bypass | fixed: 4 known affected: 2 known not affected: 421 | 2026-08-04T23:11:41+00:00 | Vulnerability · Source |
| CVE-2021-23222 | redhat_vex | postgresql: libpq processes unencrypted bytes from man-in-the-middle | fixed: 154 known affected: 40 known not affected: 117 | 2026-08-04T23:11:38+00:00 | Vulnerability · Source |
| CVE-2020-9488 | redhat_vex | log4j: improper validation of certificate with host mismatch in SMTP appender | fixed: 178 known affected: 38 known not affected: 4 | 2026-08-04T23:11:34+00:00 | Vulnerability · Source |
| CVE-2021-30640 | redhat_vex | tomcat: JNDI realm authentication weakness | fixed: 39 known affected: 5 known not affected: 30 | 2026-08-04T23:11:29+00:00 | Vulnerability · Source |
| CVE-2021-25329 | redhat_vex | tomcat: Incomplete fix for CVE-2020-9484 (RCE via session persistence) | fixed: 49 known affected: 33 known not affected: 2 | 2026-08-04T23:11:26+00:00 | Vulnerability · Source |