VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291877 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-2933 | redhat_vex | mysql-connector-java: allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized partial DoS | fixed: 2 known affected: 6 known not affected: 5 | 2026-08-04T23:12:07+00:00 | Vulnerability · Source |
| CVE-2020-1729 | redhat_vex | SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader | fixed: 1399 known affected: 1 known not affected: 2 | 2026-08-04T23:12:04+00:00 | Vulnerability · Source |
| CVE-2020-1720 | redhat_vex | postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks | fixed: 1483 known not affected: 32 | 2026-08-04T23:12:00+00:00 | Vulnerability · Source |
| CVE-2020-8908 | redhat_vex | guava: local information disclosure via temporary directory created with unsafe permissions | fixed: 298 known affected: 45 known not affected: 1489 | 2026-08-04T23:11:57+00:00 | Vulnerability · Source |
| CVE-2020-1935 | redhat_vex | tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling | fixed: 349 known affected: 17 known not affected: 2 | 2026-08-04T23:11:56+00:00 | Vulnerability · Source |
| CVE-2020-2875 | redhat_vex | mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete | fixed: 3 known affected: 5 known not affected: 5 | 2026-08-04T23:11:54+00:00 | Vulnerability · Source |
| CVE-2021-21639 | redhat_vex | jenkins: lack of type validation in agent related REST API | fixed: 4 known affected: 2 known not affected: 421 | 2026-08-04T23:11:48+00:00 | Vulnerability · Source |
| CVE-2021-22134 | redhat_vex | elasticsearch: requests do not properly apply security permissions when executing a query against a recently updated document | known not affected: 11 | 2026-08-04T23:11:45+00:00 | Vulnerability · Source |
| CVE-2021-20229 | redhat_vex | postgresql: single-column SELECT privilege enables reading all columns | known affected: 24 known not affected: 121 | 2026-08-04T23:11:44+00:00 | Vulnerability · Source |
| CVE-2021-21640 | redhat_vex | jenkins: view name validation bypass | fixed: 4 known affected: 2 known not affected: 421 | 2026-08-04T23:11:41+00:00 | Vulnerability · Source |
| CVE-2021-23222 | redhat_vex | postgresql: libpq processes unencrypted bytes from man-in-the-middle | fixed: 154 known affected: 40 known not affected: 117 | 2026-08-04T23:11:38+00:00 | Vulnerability · Source |
| CVE-2020-9488 | redhat_vex | log4j: improper validation of certificate with host mismatch in SMTP appender | fixed: 178 known affected: 38 known not affected: 4 | 2026-08-04T23:11:34+00:00 | Vulnerability · Source |
| CVE-2021-30640 | redhat_vex | tomcat: JNDI realm authentication weakness | fixed: 39 known affected: 5 known not affected: 30 | 2026-08-04T23:11:29+00:00 | Vulnerability · Source |
| CVE-2021-25329 | redhat_vex | tomcat: Incomplete fix for CVE-2020-9484 (RCE via session persistence) | fixed: 49 known affected: 33 known not affected: 2 | 2026-08-04T23:11:26+00:00 | Vulnerability · Source |
| CVE-2021-36374 | redhat_vex | ant: excessive memory allocation when reading a specially crafted ZIP archive or a derived formats | known affected: 130 | 2026-08-04T23:11:23+00:00 | Vulnerability · Source |
| CVE-2021-3393 | redhat_vex | postgresql: Partition constraint violation errors leak values of denied columns | fixed: 356 known not affected: 108 | 2026-08-04T23:11:23+00:00 | Vulnerability · Source |
| CVE-2021-34428 | redhat_vex | jetty: SessionListener can prevent a session from being invalidated breaking logout | fixed: 6 known affected: 56 known not affected: 339 | 2026-08-04T23:11:19+00:00 | Vulnerability · Source |
| CVE-2021-46911 | redhat_vex | kernel: denial of service in ch_ktls | known not affected: 198 | 2026-08-04T23:11:17+00:00 | Vulnerability · Source |
| CVE-2021-46984 | redhat_vex | kernel: kyber: fix out of bounds access when preempted | fixed: 150 known affected: 150 | 2026-08-04T23:11:14+00:00 | Vulnerability · Source |
| CVE-2021-46922 | redhat_vex | kernel: KEYS: trusted: Fix TPM reservation for seal/unseal | known affected: 42 known not affected: 156 | 2026-08-04T23:11:10+00:00 | Vulnerability · Source |
| CVE-2021-43085 | redhat_vex | openssl: Insecure permissions vulnerability due to an error in the implementation of the CMAC_Final() function | known not affected: 55 | 2026-08-04T23:11:09+00:00 | Vulnerability · Source |
| CVE-2021-46910 | redhat_vex | kernel: kmap_local() doubles the number of per-CPU | known affected: 198 | 2026-08-04T23:11:06+00:00 | Vulnerability · Source |
| CVE-2021-4454 | redhat_vex | kernel: can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate | known affected: 108 known not affected: 166 | 2026-08-04T23:11:04+00:00 | Vulnerability · Source |
| CVE-2021-46929 | redhat_vex | kernel: sctp: use call_rcu to free endpoint | known affected: 90 known not affected: 108 | 2026-08-04T23:10:58+00:00 | Vulnerability · Source |
| CVE-2021-46912 | redhat_vex | kernel: namespace leak into all other net namespaces | known not affected: 198 | 2026-08-04T23:10:55+00:00 | Vulnerability · Source |
| CVE-2021-46948 | redhat_vex | kernel: sfc: farch: fix TX queue lookup in TX event handling | known affected: 42 known not affected: 156 | 2026-08-04T23:10:54+00:00 | Vulnerability · Source |
| CVE-2021-46969 | redhat_vex | kernel: bus: mhi: core: Fix invalid error returning in mhi_queue | known affected: 42 known not affected: 156 | 2026-08-04T23:10:51+00:00 | Vulnerability · Source |
| CVE-2021-46963 | redhat_vex | kernel: scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() | known affected: 90 known not affected: 108 | 2026-08-04T23:10:50+00:00 | Vulnerability · Source |
| CVE-2021-4160 | redhat_vex | openssl: Carry propagation bug in the MIPS32 and MIPS64 squaring procedure | known not affected: 32 | 2026-08-04T23:10:48+00:00 | Vulnerability · Source |
| CVE-2021-46921 | redhat_vex | kernel: locking/qrwlock: Fix ordering in queued_write_lock_slowpath() | known affected: 90 known not affected: 108 | 2026-08-04T23:10:22+00:00 | Vulnerability · Source |
| CVE-2022-42252 | redhat_vex | tomcat: request smuggling | fixed: 36 known affected: 3 known not affected: 46 | 2026-08-04T23:10:04+00:00 | Vulnerability · Source |
| CVE-2023-1255 | redhat_vex | openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM | fixed: 49 known not affected: 42 | 2026-08-04T23:10:01+00:00 | Vulnerability · Source |
| CVE-2023-0481 | redhat_vex | quarkus: insecure permissions on temp files | fixed: 1 known not affected: 878 | 2026-08-04T23:09:56+00:00 | Vulnerability · Source |
| CVE-2023-0044 | redhat_vex | quarkus-vertx-http: a cross-site attack may be initiated which might lead to the Information Disclosure | fixed: 2 known not affected: 10 | 2026-08-04T23:09:53+00:00 | Vulnerability · Source |
| CVE-2023-0464 | redhat_vex | openssl: Denial of service by excessive resource usage in verifying X509 policy constraints | fixed: 75 known affected: 32 known not affected: 152 | 2026-08-04T23:09:49+00:00 | Vulnerability · Source |
| CVE-2022-3996 | redhat_vex | openssl: double locking leads to denial of service | known not affected: 47 | 2026-08-04T23:09:45+00:00 | Vulnerability · Source |
| CVE-2022-41862 | redhat_vex | postgresql: Client memory disclosure when connecting with Kerberos to modified server | fixed: 1492 known affected: 202 known not affected: 12 | 2026-08-04T23:09:40+00:00 | Vulnerability · Source |
| CVE-2023-0465 | redhat_vex | openssl: Invalid certificate policies in leaf certificates are silently ignored | fixed: 75 known affected: 32 known not affected: 152 | 2026-08-04T23:09:33+00:00 | Vulnerability · Source |
| CVE-2023-1584 | redhat_vex | quarkus-oidc: ID and access tokens leak via the authorization code flow | fixed: 2 known not affected: 878 | 2026-08-04T23:09:29+00:00 | Vulnerability · Source |
| CVE-2023-34442 | redhat_vex | camel-jira: Temporary file information disclosure in Camel-Jira | known affected: 5 known not affected: 1 | 2026-08-04T23:08:46+00:00 | Vulnerability · Source |
| CVE-2023-45960 | redhat_vex | dom4j: XML External Entity on SAXReader | known not affected: 20 | 2026-08-04T23:08:43+00:00 | Vulnerability · Source |
| CVE-2023-36479 | redhat_vex | jetty: Improper addition of quotation marks to user inputs in CgiServlet | fixed: 25 known affected: 43 known not affected: 1952 under investigation: 1 | 2026-08-04T23:08:41+00:00 | Vulnerability · Source |
| CVE-2024-1726 | redhat_vex | quarkus: security checks for some inherited endpoints performed after serialization in RESTEasy Reactive may trigger a denial of service | fixed: 1 known affected: 1 known not affected: 1051 | 2026-08-04T23:08:37+00:00 | Vulnerability · Source |
| CVE-2024-12801 | redhat_vex | logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks | known affected: 24 | 2026-08-04T23:08:34+00:00 | Vulnerability · Source |
| CVE-2024-6763 | redhat_vex | org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority | fixed: 2 known affected: 26 | 2026-08-04T23:08:29+00:00 | Vulnerability · Source |
| CVE-2024-23080 | redhat_vex | joda-time: Null pointer exeption may lead to DoS | known not affected: 43 | 2026-08-04T23:08:27+00:00 | Vulnerability · Source |
| CVE-2024-3653 | redhat_vex | undertow: LearningPushHandler can lead to remote memory DoS attacks | fixed: 9 known affected: 13 known not affected: 1185 | 2026-08-04T23:08:23+00:00 | Vulnerability · Source |
| CVE-2025-11153 | redhat_vex | firefox: From CVEorg collector | under investigation: 9 | 2026-08-04T23:08:19+00:00 | Vulnerability · Source |
| CVE-2024-4029 | redhat_vex | wildfly: No timeout for EAP management interface may lead to Denial of Service (DoS) | fixed: 356 known affected: 4 known not affected: 3 | 2026-08-04T23:08:14+00:00 | Vulnerability · Source |
| CVE-2025-24814 | redhat_vex | solr: org.apache.solr: Apache Solr: Core-creation with "trusted" configset can use arbitrary untrusted files | known affected: 4 | 2026-08-04T23:08:11+00:00 | Vulnerability · Source |