VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291904 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-42162 | redhat_vex | kernel: gve: Account for stopped queues when reading NIC stats | known affected: 136 known not affected: 62 | 2026-08-04T18:23:43+00:00 | Vulnerability · Source |
| CVE-2024-42225 | redhat_vex | kernel: wifi: mt76: replace skb_put with skb_put_zero | fixed: 399 known affected: 80 | 2026-08-04T18:23:40+00:00 | Vulnerability · Source |
| CVE-2024-42313 | redhat_vex | kernel: media: venus: fix use after free in vdec_close | known not affected: 198 | 2026-08-04T18:23:37+00:00 | Vulnerability · Source |
| CVE-2024-44940 | redhat_vex | kernel: fou: remove warn in gue_gro_receive on unsupported protocol | known not affected: 198 | 2026-08-04T18:23:34+00:00 | Vulnerability · Source |
| CVE-2024-44998 | redhat_vex | kernel: atm: idt77252: prevent use after free in dequeue_rx() | known affected: 198 | 2026-08-04T18:23:33+00:00 | Vulnerability · Source |
| CVE-2020-11619 | redhat_vex | jackson-databind: Serialization gadgets in org.springframework:spring-aop | fixed: 1362 known affected: 14 known not affected: 12 | 2026-08-04T18:23:26+00:00 | Vulnerability · Source |
| CVE-2020-10968 | redhat_vex | jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider | fixed: 1371 known affected: 9 known not affected: 5 | 2026-08-04T18:23:24+00:00 | Vulnerability · Source |
| CVE-2020-12691 | redhat_vex | openstack-keystone: Credentials endpoint policy logic allows changing credential owner and target project ID | fixed: 16 known affected: 3 known not affected: 2 | 2026-08-04T18:23:22+00:00 | Vulnerability · Source |
| CVE-2020-13957 | redhat_vex | solr: The checks added to unauthenticated configset uploads can be circumvented | known not affected: 6 | 2026-08-04T18:23:18+00:00 | Vulnerability · Source |
| CVE-2019-12419 | redhat_vex | cxf: OpenId Connect token service does not properly validate the clientId | fixed: 3 known affected: 7 known not affected: 6 | 2026-08-04T18:23:16+00:00 | Vulnerability · Source |
| CVE-2020-10672 | redhat_vex | jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution | fixed: 791 known affected: 14 known not affected: 19 | 2026-08-04T18:23:10+00:00 | Vulnerability · Source |
| CVE-2019-20330 | redhat_vex | jackson-databind: lacks certain net.sf.ehcache blocking | fixed: 228 known affected: 7 known not affected: 3 | 2026-08-04T18:23:07+00:00 | Vulnerability · Source |
| CVE-2020-1710 | redhat_vex | EAP: field-name is not parsed in accordance to RFC7230 | fixed: 664 known affected: 3 known not affected: 4 | 2026-08-04T18:23:04+00:00 | Vulnerability · Source |
| CVE-2020-13935 | redhat_vex | tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS | fixed: 407 known affected: 14 known not affected: 22 | 2026-08-04T18:23:03+00:00 | Vulnerability · Source |
| CVE-2020-11111 | redhat_vex | jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory | fixed: 25 known affected: 15 known not affected: 6 | 2026-08-04T18:22:59+00:00 | Vulnerability · Source |
| CVE-2020-11112 | redhat_vex | jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider | fixed: 25 known affected: 17 known not affected: 4 | 2026-08-04T18:22:51+00:00 | Vulnerability · Source |
| CVE-2020-11994 | redhat_vex | camel: server-side template injection and arbitrary file disclosure on templating components | fixed: 2 known affected: 3 | 2026-08-04T18:22:47+00:00 | Vulnerability · Source |
| CVE-2020-14326 | redhat_vex | RESTEasy: Caching routes in RootNode may result in DoS | fixed: 4 known affected: 1 known not affected: 21 | 2026-08-04T18:22:40+00:00 | Vulnerability · Source |
| CVE-2019-14379 | redhat_vex | jackson-databind: default typing mishandling leading to remote code execution | fixed: 545 known affected: 20 known not affected: 174 | 2026-08-04T18:22:33+00:00 | Vulnerability · Source |
| CVE-2020-13934 | redhat_vex | tomcat: OutOfMemoryException caused by HTTP/2 connection leak could lead to DoS | fixed: 36 known affected: 8 known not affected: 41 | 2026-08-04T18:22:32+00:00 | Vulnerability · Source |
| CVE-2020-11620 | redhat_vex | jackson-databind: Serialization gadgets in commons-jelly:commons-jelly | fixed: 22 known affected: 15 known not affected: 6 | 2026-08-04T18:22:15+00:00 | Vulnerability · Source |
| CVE-2019-17558 | redhat_vex | solr: Remote Code Execution through the VelocityResponseWriter | known not affected: 4 | 2026-08-04T18:22:06+00:00 | Vulnerability · Source |
| CVE-2020-11113 | redhat_vex | jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime | fixed: 194 known affected: 15 known not affected: 5 | 2026-08-04T18:22:01+00:00 | Vulnerability · Source |
| CVE-2020-13692 | redhat_vex | postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML | fixed: 36 known affected: 1 known not affected: 5 | 2026-08-04T18:21:33+00:00 | Vulnerability · Source |
| CVE-2020-12690 | redhat_vex | openstack-keystone: OAuth1 request token authorize silently ignores roles parameter | fixed: 6 known affected: 10 known not affected: 2 | 2026-08-04T18:21:15+00:00 | Vulnerability · Source |
| CVE-2020-13941 | redhat_vex | solr: replication handler allows a read-write operations to any location the solr user can access | known affected: 3 known not affected: 3 | 2026-08-04T18:21:04+00:00 | Vulnerability · Source |
| CVE-2020-11973 | redhat_vex | camel: Netty enables Java deserialization by default which could leed to remote code execution | fixed: 1 known affected: 1 known not affected: 1 | 2026-08-04T18:20:31+00:00 | Vulnerability · Source |
| CVE-2019-14844 | redhat_vex | krb5: reversed strlcpy() allows client to crash the KDC | known not affected: 29 | 2026-08-04T18:19:53+00:00 | Vulnerability · Source |
| CVE-2019-17638 | redhat_vex | jetty: double release of resource can lead to information disclosure | fixed: 10 known not affected: 81 | 2026-08-04T18:19:41+00:00 | Vulnerability · Source |
| CVE-2020-12689 | redhat_vex | openstack-keystone: EC2 and credential endpoints are not protected from a scoped context | fixed: 16 known affected: 3 known not affected: 2 | 2026-08-04T18:19:26+00:00 | Vulnerability · Source |
| CVE-2024-43858 | redhat_vex | kernel: jfs: Fix array-index-out-of-bounds in diFree | known affected: 58 known not affected: 140 | 2026-08-04T18:18:45+00:00 | Vulnerability · Source |
| CVE-2024-43830 | redhat_vex | kernel: leds: trigger: Unregister sysfs attributes before calling deactivate() | fixed: 679 known affected: 80 known not affected: 8 | 2026-08-04T18:18:42+00:00 | Vulnerability · Source |
| CVE-2024-43877 | redhat_vex | kernel: media: pci: ivtv: Add check for DMA map result | known affected: 28 known not affected: 170 | 2026-08-04T18:18:41+00:00 | Vulnerability · Source |
| CVE-2024-44959 | redhat_vex | kernel: tracefs: Use generic inode RCU for synchronizing freeing | known not affected: 198 | 2026-08-04T18:18:37+00:00 | Vulnerability · Source |
| CVE-2024-44966 | redhat_vex | kernel: binfmt_flat: Fix corruption when not offsetting data start | known not affected: 198 | 2026-08-04T18:18:36+00:00 | Vulnerability · Source |
| CVE-2024-44951 | redhat_vex | kernel: serial: sc16is7xx: fix TX fifo corruption | known not affected: 198 | 2026-08-04T18:18:32+00:00 | Vulnerability · Source |
| CVE-2024-45030 | redhat_vex | kernel: igb: cope with large MAX_SKB_FRAGS | known affected: 42 known not affected: 156 | 2026-08-04T18:18:30+00:00 | Vulnerability · Source |
| CVE-2024-42318 | redhat_vex | kernel: landlock: Don't lose track of restrictions on cred_transfer | known not affected: 198 | 2026-08-04T18:18:28+00:00 | Vulnerability · Source |
| CVE-2024-44992 | redhat_vex | kernel: smb/client: avoid possible NULL dereference in cifs_free_subrequest() | known not affected: 198 | 2026-08-04T18:18:25+00:00 | Vulnerability · Source |
| CVE-2024-44973 | redhat_vex | kernel: mm, slub: do not call do_slab_free for kfence object | known affected: 28 known not affected: 170 | 2026-08-04T18:18:20+00:00 | Vulnerability · Source |
| CVE-2024-44933 | redhat_vex | kernel: bnxt_en : Fix memory out-of-bounds in bnxt_fill_hw_rss_tbl() | known affected: 28 known not affected: 170 | 2026-08-04T18:18:18+00:00 | Vulnerability · Source |
| CVE-2024-45013 | redhat_vex | kernel: nvme: move stopping keep-alive into nvme_uninit_ctrl() | known affected: 136 known not affected: 62 | 2026-08-04T18:18:15+00:00 | Vulnerability · Source |
| CVE-2024-45021 | redhat_vex | kernel: memcg_write_event_control(): fix a user-triggerable oops | known affected: 42 known not affected: 156 | 2026-08-04T18:18:11+00:00 | Vulnerability · Source |
| CVE-2024-45009 | redhat_vex | kernel: mptcp: pm: only decrement add_addr_accepted for MPJ req | fixed: 305 known affected: 70 known not affected: 42 | 2026-08-04T18:18:10+00:00 | Vulnerability · Source |
| CVE-2024-43825 | redhat_vex | kernel: iio: Fix the sorting functionality in iio_gts_build_avail_time_table | known not affected: 198 | 2026-08-04T18:18:07+00:00 | Vulnerability · Source |
| CVE-2024-43910 | redhat_vex | kernel: bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory accesses | fixed: 305 known affected: 98 known not affected: 14 | 2026-08-04T18:18:05+00:00 | Vulnerability · Source |
| CVE-2024-44954 | redhat_vex | kernel: ALSA: line6: Fix racy access to midibuf | known affected: 184 known not affected: 14 | 2026-08-04T18:18:02+00:00 | Vulnerability · Source |
| CVE-2024-43888 | redhat_vex | kernel: mm: list_lru: fix UAF for memory cgroup | fixed: 559 known affected: 64 known not affected: 56 | 2026-08-04T18:17:56+00:00 | Vulnerability · Source |
| CVE-2024-44974 | redhat_vex | kernel: mptcp: pm: avoid possible UaF when selecting endp | known affected: 156 known not affected: 42 | 2026-08-04T18:17:54+00:00 | Vulnerability · Source |
| CVE-2024-45000 | redhat_vex | kernel: fs/netfs/fscache_cookie: add missing "n_accesses" check | fixed: 305 known affected: 64 known not affected: 48 | 2026-08-04T18:17:50+00:00 | Vulnerability · Source |