VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291906 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-43888 | redhat_vex | kernel: mm: list_lru: fix UAF for memory cgroup | fixed: 559 known affected: 64 known not affected: 56 | 2026-08-04T18:17:56+00:00 | Vulnerability · Source |
| CVE-2024-44974 | redhat_vex | kernel: mptcp: pm: avoid possible UaF when selecting endp | known affected: 156 known not affected: 42 | 2026-08-04T18:17:54+00:00 | Vulnerability · Source |
| CVE-2024-45000 | redhat_vex | kernel: fs/netfs/fscache_cookie: add missing "n_accesses" check | fixed: 305 known affected: 64 known not affected: 48 | 2026-08-04T18:17:50+00:00 | Vulnerability · Source |
| CVE-2024-45016 | redhat_vex | kernel: netem: fix return value if duplicate enqueue fails | fixed: 305 known affected: 112 | 2026-08-04T18:17:49+00:00 | Vulnerability · Source |
| CVE-2024-44942 | redhat_vex | kernel: f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC | known not affected: 198 | 2026-08-04T18:17:46+00:00 | Vulnerability · Source |
| CVE-2024-45020 | redhat_vex | kernel: bpf: Fix a kernel verifier crash in stacksafe() | fixed: 280 known affected: 28 known not affected: 84 | 2026-08-04T18:17:42+00:00 | Vulnerability · Source |
| CVE-2020-25695 | redhat_vex | postgresql: Multiple features escape "security restricted operation" sandbox | fixed: 1340 known affected: 14 known not affected: 25 | 2026-08-04T18:17:39+00:00 | Vulnerability · Source |
| CVE-2020-1938 | redhat_vex | tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability | fixed: 825 known affected: 5 known not affected: 9 | 2026-08-04T18:17:27+00:00 | Vulnerability · Source |
| CVE-2020-7014 | redhat_vex | elasticsearch: Incomplete fix for CVE-2020-7009 could result in generating API key with elevated privileges | known not affected: 6 | 2026-08-04T18:17:22+00:00 | Vulnerability · Source |
| CVE-2020-17519 | redhat_vex | apache-flink: directory traversal attack allows reading remote files through the REST API | known not affected: 2 | 2026-08-04T18:17:17+00:00 | Vulnerability · Source |
| CVE-2020-7746 | redhat_vex | chart.js: prototype pollution | fixed: 1 | 2026-08-04T18:17:06+00:00 | Vulnerability · Source |
| CVE-2020-9484 | redhat_vex | tomcat: deserialization flaw in session persistence storage leading to RCE | fixed: 199 known affected: 5 known not affected: 12 | 2026-08-04T18:16:59+00:00 | Vulnerability · Source |
| CVE-2020-25694 | redhat_vex | postgresql: Reconnection can downgrade connection security settings | fixed: 1434 known affected: 14 known not affected: 22 | 2026-08-04T18:15:57+00:00 | Vulnerability · Source |
| CVE-2020-7009 | redhat_vex | elasticsearch: Generating API keys with specific steps could result in generating API key with elevated privileges | known not affected: 6 | 2026-08-04T18:15:44+00:00 | Vulnerability · Source |
| CVE-2020-25638 | redhat_vex | hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String literals are used | fixed: 373 known affected: 17 known not affected: 2 | 2026-08-04T18:15:06+00:00 | Vulnerability · Source |
| CVE-2020-9492 | redhat_vex | hadoop: WebHDFS client might send SPNEGO authorization header | fixed: 2 known affected: 5 known not affected: 1 | 2026-08-04T18:14:48+00:00 | Vulnerability · Source |
| CVE-2024-43816 | redhat_vex | kernel: scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages | known affected: 150 known not affected: 48 | 2026-08-04T18:13:45+00:00 | Vulnerability · Source |
| CVE-2024-44934 | redhat_vex | kernel: net: bridge: mcast: wait for previous gc cycles when removing port | fixed: 305 known affected: 112 | 2026-08-04T18:13:42+00:00 | Vulnerability · Source |
| CVE-2024-46678 | redhat_vex | kernel: bonding: change ipsec_lock from spin lock to mutex | known affected: 198 known not affected: 76 | 2026-08-04T18:13:39+00:00 | Vulnerability · Source |
| CVE-2024-44987 | redhat_vex | kernel: ipv6: prevent UAF in ip6_send_skb() | fixed: 305 known affected: 112 | 2026-08-04T18:13:34+00:00 | Vulnerability · Source |
| CVE-2024-45001 | redhat_vex | kernel: net: mana: Fix RX buf alloc_size alignment and atomic op panic | known affected: 156 known not affected: 42 | 2026-08-04T18:13:33+00:00 | Vulnerability · Source |
| CVE-2024-43881 | redhat_vex | kernel: wifi: ath12k: change DMA direction while mapping reinjected packets | known not affected: 198 | 2026-08-04T18:13:31+00:00 | Vulnerability · Source |
| CVE-2024-43848 | redhat_vex | kernel: wifi: mac80211: fix TTLM teardown work | known affected: 42 known not affected: 156 | 2026-08-04T18:13:28+00:00 | Vulnerability · Source |
| CVE-2024-43892 | redhat_vex | kernel: memcg: protect concurrent access to mem_cgroup_idr | fixed: 709 known affected: 64 known not affected: 8 | 2026-08-04T18:13:25+00:00 | Vulnerability · Source |
| CVE-2024-44984 | redhat_vex | kernel: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT | fixed: 280 known affected: 64 known not affected: 56 | 2026-08-04T18:13:23+00:00 | Vulnerability · Source |
| CVE-2024-45022 | redhat_vex | kernel: mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0 | fixed: 305 known affected: 64 known not affected: 48 | 2026-08-04T18:13:20+00:00 | Vulnerability · Source |
| CVE-2024-44986 | redhat_vex | kernel: ipv6: fix possible UAF in ip6_finish_output2() | known affected: 150 known not affected: 48 | 2026-08-04T18:13:18+00:00 | Vulnerability · Source |
| CVE-2024-44985 | redhat_vex | kernel: ipv6: prevent possible UAF in ip6_xmit() | known affected: 150 known not affected: 48 | 2026-08-04T18:13:15+00:00 | Vulnerability · Source |
| CVE-2024-43878 | redhat_vex | kernel: xfrm: Fix input error path memory access | known affected: 42 known not affected: 156 | 2026-08-04T18:13:15+00:00 | Vulnerability · Source |
| CVE-2024-44978 | redhat_vex | kernel: drm/xe: Free job before xe_exec_queue_put | known not affected: 198 | 2026-08-04T18:13:13+00:00 | Vulnerability · Source |
| CVE-2024-43880 | redhat_vex | kernel: mlxsw: spectrum_acl_erp: Fix object nesting warning | fixed: 429 known affected: 108 known not affected: 42 | 2026-08-04T18:13:09+00:00 | Vulnerability · Source |
| CVE-2024-43882 | redhat_vex | kernel: exec: Fix ToCToU between perm check and set-uid/gid usage | fixed: 305 known affected: 112 | 2026-08-04T18:13:08+00:00 | Vulnerability · Source |
| CVE-2024-44949 | redhat_vex | kernel: parisc: fix a possible DMA corruption | known affected: 42 known not affected: 156 | 2026-08-04T18:13:05+00:00 | Vulnerability · Source |
| CVE-2024-43856 | redhat_vex | kernel: dma: fix call order in dmam_free_coherent | fixed: 280 known affected: 112 known not affected: 8 | 2026-08-04T18:13:04+00:00 | Vulnerability · Source |
| CVE-2024-44997 | redhat_vex | kernel: net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb() | known not affected: 198 | 2026-08-04T18:13:00+00:00 | Vulnerability · Source |
| CVE-2024-43872 | redhat_vex | kernel: RDMA/hns: Fix soft lockup under heavy CEQE load | known not affected: 198 | 2026-08-04T18:13:00+00:00 | Vulnerability · Source |
| CVE-2024-44950 | redhat_vex | kernel: serial: sc16is7xx: fix invalid FIFO access with special register set | known not affected: 198 | 2026-08-04T18:12:56+00:00 | Vulnerability · Source |
| CVE-2024-45023 | redhat_vex | kernel: md/raid1: Fix data corruption for degraded array with slow disk | known affected: 42 known not affected: 156 | 2026-08-04T18:12:55+00:00 | Vulnerability · Source |
| CVE-2024-45026 | redhat_vex | kernel: s390/dasd: fix error recovery leading to data corruption on ESE devices | fixed: 240 known affected: 106 known not affected: 60 | 2026-08-04T18:12:51+00:00 | Vulnerability · Source |
| CVE-2024-44970 | redhat_vex | kernel: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink | fixed: 430 known affected: 50 known not affected: 22 | 2026-08-04T18:12:47+00:00 | Vulnerability · Source |
| CVE-2024-44945 | redhat_vex | kernel: netfilter: nfnetlink: Initialise extack before use in ACKs | known affected: 42 known not affected: 156 | 2026-08-04T18:12:45+00:00 | Vulnerability · Source |
| CVE-2021-22145 | redhat_vex | elasticsearch: memory disclosure in error reporting | known not affected: 18 | 2026-08-04T18:12:42+00:00 | Vulnerability · Source |
| CVE-2021-22573 | redhat_vex | google-oauth-client: Token signature not verified | fixed: 4 known affected: 7 known not affected: 8 | 2026-08-04T18:12:41+00:00 | Vulnerability · Source |
| CVE-2020-9547 | redhat_vex | jackson-databind: Serialization gadgets in ibatis-sqlmap | fixed: 2591 known affected: 12 known not affected: 18 | 2026-08-04T18:12:35+00:00 | Vulnerability · Source |
| CVE-2021-22140 | redhat_vex | Search: App Search XML External Entity Injection | known not affected: 19 | 2026-08-04T18:12:22+00:00 | Vulnerability · Source |
| CVE-2021-23436 | redhat_vex | immer: type confusion vulnerability can lead to a bypass of CVE-2020-28477 | fixed: 1 known affected: 1 known not affected: 1 | 2026-08-04T18:12:15+00:00 | Vulnerability · Source |
| CVE-2020-9546 | redhat_vex | jackson-databind: Serialization gadgets in shaded-hikari-config | fixed: 2590 known affected: 13 known not affected: 18 | 2026-08-04T18:12:01+00:00 | Vulnerability · Source |
| CVE-2021-22112 | redhat_vex | jenkins: Privilege escalation vulnerability in bundled Spring Security library | known not affected: 5 | 2026-08-04T18:10:40+00:00 | Vulnerability · Source |
| CVE-2020-9548 | redhat_vex | jackson-databind: Serialization gadgets in anteros-core | fixed: 2590 known affected: 13 known not affected: 18 | 2026-08-04T18:10:10+00:00 | Vulnerability · Source |
| CVE-2024-43864 | redhat_vex | kernel: net/mlx5e: Fix CT entry update leaks of modify header context | known not affected: 198 | 2026-08-04T18:08:42+00:00 | Vulnerability · Source |