VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291911 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-27309 | redhat_vex | Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode | known affected: 1 | 2026-08-04T13:58:22+00:00 | Vulnerability · Source |
| CVE-2025-12110 | redhat_vex | keycloak: org.keycloak:keycloak-services: User can refresh offline session even after client's offline_access scope was removed | fixed: 20 | 2026-08-04T13:57:46+00:00 | Vulnerability · Source |
| CVE-2025-11538 | redhat_vex | keycloak-server: Debug default bind address | fixed: 10 | 2026-08-04T13:57:45+00:00 | Vulnerability · Source |
| CVE-2026-13325 | redhat_vex | virt-handler-rhel9: kubevirt: kubevirt: DisableTLS migration setting removes authentication, exposing unauthenticated virtqemud proxy on all interfaces | known not affected: 2 | 2026-08-04T13:57:43+00:00 | Vulnerability · Source |
| CVE-2026-0707 | redhat_vex | keycloak: Keycloak Authorization Header Parsing Leading to Potential Security Control Bypass | fixed: 10 | 2026-08-04T13:57:42+00:00 | Vulnerability · Source |
| CVE-2026-1180 | redhat_vex | org.keycloak.protocol.oidc: Blind Server-Side Request Forgery (SSRF) in Keycloak OIDC Dynamic Client Registration via jwks_uri | fixed: 10 known affected: 2 known not affected: 3 | 2026-08-04T13:57:24+00:00 | Vulnerability · Source |
| CVE-2025-66614 | redhat_vex | tomcat: Client certificate verification bypass due to virtual host mapping | fixed: 47 known affected: 56 | 2026-08-04T13:57:21+00:00 | Vulnerability · Source |
| CVE-2022-1996 | redhat_vex | go-restful: Authorization Bypass Through User-Controlled Key | fixed: 145 known affected: 56 known not affected: 48 | 2026-08-04T13:57:06+00:00 | Vulnerability · Source |
| CVE-2021-47605 | redhat_vex | kernel: vduse: fix memory corruption in vduse_dev_ioctl() | known not affected: 198 | 2026-08-04T13:57:05+00:00 | Vulnerability · Source |
| CVE-2022-23943 | redhat_vex | httpd: mod_sed: Read/write beyond bounds | fixed: 224 known affected: 16 known not affected: 111 | 2026-08-04T13:56:57+00:00 | Vulnerability · Source |
| CVE-2026-0871 | redhat_vex | org.keycloak/keycloak-services: Keycloak: Unauthorized modification of unmanaged user attributes by administrators | fixed: 10 known affected: 3 | 2026-08-04T13:53:43+00:00 | Vulnerability · Source |
| CVE-2026-3121 | redhat_vex | keycloak: org.keycloak/keycloak-services: Keycloak: Privilege escalation via manage-clients permission | fixed: 10 known affected: 2 known not affected: 1 | 2026-08-04T13:53:42+00:00 | Vulnerability · Source |
| CVE-2026-2575 | redhat_vex | keycloak: Keycloak: Denial of Service due to excessive SAMLRequest decompression | fixed: 10 | 2026-08-04T13:53:40+00:00 | Vulnerability · Source |
| CVE-2026-3429 | redhat_vex | org.keycloak.services.resources.account: Improper Access Control Leading to MFA Deletion and Account Takeover in Keycloak Account REST API | fixed: 10 known not affected: 5 | 2026-08-04T13:53:31+00:00 | Vulnerability · Source |
| CVE-2026-3190 | redhat_vex | keycloak: Keycloak: Information Disclosure via improper role enforcement in UMA 2.0 Protection API | fixed: 10 | 2026-08-04T13:53:26+00:00 | Vulnerability · Source |
| CVE-2026-4366 | redhat_vex | keycloak-services: Blind Server-Side Request Forgery (SSRF) via HTTP Redirect Handling in Keycloak | fixed: 10 known affected: 5 | 2026-08-04T13:52:56+00:00 | Vulnerability · Source |
| CVE-2022-31160 | redhat_vex | jqueryui: XSS when refreshing a checkboxradio with an HTML-like initial text label | known affected: 7 | 2026-08-04T13:51:44+00:00 | Vulnerability · Source |
| CVE-2022-35951 | redhat_vex | redis: heap overflow in XAUTOCLAIM command's COUNT argument | known not affected: 15 | 2026-08-04T13:51:34+00:00 | Vulnerability · Source |
| CVE-2022-48927 | redhat_vex | kernel: iio: adc: tsc2046: fix memory corruption by preventing array overflow | known not affected: 198 | 2026-08-04T13:46:36+00:00 | Vulnerability · Source |
| CVE-2022-48878 | redhat_vex | kernel: Bluetooth: hci_qca: Fix driver shutdown on closed serdev | known not affected: 198 | 2026-08-04T13:46:35+00:00 | Vulnerability · Source |
| CVE-2022-48874 | redhat_vex | kernel: misc: fastrpc: Fix use-after-free and race in fastrpc_map_find | known not affected: 198 | 2026-08-04T13:46:34+00:00 | Vulnerability · Source |
| CVE-2022-48873 | redhat_vex | kernel: misc: fastrpc: Don't remove map on creater_process and device_release | known not affected: 198 | 2026-08-04T13:46:30+00:00 | Vulnerability · Source |
| CVE-2022-48871 | redhat_vex | kernel: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer | known not affected: 198 | 2026-08-04T13:46:12+00:00 | Vulnerability · Source |
| CVE-2024-12369 | redhat_vex | elytron-oidc-client: OIDC Authorization Code Injection | fixed: 52 known affected: 1 known not affected: 1 | 2026-08-04T13:38:07+00:00 | Vulnerability · Source |
| CVE-2024-9676 | redhat_vex | Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) | fixed: 711 known affected: 19 known not affected: 4893 | 2026-08-04T13:37:43+00:00 | Vulnerability · Source |
| CVE-2024-41991 | redhat_vex | python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget | fixed: 22 known affected: 2 known not affected: 407 | 2026-08-04T13:37:33+00:00 | Vulnerability · Source |
| CVE-2022-49470 | redhat_vex | kernel: Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event | known not affected: 274 | 2026-08-04T13:35:33+00:00 | Vulnerability · Source |
| CVE-2022-49770 | redhat_vex | kernel: ceph: avoid putting the realm twice when decoding snaps fails | known affected: 28 known not affected: 246 | 2026-08-04T13:31:14+00:00 | Vulnerability · Source |
| CVE-2023-31418 | redhat_vex | elasticsearch: uncontrolled resource consumption | known affected: 2 known not affected: 3 | 2026-08-04T13:24:23+00:00 | Vulnerability · Source |
| CVE-2023-35141 | redhat_vex | jenkins: CSRF protection bypass vulnerability | known affected: 4 known not affected: 3 | 2026-08-04T13:22:25+00:00 | Vulnerability · Source |
| CVE-2023-3867 | redhat_vex | kernel: Out of bounds read in smb2_sess_setup | known not affected: 274 | 2026-08-04T13:18:21+00:00 | Vulnerability · Source |
| CVE-2023-36824 | redhat_vex | redis: heap overflow in COMMAND GETKEYS and ACL evaluation | known affected: 2 known not affected: 20 | 2026-08-04T13:18:17+00:00 | Vulnerability · Source |
| CVE-2024-32004 | redhat_vex | git: RCE while cloning local repos | fixed: 441 known affected: 32 known not affected: 35 | 2026-08-04T12:59:02+00:00 | Vulnerability · Source |
| CVE-2024-32002 | redhat_vex | git: Recursive clones RCE | fixed: 421 known affected: 51 known not affected: 16 | 2026-08-04T12:59:02+00:00 | Vulnerability · Source |
| CVE-2023-52755 | redhat_vex | kernel: ksmbd: fix slab out of bounds write in smb_inherit_dacl() | known not affected: 198 | 2026-08-04T12:51:13+00:00 | Vulnerability · Source |
| CVE-2023-53107 | redhat_vex | kernel: veth: Fix use after free in XDP_REDIRECT | fixed: 270 known affected: 106 known not affected: 168 | 2026-08-04T12:47:35+00:00 | Vulnerability · Source |
| CVE-2022-30632 | redhat_vex | golang: path/filepath: stack exhaustion in Glob | fixed: 1091 known affected: 81 known not affected: 164 | 2026-08-04T12:43:21+00:00 | Vulnerability · Source |
| CVE-2026-43871 | redhat_vex | thrift: Apache Thrift: Denial of Service via infinite loop | known affected: 5 known not affected: 2 | 2026-08-04T12:36:56+00:00 | Vulnerability · Source |
| CVE-2024-1249 | redhat_vex | keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkLoginIframe leads to DDoS | fixed: 48 known affected: 13 known not affected: 8 | 2026-08-04T12:27:04+00:00 | Vulnerability · Source |
| CVE-2023-54286 | redhat_vex | kernel: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace | fixed: 120 known not affected: 242 | 2026-08-04T12:26:42+00:00 | Vulnerability · Source |
| CVE-2024-27307 | redhat_vex | jsonata: malicious expression can pollute the "Object" prototype | fixed: 1 known not affected: 3 | 2026-08-04T12:14:22+00:00 | Vulnerability · Source |
| CVE-2024-36886 | redhat_vex | kernel: TIPC message reassembly use-after-free remote code execution vulnerability | fixed: 1290 known affected: 22 known not affected: 127 | 2026-08-04T12:01:53+00:00 | Vulnerability · Source |
| CVE-2021-23566 | redhat_vex | nanoid: Information disclosure via valueOf() function | fixed: 7 known affected: 7 known not affected: 688 | 2026-08-04T11:53:04+00:00 | Vulnerability · Source |
| CVE-2024-41046 | redhat_vex | kernel: net: ethernet: lantiq_etop: fix double free in detach | known not affected: 198 | 2026-08-04T11:50:40+00:00 | Vulnerability · Source |
| CVE-2021-33197 | redhat_vex | golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty | fixed: 817 known affected: 91 known not affected: 927 | 2026-08-04T11:48:22+00:00 | Vulnerability · Source |
| CVE-2021-23434 | redhat_vex | object-path: Type confusion vulnerability can lead to a bypass of CVE-2020-15256 | known affected: 16 | 2026-08-04T11:48:02+00:00 | Vulnerability · Source |
| CVE-2021-3805 | redhat_vex | nodejs-object-path: prototype pollution vulnerability | known affected: 10 known not affected: 1 | 2026-08-04T11:48:00+00:00 | Vulnerability · Source |
| CVE-2024-41091 | redhat_vex | kernel: virtio-net: tun: mlx5_core short frame denial of service | fixed: 1336 known affected: 22 known not affected: 55 | 2026-08-04T11:47:31+00:00 | Vulnerability · Source |
| CVE-2020-10749 | redhat_vex | containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters | fixed: 259 known affected: 8 known not affected: 411 | 2026-08-04T11:43:56+00:00 | Vulnerability · Source |
| CVE-2019-11254 | redhat_vex | kubernetes: Denial of service in API server via crafted YAML payloads by authorized users | fixed: 31 known affected: 3 known not affected: 9 | 2026-08-04T11:43:53+00:00 | Vulnerability · Source |