VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291911 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-44941 | redhat_vex | kernel: f2fs: fix to cover read extent cache access with lock | known not affected: 198 | 2026-08-04T11:43:00+00:00 | Vulnerability · Source |
| CVE-2024-46812 | redhat_vex | kernel: drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration | known not affected: 198 | 2026-08-04T11:36:57+00:00 | Vulnerability · Source |
| CVE-2024-46815 | redhat_vex | kernel: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] | known not affected: 198 | 2026-08-04T11:36:30+00:00 | Vulnerability · Source |
| CVE-2019-12814 | redhat_vex | jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. | fixed: 640 known affected: 23 known not affected: 8 | 2026-08-04T11:23:15+00:00 | Vulnerability · Source |
| CVE-2024-50297 | redhat_vex | kernel: net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts | known not affected: 198 | 2026-08-04T11:22:09+00:00 | Vulnerability · Source |
| CVE-2024-50246 | redhat_vex | kernel: fs/ntfs3: Add rough attr alloc_size check | known not affected: 198 | 2026-08-04T11:21:17+00:00 | Vulnerability · Source |
| CVE-2020-24553 | redhat_vex | golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS | fixed: 51 known affected: 60 known not affected: 258 | 2026-08-04T11:18:43+00:00 | Vulnerability · Source |
| CVE-2021-3115 | redhat_vex | golang: cmd/go: packages using cgo can cause arbitrary code execution at build time | fixed: 135 known affected: 31 known not affected: 114 | 2026-08-04T11:18:36+00:00 | Vulnerability · Source |
| CVE-2023-50967 | redhat_vex | jose: Denial of service due to uncontrolled CPU consumption | fixed: 75 known affected: 6 known not affected: 9 | 2026-08-04T11:17:57+00:00 | Vulnerability · Source |
| CVE-2024-53165 | redhat_vex | kernel: sh: intc: Fix use-after-free bug in register_intc_controller() | known not affected: 198 | 2026-08-04T11:17:51+00:00 | Vulnerability · Source |
| CVE-2024-56555 | redhat_vex | kernel: binder: fix OOB in binder_add_freeze_work() | known not affected: 198 | 2026-08-04T11:17:47+00:00 | Vulnerability · Source |
| CVE-2024-53141 | redhat_vex | kernel: netfilter: ipset: add missing range check in bitmap_ip_uadt | fixed: 1879 known affected: 36 | 2026-08-04T11:16:29+00:00 | Vulnerability · Source |
| CVE-2024-53186 | redhat_vex | kernel: ksmbd: fix use-after-free in SMB request handling | known not affected: 198 | 2026-08-04T11:16:16+00:00 | Vulnerability · Source |
| CVE-2021-27919 | redhat_vex | golang: archive/zip: panic when calling Reader.Open | known affected: 5 known not affected: 138 | 2026-08-04T11:14:35+00:00 | Vulnerability · Source |
| CVE-2020-28367 | redhat_vex | golang: improper validation of cgo flags can lead to code execution at build time | fixed: 91 known affected: 62 known not affected: 74 | 2026-08-04T11:14:22+00:00 | Vulnerability · Source |
| CVE-2021-3703 | redhat_vex | serverless: incomplete fix for CVE-2021-27918 / CVE-2021-31525 / CVE-2021-33196 | fixed: 92 known not affected: 2 | 2026-08-04T11:14:18+00:00 | Vulnerability · Source |
| CVE-2022-30630 | redhat_vex | golang: io/fs: stack exhaustion in Glob | fixed: 1085 known affected: 79 known not affected: 142 | 2026-08-04T11:09:40+00:00 | Vulnerability · Source |
| CVE-2022-30635 | redhat_vex | golang: encoding/gob: stack exhaustion in Decoder.Decode | fixed: 821 known affected: 48 known not affected: 220 | 2026-08-04T11:09:30+00:00 | Vulnerability · Source |
| CVE-2023-26144 | redhat_vex | graphql: Insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries | fixed: 4 known affected: 6 known not affected: 50 | 2026-08-04T11:09:23+00:00 | Vulnerability · Source |
| CVE-2024-11734 | redhat_vex | org.keycloak:keycloak-quarkus-server: Denial of Service in Keycloak Server via Security Headers | fixed: 8 known not affected: 2 | 2026-08-04T11:08:30+00:00 | Vulnerability · Source |
| CVE-2024-8883 | redhat_vex | Keycloak: Vulnerable Redirect URI Validation Results in Open Redirec | fixed: 281 | 2026-08-04T11:08:01+00:00 | Vulnerability · Source |
| CVE-2024-50283 | redhat_vex | kernel: ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp | known not affected: 198 | 2026-08-04T11:08:00+00:00 | Vulnerability · Source |
| CVE-2024-56581 | redhat_vex | kernel: btrfs: ref-verify: fix use-after-free after invalid ref action | known not affected: 198 | 2026-08-04T11:06:21+00:00 | Vulnerability · Source |
| CVE-2024-38374 | redhat_vex | cyclonedx-core-java: XML External Entity injection while evaluating XPath expressions | known affected: 2 known not affected: 6 | 2026-08-04T11:04:41+00:00 | Vulnerability · Source |
| CVE-2025-1247 | redhat_vex | io.quarkus:quarkus-rest: Quarkus REST Endpoint Request Parameter Leakage Due to Shared Instance | fixed: 3 | 2026-08-04T11:04:17+00:00 | Vulnerability · Source |
| CVE-2026-4631 | redhat_vex | cockpit: Cockpit: Unauthenticated remote code execution due to SSH command-line argument injection | fixed: 102 known not affected: 13 | 2026-08-04T10:48:47+00:00 | Vulnerability · Source |
| CVE-2024-10270 | redhat_vex | org.keycloak:keycloak-services: Keycloak Denial of Service | fixed: 16 known affected: 1 known not affected: 2 | 2026-08-04T10:44:57+00:00 | Vulnerability · Source |
| CVE-2024-11736 | redhat_vex | org.keycloak:keycloak-quarkus-server: Unrestricted admin use of system and environment variables | fixed: 8 known not affected: 2 | 2026-08-04T10:43:57+00:00 | Vulnerability · Source |
| CVE-2022-1798 | redhat_vex | kubeVirt: Arbitrary file read on the host from KubeVirt VMs | fixed: 12 known not affected: 67 | 2026-08-04T09:02:25+00:00 | Vulnerability · Source |
| CVE-2021-41099 | redhat_vex | redis: Integer overflow issue with strings | fixed: 105 known affected: 2 known not affected: 7 | 2026-08-04T08:48:05+00:00 | Vulnerability · Source |
| CVE-2021-32687 | redhat_vex | redis: Integer overflow issue with intsets | fixed: 105 known affected: 1 known not affected: 8 | 2026-08-04T08:48:00+00:00 | Vulnerability · Source |
| CVE-2021-32675 | redhat_vex | redis: Denial of service via Redis Standard Protocol (RESP) request | fixed: 105 known affected: 1 known not affected: 8 | 2026-08-04T08:47:55+00:00 | Vulnerability · Source |
| CVE-2021-32628 | redhat_vex | redis: Integer overflow bug in the ziplist data structure | fixed: 105 known affected: 1 known not affected: 8 | 2026-08-04T08:47:48+00:00 | Vulnerability · Source |
| CVE-2021-32627 | redhat_vex | redis: Integer overflow issue with Streams | fixed: 105 known affected: 1 known not affected: 8 | 2026-08-04T08:47:37+00:00 | Vulnerability · Source |
| CVE-2021-23017 | redhat_vex | nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name | fixed: 403 known affected: 10 known not affected: 11 | 2026-08-04T08:47:14+00:00 | Vulnerability · Source |
| CVE-2024-23651 | redhat_vex | moby/buildkit: possible race condition with accessing subpaths from cache mounts | known affected: 2 known not affected: 31 | 2026-08-04T08:21:33+00:00 | Vulnerability · Source |
| CVE-2018-10894 | redhat_vex | keycloak: auth permitted with expired certs in SAML client | fixed: 8 known affected: 3 | 2026-08-04T08:16:15+00:00 | Vulnerability · Source |
| CVE-2017-7559 | redhat_vex | undertow: HTTP Request smuggling vulnerability (incomplete fix of CVE-2017-2666) | fixed: 985 known affected: 1 known not affected: 1 | 2026-08-04T08:11:50+00:00 | Vulnerability · Source |
| CVE-2017-2666 | redhat_vex | undertow: HTTP Request smuggling vulnerability due to permitting invalid characters in HTTP requests | fixed: 1117 known affected: 1 known not affected: 1 | 2026-08-04T08:11:41+00:00 | Vulnerability · Source |
| CVE-2025-24294 | redhat_vex | resolv: Denial of Service in resolv gem | fixed: 622 known affected: 96 known not affected: 29 | 2026-08-04T08:11:05+00:00 | Vulnerability · Source |
| CVE-2023-6920 | redhat_vex | keycloak-core: Reflected XSS via wildcard in OIDC redirect_uri. Incomplete fix of CVE-2023-6134 | known affected: 2 | 2026-08-04T07:22:34+00:00 | Vulnerability · Source |
| CVE-2024-54677 | redhat_vex | tomcat: Apache Tomcat: DoS in examples web application | fixed: 9 known affected: 35 known not affected: 13 | 2026-08-04T07:18:31+00:00 | Vulnerability · Source |
| CVE-2023-3446 | redhat_vex | openssl: Excessive time spent checking DH keys and parameters | fixed: 198 known affected: 20 known not affected: 169 | 2026-08-04T07:18:11+00:00 | Vulnerability · Source |
| CVE-2023-6134 | redhat_vex | keycloak: reflected XSS via wildcard in OIDC redirect_uri | fixed: 35 | 2026-08-04T07:17:31+00:00 | Vulnerability · Source |
| CVE-2023-6544 | redhat_vex | keycloak: Authorization Bypass | fixed: 21 | 2026-08-04T07:17:28+00:00 | Vulnerability · Source |
| CVE-2023-6787 | redhat_vex | keycloak: session hijacking via re-authentication | fixed: 8 known affected: 1 | 2026-08-04T07:16:42+00:00 | Vulnerability · Source |
| CVE-2023-6563 | redhat_vex | keycloak: offline session token DoS | fixed: 14 known not affected: 1 | 2026-08-04T07:15:30+00:00 | Vulnerability · Source |
| CVE-2024-3094 | redhat_vex | xz: malicious code in distributed source | known not affected: 26 | 2026-08-04T07:05:53+00:00 | Vulnerability · Source |
| CVE-2025-30754 | redhat_vex | openjdk: Enhance TLS protocol support (Oracle CPU 2025-07) | fixed: 2354 known affected: 41 | 2026-08-04T07:03:14+00:00 | Vulnerability · Source |
| CVE-2025-53057 | redhat_vex | openjdk: Enhance certificate handling (Oracle CPU 2025-10) | fixed: 2507 known affected: 39 | 2026-08-04T07:03:05+00:00 | Vulnerability · Source |