VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290591 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-57973 | redhat_vex | kernel: rdma/cxgb4: Prevent potential integer overflow on 32bit | known affected: 274 | 2026-08-04T22:39:46+00:00 | Vulnerability · Source |
| CVE-2024-50284 | redhat_vex | kernel: ksmbd: Fix the missing xa_store error check | known not affected: 198 | 2026-08-04T22:39:42+00:00 | Vulnerability · Source |
| CVE-2024-56706 | redhat_vex | kernel: s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex | known affected: 76 known not affected: 198 | 2026-08-04T22:39:41+00:00 | Vulnerability · Source |
| CVE-2024-50285 | redhat_vex | kernel: ksmbd: check outstanding simultaneous SMB operations | known not affected: 198 | 2026-08-04T22:39:35+00:00 | Vulnerability · Source |
| CVE-2024-53164 | redhat_vex | kernel: net: sched: fix ordering of qlen adjustment | fixed: 305 known affected: 98 known not affected: 14 | 2026-08-04T22:39:31+00:00 | Vulnerability · Source |
| CVE-2024-53217 | redhat_vex | kernel: NFSD: Prevent NULL dereference in nfsd4_process_cb_update() | known affected: 198 | 2026-08-04T22:39:27+00:00 | Vulnerability · Source |
| CVE-2024-56624 | redhat_vex | kernel: iommufd: Fix out_fput in iommufd_fault_alloc() | known affected: 108 known not affected: 90 | 2026-08-04T22:39:26+00:00 | Vulnerability · Source |
| CVE-2026-1035 | redhat_vex | org.keycloak.protocol.oidc: Keycloak Refresh Token Reuse Bypass via TOCTOU Race Condition | fixed: 10 known not affected: 3 | 2026-08-04T22:39:22+00:00 | Vulnerability · Source |
| CVE-2026-1190 | redhat_vex | org.keycloak/keycloak-services: Keycloak SAML brokering: Response delay due to unchecked NotOnOrAfter in SubjectConfirmationData | fixed: 10 known affected: 3 | 2026-08-04T22:39:20+00:00 | Vulnerability · Source |
| CVE-2026-24733 | redhat_vex | tomcat: security constraint bypass with HTTP/0.9 | fixed: 47 known affected: 56 | 2026-08-04T22:39:17+00:00 | Vulnerability · Source |
| CVE-2026-2366 | redhat_vex | keycloak: Keycloak: Information disclosure via authorization bypass in Admin API | fixed: 10 | 2026-08-04T22:39:14+00:00 | Vulnerability · Source |
| CVE-2026-2733 | redhat_vex | org.keycloak/keycloak-services: Keycloak: Missing Check on Disabled Client for Docker Registry Protocol | fixed: 10 known affected: 5 | 2026-08-04T22:39:12+00:00 | Vulnerability · Source |
| CVE-2026-3911 | redhat_vex | org.keycloak.services.resources.admin.UserResource: Keycloak: Information disclosure of disabled user attributes via administrative endpoint | fixed: 10 | 2026-08-04T22:39:09+00:00 | Vulnerability · Source |
| CVE-2026-51302 | redhat_vex | sqlite: SQLite: Arbitrary code execution via malicious SQL statement | fixed: 4 known affected: 1 known not affected: 106 | 2026-08-04T22:39:08+00:00 | Vulnerability · Source |
| CVE-2026-51303 | redhat_vex | sqlite: SQLite: Arbitrary code execution via specially crafted SQL queries | known not affected: 108 | 2026-08-04T22:39:03+00:00 | Vulnerability · Source |
| CVE-2026-51296 | redhat_vex | sqlite: SQLite: Use-after-free vulnerability leads to denial of service and information disclosure | known not affected: 108 | 2026-08-04T22:38:56+00:00 | Vulnerability · Source |
| CVE-2026-51300 | redhat_vex | sqlite: SQLite: Application crash and information leakage due to use-after-free | known not affected: 108 | 2026-08-04T22:38:54+00:00 | Vulnerability · Source |
| CVE-2026-51304 | redhat_vex | sqlite: sqlite: Arbitrary code execution via malicious SQL statement | fixed: 4 known affected: 1 known not affected: 106 | 2026-08-04T22:38:45+00:00 | Vulnerability · Source |
| CVE-2026-51297 | redhat_vex | sqlite: sqlite: Arbitrary code execution via use-after-free in JSON parsing | fixed: 4 known not affected: 107 | 2026-08-04T22:38:42+00:00 | Vulnerability · Source |
| CVE-2022-2232 | redhat_vex | keycloak: LDAP injection on username input | known affected: 1 | 2026-08-04T22:38:37+00:00 | Vulnerability · Source |
| CVE-2026-4874 | redhat_vex | org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: Keycloak: Server-Side Request Forgery via OIDC token endpoint manipulation | fixed: 20 known affected: 5 | 2026-08-04T22:38:17+00:00 | Vulnerability · Source |
| CVE-2024-9666 | redhat_vex | org.keycloak/keycloak-quarkus-server: Keycloak proxy header handling Denial-of-Service (DoS) vulnerability | fixed: 16 known not affected: 1 | 2026-08-04T22:38:14+00:00 | Vulnerability · Source |
| CVE-2025-10939 | redhat_vex | org.keycloak/keycloak-quarkus-server: Unable to restrict access to the admin console | fixed: 10 | 2026-08-04T22:37:33+00:00 | Vulnerability · Source |
| CVE-2021-41089 | redhat_vex | moby: `docker cp` allows unexpected chmod of host file | fixed: 1 known affected: 8 known not affected: 14 | 2026-08-04T22:15:28+00:00 | Vulnerability · Source |
| CVE-2022-39324 | redhat_vex | grafana: Spoofing of the originalUrl parameter of snapshots | fixed: 16 known affected: 32 known not affected: 23 | 2026-08-04T22:15:26+00:00 | Vulnerability · Source |
| CVE-2026-67856 | redhat_vex | open62541: open62541: Denial of Service via crafted subscription requests | known not affected: 1 | 2026-08-04T22:14:10+00:00 | Vulnerability · Source |
| CVE-2024-1102 | redhat_vex | jberet: jberet-core logging database credentials | fixed: 24 known affected: 11 known not affected: 2767 | 2026-08-04T22:10:34+00:00 | Vulnerability · Source |
| CVE-2011-4580 | redhat_vex | Platform: Multiple XSS flaws | fixed: 1 known not affected: 1 | 2026-08-04T22:07:02+00:00 | Vulnerability · Source |
| CVE-2011-4575 | redhat_vex | Console: XSS in invoke operation | fixed: 883 known affected: 2 | 2026-08-04T22:07:01+00:00 | Vulnerability · Source |
| CVE-2011-4317 | redhat_vex | httpd: uri scheme bypass of the reverse proxy vulnerability CVE-2011-3368 fix | fixed: 64 known not affected: 4 | 2026-08-04T22:06:57+00:00 | Vulnerability · Source |
| CVE-2010-5298 | redhat_vex | openssl: freelist misuse causing a possible use-after-free | fixed: 154 known not affected: 14 | 2026-08-04T22:06:57+00:00 | Vulnerability · Source |
| CVE-2011-3559 | redhat_vex | JBEWS: Unspecified vulnerability in GlassFish Enterprise Server 2.1.1 | under investigation: 1 | 2026-08-04T22:06:54+00:00 | Vulnerability · Source |
| CVE-2011-2260 | redhat_vex | glassfish: Unspecified vulnerability affecting confidentiality and integrity via unspecified vectors | under investigation: 1 | 2026-08-04T22:06:53+00:00 | Vulnerability · Source |
| CVE-2006-7248 | redhat_vex | openssl: mime_hdr_cmp NULL dereference crash | known affected: 4 known not affected: 8 | 2026-08-04T22:06:47+00:00 | Vulnerability · Source |
| CVE-1999-0428 | redhat_vex | openssl: allow remote attackers to reuse SSL sessions and bypass access controls | known not affected: 36 | 2026-08-04T22:06:46+00:00 | Vulnerability · Source |
| CVE-2000-1254 | redhat_vex | openssl: Mishandling C bitwise-shift operations making easier to bypass protection mechanisms | known not affected: 21 | 2026-08-04T22:06:38+00:00 | Vulnerability · Source |
| CVE-2011-4858 | redhat_vex | tomcat: hash table collisions CPU usage DoS (oCERT-2011-003) | fixed: 230 known not affected: 12 | 2026-08-04T22:06:37+00:00 | Vulnerability · Source |
| CVE-2011-2908 | redhat_vex | CSRF on jmx-console allows invocation of operations on mbeans | fixed: 884 known affected: 3 | 2026-08-04T22:06:35+00:00 | Vulnerability · Source |
| CVE-2011-5035 | redhat_vex | GlassFish: hash table collisions CPU usage DoS (oCERT-2011-003) | fixed: 327 known not affected: 1 | 2026-08-04T22:06:30+00:00 | Vulnerability · Source |
| CVE-2006-7250 | redhat_vex | openssl: mime_hdr_cmp NULL dereference crash | fixed: 43 known affected: 3 known not affected: 8 | 2026-08-04T22:06:26+00:00 | Vulnerability · Source |
| CVE-2002-0059 | redhat_vex | zlib: Double free in inflateEnd | fixed: 7 known not affected: 32 | 2026-08-04T22:06:23+00:00 | Vulnerability · Source |
| CVE-2011-1184 | redhat_vex | tomcat: Multiple weaknesses in HTTP DIGEST authentication | fixed: 197 known not affected: 12 | 2026-08-04T22:06:21+00:00 | Vulnerability · Source |
| CVE-2011-1511 | redhat_vex | glassfish: Unspecified vulnerability affecting confidentiality and integrity via unspecified vectors | under investigation: 1 | 2026-08-04T22:06:17+00:00 | Vulnerability · Source |
| CVE-2011-3190 | redhat_vex | tomcat: authentication bypass and information disclosure | fixed: 62 known not affected: 1 | 2026-08-04T22:06:15+00:00 | Vulnerability · Source |
| CVE-2011-3375 | redhat_vex | tomcat: information disclosure due to improper response and request object recycling | fixed: 23 known not affected: 11 | 2026-08-04T22:06:13+00:00 | Vulnerability · Source |
| CVE-2011-4084 | redhat_vex | tomcat: hash table collisions CPU usage DoS (oCERT-2011-003) | known affected: 14 | 2026-08-04T22:06:11+00:00 | Vulnerability · Source |
| CVE-2011-3639 | redhat_vex | httpd: http 0.9 request bypass of the reverse proxy vulnerability CVE-2011-3368 fix | fixed: 108 known affected: 1 known not affected: 2 | 2026-08-04T22:06:09+00:00 | Vulnerability · Source |
| CVE-2012-3451 | redhat_vex | apache-cxf: SOAPAction spoofing on document literal web services | fixed: 1026 known affected: 2 known not affected: 4 | 2026-08-04T22:06:05+00:00 | Vulnerability · Source |
| CVE-2013-1753 | redhat_vex | python: XMLRPC library unrestricted decompression of HTTP responses using gzip enconding | fixed: 220 known affected: 16 known not affected: 24 | 2026-08-04T22:06:03+00:00 | Vulnerability · Source |
| CVE-2011-5062 | redhat_vex | tomcat: Multiple weaknesses in HTTP DIGEST authentication | fixed: 197 known not affected: 12 | 2026-08-04T22:06:02+00:00 | Vulnerability · Source |