VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
221826 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-32465 | redhat_vex | git: additional local RCE | fixed: 153 known affected: 51 known not affected: 16 | 2026-07-03T01:54:28+00:00 | Vulnerability · Source |
| CVE-2024-31449 | redhat_vex | redis: Lua library commands may lead to stack overflow and RCE in Redis | fixed: 61 known affected: 2 known not affected: 6 | 2026-07-03T01:54:20+00:00 | Vulnerability · Source |
| CVE-2024-31228 | redhat_vex | redis: Denial-of-service due to unbounded pattern matching in Redis | fixed: 61 known affected: 2 | 2026-07-03T01:54:16+00:00 | Vulnerability · Source |
| CVE-2024-31227 | redhat_vex | redis: Denial-of-service due to malformed ACL selectors in Redis | fixed: 18 known affected: 9 known not affected: 2 | 2026-07-03T01:54:12+00:00 | Vulnerability · Source |
| CVE-2024-28863 | redhat_vex | node-tar: denial of service while parsing a tar file due to lack of folders depth validation | fixed: 220 known affected: 37 known not affected: 241 | 2026-07-03T01:54:04+00:00 | Vulnerability · Source |
| CVE-2024-28849 | redhat_vex | follow-redirects: Possible credential leak | fixed: 341 known affected: 25 known not affected: 1370 | 2026-07-03T01:53:58+00:00 | Vulnerability · Source |
| CVE-2024-28835 | redhat_vex | gnutls: potential crash during chain building/verification | fixed: 225 known affected: 18 known not affected: 6 | 2026-07-03T01:53:53+00:00 | Vulnerability · Source |
| CVE-2024-28834 | redhat_vex | gnutls: vulnerable to Minerva side-channel information leak | fixed: 450 known affected: 18 | 2026-07-03T01:53:49+00:00 | Vulnerability · Source |
| CVE-2024-28219 | redhat_vex | python-pillow: buffer overflow in _imagingcms.c | fixed: 86 known affected: 8 known not affected: 342 | 2026-07-03T01:53:45+00:00 | Vulnerability · Source |
| CVE-2024-27982 | redhat_vex | nodejs: HTTP Request Smuggling via Content Length Obfuscation | fixed: 226 known affected: 20 known not affected: 3 | 2026-07-03T01:53:35+00:00 | Vulnerability · Source |
| CVE-2024-27289 | redhat_vex | pgx: SQL Injection via Line Comment Creation | fixed: 41 known affected: 29 known not affected: 786 | 2026-07-03T01:53:25+00:00 | Vulnerability · Source |
| CVE-2024-26256 | redhat_vex | libarchive: Heap based buffer overflow in rar e8 filter | known not affected: 20 | 2026-07-03T01:53:21+00:00 | Vulnerability · Source |
| CVE-2024-24828 | redhat_vex | pkg: incorrect default permissions | known affected: 2 known not affected: 1 | 2026-07-03T01:53:19+00:00 | Vulnerability · Source |
| CVE-2024-24806 | redhat_vex | libuv: Improper Domain Lookup that potentially leads to SSRF attacks | fixed: 93 known affected: 6 | 2026-07-03T01:53:16+00:00 | Vulnerability · Source |
| CVE-2024-23650 | redhat_vex | moby/buildkit: Possible race condition with accessing subpaths from cache mounts | fixed: 261 known affected: 6 known not affected: 15 | 2026-07-03T01:53:09+00:00 | Vulnerability · Source |
| CVE-2024-23451 | redhat_vex | elasticsearch: Incorrect authorization issue in Remote Cluster Security | known affected: 1 known not affected: 8 | 2026-07-03T01:53:03+00:00 | Vulnerability · Source |
| CVE-2024-23450 | redhat_vex | elasticsearch: Possible denial of service when processing documents in a deeply nested pipeline | known affected: 1 known not affected: 8 | 2026-07-03T01:52:59+00:00 | Vulnerability · Source |
| CVE-2024-23342 | redhat_vex | python-ecdsa: vulnerable to the Minerva attack | fixed: 6 known affected: 4 known not affected: 343 | 2026-07-03T01:52:57+00:00 | Vulnerability · Source |
| CVE-2024-22195 | redhat_vex | jinja2: HTML attribute injection when passing user input as keys to xmlattr filter | fixed: 810 known affected: 21 known not affected: 2714 | 2026-07-03T01:52:52+00:00 | Vulnerability · Source |
| CVE-2024-22189 | redhat_vex | quic-go: memory exhaustion attack against QUIC's connection ID mechanism | fixed: 89 known affected: 1 known not affected: 790 | 2026-07-03T01:52:46+00:00 | Vulnerability · Source |
| CVE-2024-21536 | redhat_vex | http-proxy-middleware: Denial of Service | fixed: 253 known affected: 62 known not affected: 957 | 2026-07-03T01:52:40+00:00 | Vulnerability · Source |
| CVE-2024-21501 | redhat_vex | sanitize-html: Information Exposure when used on the backend | fixed: 28 known affected: 4 known not affected: 910 | 2026-07-03T01:52:36+00:00 | Vulnerability · Source |
| CVE-2024-21490 | redhat_vex | angular: Inefficient Regular Expression Complexity | known affected: 5 known not affected: 62 | 2026-07-03T01:52:33+00:00 | Vulnerability · Source |
| CVE-2024-21484 | redhat_vex | jsrsasign: vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process | fixed: 1 known affected: 1 known not affected: 13 | 2026-07-03T01:52:28+00:00 | Vulnerability · Source |
| CVE-2024-9676 | redhat_vex | Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) | fixed: 711 known affected: 19 known not affected: 4893 | 2026-07-03T01:52:24+00:00 | Vulnerability · Source |
| CVE-2024-4068 | redhat_vex | braces: fails to limit the number of characters it can handle | fixed: 191 known affected: 66 known not affected: 792 under investigation: 10 | 2026-07-03T01:52:19+00:00 | Vulnerability · Source |
| CVE-2024-4067 | redhat_vex | micromatch: vulnerable to Regular Expression Denial of Service | fixed: 91 known affected: 27 known not affected: 3746 under investigation: 37 | 2026-07-03T01:52:14+00:00 | Vulnerability · Source |
| CVE-2024-3651 | redhat_vex | python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() | fixed: 251 known affected: 11 known not affected: 278 | 2026-07-03T01:52:13+00:00 | Vulnerability · Source |
| CVE-2024-3625 | redhat_vex | mirror-registry: Redis password stored in plain-text | known affected: 1 | 2026-07-03T01:52:09+00:00 | Vulnerability · Source |
| CVE-2024-3624 | redhat_vex | mirror-registry: Database user and password stored in plain-text | known affected: 1 | 2026-07-03T01:52:05+00:00 | Vulnerability · Source |
| CVE-2024-2236 | redhat_vex | libgcrypt: vulnerable to Marvin Attack | fixed: 123 known affected: 9 known not affected: 2 | 2026-07-03T01:52:04+00:00 | Vulnerability · Source |
| CVE-2024-0450 | redhat_vex | python: The zipfile module is vulnerable to zip-bombs leading to denial of service | fixed: 739 known affected: 16 known not affected: 105 | 2026-07-03T01:51:59+00:00 | Vulnerability · Source |
| CVE-2023-52356 | redhat_vex | libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service | fixed: 162 known affected: 13 known not affected: 62 | 2026-07-03T01:51:55+00:00 | Vulnerability · Source |
| CVE-2023-49921 | redhat_vex | elasticsearch: Insertion of Sensitive Information into Log File | known not affected: 9 | 2026-07-03T01:51:54+00:00 | Vulnerability · Source |
| CVE-2023-49083 | redhat_vex | python-cryptography: NULL-dereference when loading PKCS7 certificates | fixed: 234 known affected: 8 known not affected: 567 | 2026-07-03T01:51:49+00:00 | Vulnerability · Source |
| CVE-2023-46673 | redhat_vex | elasticsearch: Improper Handling of Exceptional Conditions | known affected: 1 known not affected: 2 | 2026-07-03T01:51:47+00:00 | Vulnerability · Source |
| CVE-2023-46136 | redhat_vex | python-werkzeug: high resource consumption leading to denial of service | fixed: 204 known affected: 22 known not affected: 244 | 2026-07-03T01:51:43+00:00 | Vulnerability · Source |
| CVE-2023-45803 | redhat_vex | urllib3: Request body not stripped after redirect from 303 status changes request method to GET | fixed: 898 known affected: 41 known not affected: 148 under investigation: 3 | 2026-07-03T01:51:39+00:00 | Vulnerability · Source |
| CVE-2023-43804 | redhat_vex | python-urllib3: Cookie request header isn't stripped during cross-origin redirects | fixed: 1868 known affected: 37 known not affected: 80 | 2026-07-03T01:51:32+00:00 | Vulnerability · Source |
| CVE-2023-41175 | redhat_vex | libtiff: potential integer overflow in raw2tiff.c | fixed: 42 known affected: 21 | 2026-07-03T01:51:28+00:00 | Vulnerability · Source |
| CVE-2023-40745 | redhat_vex | libtiff: integer overflow in tiffcp.c | fixed: 42 known affected: 21 | 2026-07-03T01:51:28+00:00 | Vulnerability · Source |
| CVE-2023-36464 | redhat_vex | pypdf: Possible Infinite Loop when a comment isn't followed by a character | known affected: 1 | 2026-07-03T01:51:18+00:00 | Vulnerability · Source |
| CVE-2023-31419 | redhat_vex | elasticsearch: StackOverflow vulnerability | known affected: 2 known not affected: 3 | 2026-07-03T01:51:14+00:00 | Vulnerability · Source |
| CVE-2023-28856 | redhat_vex | redis: Insufficient validation of HINCRBYFLOAT command | fixed: 18 known affected: 5 known not affected: 8 | 2026-07-03T01:51:11+00:00 | Vulnerability · Source |
| CVE-2023-26159 | redhat_vex | follow-redirects: Improper Input Validation due to the improper handling of URLs by the url.parse() | fixed: 165 known affected: 29 known not affected: 1365 | 2026-07-03T01:51:08+00:00 | Vulnerability · Source |
| CVE-2023-26136 | redhat_vex | tough-cookie: prototype pollution in cookie memstore | fixed: 383 known affected: 44 known not affected: 1322 | 2026-07-03T01:51:05+00:00 | Vulnerability · Source |
| CVE-2023-26118 | redhat_vex | angularjs: Regular Expression Denial of Service via the <input type="url"> element | known affected: 37 known not affected: 34 | 2026-07-03T01:51:04+00:00 | Vulnerability · Source |
| CVE-2023-26117 | redhat_vex | angularjs: Regular expression denial of service via the $resource service | known affected: 72 known not affected: 83 | 2026-07-03T01:51:00+00:00 | Vulnerability · Source |
| CVE-2023-26116 | redhat_vex | angularjs: Regular Expression Denial of Service via angular.copy() | known affected: 33 known not affected: 38 | 2026-07-03T01:50:58+00:00 | Vulnerability · Source |
| CVE-2023-7207 | redhat_vex | cpio: path traversal vulnerability | known affected: 6 | 2026-07-03T01:50:54+00:00 | Vulnerability · Source |