VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291904 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-50259 | redhat_vex | xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing | fixed: 1021 known affected: 9 | 2026-08-04T23:38:30+00:00 | Vulnerability · Source |
| CVE-2026-50257 | redhat_vex | xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() | fixed: 1021 known affected: 9 | 2026-08-04T23:38:28+00:00 | Vulnerability · Source |
| CVE-2026-50258 | redhat_vex | xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels | fixed: 1021 known affected: 9 | 2026-08-04T23:38:27+00:00 | Vulnerability · Source |
| CVE-2026-50262 | redhat_vex | xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes | fixed: 1021 known affected: 9 | 2026-08-04T23:38:23+00:00 | Vulnerability · Source |
| CVE-2026-43298 | redhat_vex | kernel: drm/amdgpu: Skip vcn poison irq release on VF | known affected: 274 | 2026-08-04T23:34:41+00:00 | Vulnerability · Source |
| CVE-2026-43367 | redhat_vex | kernel: drm/amd: Fix a few more NULL pointer dereference in device cleanup | known affected: 274 | 2026-08-04T23:34:33+00:00 | Vulnerability · Source |
| CVE-2026-18569 | redhat_vex | keycloak-services: keycloak-services: OIDC backchannel logout accepts unsigned forged logout tokens | known affected: 3 known not affected: 3 | 2026-08-04T23:33:16+00:00 | Vulnerability · Source |
| CVE-2026-43369 | redhat_vex | kernel: drm/amd: Fix NULL pointer dereference in device cleanup | known affected: 274 | 2026-08-04T23:33:11+00:00 | Vulnerability · Source |
| CVE-2026-43131 | redhat_vex | kernel: drm/amd/pm: Fix null pointer dereference issue | known affected: 274 | 2026-08-04T23:32:36+00:00 | Vulnerability · Source |
| CVE-2026-64462 | redhat_vex | kernel: PCI: altera: Fix resource leaks on probe failure | known not affected: 274 | 2026-08-04T23:32:36+00:00 | Vulnerability · Source |
| CVE-2026-31571 | redhat_vex | kernel: drm/i915: Unlink NV12 planes earlier | known affected: 198 known not affected: 76 | 2026-08-04T23:32:32+00:00 | Vulnerability · Source |
| CVE-2026-45947 | redhat_vex | kernel: drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc() | known affected: 198 known not affected: 76 | 2026-08-04T23:32:31+00:00 | Vulnerability · Source |
| CVE-2026-45979 | redhat_vex | kernel: drm/amdgpu: clean up the amdgpu_cs_parser_bos | known affected: 198 known not affected: 76 | 2026-08-04T23:32:27+00:00 | Vulnerability · Source |
| CVE-2026-23264 | redhat_vex | kernel: Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" | known affected: 246 known not affected: 28 | 2026-08-04T23:32:27+00:00 | Vulnerability · Source |
| CVE-2026-43243 | redhat_vex | kernel: drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src | known affected: 274 | 2026-08-04T23:32:27+00:00 | Vulnerability · Source |
| CVE-2026-23051 | redhat_vex | kernel: drm/amdgpu: fix drm panic null pointer when driver not support atomic | known affected: 198 known not affected: 76 | 2026-08-04T23:32:22+00:00 | Vulnerability · Source |
| CVE-2026-43320 | redhat_vex | kernel: drm/amd/display: Fix dsc eDP issue | known affected: 274 | 2026-08-04T23:32:22+00:00 | Vulnerability · Source |
| CVE-2026-23358 | redhat_vex | kernel: drm/amdgpu: Fix error handling in slot reset | known affected: 198 known not affected: 76 | 2026-08-04T23:32:12+00:00 | Vulnerability · Source |
| CVE-2024-10492 | redhat_vex | keycloak-quarkus-server: Keycloak path trasversal | fixed: 16 known affected: 1 known not affected: 2 | 2026-08-04T23:19:10+00:00 | Vulnerability · Source |
| CVE-2023-53674 | redhat_vex | kernel: clk: Fix memory leak in devm_clk_notifier_register() | fixed: 280 known affected: 22 known not affected: 174 | 2026-08-04T23:18:58+00:00 | Vulnerability · Source |
| CVE-2023-53683 | redhat_vex | kernel: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() | known affected: 14 known not affected: 260 | 2026-08-04T23:18:56+00:00 | Vulnerability · Source |
| CVE-2023-5752 | redhat_vex | pip: Mercurial configuration injectable in repo revision when installing via pip | fixed: 8 known affected: 5 known not affected: 296 | 2026-08-04T23:18:38+00:00 | Vulnerability · Source |
| CVE-2010-1157 | redhat_vex | tomcat: information disclosure in authentication headers | fixed: 717 known affected: 12 | 2026-08-04T23:18:27+00:00 | Vulnerability · Source |
| CVE-2011-4314 | redhat_vex | extension): MITM due to improper validation of AX attribute signatures | fixed: 558 known affected: 1 | 2026-08-04T23:18:24+00:00 | Vulnerability · Source |
| CVE-2011-2204 | redhat_vex | tomcat: password disclosure vulnerability | fixed: 153 | 2026-08-04T23:18:22+00:00 | Vulnerability · Source |
| CVE-2009-5146 | redhat_vex | openssl: memory leak in hostname TLS extension | known not affected: 24 | 2026-08-04T23:18:19+00:00 | Vulnerability · Source |
| CVE-2011-2526 | redhat_vex | tomcat: security manager restrictions bypass | fixed: 106 known not affected: 13 | 2026-08-04T23:18:18+00:00 | Vulnerability · Source |
| CVE-2001-1556 | redhat_vex | httpd: log files contain information directly supplied by clients and does not filter or quote control characters | known not affected: 45 | 2026-08-04T23:18:14+00:00 | Vulnerability · Source |
| CVE-2011-3564 | redhat_vex | GlassFish: Unspecified vulnerability allows local users to affect confidentiality via unknown vectors | under investigation: 1 | 2026-08-04T23:18:12+00:00 | Vulnerability · Source |
| CVE-2010-2232 | redhat_vex | derby: SYSCS_EXPORT_TABLE can be used to overwrite derby files | known not affected: 5 | 2026-08-04T23:18:11+00:00 | Vulnerability · Source |
| CVE-2011-4573 | redhat_vex | JON: Incorrect delete permissions check | fixed: 1 known not affected: 1 | 2026-08-04T23:18:10+00:00 | Vulnerability · Source |
| CVE-2012-3369 | redhat_vex | JBoss: CallerIdentityLoginModule retaining password from previous call if a null password is provided | fixed: 883 known affected: 3 | 2026-08-04T23:18:06+00:00 | Vulnerability · Source |
| CVE-2012-4529 | redhat_vex | Web: jsessionid exposed via encoded url when using cookie based session tracking | fixed: 747 known affected: 1 known not affected: 17 | 2026-08-04T23:18:04+00:00 | Vulnerability · Source |
| CVE-2012-2098 | redhat_vex | apache-commons-compress: denial of service flaw when compressing certain files | known affected: 22 known not affected: 2 | 2026-08-04T23:18:01+00:00 | Vulnerability · Source |
| CVE-2013-2035 | redhat_vex | HawtJNI: predictable temporary file name leading to local arbitrary code execution | fixed: 687 known affected: 4 | 2026-08-04T23:17:58+00:00 | Vulnerability · Source |
| CVE-2012-0874 | redhat_vex | JBoss invoker servlets do not require authentication | fixed: 883 known affected: 3 known not affected: 1 | 2026-08-04T23:17:54+00:00 | Vulnerability · Source |
| CVE-2012-5626 | redhat_vex | JBoss - EJB method invocation ignores roles specified using the @RunAs annotation | known affected: 6 known not affected: 2 | 2026-08-04T23:17:54+00:00 | Vulnerability · Source |
| CVE-2013-2027 | redhat_vex | Jython creates executables class files with wrong permissions | known affected: 7 | 2026-08-04T23:17:52+00:00 | Vulnerability · Source |
| CVE-2012-4572 | redhat_vex | JBoss: custom authorization module implementations shared between applications | fixed: 747 known affected: 1 | 2026-08-04T23:17:47+00:00 | Vulnerability · Source |
| CVE-2012-4557 | redhat_vex | httpd: mod_proxy_ajp worker moved to error state when timeout exceeded | fixed: 769 known not affected: 2 | 2026-08-04T23:17:46+00:00 | Vulnerability · Source |
| CVE-2013-4112 | redhat_vex | JGroups: Authentication via cached credentials | fixed: 478 known not affected: 7 | 2026-08-04T23:17:42+00:00 | Vulnerability · Source |
| CVE-2013-0218 | redhat_vex | Installer: Generated auto-install xml is world readable | fixed: 3 known affected: 1 | 2026-08-04T23:17:40+00:00 | Vulnerability · Source |
| CVE-2012-2377 | redhat_vex | JGroups diagnostics service enabled by default with no authentication when a JGroups channel is started | fixed: 884 known affected: 3 | 2026-08-04T23:17:40+00:00 | Vulnerability · Source |
| CVE-2013-2071 | redhat_vex | tomcat: Information disclosure in asynchronous context when using AsyncListeners that threw RuntimeExceptions | fixed: 133 known not affected: 14 | 2026-08-04T23:17:34+00:00 | Vulnerability · Source |
| CVE-2012-0079 | redhat_vex | OpenSSO: Unspecified vulnerability allows remote attackers to affect integrity via unknown vectors | fixed: 1 under investigation: 1 | 2026-08-04T23:17:32+00:00 | Vulnerability · Source |
| CVE-2012-3502 | redhat_vex | mod_proxy_http): Information disclosure due improper management of back end server connection close within error handling | known not affected: 8 | 2026-08-04T23:17:30+00:00 | Vulnerability · Source |
| CVE-2014-3568 | redhat_vex | openssl: Build option no-ssl3 is incomplete | known not affected: 17 | 2026-08-04T23:17:28+00:00 | Vulnerability · Source |
| CVE-2014-3583 | redhat_vex | httpd: mod_proxy_fcgi handle_headers() buffer over read | fixed: 4 known affected: 1 known not affected: 38 | 2026-08-04T23:17:24+00:00 | Vulnerability · Source |
| CVE-2014-0096 | redhat_vex | Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs | fixed: 149 known affected: 4 known not affected: 1 | 2026-08-04T23:17:23+00:00 | Vulnerability · Source |
| CVE-2013-4590 | redhat_vex | tomcat: information disclosure via XXE when running untrusted web applications | fixed: 236 known affected: 3 known not affected: 20 | 2026-08-04T23:17:20+00:00 | Vulnerability · Source |