VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291906 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2019-5427 | redhat_vex | c3p0: loading XML configuration leads to denial of service | fixed: 1 known affected: 8 known not affected: 4 | 2026-08-04T23:12:38+00:00 | Vulnerability · Source |
| CVE-2019-1543 | redhat_vex | openssl: ChaCha20-Poly1305 with long nonces | fixed: 34 known not affected: 28 | 2026-08-04T23:12:35+00:00 | Vulnerability · Source |
| CVE-2019-7619 | redhat_vex | elasticsearch: Username disclosure in API Key service | known affected: 1 known not affected: 20 | 2026-08-04T23:12:34+00:00 | Vulnerability · Source |
| CVE-2019-17563 | redhat_vex | tomcat: Session fixation when using FORM authentication | fixed: 229 known affected: 17 known not affected: 8 | 2026-08-04T23:12:31+00:00 | Vulnerability · Source |
| CVE-2019-2708 | redhat_vex | libdb: Denial of service in the Data Store component | fixed: 156 known affected: 26 | 2026-08-04T23:12:27+00:00 | Vulnerability · Source |
| CVE-2019-17569 | redhat_vex | tomcat: Regression in handling of Transfer-Encoding header allows for HTTP request smuggling | fixed: 45 known affected: 5 known not affected: 31 | 2026-08-04T23:12:25+00:00 | Vulnerability · Source |
| CVE-2019-1552 | redhat_vex | openssl: Insecure path defaults vulnerability in mingw builds | known not affected: 24 | 2026-08-04T23:12:23+00:00 | Vulnerability · Source |
| CVE-2020-36785 | redhat_vex | kernel: media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs() | known affected: 42 known not affected: 156 | 2026-08-04T23:12:21+00:00 | Vulnerability · Source |
| CVE-2020-1934 | redhat_vex | httpd: mod_proxy_ftp use of uninitialized value | fixed: 257 known affected: 17 known not affected: 3 | 2026-08-04T23:12:19+00:00 | Vulnerability · Source |
| CVE-2020-2934 | redhat_vex | mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete | fixed: 3 known affected: 5 known not affected: 5 | 2026-08-04T23:12:14+00:00 | Vulnerability · Source |
| CVE-2020-7019 | redhat_vex | elasticsearch: scrolling search can leak fields that should be hidden allowing access restriction bypass | known not affected: 7 | 2026-08-04T23:12:14+00:00 | Vulnerability · Source |
| CVE-2020-29582 | redhat_vex | kotlin: vulnerable Java API was used for temporary file and folder creation which could result in information disclosure | fixed: 3 known affected: 1 known not affected: 1 | 2026-08-04T23:12:11+00:00 | Vulnerability · Source |
| CVE-2020-7021 | redhat_vex | elasticsearch: Information disclosure via audit logging with emit_request_body option enabled | known affected: 3 known not affected: 5 | 2026-08-04T23:12:08+00:00 | Vulnerability · Source |
| CVE-2020-2933 | redhat_vex | mysql-connector-java: allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized partial DoS | fixed: 2 known affected: 6 known not affected: 5 | 2026-08-04T23:12:07+00:00 | Vulnerability · Source |
| CVE-2020-1729 | redhat_vex | SmallRye: SecuritySupport class is incorrectly public and contains a static method to access the current threads context class loader | fixed: 1399 known affected: 1 known not affected: 2 | 2026-08-04T23:12:04+00:00 | Vulnerability · Source |
| CVE-2020-1720 | redhat_vex | postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks | fixed: 1483 known not affected: 32 | 2026-08-04T23:12:00+00:00 | Vulnerability · Source |
| CVE-2020-8908 | redhat_vex | guava: local information disclosure via temporary directory created with unsafe permissions | fixed: 298 known affected: 45 known not affected: 1489 | 2026-08-04T23:11:57+00:00 | Vulnerability · Source |
| CVE-2020-1935 | redhat_vex | tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling | fixed: 349 known affected: 17 known not affected: 2 | 2026-08-04T23:11:56+00:00 | Vulnerability · Source |
| CVE-2020-2875 | redhat_vex | mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete | fixed: 3 known affected: 5 known not affected: 5 | 2026-08-04T23:11:54+00:00 | Vulnerability · Source |
| CVE-2021-21639 | redhat_vex | jenkins: lack of type validation in agent related REST API | fixed: 4 known affected: 2 known not affected: 421 | 2026-08-04T23:11:48+00:00 | Vulnerability · Source |
| CVE-2021-22134 | redhat_vex | elasticsearch: requests do not properly apply security permissions when executing a query against a recently updated document | known not affected: 11 | 2026-08-04T23:11:45+00:00 | Vulnerability · Source |
| CVE-2021-20229 | redhat_vex | postgresql: single-column SELECT privilege enables reading all columns | known affected: 24 known not affected: 121 | 2026-08-04T23:11:44+00:00 | Vulnerability · Source |
| CVE-2021-21640 | redhat_vex | jenkins: view name validation bypass | fixed: 4 known affected: 2 known not affected: 421 | 2026-08-04T23:11:41+00:00 | Vulnerability · Source |
| CVE-2021-23222 | redhat_vex | postgresql: libpq processes unencrypted bytes from man-in-the-middle | fixed: 154 known affected: 40 known not affected: 117 | 2026-08-04T23:11:38+00:00 | Vulnerability · Source |
| CVE-2020-9488 | redhat_vex | log4j: improper validation of certificate with host mismatch in SMTP appender | fixed: 178 known affected: 38 known not affected: 4 | 2026-08-04T23:11:34+00:00 | Vulnerability · Source |
| CVE-2021-30640 | redhat_vex | tomcat: JNDI realm authentication weakness | fixed: 39 known affected: 5 known not affected: 30 | 2026-08-04T23:11:29+00:00 | Vulnerability · Source |
| CVE-2021-25329 | redhat_vex | tomcat: Incomplete fix for CVE-2020-9484 (RCE via session persistence) | fixed: 49 known affected: 33 known not affected: 2 | 2026-08-04T23:11:26+00:00 | Vulnerability · Source |
| CVE-2021-36374 | redhat_vex | ant: excessive memory allocation when reading a specially crafted ZIP archive or a derived formats | known affected: 130 | 2026-08-04T23:11:23+00:00 | Vulnerability · Source |
| CVE-2021-3393 | redhat_vex | postgresql: Partition constraint violation errors leak values of denied columns | fixed: 356 known not affected: 108 | 2026-08-04T23:11:23+00:00 | Vulnerability · Source |
| CVE-2021-34428 | redhat_vex | jetty: SessionListener can prevent a session from being invalidated breaking logout | fixed: 6 known affected: 56 known not affected: 339 | 2026-08-04T23:11:19+00:00 | Vulnerability · Source |
| CVE-2021-46911 | redhat_vex | kernel: denial of service in ch_ktls | known not affected: 198 | 2026-08-04T23:11:17+00:00 | Vulnerability · Source |
| CVE-2021-46984 | redhat_vex | kernel: kyber: fix out of bounds access when preempted | fixed: 150 known affected: 150 | 2026-08-04T23:11:14+00:00 | Vulnerability · Source |
| CVE-2021-46922 | redhat_vex | kernel: KEYS: trusted: Fix TPM reservation for seal/unseal | known affected: 42 known not affected: 156 | 2026-08-04T23:11:10+00:00 | Vulnerability · Source |
| CVE-2021-43085 | redhat_vex | openssl: Insecure permissions vulnerability due to an error in the implementation of the CMAC_Final() function | known not affected: 55 | 2026-08-04T23:11:09+00:00 | Vulnerability · Source |
| CVE-2021-46910 | redhat_vex | kernel: kmap_local() doubles the number of per-CPU | known affected: 198 | 2026-08-04T23:11:06+00:00 | Vulnerability · Source |
| CVE-2021-4454 | redhat_vex | kernel: can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate | known affected: 108 known not affected: 166 | 2026-08-04T23:11:04+00:00 | Vulnerability · Source |
| CVE-2021-46929 | redhat_vex | kernel: sctp: use call_rcu to free endpoint | known affected: 90 known not affected: 108 | 2026-08-04T23:10:58+00:00 | Vulnerability · Source |
| CVE-2021-46912 | redhat_vex | kernel: namespace leak into all other net namespaces | known not affected: 198 | 2026-08-04T23:10:55+00:00 | Vulnerability · Source |
| CVE-2021-46948 | redhat_vex | kernel: sfc: farch: fix TX queue lookup in TX event handling | known affected: 42 known not affected: 156 | 2026-08-04T23:10:54+00:00 | Vulnerability · Source |
| CVE-2021-46969 | redhat_vex | kernel: bus: mhi: core: Fix invalid error returning in mhi_queue | known affected: 42 known not affected: 156 | 2026-08-04T23:10:51+00:00 | Vulnerability · Source |
| CVE-2021-46963 | redhat_vex | kernel: scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() | known affected: 90 known not affected: 108 | 2026-08-04T23:10:50+00:00 | Vulnerability · Source |
| CVE-2021-4160 | redhat_vex | openssl: Carry propagation bug in the MIPS32 and MIPS64 squaring procedure | known not affected: 32 | 2026-08-04T23:10:48+00:00 | Vulnerability · Source |
| CVE-2021-46921 | redhat_vex | kernel: locking/qrwlock: Fix ordering in queued_write_lock_slowpath() | known affected: 90 known not affected: 108 | 2026-08-04T23:10:22+00:00 | Vulnerability · Source |
| CVE-2022-42252 | redhat_vex | tomcat: request smuggling | fixed: 36 known affected: 3 known not affected: 46 | 2026-08-04T23:10:04+00:00 | Vulnerability · Source |
| CVE-2023-1255 | redhat_vex | openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM | fixed: 49 known not affected: 42 | 2026-08-04T23:10:01+00:00 | Vulnerability · Source |
| CVE-2023-0481 | redhat_vex | quarkus: insecure permissions on temp files | fixed: 1 known not affected: 878 | 2026-08-04T23:09:56+00:00 | Vulnerability · Source |
| CVE-2023-0044 | redhat_vex | quarkus-vertx-http: a cross-site attack may be initiated which might lead to the Information Disclosure | fixed: 2 known not affected: 10 | 2026-08-04T23:09:53+00:00 | Vulnerability · Source |
| CVE-2023-0464 | redhat_vex | openssl: Denial of service by excessive resource usage in verifying X509 policy constraints | fixed: 75 known affected: 32 known not affected: 152 | 2026-08-04T23:09:49+00:00 | Vulnerability · Source |
| CVE-2022-3996 | redhat_vex | openssl: double locking leads to denial of service | known not affected: 47 | 2026-08-04T23:09:45+00:00 | Vulnerability · Source |
| CVE-2022-41862 | redhat_vex | postgresql: Client memory disclosure when connecting with Kerberos to modified server | fixed: 1492 known affected: 202 known not affected: 12 | 2026-08-04T23:09:40+00:00 | Vulnerability · Source |