VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291904 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-45960 | redhat_vex | dom4j: XML External Entity on SAXReader | known not affected: 20 | 2026-08-04T23:08:43+00:00 | Vulnerability · Source |
| CVE-2023-36479 | redhat_vex | jetty: Improper addition of quotation marks to user inputs in CgiServlet | fixed: 25 known affected: 43 known not affected: 1952 under investigation: 1 | 2026-08-04T23:08:41+00:00 | Vulnerability · Source |
| CVE-2024-1726 | redhat_vex | quarkus: security checks for some inherited endpoints performed after serialization in RESTEasy Reactive may trigger a denial of service | fixed: 1 known affected: 1 known not affected: 1051 | 2026-08-04T23:08:37+00:00 | Vulnerability · Source |
| CVE-2024-12801 | redhat_vex | logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks | known affected: 24 | 2026-08-04T23:08:34+00:00 | Vulnerability · Source |
| CVE-2024-6763 | redhat_vex | org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority | fixed: 2 known affected: 26 | 2026-08-04T23:08:29+00:00 | Vulnerability · Source |
| CVE-2024-23080 | redhat_vex | joda-time: Null pointer exeption may lead to DoS | known not affected: 43 | 2026-08-04T23:08:27+00:00 | Vulnerability · Source |
| CVE-2024-3653 | redhat_vex | undertow: LearningPushHandler can lead to remote memory DoS attacks | fixed: 9 known affected: 13 known not affected: 1185 | 2026-08-04T23:08:23+00:00 | Vulnerability · Source |
| CVE-2025-11153 | redhat_vex | firefox: From CVEorg collector | under investigation: 9 | 2026-08-04T23:08:19+00:00 | Vulnerability · Source |
| CVE-2024-4029 | redhat_vex | wildfly: No timeout for EAP management interface may lead to Denial of Service (DoS) | fixed: 356 known affected: 4 known not affected: 3 | 2026-08-04T23:08:14+00:00 | Vulnerability · Source |
| CVE-2025-24814 | redhat_vex | solr: org.apache.solr: Apache Solr: Core-creation with "trusted" configset can use arbitrary untrusted files | known affected: 4 | 2026-08-04T23:08:11+00:00 | Vulnerability · Source |
| CVE-2024-6762 | redhat_vex | org.eclipse.jetty:jetty-servlets: jetty: Jetty PushSessionCacheFilter can cause remote DoS attacks | known not affected: 17 | 2026-08-04T23:08:10+00:00 | Vulnerability · Source |
| CVE-2012-2672 | redhat_vex | Mojarra: deployed web applications can read FacesContext from other applications under certain conditions | fixed: 1010 | 2026-08-04T23:07:20+00:00 | Vulnerability · Source |
| CVE-2021-47158 | redhat_vex | kernel: net: dsa: sja1105: add error handling in sja1105_setup() | known not affected: 198 | 2026-08-04T23:07:18+00:00 | Vulnerability · Source |
| CVE-2021-47001 | redhat_vex | kernel: xprtrdma: Fix cwnd update ordering | known affected: 90 known not affected: 108 | 2026-08-04T23:07:13+00:00 | Vulnerability · Source |
| CVE-2021-47136 | redhat_vex | kernel: net: zero-initialize tc skb extension on allocation | known affected: 90 known not affected: 108 | 2026-08-04T23:07:09+00:00 | Vulnerability · Source |
| CVE-2021-47160 | redhat_vex | kernel: net: dsa: mt7530: fix VLAN traffic leaks | known not affected: 198 | 2026-08-04T23:07:04+00:00 | Vulnerability · Source |
| CVE-2021-47082 | redhat_vex | kernel: tun: avoid double free in tun_free_netdev | known affected: 42 known not affected: 156 | 2026-08-04T23:06:50+00:00 | Vulnerability · Source |
| CVE-2021-47178 | redhat_vex | kernel: scsi: target: core: Avoid smp_processor_id() in preemptible code | fixed: 120 known affected: 58 known not affected: 108 | 2026-08-04T23:06:46+00:00 | Vulnerability · Source |
| CVE-2021-47137 | redhat_vex | kernel: net: lantiq: fix memory corruption in RX ring | known not affected: 198 | 2026-08-04T23:06:41+00:00 | Vulnerability · Source |
| CVE-2021-47129 | redhat_vex | kernel: netfilter: nft_ct: skip expectations for confirmed conntrack | known affected: 42 known not affected: 156 | 2026-08-04T23:06:37+00:00 | Vulnerability · Source |
| CVE-2021-47049 | redhat_vex | kernel: Drivers: hv: vmbus: Use after free in __vmbus_open() | known affected: 42 known not affected: 156 | 2026-08-04T23:06:28+00:00 | Vulnerability · Source |
| CVE-2011-4085 | redhat_vex | Invoker servlets authentication bypass (HTTP verb tampering) | fixed: 289 | 2026-08-04T23:06:17+00:00 | Vulnerability · Source |
| CVE-2021-47014 | redhat_vex | kernel: net/sched: act_ct: fix wild memory access when clearing fragments | known affected: 198 | 2026-08-04T23:06:11+00:00 | Vulnerability · Source |
| CVE-2010-1452 | redhat_vex | mod_dav: DoS (httpd child process crash) by parsing URI structure with missing path segments | fixed: 749 known affected: 1 known not affected: 6 | 2026-08-04T23:06:02+00:00 | Vulnerability · Source |
| CVE-2021-47111 | redhat_vex | kernel: xen-netback: take a reference to the RX task thread | known affected: 42 known not affected: 156 | 2026-08-04T23:05:53+00:00 | Vulnerability · Source |
| CVE-2021-47112 | redhat_vex | kernel: x86/kvm: Teardown PV features on boot CPU as well | known affected: 42 known not affected: 156 | 2026-08-04T23:05:16+00:00 | Vulnerability · Source |
| CVE-2021-47028 | redhat_vex | kernel: mt76: mt7915: fix txrate reporting | known affected: 42 known not affected: 156 | 2026-08-04T23:05:09+00:00 | Vulnerability · Source |
| CVE-2021-47135 | redhat_vex | kernel: mt76: mt7921: fix possible AOOB issue in mt7921_mcu_tx_rate_report | known affected: 42 known not affected: 156 | 2026-08-04T23:05:06+00:00 | Vulnerability · Source |
| CVE-2021-47153 | redhat_vex | kernel: i2c: i801: Don't generate an interrupt on bus reset | fixed: 150 known affected: 42 known not affected: 108 | 2026-08-04T23:04:56+00:00 | Vulnerability · Source |
| CVE-2021-47188 | redhat_vex | kernel: scsi: ufs: core: Improve SCSI abort handling | known affected: 28 known not affected: 170 | 2026-08-04T23:04:52+00:00 | Vulnerability · Source |
| CVE-2021-47048 | redhat_vex | kernel: spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op | known not affected: 198 | 2026-08-04T23:04:49+00:00 | Vulnerability · Source |
| CVE-2021-47035 | redhat_vex | kernel: iommu/vt-d: Remove WO permissions on second-level paging entries | known affected: 42 known not affected: 156 | 2026-08-04T23:04:44+00:00 | Vulnerability · Source |
| CVE-2021-47099 | redhat_vex | kernel: veth: ensure skb entering GRO are not cloned. | fixed: 475 known affected: 42 | 2026-08-04T23:04:42+00:00 | Vulnerability · Source |
| CVE-2021-47113 | redhat_vex | kernel: btrfs: abort in rename_exchange if we fail to insert the second ref | known affected: 42 known not affected: 156 | 2026-08-04T23:04:38+00:00 | Vulnerability · Source |
| CVE-2021-47183 | redhat_vex | kernel: scsi: lpfc: Fix link down processing to address NULL pointer dereference | known affected: 90 known not affected: 108 | 2026-08-04T23:04:35+00:00 | Vulnerability · Source |
| CVE-2021-47094 | redhat_vex | kernel: KVM: x86/mmu: Don't advance iterator after restart due to yielding | known affected: 48 known not affected: 150 | 2026-08-04T23:04:33+00:00 | Vulnerability · Source |
| CVE-2021-47201 | redhat_vex | kernel: iavf: free q_vectors before queues in iavf_disable_vf | known affected: 76 known not affected: 122 | 2026-08-04T23:04:30+00:00 | Vulnerability · Source |
| CVE-2021-47242 | redhat_vex | kernel: mptcp: fix soft lookup in subflow_error_report() | known affected: 48 known not affected: 150 | 2026-08-04T23:04:28+00:00 | Vulnerability · Source |
| CVE-2021-47222 | redhat_vex | kernel: net: bridge: fix vlan tunnel dst refcnt when egressing | known affected: 198 | 2026-08-04T23:04:20+00:00 | Vulnerability · Source |
| CVE-2021-47232 | redhat_vex | kernel: can: j1939: fix Use-after-Free, hold skb ref while in use | known affected: 2 known not affected: 196 | 2026-08-04T23:03:46+00:00 | Vulnerability · Source |
| CVE-2021-47290 | redhat_vex | kernel: scsi: target: Fix NULL dereference on XCOPY completion | known affected: 90 known not affected: 108 | 2026-08-04T23:03:42+00:00 | Vulnerability · Source |
| CVE-2021-47291 | redhat_vex | kernel: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions | known affected: 42 known not affected: 156 | 2026-08-04T23:03:39+00:00 | Vulnerability · Source |
| CVE-2021-47261 | redhat_vex | kernel: IB/mlx5: Fix initializing CQ fragments buffer | known affected: 198 | 2026-08-04T23:03:38+00:00 | Vulnerability · Source |
| CVE-2021-47303 | redhat_vex | kernel: bpf: Track subprog poke descriptors correctly and fix use-after-free | known affected: 76 known not affected: 122 | 2026-08-04T23:03:32+00:00 | Vulnerability · Source |
| CVE-2021-47296 | redhat_vex | kernel: KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak | known affected: 14 known not affected: 184 | 2026-08-04T23:03:30+00:00 | Vulnerability · Source |
| CVE-2021-47247 | redhat_vex | kernel: net/mlx5e: Fix use-after-free of encap entry in neigh update handler | known affected: 76 known not affected: 122 | 2026-08-04T23:03:29+00:00 | Vulnerability · Source |
| CVE-2021-47259 | redhat_vex | kernel: NFS: Fix use-after-free in nfs4_init_client() | known affected: 90 known not affected: 108 | 2026-08-04T23:03:26+00:00 | Vulnerability · Source |
| CVE-2021-47374 | redhat_vex | kernel: dma-debug: prevent an error message from causing runtime problems | known affected: 48 known not affected: 150 | 2026-08-04T23:03:21+00:00 | Vulnerability · Source |
| CVE-2021-47380 | redhat_vex | kernel: HID: amd_sfh: Fix potential NULL pointer dereference | known affected: 184 known not affected: 14 | 2026-08-04T23:03:16+00:00 | Vulnerability · Source |
| CVE-2021-47391 | redhat_vex | kernel: RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests | known not affected: 198 | 2026-08-04T23:03:13+00:00 | Vulnerability · Source |