VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291913 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-36915 | redhat_vex | kernel: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies | known not affected: 198 | 2026-08-04T18:52:20+00:00 | Vulnerability · Source |
| CVE-2024-35993 | redhat_vex | kernel: mm: turn folio_test_hugetlb into a PageType | known affected: 42 known not affected: 156 | 2026-08-04T18:52:17+00:00 | Vulnerability · Source |
| CVE-2015-1793 | redhat_vex | openssl: alternative chains certificate forgery | known not affected: 21 | 2026-08-04T18:52:07+00:00 | Vulnerability · Source |
| CVE-2015-3210 | redhat_vex | pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4) | fixed: 339 known not affected: 95 | 2026-08-04T18:52:04+00:00 | Vulnerability · Source |
| CVE-2015-3253 | redhat_vex | groovy: remote execution of untrusted code in class MethodClosure | fixed: 36 known affected: 7 known not affected: 1 | 2026-08-04T18:52:02+00:00 | Vulnerability · Source |
| CVE-2015-5220 | redhat_vex | OOME from EAP 6 http management console | fixed: 472 | 2026-08-04T18:51:59+00:00 | Vulnerability · Source |
| CVE-2015-0226 | redhat_vex | wss4j: Apache WSS4J is vulnerable to Bleichenbacher's attack (incomplete fix for CVE-2011-2487) | fixed: 1263 known affected: 7 known not affected: 2 | 2026-08-04T18:51:13+00:00 | Vulnerability · Source |
| CVE-2015-0225 | redhat_vex | Cassandra: remote code execution via unauthenticated JMX/RMI interface | fixed: 1 known affected: 1 known not affected: 1 | 2026-08-04T18:50:57+00:00 | Vulnerability · Source |
| CVE-2015-7501 | redhat_vex | apache-commons-collections: InvokerTransformer code execution during deserialisation | fixed: 758 known affected: 6 known not affected: 8 | 2026-08-04T18:50:43+00:00 | Vulnerability · Source |
| CVE-2015-5349 | redhat_vex | apache-directory: command injection via crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet | known not affected: 1 | 2026-08-04T18:50:16+00:00 | Vulnerability · Source |
| CVE-2015-0291 | redhat_vex | openssl: ClientHello sigalgs NULL pointer dereference DoS | known not affected: 26 | 2026-08-04T18:49:51+00:00 | Vulnerability · Source |
| CVE-2015-0297 | redhat_vex | RHQ: ServerInvokerServlet remote code exec | fixed: 1 | 2026-08-04T18:49:48+00:00 | Vulnerability · Source |
| CVE-2015-0254 | redhat_vex | jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags | fixed: 740 known affected: 76 known not affected: 3 | 2026-08-04T18:49:35+00:00 | Vulnerability · Source |
| CVE-2024-39508 | redhat_vex | kernel: io_uring/io-wq: Use set_bit() and test_bit() at worker->flags | fixed: 280 known affected: 22 known not affected: 98 | 2026-08-04T18:48:40+00:00 | Vulnerability · Source |
| CVE-2024-40930 | redhat_vex | kernel: wifi: cfg80211: validate HE operation element parsing | fixed: 280 known affected: 64 known not affected: 56 | 2026-08-04T18:48:35+00:00 | Vulnerability · Source |
| CVE-2024-38635 | redhat_vex | kernel: soundwire: cadence: fix invalid PDI offset | fixed: 280 known affected: 70 known not affected: 50 | 2026-08-04T18:48:32+00:00 | Vulnerability · Source |
| CVE-2024-39472 | redhat_vex | kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup | fixed: 663 known affected: 64 known not affected: 1 | 2026-08-04T18:48:29+00:00 | Vulnerability · Source |
| CVE-2024-39471 | redhat_vex | kernel: drm/amdgpu: add error handle to avoid out-of-bounds | fixed: 709 known affected: 50 known not affected: 22 | 2026-08-04T18:48:26+00:00 | Vulnerability · Source |
| CVE-2024-39502 | redhat_vex | kernel: ionic: fix use after netif_napi_del() | fixed: 1220 known affected: 22 known not affected: 55 | 2026-08-04T18:48:24+00:00 | Vulnerability · Source |
| CVE-2024-38592 | redhat_vex | kernel: drm/mediatek: Init `ddp_comp` with devm_kcalloc() | known not affected: 198 | 2026-08-04T18:48:21+00:00 | Vulnerability · Source |
| CVE-2024-40920 | redhat_vex | kernel: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state | known not affected: 198 | 2026-08-04T18:48:20+00:00 | Vulnerability · Source |
| CVE-2024-40901 | redhat_vex | kernel: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory | fixed: 709 known affected: 64 known not affected: 8 | 2026-08-04T18:48:16+00:00 | Vulnerability · Source |
| CVE-2024-40923 | redhat_vex | kernel: vmxnet3: disable rx data ring on dma allocation failure | fixed: 280 known affected: 112 known not affected: 8 | 2026-08-04T18:48:13+00:00 | Vulnerability · Source |
| CVE-2024-38599 | redhat_vex | kernel: jffs2: prevent xattr node from overflowing the eraseblock | known affected: 14 known not affected: 184 | 2026-08-04T18:48:11+00:00 | Vulnerability · Source |
| CVE-2024-40900 | redhat_vex | kernel: cachefiles: remove requests from xarray during flushing requests | known affected: 150 known not affected: 48 | 2026-08-04T18:48:07+00:00 | Vulnerability · Source |
| CVE-2024-39496 | redhat_vex | kernel: btrfs: zoned: fix use-after-free due to race with dev replace | known not affected: 198 | 2026-08-04T18:48:06+00:00 | Vulnerability · Source |
| CVE-2024-40910 | redhat_vex | kernel: ax25: Fix refcount imbalance on inbound connections | known not affected: 198 | 2026-08-04T18:48:03+00:00 | Vulnerability · Source |
| CVE-2024-39503 | redhat_vex | kernel: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type | fixed: 430 known affected: 64 known not affected: 8 | 2026-08-04T18:47:58+00:00 | Vulnerability · Source |
| CVE-2024-39486 | redhat_vex | kernel: drm/drm_file: Fix pid refcounting race | fixed: 280 known affected: 64 known not affected: 56 | 2026-08-04T18:47:57+00:00 | Vulnerability · Source |
| CVE-2024-39481 | redhat_vex | kernel: media: mc: Fix graph walk in media_pipeline_start | known not affected: 198 | 2026-08-04T18:47:53+00:00 | Vulnerability · Source |
| CVE-2024-39487 | redhat_vex | kernel: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() | fixed: 429 known affected: 64 known not affected: 8 | 2026-08-04T18:47:48+00:00 | Vulnerability · Source |
| CVE-2024-38606 | redhat_vex | kernel: crypto: qat - validate slices count returned by FW | known affected: 108 known not affected: 90 | 2026-08-04T18:47:47+00:00 | Vulnerability · Source |
| CVE-2024-39494 | redhat_vex | kernel: ima: Fix use-after-free on a dentry's dname.name | known affected: 198 | 2026-08-04T18:47:45+00:00 | Vulnerability · Source |
| CVE-2024-40909 | redhat_vex | kernel: bpf: Fix a potential use-after-free in bpf_link_free() | known affected: 28 known not affected: 170 | 2026-08-04T18:47:39+00:00 | Vulnerability · Source |
| CVE-2024-39500 | redhat_vex | kernel: sock_map: avoid race between sock_map_close and sk_psock_put | fixed: 305 known affected: 98 known not affected: 14 | 2026-08-04T18:47:36+00:00 | Vulnerability · Source |
| CVE-2024-39292 | redhat_vex | kernel: um: Add winch to winch_handlers before registering winch IRQ | known not affected: 198 | 2026-08-04T18:47:35+00:00 | Vulnerability · Source |
| CVE-2024-39467 | redhat_vex | kernel: f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() | known not affected: 198 | 2026-08-04T18:47:31+00:00 | Vulnerability · Source |
| CVE-2024-38612 | redhat_vex | kernel: ipv6: sr: fix invalid unregister error path | fixed: 280 known affected: 38 known not affected: 82 | 2026-08-04T18:47:30+00:00 | Vulnerability · Source |
| CVE-2024-38659 | redhat_vex | kernel: enic: Validate length of nl attributes in enic_set_vf_port | known affected: 14 known not affected: 184 | 2026-08-04T18:47:29+00:00 | Vulnerability · Source |
| CVE-2024-39507 | redhat_vex | kernel: net: hns3: fix kernel crash problem in concurrent scenario | fixed: 559 known affected: 22 known not affected: 98 | 2026-08-04T18:47:25+00:00 | Vulnerability · Source |
| CVE-2024-40925 | redhat_vex | kernel: block: fix request.queuelist usage in flush | fixed: 280 known affected: 50 known not affected: 70 | 2026-08-04T18:47:23+00:00 | Vulnerability · Source |
| CVE-2024-40907 | redhat_vex | kernel: ionic: fix kernel panic in XDP_TX action | fixed: 280 known affected: 22 known not affected: 98 | 2026-08-04T18:47:17+00:00 | Vulnerability · Source |
| CVE-2024-39293 | redhat_vex | kernel: Revert "xsk: Support redirect to any socket bound to the same umem" | known affected: 48 known not affected: 150 | 2026-08-04T18:47:14+00:00 | Vulnerability · Source |
| CVE-2024-38623 | redhat_vex | kernel: fs/ntfs3: Use variable length array instead of fixed size | known not affected: 198 | 2026-08-04T18:47:13+00:00 | Vulnerability · Source |
| CVE-2024-40911 | redhat_vex | kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station | fixed: 429 known affected: 64 | 2026-08-04T18:47:12+00:00 | Vulnerability · Source |
| CVE-2024-38610 | redhat_vex | kernel: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() | known not affected: 198 | 2026-08-04T18:47:09+00:00 | Vulnerability · Source |
| CVE-2024-40957 | redhat_vex | kernel: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors | fixed: 279 known affected: 64 known not affected: 48 | 2026-08-04T18:47:01+00:00 | Vulnerability · Source |
| CVE-2016-6309 | redhat_vex | openssl: Use After Free for large message sizes | known not affected: 23 | 2026-08-04T18:46:59+00:00 | Vulnerability · Source |
| CVE-2015-8392 | redhat_vex | pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27) | fixed: 339 known not affected: 95 | 2026-08-04T18:46:57+00:00 | Vulnerability · Source |
| CVE-2016-2141 | redhat_vex | JGroups: Authorization bypass | fixed: 329 known affected: 4 known not affected: 3 | 2026-08-04T18:46:55+00:00 | Vulnerability · Source |