VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291913 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2016-2510 | redhat_vex | bsh2: remote code execution via deserialization | fixed: 6 known affected: 4 known not affected: 2 | 2026-08-04T18:46:53+00:00 | Vulnerability · Source |
| CVE-2016-1240 | redhat_vex | tomcat: unsafe chown of catalina.log in tomcat init script allows privilege escalation | fixed: 99 known affected: 16 known not affected: 34 | 2026-08-04T18:46:49+00:00 | Vulnerability · Source |
| CVE-2016-5425 | redhat_vex | tomcat: Local privilege escalation via systemd-tmpfiles service | fixed: 50 known not affected: 41 | 2026-08-04T18:46:46+00:00 | Vulnerability · Source |
| CVE-2016-2108 | redhat_vex | openssl: Memory corruption in the ASN.1 encoder | fixed: 367 known affected: 8 known not affected: 2 | 2026-08-04T18:46:44+00:00 | Vulnerability · Source |
| CVE-2016-0800 | redhat_vex | SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN) | fixed: 443 known affected: 6 known not affected: 14 | 2026-08-04T18:46:41+00:00 | Vulnerability · Source |
| CVE-2015-8385 | redhat_vex | pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30) | fixed: 415 known affected: 55 known not affected: 35 | 2026-08-04T18:46:40+00:00 | Vulnerability · Source |
| CVE-2016-4000 | redhat_vex | jython: Unsafe deserialization leads to code execution | known affected: 2 known not affected: 9 | 2026-08-04T18:46:38+00:00 | Vulnerability · Source |
| CVE-2015-8383 | redhat_vex | pcre: Buffer overflow caused by repeated conditional group (8.38/3) | fixed: 339 known not affected: 95 | 2026-08-04T18:46:02+00:00 | Vulnerability · Source |
| CVE-2016-5397 | redhat_vex | thrift: Improper file path sanitization in t_go_generator.cc:format_go_output() of the go client library can allow an attacker to inject commands | fixed: 2 known affected: 6 known not affected: 17 | 2026-08-04T18:45:49+00:00 | Vulnerability · Source |
| CVE-2015-8384 | redhat_vex | pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4) | fixed: 339 known not affected: 95 | 2026-08-04T18:45:37+00:00 | Vulnerability · Source |
| CVE-2015-8395 | redhat_vex | pcre: Buffer overflow caused by duplicate named references (8.38/36) | fixed: 339 known not affected: 95 | 2026-08-04T18:45:10+00:00 | Vulnerability · Source |
| CVE-2016-1283 | redhat_vex | pcre: heap buffer overflow in handling of duplicate named groups (8.39/14) | fixed: 88 known affected: 62 known not affected: 95 | 2026-08-04T18:45:03+00:00 | Vulnerability · Source |
| CVE-2016-5003 | redhat_vex | xmlrpc: Deserialization of untrusted Java object through <ex:serializable> tag | fixed: 87 known affected: 5 known not affected: 2 | 2026-08-04T18:44:24+00:00 | Vulnerability · Source |
| CVE-2024-41051 | redhat_vex | kernel: cachefiles: wait for ondemand_object_worker to finish when dropping object | known not affected: 198 | 2026-08-04T18:43:45+00:00 | Vulnerability · Source |
| CVE-2024-41017 | redhat_vex | kernel: jfs: don't walk off the end of ealist | known affected: 14 known not affected: 184 | 2026-08-04T18:43:44+00:00 | Vulnerability · Source |
| CVE-2024-41038 | redhat_vex | kernel: firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers | fixed: 709 known affected: 22 known not affected: 50 | 2026-08-04T18:43:42+00:00 | Vulnerability · Source |
| CVE-2024-40991 | redhat_vex | kernel: dmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id() | known not affected: 198 | 2026-08-04T18:43:39+00:00 | Vulnerability · Source |
| CVE-2024-41056 | redhat_vex | kernel: firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files | fixed: 943 known affected: 22 known not affected: 51 | 2026-08-04T18:43:37+00:00 | Vulnerability · Source |
| CVE-2024-41049 | redhat_vex | kernel: filelock: fix potential use-after-free in posix_lock_inode | fixed: 792 known affected: 50 known not affected: 72 | 2026-08-04T18:43:37+00:00 | Vulnerability · Source |
| CVE-2024-41015 | redhat_vex | kernel: ocfs2: add bounds checking to ocfs2_check_dir_entry() | known not affected: 198 | 2026-08-04T18:43:31+00:00 | Vulnerability · Source |
| CVE-2024-40953 | redhat_vex | kernel: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() | known not affected: 198 | 2026-08-04T18:43:28+00:00 | Vulnerability · Source |
| CVE-2024-41069 | redhat_vex | kernel: ASoC: topology: Fix references to freed memory | known affected: 184 known not affected: 14 | 2026-08-04T18:43:26+00:00 | Vulnerability · Source |
| CVE-2024-41032 | redhat_vex | kernel: mm: vmalloc: check if a hash-index is in cpu_possible_mask | fixed: 280 known affected: 64 known not affected: 56 | 2026-08-04T18:43:23+00:00 | Vulnerability · Source |
| CVE-2024-40937 | redhat_vex | kernel: gve: Clear napi->skb before dev_kfree_skb_any() | known affected: 156 known not affected: 42 | 2026-08-04T18:43:22+00:00 | Vulnerability · Source |
| CVE-2024-40970 | redhat_vex | kernel: Avoid hw_desc array overrun in dw-axi-dmac | known not affected: 198 | 2026-08-04T18:43:21+00:00 | Vulnerability · Source |
| CVE-2024-41057 | redhat_vex | kernel: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() | fixed: 280 known affected: 64 known not affected: 56 | 2026-08-04T18:43:14+00:00 | Vulnerability · Source |
| CVE-2024-41026 | redhat_vex | kernel: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length | known not affected: 198 | 2026-08-04T18:43:13+00:00 | Vulnerability · Source |
| CVE-2024-41062 | redhat_vex | kernel: bluetooth/l2cap: sync sock recv cb and release | fixed: 305 known affected: 98 known not affected: 14 | 2026-08-04T18:43:10+00:00 | Vulnerability · Source |
| CVE-2024-40974 | redhat_vex | kernel: powerpc/pseries: Enforce hcall result buffer validity and size | fixed: 120 known affected: 166 | 2026-08-04T18:43:08+00:00 | Vulnerability · Source |
| CVE-2024-41048 | redhat_vex | kernel: skmsg: Skip zero length skb in sk_msg_recvmsg | known affected: 58 known not affected: 140 | 2026-08-04T18:43:05+00:00 | Vulnerability · Source |
| CVE-2024-40989 | redhat_vex | kernel: KVM: arm64: Disassociate vcpus from redistributor region on teardown | fixed: 943 known affected: 22 known not affected: 51 | 2026-08-04T18:42:19+00:00 | Vulnerability · Source |
| CVE-2024-41014 | redhat_vex | kernel: xfs: add bounds checking to xlog_recover_process_data | fixed: 926 known affected: 64 known not affected: 4 | 2026-08-04T18:42:14+00:00 | Vulnerability · Source |
| CVE-2017-15089 | redhat_vex | infinispan: Unsafe deserialization of malicious object injected into data cache | fixed: 321 known affected: 7 known not affected: 2 | 2026-08-04T18:42:08+00:00 | Vulnerability · Source |
| CVE-2016-6817 | redhat_vex | tomcat: Infinite loop in HTTP/2 header parser | known not affected: 6 under investigation: 5 | 2026-08-04T18:41:56+00:00 | Vulnerability · Source |
| CVE-2017-12615 | redhat_vex | tomcat: Remote Code Execution via JSP Upload | fixed: 267 known not affected: 11 | 2026-08-04T18:41:56+00:00 | Vulnerability · Source |
| CVE-2017-12617 | redhat_vex | tomcat: Remote Code Execution bypass for CVE-2017-12615 | fixed: 743 known affected: 2 known not affected: 10 | 2026-08-04T18:41:50+00:00 | Vulnerability · Source |
| CVE-2016-8735 | redhat_vex | tomcat: Remote code execution vulnerability in JmxRemoteLifecycleListener | fixed: 99 known affected: 16 known not affected: 35 | 2026-08-04T18:41:50+00:00 | Vulnerability · Source |
| CVE-2016-6497 | redhat_vex | groovy: allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods | known affected: 7 known not affected: 7 | 2026-08-04T18:41:48+00:00 | Vulnerability · Source |
| CVE-2016-7050 | redhat_vex | RESTEasy: SerializableProvider enabled by default and deserializes untrusted data | fixed: 64 known not affected: 4 | 2026-08-04T18:41:44+00:00 | Vulnerability · Source |
| CVE-2016-6814 | redhat_vex | Groovy: Remote code execution via deserialization | fixed: 33 known affected: 8 known not affected: 2 under investigation: 1 | 2026-08-04T18:41:43+00:00 | Vulnerability · Source |
| CVE-2016-7054 | redhat_vex | openssl: Corrupting larger payloads when using ChaCha20/Poly1305 ciphersuites leads to DoS | known not affected: 22 | 2026-08-04T18:41:20+00:00 | Vulnerability · Source |
| CVE-2016-8745 | redhat_vex | tomcat: information disclosure due to incorrect Processor sharing | fixed: 191 known affected: 14 known not affected: 9 | 2026-08-04T18:41:16+00:00 | Vulnerability · Source |
| CVE-2016-8656 | redhat_vex | jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation | fixed: 1493 known affected: 1 | 2026-08-04T18:41:12+00:00 | Vulnerability · Source |
| CVE-2017-11103 | redhat_vex | krb5: Metadata taken from the unauthenticated plaintext | known not affected: 115 | 2026-08-04T18:40:35+00:00 | Vulnerability · Source |
| CVE-2017-12629 | redhat_vex | Solr: Code execution via entity expansion | fixed: 460 known affected: 5 known not affected: 14 | 2026-08-04T18:39:55+00:00 | Vulnerability · Source |
| CVE-2024-41059 | redhat_vex | kernel: hfsplus: fix uninit-value in copy_name | known not affected: 198 | 2026-08-04T18:38:46+00:00 | Vulnerability · Source |
| CVE-2024-41022 | redhat_vex | kernel: drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() | known affected: 28 known not affected: 170 | 2026-08-04T18:38:45+00:00 | Vulnerability · Source |
| CVE-2024-41019 | redhat_vex | kernel: fs/ntfs3: Validate ff offset | known not affected: 198 | 2026-08-04T18:38:41+00:00 | Vulnerability · Source |
| CVE-2024-40984 | redhat_vex | kernel: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." | fixed: 827 known affected: 64 known not affected: 1 | 2026-08-04T18:38:32+00:00 | Vulnerability · Source |
| CVE-2024-41045 | redhat_vex | kernel: bpf: Defer work in bpf_timer_cancel_and_free | known affected: 136 known not affected: 62 | 2026-08-04T18:38:26+00:00 | Vulnerability · Source |