VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
222278 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-26130 | redhat_vex | python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override | fixed: 105 known not affected: 533 | 2026-07-03T01:47:29+00:00 | Vulnerability · Source |
| CVE-2024-23651 | redhat_vex | moby/buildkit: possible race condition with accessing subpaths from cache mounts | known affected: 2 known not affected: 31 | 2026-07-03T01:47:25+00:00 | Vulnerability · Source |
| CVE-2024-6827 | redhat_vex | gunicorn: HTTP Request Smuggling in benoitc/gunicorn | fixed: 2 known affected: 2 | 2026-07-03T01:47:22+00:00 | Vulnerability · Source |
| CVE-2024-3623 | redhat_vex | mirror-registry: Default database secret key stored in plain-text on initial configuration file | known affected: 1 | 2026-07-03T01:47:20+00:00 | Vulnerability · Source |
| CVE-2024-3622 | redhat_vex | mirror-registry: Plain-text default CSRF secret key | known affected: 1 | 2026-07-03T01:47:13+00:00 | Vulnerability · Source |
| CVE-2024-1135 | redhat_vex | python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers | fixed: 22 known affected: 6 known not affected: 2486 | 2026-07-03T01:47:10+00:00 | Vulnerability · Source |
| CVE-2023-46234 | redhat_vex | browserify-sign: upper bound check issue in dsaVerify leads to a signature forgery attack | fixed: 1 known affected: 27 known not affected: 47 | 2026-07-03T01:47:06+00:00 | Vulnerability · Source |
| CVE-2023-41056 | redhat_vex | redis: Heap Buffer Overflow may lead to potential remote code execution | fixed: 18 known affected: 2 known not affected: 12 | 2026-07-03T01:47:00+00:00 | Vulnerability · Source |
| CVE-2023-31418 | redhat_vex | elasticsearch: uncontrolled resource consumption | known affected: 2 known not affected: 3 | 2026-07-03T01:46:54+00:00 | Vulnerability · Source |
| CVE-2023-30861 | redhat_vex | flask: Possible disclosure of permanent session cookie due to missing Vary: Cookie header | fixed: 20 known affected: 5 known not affected: 265 | 2026-07-03T01:46:50+00:00 | Vulnerability · Source |
| CVE-2023-26115 | redhat_vex | word-wrap: ReDoS | fixed: 48 known affected: 38 known not affected: 944 | 2026-07-03T01:46:45+00:00 | Vulnerability · Source |
| CVE-2023-6597 | redhat_vex | python: Path traversal on tempfile.TemporaryDirectory | fixed: 971 known not affected: 1554 | 2026-07-03T01:46:42+00:00 | Vulnerability · Source |
| CVE-2023-4911 | redhat_vex | glibc: buffer overflow in ld.so leading to privilege escalation | fixed: 4066 known not affected: 18 | 2026-07-03T01:46:38+00:00 | Vulnerability · Source |
| CVE-2026-5160 | redhat_vex | github.com/yuin/goldmark/renderer/html: github.com/yuin/goldmark/renderer/html: Cross-site Scripting due to improper URL validation | known affected: 4 | 2026-07-03T01:45:40+00:00 | Vulnerability · Source |
| CVE-2025-69725 | redhat_vex | go-chi/chi: Go-chi/chi: Open Redirect vulnerability allows redirection to malicious websites | known affected: 93 | 2026-07-03T01:45:35+00:00 | Vulnerability · Source |
| CVE-2023-23946 | redhat_vex | git: git apply: a path outside the working tree can be overwritten with crafted input | fixed: 153 known affected: 33 | 2026-07-03T01:42:05+00:00 | Vulnerability · Source |
| CVE-2023-23931 | redhat_vex | python-cryptography: memory corruption via immutable objects | fixed: 354 known affected: 10 known not affected: 143 | 2026-07-03T01:41:58+00:00 | Vulnerability · Source |
| CVE-2023-22745 | redhat_vex | tpm2-tss: Buffer Overlow in TSS2_RC_Decode | fixed: 112 known affected: 3 | 2026-07-03T01:41:54+00:00 | Vulnerability · Source |
| CVE-2023-22490 | redhat_vex | git: data exfiltration with maliciously crafted repository | fixed: 153 known affected: 33 | 2026-07-03T01:41:49+00:00 | Vulnerability · Source |
| CVE-2023-22458 | redhat_vex | redis: Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands may lead to denial-of-service | fixed: 18 known affected: 7 known not affected: 12 | 2026-07-03T01:41:46+00:00 | Vulnerability · Source |
| CVE-2022-46146 | redhat_vex | exporter-toolkit: authentication bypass via cache poisoning | fixed: 28 known affected: 11 known not affected: 1834 | 2026-07-03T01:41:44+00:00 | Vulnerability · Source |
| CVE-2022-41940 | redhat_vex | engine.io: Specially crafted HTTP request can trigger an uncaught exception | fixed: 1 known affected: 2 | 2026-07-03T01:41:42+00:00 | Vulnerability · Source |
| CVE-2022-41742 | redhat_vex | nginx: Memory disclosure in the ngx_http_mp4_module | fixed: 297 known affected: 45 known not affected: 1 | 2026-07-03T01:41:38+00:00 | Vulnerability · Source |
| CVE-2022-41741 | redhat_vex | nginx: Memory corruption in the ngx_http_mp4_module | fixed: 297 known affected: 45 known not affected: 1 | 2026-07-03T01:41:35+00:00 | Vulnerability · Source |
| CVE-2022-36087 | redhat_vex | python-oauthlib: DoS when attacker provides malicious IPV6 URI | fixed: 187 known affected: 10 known not affected: 14 | 2026-07-03T01:41:28+00:00 | Vulnerability · Source |
| CVE-2022-35977 | redhat_vex | redis: Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands may result with false OOM panic | fixed: 18 known affected: 10 known not affected: 9 | 2026-07-03T01:41:25+00:00 | Vulnerability · Source |
| CVE-2022-29217 | redhat_vex | python-jwt: Key confusion through non-blocklisted public key formats | known affected: 69 known not affected: 26 | 2026-07-03T01:41:18+00:00 | Vulnerability · Source |
| CVE-2022-29167 | redhat_vex | hawk: REDoS in hawk.utils.parseHost() when parsing Host header | known affected: 40 known not affected: 43 | 2026-07-03T01:41:18+00:00 | Vulnerability · Source |
| CVE-2022-25883 | redhat_vex | nodejs-semver: Regular expression denial of service | fixed: 838 known affected: 59 known not affected: 253 | 2026-07-03T01:41:15+00:00 | Vulnerability · Source |
| CVE-2022-25858 | redhat_vex | terser: insecure use of regular expressions leads to ReDoS | fixed: 4 known affected: 53 known not affected: 33 | 2026-07-03T01:41:11+00:00 | Vulnerability · Source |
| CVE-2022-24863 | redhat_vex | http-swagger: a denial of service attack consisting of memory exhaustion on the host system | known affected: 2 | 2026-07-03T01:41:08+00:00 | Vulnerability · Source |
| CVE-2022-24772 | redhat_vex | node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery | fixed: 11 known affected: 30 known not affected: 89 | 2026-07-03T01:41:02+00:00 | Vulnerability · Source |
| CVE-2022-24765 | redhat_vex | git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree | fixed: 153 known affected: 50 | 2026-07-03T01:40:58+00:00 | Vulnerability · Source |
| CVE-2022-21499 | redhat_vex | kernel: possible to use the debugger to write zero into a location of choice | fixed: 475 known affected: 28 known not affected: 14 | 2026-07-03T01:40:54+00:00 | Vulnerability · Source |
| CVE-2022-4645 | redhat_vex | libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c | fixed: 84 known affected: 13 | 2026-07-03T01:40:52+00:00 | Vulnerability · Source |
| CVE-2022-2953 | redhat_vex | libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c | fixed: 84 known affected: 13 | 2026-07-03T01:40:48+00:00 | Vulnerability · Source |
| CVE-2022-2929 | redhat_vex | dhcp: DHCP memory leak | fixed: 83 known affected: 11 | 2026-07-03T01:40:47+00:00 | Vulnerability · Source |
| CVE-2022-2928 | redhat_vex | dhcp: option refcount overflow when leasequery is enabled leading to dhcpd abort | fixed: 83 known affected: 11 | 2026-07-03T01:40:42+00:00 | Vulnerability · Source |
| CVE-2022-2217 | redhat_vex | npm: XSS in parse-url | known affected: 7 known not affected: 6 | 2026-07-03T01:40:39+00:00 | Vulnerability · Source |
| CVE-2022-1678 | redhat_vex | kernel: improper update of sock reference in TCP pacing can lead to memory leak | known affected: 14 known not affected: 184 | 2026-07-03T01:40:35+00:00 | Vulnerability · Source |
| CVE-2023-25577 | redhat_vex | python-werkzeug: high resource usage when parsing multipart form data with many fields | fixed: 520 known affected: 14 known not affected: 1864 | 2026-07-03T01:40:30+00:00 | Vulnerability · Source |
| CVE-2022-31129 | redhat_vex | moment: inefficient parsing algorithm resulting in DoS | fixed: 199 known affected: 114 known not affected: 509 | 2026-07-03T01:40:26+00:00 | Vulnerability · Source |
| CVE-2022-2588 | redhat_vex | kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation | fixed: 1091 known affected: 14 known not affected: 114 | 2026-07-03T01:40:20+00:00 | Vulnerability · Source |
| CVE-2022-2586 | redhat_vex | kernel: nf_tables cross-table potential use-after-free may lead to local privilege escalation | fixed: 475 known not affected: 42 | 2026-07-03T01:40:16+00:00 | Vulnerability · Source |
| CVE-2022-0722 | redhat_vex | parse-url: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url | fixed: 1 known affected: 12 known not affected: 4 | 2026-07-03T01:40:14+00:00 | Vulnerability · Source |
| CVE-2026-10078 | redhat_vex | quay/config-tool: quay/config-tool: GitLab OAuth client_secret exposed in URL querystring | known affected: 2 | 2026-07-03T01:12:27+00:00 | Vulnerability · Source |
| CVE-2026-10052 | redhat_vex | quay/config-tool: quay/config-tool: SSRF via unfiltered LDAP and SMTP config validation endpoints | known affected: 2 | 2026-07-03T01:12:26+00:00 | Vulnerability · Source |
| CVE-2026-57918 | microsoft_vex | libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in rpc_read_from_socket in lib/socket.c during a connection to a crafted NFS server, when the expected pdu size exceeds the absolute pdu size from the xid/record-marker. | known not affected: 1 | 2026-07-03T01:10:48+00:00 | Vulnerability · Source |
| CVE-2026-57231 | microsoft_vex | Podman: Malformed Image can trick podman run into leaking host environment variables into the container | known not affected: 1 | 2026-07-03T01:10:42+00:00 | Vulnerability · Source |
| CVE-2026-13322 | microsoft_vex | Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service | known affected: 1 | 2026-07-03T01:10:37+00:00 | Vulnerability · Source |