VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297698 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-9735 | redhat_vex | Keyfile contents are in MongoDB Server logs | known not affected: 1 | 2026-06-11T02:59:25+00:00 | Vulnerability · Source |
| CVE-2026-53675 | redhat_vex | BuddyPress 14.4.0 Friends List IDOR via REST API | known not affected: 1 | 2026-06-11T02:59:24+00:00 | Vulnerability · Source |
| CVE-2026-47903 | redhat_vex | CAI Content Credentials | Improper Input Validation (CWE-20) | known not affected: 1 | 2026-06-11T02:59:23+00:00 | Vulnerability · Source |
| CVE-2026-47904 | redhat_vex | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) | known not affected: 1 | 2026-06-11T02:59:23+00:00 | Vulnerability · Source |
| CVE-2026-46543 | redhat_vex | nimiq-blockchain: Genesis batch set request | known not affected: 1 | 2026-06-11T02:59:22+00:00 | Vulnerability · Source |
| CVE-2026-46542 | redhat_vex | nimiq-keys: Denial of service in Ed25519 multisig delinearization via invalid curve points | known not affected: 1 | 2026-06-11T02:59:22+00:00 | Vulnerability · Source |
| CVE-2026-47902 | redhat_vex | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) | known not affected: 1 | 2026-06-11T02:59:22+00:00 | Vulnerability · Source |
| CVE-2026-46540 | redhat_vex | Nimiq light-blockchain: Light blockchain rebranch issue | known not affected: 1 | 2026-06-11T02:59:21+00:00 | Vulnerability · Source |
| CVE-2026-46411 | redhat_vex | FlashMQ: Client can trigger uncaught exception on FlashMQ 1.26.1 and older | known not affected: 1 | 2026-06-11T02:59:21+00:00 | Vulnerability · Source |
| CVE-2026-46539 | redhat_vex | nimiq-primitives: BlockInclusionProof interlink issue when hops are empty | known not affected: 1 | 2026-06-11T02:59:21+00:00 | Vulnerability · Source |
| CVE-2026-44505 | redhat_vex | Nimiq network-libp2p: Untrusted peer can wedge DHT | known not affected: 1 | 2026-06-11T02:59:20+00:00 | Vulnerability · Source |
| CVE-2026-45160 | redhat_vex | ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parser | known not affected: 1 | 2026-06-11T02:59:20+00:00 | Vulnerability · Source |
| CVE-2026-41706 | redhat_vex | Open Redirect When Using CookieRequestCache | known not affected: 1 | 2026-06-11T02:59:19+00:00 | Vulnerability · Source |
| CVE-2026-41008 | redhat_vex | Spring Security Authorization Server Open Redirect via request_uri | known not affected: 1 | 2026-06-11T02:59:17+00:00 | Vulnerability · Source |
| CVE-2026-9753 | redhat_vex | Server crash via malformed binary diff passed to $_internalApplyOplogUpdate. | known not affected: 1 | 2026-06-11T02:59:16+00:00 | Vulnerability · Source |
| CVE-2026-9754 | redhat_vex | Stack memory disclosure in filemd5 command | known not affected: 1 | 2026-06-11T02:59:16+00:00 | Vulnerability · Source |
| CVE-2026-9752 | redhat_vex | GeometryCollection with strict-winding polygon causes server crash during 2dsphere index key generation | known not affected: 1 | 2026-06-11T02:59:15+00:00 | Vulnerability · Source |
| CVE-2026-46545 | redhat_vex | nimiq-primitives: Panic DoS in trie chunk processing via ROOT-keyed item | known not affected: 1 | 2026-06-11T02:59:15+00:00 | Vulnerability · Source |
| CVE-2026-9749 | redhat_vex | Using MaxKey() may crash the server | known not affected: 1 | 2026-06-11T02:59:14+00:00 | Vulnerability · Source |
| CVE-2026-9750 | redhat_vex | Metadata name collision on $-prefixed fields causes post-auth server crash | known not affected: 1 | 2026-06-11T02:59:14+00:00 | Vulnerability · Source |
| CVE-2026-9748 | redhat_vex | $_internalConvertBucketIndexStats may crash the mongod server when working on no timeseries input | known not affected: 1 | 2026-06-11T02:59:14+00:00 | Vulnerability · Source |
| CVE-2026-9743 | redhat_vex | Aggregation sub-pipeline null dereference may allow DoS via crafted getMore | known not affected: 1 | 2026-06-11T02:59:13+00:00 | Vulnerability · Source |
| CVE-2026-9747 | redhat_vex | Crafted cross-shard merge aggregation crashes MongoDB Server | known not affected: 1 | 2026-06-11T02:59:13+00:00 | Vulnerability · Source |
| CVE-2026-9746 | redhat_vex | Server crashes in case of the use of exchange | known not affected: 1 | 2026-06-11T02:59:13+00:00 | Vulnerability · Source |
| CVE-2026-53673 | redhat_vex | BuddyPress 14.4.0 Private Message IDOR via REST API user_id Parameter | known not affected: 1 | 2026-06-11T02:59:12+00:00 | Vulnerability · Source |
| CVE-2026-53674 | redhat_vex | BuddyPress 14.4.0 REGEXP Injection via @Mention Username Resolution | known not affected: 1 | 2026-06-11T02:59:12+00:00 | Vulnerability · Source |
| CVE-2026-9741 | redhat_vex | Client side encryption fails to encrypt values in a $vectorSearch | known not affected: 1 | 2026-06-11T02:59:12+00:00 | Vulnerability · Source |
| CVE-2026-9742 | redhat_vex | Authenticate command with specific mechanism parameter can trigger server crash | known not affected: 1 | 2026-06-11T02:59:12+00:00 | Vulnerability · Source |
| CVE-2026-46518 | redhat_vex | OpenEMR: Stored XSS in prescription CSS/HTML print view via patient demographics | known not affected: 1 | 2026-06-11T02:59:11+00:00 | Vulnerability · Source |
| CVE-2026-46541 | redhat_vex | Nimiq network-libp2p: DHT query poisoning via first-record verification failure | known not affected: 1 | 2026-06-11T02:59:11+00:00 | Vulnerability · Source |
| CVE-2026-46432 | redhat_vex | LMDeploy: Arbitrary code execution via hardcoded trust_remote_code=True in lmdeploy model initialization | known not affected: 1 | 2026-06-11T02:59:11+00:00 | Vulnerability · Source |
| CVE-2026-46374 | redhat_vex | SQLFluff: Uncontrolled Resource Consumption in Parser | known not affected: 1 | 2026-06-11T02:59:11+00:00 | Vulnerability · Source |
| CVE-2026-46491 | redhat_vex | SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion | known not affected: 1 | 2026-06-11T02:59:11+00:00 | Vulnerability · Source |
| CVE-2026-46517 | redhat_vex | LMDeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-out | known not affected: 1 | 2026-06-11T02:59:11+00:00 | Vulnerability · Source |
| CVE-2026-45782 | redhat_vex | Cloud Hypervisor: Use-after-free in virtio-block Async I/O Completion | known not affected: 1 | 2026-06-11T02:59:10+00:00 | Vulnerability · Source |
| CVE-2026-45329 | redhat_vex | ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappers | known not affected: 1 | 2026-06-11T02:59:10+00:00 | Vulnerability · Source |
| CVE-2026-45542 | redhat_vex | ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth | known not affected: 1 | 2026-06-11T02:59:10+00:00 | Vulnerability · Source |
| CVE-2026-45541 | redhat_vex | ESF-IDF: Remote Null Pointer Dereference in WebSocket Server | known not affected: 1 | 2026-06-11T02:59:10+00:00 | Vulnerability · Source |
| CVE-2026-45328 | redhat_vex | ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers | known not affected: 1 | 2026-06-11T02:59:10+00:00 | Vulnerability · Source |
| CVE-2026-46373 | redhat_vex | SQLFluff: Recursive Stack Overflow in Parser | known not affected: 1 | 2026-06-11T02:59:10+00:00 | Vulnerability · Source |
| CVE-2026-34712 | redhat_vex | CAI Content Credentials | Improper Input Validation (CWE-20) | known not affected: 1 | 2026-06-11T02:59:09+00:00 | Vulnerability · Source |
| CVE-2026-44634 | redhat_vex | Stack buffer overflows in SimpleBLE | known not affected: 1 | 2026-06-11T02:59:09+00:00 | Vulnerability · Source |
| CVE-2026-34713 | redhat_vex | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) | known not affected: 1 | 2026-06-11T02:59:09+00:00 | Vulnerability · Source |
| CVE-2026-44963 | redhat_vex | CVE-2026-44963 | known not affected: 1 | 2026-06-11T02:59:09+00:00 | Vulnerability · Source |
| CVE-2026-44716 | redhat_vex | Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator | known not affected: 1 | 2026-06-11T02:59:09+00:00 | Vulnerability · Source |
| CVE-2025-58468 | redhat_vex | Notification Center | known not affected: 1 | 2026-06-11T02:59:08+00:00 | Vulnerability · Source |
| CVE-2025-59382 | redhat_vex | QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances) | known not affected: 1 | 2026-06-11T02:59:08+00:00 | Vulnerability · Source |
| CVE-2026-34417 | redhat_vex | OSCAL-GUI Reflected XSS via project parameter in oscal-forms.php | known not affected: 1 | 2026-06-11T02:59:08+00:00 | Vulnerability · Source |
| CVE-2026-34416 | redhat_vex | OSCAL-GUI Reflected XSS via project parameter in oscal.php | known not affected: 1 | 2026-06-11T02:59:08+00:00 | Vulnerability · Source |
| CVE-2025-66276 | redhat_vex | QTS | known not affected: 1 | 2026-06-11T02:59:08+00:00 | Vulnerability · Source |