GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

VEX records

Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.

Reset

297725 VEX records

API response
Vulnerability Source Title Product status Imported Links
CVE-2026-46159 microsoft_vex btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak fixed: 1 known affected: 1 2026-06-09T14:40:08+00:00 Vulnerability · Source
CVE-2026-43499 microsoft_vex rtmutex: Use waiter::task instead of current in remove_waiter() fixed: 1 known affected: 1 2026-06-09T14:40:06+00:00 Vulnerability · Source
CVE-2026-46115 microsoft_vex block: add pgmap check to biovec_phys_mergeable fixed: 1 known affected: 1 2026-06-09T14:40:01+00:00 Vulnerability · Source
CVE-2026-43491 microsoft_vex net: qrtr: ns: Limit the maximum server registration per node fixed: 1 known affected: 1 2026-06-09T14:39:58+00:00 Vulnerability · Source
CVE-2026-45997 microsoft_vex scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails fixed: 1 known affected: 1 2026-06-09T14:39:53+00:00 Vulnerability · Source
CVE-2026-43492 microsoft_vex lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() fixed: 1 known affected: 1 2026-06-09T14:39:51+00:00 Vulnerability · Source
CVE-2026-46089 microsoft_vex zram: do not forget to endio for partial discard requests fixed: 1 known affected: 1 2026-06-09T14:39:46+00:00 Vulnerability · Source
CVE-2026-45846 microsoft_vex bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() fixed: 1 known affected: 1 2026-06-09T14:39:38+00:00 Vulnerability · Source
CVE-2026-23468 microsoft_vex drm/amdgpu: Limit BO list entry count to prevent resource exhaustion fixed: 1 known affected: 5 2026-06-09T14:39:35+00:00 Vulnerability · Source
CVE-2026-46091 microsoft_vex media: rc: igorplugusb: heed coherency rules fixed: 1 known affected: 1 2026-06-09T14:39:29+00:00 Vulnerability · Source
CVE-2026-45839 microsoft_vex bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() fixed: 1 known affected: 1 2026-06-09T14:39:21+00:00 Vulnerability · Source
CVE-2025-39981 microsoft_vex Bluetooth: MGMT: Fix possible UAFs fixed: 1 known affected: 13 2026-06-09T14:39:15+00:00 Vulnerability · Source
CVE-2026-45999 microsoft_vex erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() fixed: 1 known affected: 1 2026-06-09T14:39:12+00:00 Vulnerability · Source
CVE-2026-11495 redhat_vex CodeAstro Ingredients Stock Management System add_stock.php sql injection known not affected: 1 2026-06-09T08:59:33+00:00 Vulnerability · Source
CVE-2026-11492 redhat_vex D-Link DIR-823G vsftpd vsftpd.conf least privilege violation known not affected: 1 2026-06-09T08:59:29+00:00 Vulnerability · Source
CVE-2026-11494 redhat_vex TOTOLINK AC1200 T8 vsftpd vsftpd.conf least privilege violation known not affected: 1 2026-06-09T08:59:29+00:00 Vulnerability · Source
CVE-2026-11497 redhat_vex D-Link DCS-5615 Boa Webserver boa.conf least privilege violation known not affected: 1 2026-06-09T08:59:29+00:00 Vulnerability · Source
CVE-2026-11493 redhat_vex Tenda AC15 Samba smb.conf weak password known not affected: 1 2026-06-09T08:59:29+00:00 Vulnerability · Source
CVE-2025-66274 redhat_vex QTS, QuTS hero known not affected: 1 2026-06-09T08:59:29+00:00 Vulnerability · Source
CVE-2026-11491 redhat_vex CodeAstro Human Resource Management System Notice Board Management All_notice cross site scripting known not affected: 1 2026-06-09T08:59:29+00:00 Vulnerability · Source
CVE-2025-59381 redhat_vex QTS, QuTS hero known not affected: 1 2026-06-09T08:59:29+00:00 Vulnerability · Source
CVE-2025-66329 redhat_vex CVE-2025-66329 known not affected: 1 2026-06-09T08:59:29+00:00 Vulnerability · Source
CVE-2026-11490 redhat_vex code-projects Online Music Site Search.php sql injection known not affected: 1 2026-06-09T08:59:24+00:00 Vulnerability · Source
CVE-2026-11499 redhat_vex Tenda HG7HG9/HG10 formDOMAINBLK stack-based overflow known not affected: 1 2026-06-09T08:59:23+00:00 Vulnerability · Source
CVE-2026-41722 redhat_vex VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) known not affected: 1 2026-06-09T08:59:23+00:00 Vulnerability · Source
CVE-2026-41723 redhat_vex VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) known not affected: 1 2026-06-09T08:59:23+00:00 Vulnerability · Source
CVE-2026-41724 redhat_vex VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) known not affected: 1 2026-06-09T08:59:23+00:00 Vulnerability · Source
CVE-2026-11498 redhat_vex Tenda HG7HG9/HG10 Web Management voip_other_set asp_voip_OtherSet stack-based overflow known not affected: 1 2026-06-09T08:59:23+00:00 Vulnerability · Source
CVE-2026-11484 redhat_vex SourceCodester Class and Exam Timetabling System archive3.php sql injection known not affected: 1 2026-06-09T08:59:22+00:00 Vulnerability · Source
CVE-2026-11485 redhat_vex SourceCodester Class and Exam Timetabling System archive2.php sql injection known not affected: 1 2026-06-09T08:59:22+00:00 Vulnerability · Source
CVE-2026-11482 redhat_vex SourceCodester Class and Exam Timetabling System archive5.php sql injection known not affected: 1 2026-06-09T08:59:22+00:00 Vulnerability · Source
CVE-2026-11486 redhat_vex SourceCodester Class and Exam Timetabling System archive1.php sql injection known not affected: 1 2026-06-09T08:59:22+00:00 Vulnerability · Source
CVE-2026-11488 redhat_vex code-projects Simple Flight Ticket Booking System POST Parameter checkUser.php sql injection known not affected: 1 2026-06-09T08:59:22+00:00 Vulnerability · Source
CVE-2026-11483 redhat_vex SourceCodester Class and Exam Timetabling System archive4.php sql injection known not affected: 1 2026-06-09T08:59:22+00:00 Vulnerability · Source
CVE-2026-11489 redhat_vex code-projects Online Music Site AdminDeleteAlbum.php sql injection known not affected: 1 2026-06-09T08:59:22+00:00 Vulnerability · Source
CVE-2026-36786 redhat_vex CVE-2026-36786 known not affected: 1 2026-06-09T02:58:53+00:00 Vulnerability · Source
CVE-2026-36789 redhat_vex CVE-2026-36789 known not affected: 1 2026-06-09T02:58:53+00:00 Vulnerability · Source
CVE-2026-11480 redhat_vex Chengdu Everbrite Network Technology BeikeShop Admin Design Builder Endpoint admin.php sql injection known not affected: 1 2026-06-09T02:58:52+00:00 Vulnerability · Source
CVE-2026-11481 redhat_vex yoanbernabeu grepai Postgres Embedding Cache chunker.go PostgresStore.LookupByContentHash weak hash known not affected: 1 2026-06-09T02:58:52+00:00 Vulnerability · Source
CVE-2026-11468 redhat_vex SourceCodester Hospitals Patient Records Management System page room_types cross site scripting known not affected: 1 2026-06-09T02:58:51+00:00 Vulnerability · Source
CVE-2026-11479 redhat_vex yoanbernabeu grepai Qdrant Backend chunker.go weak hash known not affected: 1 2026-06-09T02:58:51+00:00 Vulnerability · Source
CVE-2026-11478 redhat_vex kokke tiny-regex-c Pattern re.c matchstar redos known not affected: 1 2026-06-09T02:58:50+00:00 Vulnerability · Source
CVE-2026-11477 redhat_vex hs-web hsweb-framework OAuth2 Client OAuth2Client.java OAuth2Client redirect known not affected: 1 2026-06-09T02:58:49+00:00 Vulnerability · Source
CVE-2026-11475 redhat_vex Kushan2k student-management-system Certificate Verification Endpoint GradeController.php getStatus sql injection known not affected: 1 2026-06-09T02:58:48+00:00 Vulnerability · Source
CVE-2026-11470 redhat_vex hs-web hsweb-framework File Upload FileUploadProperties.java denied path traversal known not affected: 1 2026-06-09T02:58:48+00:00 Vulnerability · Source
CVE-2026-11476 redhat_vex Kushan2k student-management-system Profile Update Endpoint AdminController.php edit-admin improper authorization known not affected: 1 2026-06-09T02:58:48+00:00 Vulnerability · Source
CVE-2026-11467 redhat_vex jishenghua jshERP addAccountHeadAndDetail Endpoint AccountHeadService.java path traversal known not affected: 1 2026-06-09T02:58:47+00:00 Vulnerability · Source
CVE-2026-11469 redhat_vex jishenghua jshERP platformConfig Add Endpoint PlatformConfigService.java insertPlatformConfig server-side request forgery known not affected: 1 2026-06-09T02:58:47+00:00 Vulnerability · Source
CVE-2026-11466 redhat_vex zilliztech deep-searcher collection_router.py CollectionRouter.invoke access control known not affected: 1 2026-06-09T02:58:46+00:00 Vulnerability · Source
CVE-2026-11465 redhat_vex songquanpeng one-api Redemption Code Top-Up Endpoint redemption.go Redeem logic error known not affected: 1 2026-06-09T02:58:46+00:00 Vulnerability · Source