VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297726 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-11469 | redhat_vex | jishenghua jshERP platformConfig Add Endpoint PlatformConfigService.java insertPlatformConfig server-side request forgery | known not affected: 1 | 2026-06-09T02:58:47+00:00 | Vulnerability · Source |
| CVE-2026-11466 | redhat_vex | zilliztech deep-searcher collection_router.py CollectionRouter.invoke access control | known not affected: 1 | 2026-06-09T02:58:46+00:00 | Vulnerability · Source |
| CVE-2026-11465 | redhat_vex | songquanpeng one-api Redemption Code Top-Up Endpoint redemption.go Redeem logic error | known not affected: 1 | 2026-06-09T02:58:46+00:00 | Vulnerability · Source |
| CVE-2026-11464 | redhat_vex | JeecgBoot User List Endpoint SysUserController.java queryPageList information disclosure | known not affected: 1 | 2026-06-09T02:58:46+00:00 | Vulnerability · Source |
| CVE-2026-11461 | redhat_vex | NousResearch hermes-agent resume Endpoint hermes_state.py resolve_session_by_title authorization | known not affected: 1 | 2026-06-09T02:58:46+00:00 | Vulnerability · Source |
| CVE-2026-11474 | redhat_vex | Kushan2k student-management-system Registration Endpoint RegisterService.php unrestricted upload | known not affected: 1 | 2026-06-09T02:58:45+00:00 | Vulnerability · Source |
| CVE-2026-11472 | redhat_vex | SourceCodester Class and Exam Timetabling System index1.php sql injection | known not affected: 1 | 2026-06-09T02:58:45+00:00 | Vulnerability · Source |
| CVE-2026-11473 | redhat_vex | jflyfox jfinal_cms AdvicefeedbackController.java list sql injection | known not affected: 1 | 2026-06-09T02:58:45+00:00 | Vulnerability · Source |
| CVE-2026-11471 | redhat_vex | SourceCodester Class and Exam Timetabling System index2.php sql injection | known not affected: 1 | 2026-06-09T02:58:44+00:00 | Vulnerability · Source |
| CVE-2023-48238 | redhat_vex | JWT Algorithm Confusion in json-web-token library | known not affected: 1 | 2026-06-09T02:58:44+00:00 | Vulnerability · Source |
| CVE-2026-11462 | redhat_vex | Chengdu Everbrite Network Technology BeikeShop Stripe Plugin StripeController.php callback improper authorization | known not affected: 1 | 2026-06-09T02:58:44+00:00 | Vulnerability · Source |
| CVE-2023-26081 | suse_vex | SUSE CVE CVE-2023-26081 | recommended: 8 | 2026-06-09T02:36:57+00:00 | Vulnerability · Source |
| CVE-2026-11487 | suse_vex | SUSE CVE CVE-2026-11487 | No product status | 2026-06-09T02:25:44+00:00 | Vulnerability · Source |
| CVE-2026-33190 | suse_vex | SUSE CVE CVE-2026-33190 | recommended: 4 | 2026-06-09T02:23:05+00:00 | Vulnerability · Source |
| CVE-2026-45076 | suse_vex | SUSE CVE CVE-2026-45076 | recommended: 1 | 2026-06-09T02:21:25+00:00 | Vulnerability · Source |
| CVE-2026-50589 | suse_vex | SUSE CVE CVE-2026-50589 | No product status | 2026-06-09T02:20:13+00:00 | Vulnerability · Source |
| CVE-2026-10722 | microsoft_vex | cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow | known affected: 8 known not affected: 1 | 2026-06-09T01:46:11+00:00 | Vulnerability · Source |
| CVE-2026-37460 | microsoft_vex | Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message. | known not affected: 1 | 2026-06-09T01:46:06+00:00 | Vulnerability · Source |
| CVE-2026-50292 | microsoft_vex | In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution | fixed: 1 known affected: 1 | 2026-06-09T01:45:39+00:00 | Vulnerability · Source |
| CVE-2026-46272 | microsoft_vex | coresight: tmc-etr: Fix race condition between sysfs and perf mode | known not affected: 1 | 2026-06-09T01:45:04+00:00 | Vulnerability · Source |
| CVE-2026-46250 | microsoft_vex | MIPS: Work around LLVM bug when gp is used as global register variable | fixed: 1 known affected: 1 | 2026-06-09T01:44:59+00:00 | Vulnerability · Source |
| CVE-2026-50031 | microsoft_vex | ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Two subcommands "ipmi-oem dell get-active-directory-config" and "ipmi-oem fujitsu get-sel-entry-long-text" were found to have exploitable buffer overflows on response messages. | fixed: 1 known affected: 1 | 2026-06-09T01:44:54+00:00 | Vulnerability · Source |
| CVE-2026-48959 | microsoft_vex | IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward | fixed: 1 known affected: 1 | 2026-06-09T01:44:47+00:00 | Vulnerability · Source |
| CVE-2025-15649 | microsoft_vex | IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date | fixed: 1 known affected: 1 | 2026-06-09T01:44:35+00:00 | Vulnerability · Source |
| CVE-2026-48962 | microsoft_vex | IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob | fixed: 1 known affected: 1 | 2026-06-09T01:44:28+00:00 | Vulnerability · Source |
| CVE-2026-42790 | microsoft_vex | nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification | fixed: 1 known affected: 1 | 2026-06-09T01:44:21+00:00 | Vulnerability · Source |
| CVE-2026-42789 | microsoft_vex | Non-CA certificate accepted as intermediate issuer in public_key path validation | fixed: 1 known affected: 1 | 2026-06-09T01:44:15+00:00 | Vulnerability · Source |
| CVE-2026-40510 | microsoft_vex | OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c | fixed: 1 known affected: 1 | 2026-06-09T01:44:08+00:00 | Vulnerability · Source |
| CVE-2026-40528 | microsoft_vex | OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c | fixed: 1 known affected: 1 | 2026-06-09T01:44:02+00:00 | Vulnerability · Source |
| CVE-2026-42496 | microsoft_vex | Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory | fixed: 1 known affected: 1 | 2026-06-09T01:43:56+00:00 | Vulnerability · Source |
| CVE-2026-23479 | microsoft_vex | redis-server use-after-free in unblock client flow may allow remote code execution | fixed: 1 known affected: 2 | 2026-06-09T01:41:54+00:00 | Vulnerability · Source |
| CVE-2026-23631 | microsoft_vex | redis-server Lua use-after-free may allow remote code execution | fixed: 1 known affected: 2 | 2026-06-09T01:41:49+00:00 | Vulnerability · Source |
| CVE-2026-25243 | microsoft_vex | redis-server RESTORE invalid memory access may allow remote code execution | fixed: 1 known affected: 2 | 2026-06-09T01:41:44+00:00 | Vulnerability · Source |
| CVE-2026-36501 | redhat_vex | CVE-2026-36501 | known not affected: 1 | 2026-06-08T20:59:16+00:00 | Vulnerability · Source |
| CVE-2026-49777 | redhat_vex | WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability | known not affected: 1 | 2026-06-08T20:59:16+00:00 | Vulnerability · Source |
| CVE-2020-37248 | redhat_vex | offlineimap: OfflineIMAP: Information disclosure via man-in-the-middle attack due to insecure STARTTLS handling | known not affected: 1 | 2026-06-08T18:52:52+00:00 | Vulnerability · Source |
| CVE-2026-11487 | redhat_vex | neovim: Neovim: Command Injection via argument path manipulation in M.read function | known not affected: 1 | 2026-06-08T18:43:18+00:00 | Vulnerability · Source |
| CVE-2025-9375 | redhat_vex | xmltodict: xmltodict XML Injection | known affected: 35 | 2026-06-08T18:34:19+00:00 | Vulnerability · Source |
| CVE-2026-31623 | redhat_vex | kernel: net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() | known not affected: 274 | 2026-06-08T16:07:46+00:00 | Vulnerability · Source |
| CVE-2019-11770 | redhat_vex | CVE-2019-11770 | known not affected: 1 | 2026-06-08T15:47:47+00:00 | Vulnerability · Source |
| CVE-2026-50265 | redhat_vex | Libinput: local privilege escalation via crafted uinput devices | known not affected: 1 | 2026-06-08T15:30:25+00:00 | Vulnerability · Source |
| CVE-2026-11411 | redhat_vex | iAI Lab PDF AI App chatpdf.pro getExternalCacheDir path traversal | known not affected: 1 | 2026-06-08T14:59:08+00:00 | Vulnerability · Source |
| CVE-2026-11437 | redhat_vex | perfree go-fastdfs-web Installation Endpoint checkServer server-side request forgery | known not affected: 1 | 2026-06-08T14:59:08+00:00 | Vulnerability · Source |
| CVE-2026-11436 | redhat_vex | Mage AI Sign-in Flow index.tsx useMutation cross site scripting | known not affected: 1 | 2026-06-08T14:59:08+00:00 | Vulnerability · Source |
| CVE-2026-3198 | redhat_vex | mlflow: MLflow: Information disclosure via insufficient authorization checks in Gateway API endpoints | known affected: 19 | 2026-06-08T10:38:41+00:00 | Vulnerability · Source |
| CVE-2026-11452 | redhat_vex | GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection | known not affected: 1 | 2026-06-08T08:58:48+00:00 | Vulnerability · Source |
| CVE-2026-11455 | redhat_vex | FoundationAgents MetaGPT common.py check_cmd_exists command injection | known not affected: 1 | 2026-06-08T08:58:48+00:00 | Vulnerability · Source |
| CVE-2026-11456 | redhat_vex | Chanjet CRM HTTP GET Request jxf_dump_systable.php sql injection | known not affected: 1 | 2026-06-08T08:58:48+00:00 | Vulnerability · Source |
| CVE-2026-11453 | redhat_vex | Tiobon Employee Self-Service System Login Endpoint BlogSearch.aspx sql injection | known not affected: 1 | 2026-06-08T08:58:48+00:00 | Vulnerability · Source |
| CVE-2026-11458 | redhat_vex | erzhongxmu JeeWMS Boot Actuator Endpoint actuator information disclosure | known not affected: 1 | 2026-06-08T08:58:48+00:00 | Vulnerability · Source |