VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298679 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-44319 | redhat_vex | free5GC: NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-controlled notifyUri) | known not affected: 1 | 2026-05-28T20:12:47+00:00 | Vulnerability · Source |
| CVE-2026-42459 | redhat_vex | free5GC: Improper Input Validation and Generation of Error Message Containing Sensitive Information in github.com/free5gc/udm | known not affected: 1 | 2026-05-28T20:12:47+00:00 | Vulnerability · Source |
| CVE-2021-47924 | redhat_vex | WordPress Plugin Ultimate Product Catalogue 5.8.2 Stored XSS via price | known not affected: 1 | 2026-05-28T20:12:46+00:00 | Vulnerability · Source |
| CVE-2024-28765 | redhat_vex | Security vulnerability was found in IBM Security Directory Integrator | known not affected: 1 | 2026-05-28T20:12:46+00:00 | Vulnerability · Source |
| CVE-2025-68712 | redhat_vex | CVE-2025-68712 | known not affected: 1 | 2026-05-28T20:12:46+00:00 | Vulnerability · Source |
| CVE-2026-45942 | microsoft_vex | ext4: fix e4b bitmap inconsistency reports | fixed: 1 known affected: 1 | 2026-05-28T14:52:16+00:00 | Vulnerability · Source |
| CVE-2026-9256 | microsoft_vex | NGINX ngx_http_rewrite_module vulnerability | fixed: 1 known affected: 1 | 2026-05-28T14:50:09+00:00 | Vulnerability · Source |
| CVE-2026-45958 | microsoft_vex | drm/exynos: vidi: fix to avoid directly dereferencing user pointer | fixed: 1 known affected: 1 | 2026-05-28T14:49:12+00:00 | Vulnerability · Source |
| CVE-2026-45912 | microsoft_vex | ext4: don't cache extent during splitting extent | fixed: 1 known affected: 1 | 2026-05-28T14:48:19+00:00 | Vulnerability · Source |
| CVE-2026-45899 | microsoft_vex | ext4: drop extent cache when splitting extent fails | fixed: 1 known affected: 1 | 2026-05-28T14:45:50+00:00 | Vulnerability · Source |
| CVE-2025-71305 | microsoft_vex | drm/display/dp_mst: Add protection against 0 vcpi | fixed: 1 known affected: 1 | 2026-05-28T14:43:40+00:00 | Vulnerability · Source |
| CVE-2026-45892 | microsoft_vex | ext4: drop extent cache after doing PARTIAL_VALID1 zeroout | fixed: 1 known affected: 1 | 2026-05-28T14:43:01+00:00 | Vulnerability · Source |
| CVE-2026-45858 | microsoft_vex | ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 | fixed: 1 known affected: 1 | 2026-05-28T14:42:16+00:00 | Vulnerability · Source |
| CVE-2026-45956 | microsoft_vex | drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() | fixed: 1 known affected: 1 | 2026-05-28T14:41:41+00:00 | Vulnerability · Source |
| CVE-2026-46092 | microsoft_vex | wifi: rtw88: check for PCI upstream bridge existence | fixed: 1 known affected: 1 | 2026-05-28T14:39:56+00:00 | Vulnerability · Source |
| CVE-2026-9581 | redhat_vex | JeecgBoot add access control | known not affected: 1 | 2026-05-28T14:16:09+00:00 | Vulnerability · Source |
| CVE-2026-9572 | redhat_vex | GPAC MP4Box media.c Media_GetSample memory leak | known not affected: 1 | 2026-05-28T14:16:06+00:00 | Vulnerability · Source |
| CVE-2026-9565 | redhat_vex | haojing8312 WorkClaw Blacklist bash.rs is_dangerous os command injection | known not affected: 1 | 2026-05-28T14:16:05+00:00 | Vulnerability · Source |
| CVE-2026-9501 | redhat_vex | GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertion | known not affected: 1 | 2026-05-28T14:16:04+00:00 | Vulnerability · Source |
| CVE-2026-9513 | redhat_vex | Totolink CA750-PoE Setting cstecgi.cgi NTPSyncWithHost os command injection | known not affected: 1 | 2026-05-28T14:16:04+00:00 | Vulnerability · Source |
| CVE-2026-9448 | redhat_vex | code-projects Employee Management System applyleave.php cross site scripting | known not affected: 1 | 2026-05-28T14:15:54+00:00 | Vulnerability · Source |
| CVE-2026-49009 | redhat_vex | CVE-2026-49009 | known not affected: 1 | 2026-05-28T14:15:52+00:00 | Vulnerability · Source |
| CVE-2026-48902 | redhat_vex | Joomla! Core - [20260518] - Transport encryption downgrade for password and username reset links | known not affected: 1 | 2026-05-28T14:15:43+00:00 | Vulnerability · Source |
| CVE-2026-48901 | redhat_vex | Joomla! Core - [20260517] - Incorrect Cache Key Construction for InputFilter objects | known not affected: 1 | 2026-05-28T14:15:42+00:00 | Vulnerability · Source |
| CVE-2026-38422 | redhat_vex | CVE-2026-38422 | known not affected: 1 | 2026-05-28T14:15:36+00:00 | Vulnerability · Source |
| CVE-2026-47715 | redhat_vex | Bugsink: Issue event views can show an event from another project if its UUID is known | known not affected: 1 | 2026-05-28T14:15:33+00:00 | Vulnerability · Source |
| CVE-2026-9605 | redhat_vex | GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow | known not affected: 1 | 2026-05-28T14:15:32+00:00 | Vulnerability · Source |
| CVE-2026-9628 | redhat_vex | UTT HiPER 1200GW Web Management formPptpClientConfig stack-based overflow | known not affected: 1 | 2026-05-28T14:15:31+00:00 | Vulnerability · Source |
| CVE-2026-9544 | redhat_vex | Shenzhen Sixun Software Sixun Shanghui Group Business Management System PayConfig sql injection | known not affected: 1 | 2026-05-28T14:15:31+00:00 | Vulnerability · Source |
| CVE-2026-44723 | redhat_vex | Vowpal Wabbit: Shell injection via crafted PR title in python_checks.yml allows arbitrary command execution on CI runner | known not affected: 1 | 2026-05-28T14:15:31+00:00 | Vulnerability · Source |
| CVE-2026-9466 | redhat_vex | Tiandy Easy7 Integrated Management Platform API Endpoint updateUserPassword password recovery | known not affected: 1 | 2026-05-28T14:15:31+00:00 | Vulnerability · Source |
| CVE-2026-9460 | redhat_vex | Edimax EW-7438RPn formAccept stack-based overflow | known not affected: 1 | 2026-05-28T14:15:17+00:00 | Vulnerability · Source |
| CVE-2026-9454 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setOpenVpnCertGenerationCfg os command injection | known not affected: 1 | 2026-05-28T14:15:16+00:00 | Vulnerability · Source |
| CVE-2026-9442 | redhat_vex | Edimax BR-6478AC POST Request formiNICSiteSurvey buffer overflow | known not affected: 1 | 2026-05-28T14:15:07+00:00 | Vulnerability · Source |
| CVE-2026-9436 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setL2tpServerCfg os command injection | known not affected: 1 | 2026-05-28T14:15:06+00:00 | Vulnerability · Source |
| CVE-2026-9430 | redhat_vex | Tenda F1202 GstDhcpSetSerof formGstDhcpSetSer stack-based overflow | known not affected: 1 | 2026-05-28T14:14:57+00:00 | Vulnerability · Source |
| CVE-2026-33552 | redhat_vex | CVE-2026-33552 | known not affected: 1 | 2026-05-28T14:14:56+00:00 | Vulnerability · Source |
| CVE-2026-36539 | redhat_vex | CVE-2026-36539 | known not affected: 1 | 2026-05-28T14:14:56+00:00 | Vulnerability · Source |
| CVE-2026-44277 | redhat_vex | CVE-2026-44277 | known not affected: 1 | 2026-05-28T14:14:56+00:00 | Vulnerability · Source |
| CVE-2025-13955 | redhat_vex | Predictable Default Wi-Fi Password in EZCast Pro II Dongle | known not affected: 1 | 2026-05-28T14:14:56+00:00 | Vulnerability · Source |
| CVE-2025-13954 | redhat_vex | Hard-coded cryptographic keys in EZCast Pro II Dongle | known not affected: 1 | 2026-05-28T14:14:56+00:00 | Vulnerability · Source |
| CVE-2026-44730 | redhat_vex | OpenCTI: Privilege escalation via graphQL API abusable by organization admins, due to incorrect ACL on userEdit relationAdd | known not affected: 1 | 2026-05-28T14:14:56+00:00 | Vulnerability · Source |
| CVE-2026-7524 | redhat_vex | Path Traversal Vulnerability in File Processing Components Allows Unauthorized File System Access and Potential Remote Code Execution | known not affected: 1 | 2026-05-28T14:14:56+00:00 | Vulnerability · Source |
| CVE-2026-36045 | redhat_vex | CVE-2026-36045 | known not affected: 1 | 2026-05-28T14:14:56+00:00 | Vulnerability · Source |
| CVE-2026-49001 | redhat_vex | Cross-Site Request Forgery (CSRF) vulnerability in ZTE ZXUniPOS NDS-LTE product | known not affected: 1 | 2026-05-28T08:12:53+00:00 | Vulnerability · Source |
| CVE-2026-44410 | redhat_vex | Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTE | known not affected: 1 | 2026-05-28T08:12:43+00:00 | Vulnerability · Source |
| CVE-2026-49000 | redhat_vex | Cryptography Implementation Flaw vulnerability in ZTE ZXUniPOS NDS-LTE product | known not affected: 1 | 2026-05-28T08:12:43+00:00 | Vulnerability · Source |
| CVE-2025-46284 | redhat_vex | CVE-2025-46284 | known not affected: 1 | 2026-05-28T08:12:43+00:00 | Vulnerability · Source |
| CVE-2026-4051 | redhat_vex | IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code Execution | known not affected: 1 | 2026-05-28T08:12:43+00:00 | Vulnerability · Source |
| CVE-2026-48999 | redhat_vex | Stored Cross-Site Scripting (XSS) vulnerability in ZTE ZXUniPOS NDS-LTE product | known not affected: 1 | 2026-05-28T08:12:43+00:00 | Vulnerability · Source |