VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299359 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-9351 | redhat_vex | NousResearch hermes-agent read_file Tool file_tools.py _is_blocked_device path traversal | known not affected: 1 | 2026-05-26T20:14:28+00:00 | Vulnerability · Source |
| CVE-2026-9349 | redhat_vex | calcom cal.diy Generic React API bookings-single-view.getServerSideProps.tsx getServerSideProps information disclosure | known not affected: 1 | 2026-05-26T20:14:27+00:00 | Vulnerability · Source |
| CVE-2026-6059 | redhat_vex | CVE-2026-6059 | known not affected: 1 | 2026-05-26T20:14:26+00:00 | Vulnerability · Source |
| CVE-2026-4915 | redhat_vex | Server panic via outgoing webhook responses | known not affected: 1 | 2026-05-26T20:14:26+00:00 | Vulnerability · Source |
| CVE-2026-47072 | redhat_vex | CRLF injection in WebSocket upgrade request in hackney | known not affected: 1 | 2026-05-26T20:14:25+00:00 | Vulnerability · Source |
| CVE-2026-47070 | redhat_vex | HTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackney | known not affected: 1 | 2026-05-26T20:14:25+00:00 | Vulnerability · Source |
| CVE-2026-47076 | redhat_vex | SSRF allowlist bypass via percent-encoded host in hackney | known not affected: 1 | 2026-05-26T20:14:25+00:00 | Vulnerability · Source |
| CVE-2026-47075 | redhat_vex | CR/LF injection in query parameter in hackney | known not affected: 1 | 2026-05-26T20:14:25+00:00 | Vulnerability · Source |
| CVE-2026-40610 | redhat_vex | BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context | known not affected: 1 | 2026-05-26T20:14:24+00:00 | Vulnerability · Source |
| CVE-2026-24546 | redhat_vex | WordPress GamiPress plugin <= 7.6.3 - Broken Access Control vulnerability | known not affected: 1 | 2026-05-26T20:14:23+00:00 | Vulnerability · Source |
| CVE-2026-40127 | redhat_vex | Authorization Bypass Through User-Controlled Key in OutSystems Lifetime | known not affected: 1 | 2026-05-26T20:14:23+00:00 | Vulnerability · Source |
| CVE-2026-9489 | redhat_vex | NitroSense V3: Local Privilege Escalation (LPE) vulnerability | known not affected: 1 | 2026-05-26T20:14:22+00:00 | Vulnerability · Source |
| CVE-2026-9481 | redhat_vex | Edimax EW-7438RPn formStats stack-based overflow | known not affected: 1 | 2026-05-26T20:14:21+00:00 | Vulnerability · Source |
| CVE-2026-9480 | redhat_vex | Edimax EW-7438RPn formrefresh stack-based overflow | known not affected: 1 | 2026-05-26T20:14:20+00:00 | Vulnerability · Source |
| CVE-2026-9475 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setIpQosRules os command injection | known not affected: 1 | 2026-05-26T20:14:19+00:00 | Vulnerability · Source |
| CVE-2026-9459 | redhat_vex | Edimax EW-7438RPn formConnectionSetting stack-based overflow | known not affected: 1 | 2026-05-26T20:14:18+00:00 | Vulnerability · Source |
| CVE-2026-9463 | redhat_vex | Edimax EW-7438RPn formLicence stack-based overflow | known not affected: 1 | 2026-05-26T20:14:18+00:00 | Vulnerability · Source |
| CVE-2026-9426 | redhat_vex | Edimax EW-7438RPn formHwSet stack-based overflow | known not affected: 1 | 2026-05-26T20:14:17+00:00 | Vulnerability · Source |
| CVE-2026-9433 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setMacFilterRules os command injection | known not affected: 1 | 2026-05-26T20:14:16+00:00 | Vulnerability · Source |
| CVE-2026-9435 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setQosCfg os command injection | known not affected: 1 | 2026-05-26T20:14:16+00:00 | Vulnerability · Source |
| CVE-2026-9457 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi UploadFirmwareFile os command injection | known not affected: 1 | 2026-05-26T20:14:16+00:00 | Vulnerability · Source |
| CVE-2026-9429 | redhat_vex | Tenda F1202 WrlExtraSet formWrlExtraSet stack-based overflow | known not affected: 1 | 2026-05-26T20:14:15+00:00 | Vulnerability · Source |
| CVE-2026-9427 | redhat_vex | Edimax EW-7438RPn webs formWlSiteSurvey stack-based overflow | known not affected: 1 | 2026-05-26T20:14:15+00:00 | Vulnerability · Source |
| CVE-2026-9432 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setWiFiAdvancedCfg os command injection | known not affected: 1 | 2026-05-26T20:14:15+00:00 | Vulnerability · Source |
| CVE-2026-9408 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setStaticDhcpRules os command injection | known not affected: 1 | 2026-05-26T20:14:14+00:00 | Vulnerability · Source |
| CVE-2026-9405 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setGameSpeedCfg os command injection | known not affected: 1 | 2026-05-26T20:14:13+00:00 | Vulnerability · Source |
| CVE-2026-9393 | redhat_vex | H3C Magic B0 aspForm Edit_BasicSSID_5G buffer overflow | known not affected: 1 | 2026-05-26T20:14:13+00:00 | Vulnerability · Source |
| CVE-2026-9397 | redhat_vex | Besen BS20 EV Charging Station OTA Update Installation improper authorization | known not affected: 1 | 2026-05-26T20:14:13+00:00 | Vulnerability · Source |
| CVE-2026-9399 | redhat_vex | Edimax BR-6675nD POST Request formsetPPPoE buffer overflow | known not affected: 1 | 2026-05-26T20:14:13+00:00 | Vulnerability · Source |
| CVE-2026-9403 | redhat_vex | Edimax BR-6675nD POST Request formWlSiteSurvey buffer overflow | known not affected: 1 | 2026-05-26T20:14:13+00:00 | Vulnerability · Source |
| CVE-2026-9388 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setScheduleCfg os command injection | known not affected: 1 | 2026-05-26T20:14:12+00:00 | Vulnerability · Source |
| CVE-2026-9387 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setUpgradeFW os command injection | known not affected: 1 | 2026-05-26T20:14:11+00:00 | Vulnerability · Source |
| CVE-2026-9384 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setDiagnosisCfg os command injection | known not affected: 1 | 2026-05-26T20:14:11+00:00 | Vulnerability · Source |
| CVE-2026-9345 | redhat_vex | Edimax EW-7438RPn webs formWizSurvey buffer overflow | known not affected: 1 | 2026-05-26T20:14:09+00:00 | Vulnerability · Source |
| CVE-2026-9382 | redhat_vex | Edimax BR-6675nD POST Request formPPTPSetup buffer overflow | known not affected: 1 | 2026-05-26T20:14:09+00:00 | Vulnerability · Source |
| CVE-2026-9284 | redhat_vex | WooCommerce PayPal Payments <= 4.0.1 - Missing Authorization to Unauthenticated Order Manipulation and Information Disclosure | known not affected: 1 | 2026-05-26T20:14:07+00:00 | Vulnerability · Source |
| CVE-2026-9344 | redhat_vex | Edimax EW-7438RPn webs formWpsStart stack-based overflow | known not affected: 1 | 2026-05-26T20:14:07+00:00 | Vulnerability · Source |
| CVE-2026-9058 | redhat_vex | Improper Certificate Verification in Szafir SDK | known not affected: 1 | 2026-05-26T20:14:06+00:00 | Vulnerability · Source |
| CVE-2026-8652 | redhat_vex | CVE-2026-8652 | known not affected: 1 | 2026-05-26T20:14:06+00:00 | Vulnerability · Source |
| CVE-2026-6897 | redhat_vex | Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Update via 'wishlistmember_team_accounts_save_settings' AJAX action | known not affected: 1 | 2026-05-26T20:14:05+00:00 | Vulnerability · Source |
| CVE-2026-7766 | redhat_vex | Path Traversal in Kenik cameras | known not affected: 1 | 2026-05-26T20:14:05+00:00 | Vulnerability · Source |
| CVE-2026-6419 | redhat_vex | Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_get_screen' AJAX action | known not affected: 1 | 2026-05-26T20:14:05+00:00 | Vulnerability · Source |
| CVE-2026-6895 | redhat_vex | Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_export_settings' AJAX Action | known not affected: 1 | 2026-05-26T20:14:05+00:00 | Vulnerability · Source |
| CVE-2026-5843 | redhat_vex | Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading | known not affected: 1 | 2026-05-26T20:14:05+00:00 | Vulnerability · Source |
| CVE-2026-5817 | redhat_vex | Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends | known not affected: 1 | 2026-05-26T20:14:04+00:00 | Vulnerability · Source |
| CVE-2026-47077 | redhat_vex | Unbounded body accumulation in HTTP/3 response loop in hackney | known not affected: 1 | 2026-05-26T20:14:03+00:00 | Vulnerability · Source |
| CVE-2026-47067 | redhat_vex | Atom table exhaustion via unrecognized URL schemes in hackney | known not affected: 1 | 2026-05-26T20:14:03+00:00 | Vulnerability · Source |
| CVE-2026-47071 | redhat_vex | SOCKS5 TLS upgrade ignores caller timeout in hackney | known not affected: 1 | 2026-05-26T20:14:03+00:00 | Vulnerability · Source |
| CVE-2026-47073 | redhat_vex | Unbounded memory consumption in WebSocket client in hackney | known not affected: 1 | 2026-05-26T20:14:03+00:00 | Vulnerability · Source |
| CVE-2026-47066 | redhat_vex | Infinite loop in Alt-Svc header parser in hackney | known not affected: 1 | 2026-05-26T20:14:02+00:00 | Vulnerability · Source |