VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299362 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-7701 | redhat_vex | Telegram Desktop Bot API url_auth_box.cpp RequestButton null pointer dereference | known not affected: 1 | 2026-05-19T19:57:45+00:00 | Vulnerability · Source |
| CVE-2026-45315 | redhat_vex | Open WebUI: Stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptions | known not affected: 1 | 2026-05-19T19:57:44+00:00 | Vulnerability · Source |
| CVE-2026-45243 | redhat_vex | Summarize < 0.15.1 Browser Extension Missing Authorization via Content Script | known not affected: 1 | 2026-05-19T19:57:44+00:00 | Vulnerability · Source |
| CVE-2026-47092 | redhat_vex | Claude HUD 0.0.12 Arbitrary Command Execution via COMSPEC Environment Variable | known not affected: 1 | 2026-05-19T19:57:44+00:00 | Vulnerability · Source |
| CVE-2026-8803 | redhat_vex | opensourcepos Open Source Point of Sale Employee Login Employee.php login weak hash | known not affected: 1 | 2026-05-19T19:57:44+00:00 | Vulnerability · Source |
| CVE-2026-29962 | redhat_vex | CVE-2026-29962 | known not affected: 1 | 2026-05-19T19:57:43+00:00 | Vulnerability · Source |
| CVE-2026-39467 | redhat_vex | WordPress Responsive Slider by MetaSlider plugin <= 3.106.0 - PHP Object Injection vulnerability | known not affected: 1 | 2026-05-19T19:57:43+00:00 | Vulnerability · Source |
| CVE-2026-29963 | redhat_vex | CVE-2026-29963 | known not affected: 1 | 2026-05-19T19:57:43+00:00 | Vulnerability · Source |
| CVE-2026-40003 | redhat_vex | USB-based arbitrary memory write vulnerability in ZTE ZX297520V3 soc BootROM | known not affected: 1 | 2026-05-19T19:57:43+00:00 | Vulnerability · Source |
| CVE-2026-42327 | redhat_vex | rust-openssl: rust-openssl: Arbitrary code execution via specially crafted certificate | known not affected: 1 | 2026-05-19T19:10:31+00:00 | Vulnerability · Source |
| CVE-2024-21528 | redhat_vex | node-gettext: Prototype Pollution | fixed: 24 known affected: 6 known not affected: 376 | 2026-05-19T16:03:16+00:00 | Vulnerability · Source |
| CVE-2024-11697 | redhat_vex | firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog | fixed: 365 known affected: 10 | 2026-05-19T15:39:23+00:00 | Vulnerability · Source |
| CVE-2024-11696 | redhat_vex | firefox: thunderbird: Unhandled Exception in Add-on Signature Verification | fixed: 365 known affected: 10 | 2026-05-19T15:23:56+00:00 | Vulnerability · Source |
| CVE-2024-11695 | redhat_vex | firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters | fixed: 367 known affected: 8 | 2026-05-19T15:23:55+00:00 | Vulnerability · Source |
| CVE-2024-11694 | redhat_vex | firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims | fixed: 365 known affected: 10 | 2026-05-19T15:23:53+00:00 | Vulnerability · Source |
| CVE-2024-11692 | redhat_vex | firefox: thunderbird: Select list elements could be shown over another site | fixed: 365 known affected: 8 known not affected: 4 | 2026-05-19T15:23:51+00:00 | Vulnerability · Source |
| CVE-2026-44431 | microsoft_vex | urllib3: Sensitive headers forwarded across origins in proxied low-level redirects | fixed: 1 known affected: 1 | 2026-05-19T14:40:42+00:00 | Vulnerability · Source |
| CVE-2024-11699 | redhat_vex | firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5 | fixed: 365 known affected: 10 | 2026-05-19T14:05:38+00:00 | Vulnerability · Source |
| CVE-2026-45349 | redhat_vex | Open WebUI: Broken Access Control for Completions API | known not affected: 1 | 2026-05-19T13:56:52+00:00 | Vulnerability · Source |
| CVE-2026-8788 | redhat_vex | Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections | known not affected: 1 | 2026-05-19T13:56:49+00:00 | Vulnerability · Source |
| CVE-2026-46719 | redhat_vex | Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections | known not affected: 1 | 2026-05-19T13:56:48+00:00 | Vulnerability · Source |
| CVE-2026-45365 | redhat_vex | Open WebUI: Authenticated users can bypass model access control via exposed query parameter | known not affected: 1 | 2026-05-19T13:56:48+00:00 | Vulnerability · Source |
| CVE-2026-45386 | redhat_vex | Open WebUI: An IDOR vulnerability exists in the pin_channel_message API endpoint | known not affected: 1 | 2026-05-19T13:56:48+00:00 | Vulnerability · Source |
| CVE-2026-44721 | redhat_vex | Open WebUI: Stored XSS via Model Description | known not affected: 1 | 2026-05-19T13:56:47+00:00 | Vulnerability · Source |
| CVE-2026-44558 | redhat_vex | Open WebUI: Channel Access Grants Bypass filter_allowed_access_grants | known not affected: 1 | 2026-05-19T13:56:47+00:00 | Vulnerability · Source |
| CVE-2026-36438 | redhat_vex | CVE-2026-36438 | known not affected: 1 | 2026-05-19T13:56:47+00:00 | Vulnerability · Source |
| CVE-2026-45303 | redhat_vex | Open WebUI: Stored XSS via the HTML renedering view | known not affected: 1 | 2026-05-19T13:56:47+00:00 | Vulnerability · Source |
| CVE-2026-26462 | redhat_vex | CVE-2026-26462 | known not affected: 1 | 2026-05-19T13:56:47+00:00 | Vulnerability · Source |
| CVE-2026-44566 | redhat_vex | Open WebUI: Arbitrary File Upload and Path Traversal | known not affected: 1 | 2026-05-19T13:56:47+00:00 | Vulnerability · Source |
| CVE-2024-33655 | redhat_vex | unbound: DNSBomb vulnerability | fixed: 192 known affected: 15 | 2026-05-19T13:52:55+00:00 | Vulnerability · Source |
| CVE-2026-44552 | redhat_vex | Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning | known not affected: 1 | 2026-05-19T07:57:27+00:00 | Vulnerability · Source |
| CVE-2026-45402 | redhat_vex | Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints | known not affected: 1 | 2026-05-19T07:57:27+00:00 | Vulnerability · Source |
| CVE-2026-44553 | redhat_vex | Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access | known not affected: 1 | 2026-05-19T07:57:27+00:00 | Vulnerability · Source |
| CVE-2026-45671 | redhat_vex | Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion | known not affected: 1 | 2026-05-19T07:57:27+00:00 | Vulnerability · Source |
| CVE-2026-8754 | redhat_vex | AstrBotDevs AstrBot File Upload chat.py post_file path traversal | known not affected: 1 | 2026-05-19T01:58:10+00:00 | Vulnerability · Source |
| CVE-2026-8770 | redhat_vex | continuedev continue JSON-RPC Server lsTool.ts lsTool path traversal | known not affected: 1 | 2026-05-19T01:58:10+00:00 | Vulnerability · Source |
| CVE-2026-8769 | redhat_vex | vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption | known not affected: 1 | 2026-05-19T01:58:06+00:00 | Vulnerability · Source |
| CVE-2026-8753 | redhat_vex | kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection | known not affected: 1 | 2026-05-19T01:58:06+00:00 | Vulnerability · Source |
| CVE-2026-8731 | redhat_vex | Open5GS NRF client.c ogs_sbi_client_add denial of service | known not affected: 1 | 2026-05-19T01:58:06+00:00 | Vulnerability · Source |
| CVE-2026-8733 | redhat_vex | Investintech SlimPDFReader SlimPDFReader.exe sub_3B4610 stack-based overflow | known not affected: 1 | 2026-05-19T01:58:05+00:00 | Vulnerability · Source |
| CVE-2026-8745 | redhat_vex | Open5GS AUSF nausf-handler.c ogs_timer_add denial of service | known not affected: 1 | 2026-05-19T01:58:05+00:00 | Vulnerability · Source |
| CVE-2026-8746 | redhat_vex | Open5GS NRF nghttp2-server.c discover_handler use after free | known not affected: 1 | 2026-05-19T01:58:05+00:00 | Vulnerability · Source |
| CVE-2026-8759 | redhat_vex | xiandafu beetl SpELFunction SpELFunction.java expression language injection | known not affected: 1 | 2026-05-19T01:58:04+00:00 | Vulnerability · Source |
| CVE-2021-47981 | redhat_vex | Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders Form | known not affected: 1 | 2026-05-19T01:58:04+00:00 | Vulnerability · Source |
| CVE-2026-8738 | redhat_vex | Sanluan PublicCMS Trade Payment Flow TradeOrderController.java AccountGatewayComponent.pay logic error | known not affected: 1 | 2026-05-19T01:58:04+00:00 | Vulnerability · Source |
| CVE-2026-8739 | redhat_vex | Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key | known not affected: 1 | 2026-05-19T01:58:04+00:00 | Vulnerability · Source |
| CVE-2026-45351 | redhat_vex | Open WebUI: Exposure of System Prompt to Regular User [Non-Admin] | known not affected: 1 | 2026-05-19T01:58:04+00:00 | Vulnerability · Source |
| CVE-2026-29965 | redhat_vex | CVE-2026-29965 | known not affected: 1 | 2026-05-19T01:58:04+00:00 | Vulnerability · Source |
| CVE-2026-29964 | redhat_vex | CVE-2026-29964 | known not affected: 1 | 2026-05-19T01:58:04+00:00 | Vulnerability · Source |
| CVE-2026-8149 | redhat_vex | GCM chunking can lead to bad tag exception on decryption | known not affected: 1 | 2026-05-19T01:58:04+00:00 | Vulnerability · Source |