VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299379 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-44553 | redhat_vex | Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access | known not affected: 1 | 2026-05-19T07:57:27+00:00 | Vulnerability · Source |
| CVE-2026-45671 | redhat_vex | Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion | known not affected: 1 | 2026-05-19T07:57:27+00:00 | Vulnerability · Source |
| CVE-2026-8754 | redhat_vex | AstrBotDevs AstrBot File Upload chat.py post_file path traversal | known not affected: 1 | 2026-05-19T01:58:10+00:00 | Vulnerability · Source |
| CVE-2026-8770 | redhat_vex | continuedev continue JSON-RPC Server lsTool.ts lsTool path traversal | known not affected: 1 | 2026-05-19T01:58:10+00:00 | Vulnerability · Source |
| CVE-2026-8769 | redhat_vex | vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption | known not affected: 1 | 2026-05-19T01:58:06+00:00 | Vulnerability · Source |
| CVE-2026-8753 | redhat_vex | kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection | known not affected: 1 | 2026-05-19T01:58:06+00:00 | Vulnerability · Source |
| CVE-2026-8731 | redhat_vex | Open5GS NRF client.c ogs_sbi_client_add denial of service | known not affected: 1 | 2026-05-19T01:58:06+00:00 | Vulnerability · Source |
| CVE-2026-8733 | redhat_vex | Investintech SlimPDFReader SlimPDFReader.exe sub_3B4610 stack-based overflow | known not affected: 1 | 2026-05-19T01:58:05+00:00 | Vulnerability · Source |
| CVE-2026-8745 | redhat_vex | Open5GS AUSF nausf-handler.c ogs_timer_add denial of service | known not affected: 1 | 2026-05-19T01:58:05+00:00 | Vulnerability · Source |
| CVE-2026-8746 | redhat_vex | Open5GS NRF nghttp2-server.c discover_handler use after free | known not affected: 1 | 2026-05-19T01:58:05+00:00 | Vulnerability · Source |
| CVE-2026-8759 | redhat_vex | xiandafu beetl SpELFunction SpELFunction.java expression language injection | known not affected: 1 | 2026-05-19T01:58:04+00:00 | Vulnerability · Source |
| CVE-2021-47981 | redhat_vex | Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders Form | known not affected: 1 | 2026-05-19T01:58:04+00:00 | Vulnerability · Source |
| CVE-2026-8738 | redhat_vex | Sanluan PublicCMS Trade Payment Flow TradeOrderController.java AccountGatewayComponent.pay logic error | known not affected: 1 | 2026-05-19T01:58:04+00:00 | Vulnerability · Source |
| CVE-2026-8739 | redhat_vex | Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key | known not affected: 1 | 2026-05-19T01:58:04+00:00 | Vulnerability · Source |
| CVE-2026-45351 | redhat_vex | Open WebUI: Exposure of System Prompt to Regular User [Non-Admin] | known not affected: 1 | 2026-05-19T01:58:04+00:00 | Vulnerability · Source |
| CVE-2026-29965 | redhat_vex | CVE-2026-29965 | known not affected: 1 | 2026-05-19T01:58:04+00:00 | Vulnerability · Source |
| CVE-2026-29964 | redhat_vex | CVE-2026-29964 | known not affected: 1 | 2026-05-19T01:58:04+00:00 | Vulnerability · Source |
| CVE-2026-8149 | redhat_vex | GCM chunking can lead to bad tag exception on decryption | known not affected: 1 | 2026-05-19T01:58:04+00:00 | Vulnerability · Source |
| CVE-2026-8764 | redhat_vex | H3C Magic B3 aspForm UpdateWanParams buffer overflow | known not affected: 1 | 2026-05-19T01:58:03+00:00 | Vulnerability · Source |
| CVE-2026-8776 | redhat_vex | Edimax BR-6428NS POST Request formPPTPSetup buffer overflow | known not affected: 1 | 2026-05-19T01:58:03+00:00 | Vulnerability · Source |
| CVE-2026-45301 | redhat_vex | Open WebUI: Missing permission check in files API allows authenticated users to list, access and delete every uploaded file | known not affected: 1 | 2026-05-19T01:58:03+00:00 | Vulnerability · Source |
| CVE-2026-8775 | redhat_vex | Edimax BR-6428NS POST Request formL2TPSetup buffer overflow | known not affected: 1 | 2026-05-19T01:58:03+00:00 | Vulnerability · Source |
| CVE-2026-45665 | redhat_vex | Open WebUI: Stored XSS in Banner Component via Improper Sanitization Order | known not affected: 1 | 2026-05-19T01:58:03+00:00 | Vulnerability · Source |
| CVE-2026-45672 | redhat_vex | Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed | known not affected: 1 | 2026-05-19T01:58:03+00:00 | Vulnerability · Source |
| CVE-2026-45314 | redhat_vex | Open WebUI: XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/image | known not affected: 1 | 2026-05-19T01:58:03+00:00 | Vulnerability · Source |
| CVE-2021-47969 | redhat_vex | Color Notes 1.4 Denial of Service via Long Character String | known not affected: 1 | 2026-05-19T01:58:02+00:00 | Vulnerability · Source |
| CVE-2026-42186 | suse_vex | SUSE CVE CVE-2026-42186 | No product status | 2026-05-19T01:51:54+00:00 | Vulnerability · Source |
| CVE-2026-43443 | microsoft_vex | ASoC: amd: acp-mach-common: Add missing error check for clock acquisition | known not affected: 1 under investigation: 2 | 2026-05-19T01:49:26+00:00 | Vulnerability · Source |
| CVE-2026-44662 | microsoft_vex | rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding | known not affected: 8 | 2026-05-19T01:49:22+00:00 | Vulnerability · Source |
| CVE-2026-43352 | microsoft_vex | i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue | known affected: 2 known not affected: 1 | 2026-05-19T01:49:21+00:00 | Vulnerability · Source |
| CVE-2026-31717 | microsoft_vex | ksmbd: validate owner of durable handle on reconnect | known affected: 2 known not affected: 1 | 2026-05-19T01:49:12+00:00 | Vulnerability · Source |
| CVE-2026-41673 | microsoft_vex | xmldom: Denial of service via uncontrolled recursion in XML serialization | known not affected: 1 | 2026-05-19T01:49:02+00:00 | Vulnerability · Source |
| CVE-2026-41675 | microsoft_vex | xmldom: XML node injection through unvalidated processing instruction serialization | known not affected: 1 | 2026-05-19T01:48:57+00:00 | Vulnerability · Source |
| CVE-2026-41674 | microsoft_vex | xmldom: XML injection through unvalidated DocumentType serialization | known not affected: 1 | 2026-05-19T01:48:51+00:00 | Vulnerability · Source |
| CVE-2026-41672 | microsoft_vex | xmldom: XML node injection through unvalidated comment serialization | known not affected: 1 | 2026-05-19T01:48:45+00:00 | Vulnerability · Source |
| CVE-2026-43869 | microsoft_vex | Apache Thrift: TSSLTransportFactory.java hostname verification | known not affected: 1 | 2026-05-19T01:48:39+00:00 | Vulnerability · Source |
| CVE-2026-43870 | microsoft_vex | Apache Thrift: Node.js web_server.js multi-vulnerability | known not affected: 1 under investigation: 1 | 2026-05-19T01:48:33+00:00 | Vulnerability · Source |
| CVE-2026-43868 | microsoft_vex | Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern | known not affected: 1 under investigation: 1 | 2026-05-19T01:48:28+00:00 | Vulnerability · Source |
| CVE-2026-41082 | microsoft_vex | In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory. | known not affected: 1 | 2026-05-19T01:48:22+00:00 | Vulnerability · Source |
| CVE-2026-42011 | microsoft_vex | Gnutls: gnutls: security bypass due to incorrect name constraint handling | known not affected: 1 | 2026-05-19T01:47:48+00:00 | Vulnerability · Source |
| CVE-2026-4892 | microsoft_vex | CVE-2026-4892 | known not affected: 1 | 2026-05-19T01:47:37+00:00 | Vulnerability · Source |
| CVE-2026-8295 | microsoft_vex | Integer overflow in simdjson | known not affected: 1 | 2026-05-19T01:47:21+00:00 | Vulnerability · Source |
| CVE-2026-5773 | microsoft_vex | wrong reuse of SMB connection | known not affected: 1 | 2026-05-19T01:47:13+00:00 | Vulnerability · Source |
| CVE-2026-3833 | microsoft_vex | Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison | known not affected: 1 under investigation: 1 | 2026-05-19T01:46:32+00:00 | Vulnerability · Source |
| CVE-2026-43267 | microsoft_vex | wifi: rtw89: fix potential zero beacon interval in beacon tracking | known not affected: 1 | 2026-05-19T01:46:19+00:00 | Vulnerability · Source |
| CVE-2026-43228 | microsoft_vex | hfs: Replace BUG_ON with error handling for CNID count checks | known not affected: 1 | 2026-05-19T01:46:13+00:00 | Vulnerability · Source |
| CVE-2026-43213 | microsoft_vex | wifi: rtw89: pci: validate sequence number of TX release report | known affected: 2 known not affected: 1 | 2026-05-19T01:46:06+00:00 | Vulnerability · Source |
| CVE-2025-71272 | microsoft_vex | most: core: fix resource leak in most_register_interface error paths | known affected: 2 known not affected: 1 | 2026-05-19T01:46:01+00:00 | Vulnerability · Source |
| CVE-2026-43219 | microsoft_vex | net: cpsw_new: Fix potential unregister of netdev that has not been registered yet | known affected: 2 known not affected: 1 | 2026-05-19T01:45:55+00:00 | Vulnerability · Source |
| CVE-2026-43185 | microsoft_vex | ksmbd: fix signededness bug in smb_direct_prepare_negotiation() | known affected: 2 known not affected: 1 | 2026-05-19T01:45:49+00:00 | Vulnerability · Source |