VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299384 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-8757 | redhat_vex | adenhq hive Delete Request routes_sessions.py _read_events_tail path traversal | known not affected: 1 | 2026-05-18T19:58:56+00:00 | Vulnerability · Source |
| CVE-2026-8756 | redhat_vex | fishaudio Bert-VITS2 Gradio webui_preprocess.py generate_config path traversal | known not affected: 1 | 2026-05-18T19:58:56+00:00 | Vulnerability · Source |
| CVE-2026-8750 | redhat_vex | h2oai h2o-3 ImportFile API PersistNFS.java importFiles information disclosure | known not affected: 1 | 2026-05-18T19:58:55+00:00 | Vulnerability · Source |
| CVE-2026-8737 | redhat_vex | Sanluan PublicCMS Trade Address Query TradeAddressListDirective.java execute missing authentication | known not affected: 1 | 2026-05-18T19:58:55+00:00 | Vulnerability · Source |
| CVE-2026-8751 | redhat_vex | h2oai h2o-3 JAR Model.java importBinaryModel deserialization | known not affected: 1 | 2026-05-18T19:58:55+00:00 | Vulnerability · Source |
| CVE-2026-8752 | redhat_vex | h2oai h2o-3 Rapids setproperty Primitive AstSetProperty.java exec access control | known not affected: 1 | 2026-05-18T19:58:55+00:00 | Vulnerability · Source |
| CVE-2026-46362 | redhat_vex | phpMyFAQ - Authorization Bypass in Admin Pages via Non-Terminating Permission Check | known not affected: 1 | 2026-05-18T19:58:54+00:00 | Vulnerability · Source |
| CVE-2026-8681 | redhat_vex | Essential Chat Support <= 1.0.1 - Missing Authorization to Unauthenticated Settings Reset via 'ecs_reset_settings' Parameter | known not affected: 1 | 2026-05-18T19:58:54+00:00 | Vulnerability · Source |
| CVE-2026-8244 | redhat_vex | Industrial Application Software IAS Canias ERP Login RMI improper authentication | known not affected: 1 | 2026-05-18T19:58:53+00:00 | Vulnerability · Source |
| CVE-2026-7864 | redhat_vex | Exposure of Sensitive Information to an Unauthorized Actor | known not affected: 1 | 2026-05-18T19:58:51+00:00 | Vulnerability · Source |
| CVE-2026-8243 | redhat_vex | Industrial Application Software IAS Canias ERP JNLP Deployment Endpoint hard-coded key | known not affected: 1 | 2026-05-18T19:58:51+00:00 | Vulnerability · Source |
| CVE-2026-45666 | redhat_vex | Open WebUI: Indirect Object Reference (IDOR) in user notes | known not affected: 1 | 2026-05-18T19:58:49+00:00 | Vulnerability · Source |
| CVE-2026-45345 | redhat_vex | Open WebUI: Missing authorization check at the model update function - models from other users can be updated | known not affected: 1 | 2026-05-18T19:58:49+00:00 | Vulnerability · Source |
| CVE-2026-45667 | redhat_vex | Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS) | known not affected: 1 | 2026-05-18T19:58:49+00:00 | Vulnerability · Source |
| CVE-2026-44557 | redhat_vex | Open WebUI: Global Knowledge Base Enumeration via knowledge-bases Meta-Collection | known not affected: 1 | 2026-05-18T19:58:45+00:00 | Vulnerability · Source |
| CVE-2026-44563 | redhat_vex | Open WebUI: Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/show | known not affected: 1 | 2026-05-18T19:58:45+00:00 | Vulnerability · Source |
| CVE-2026-41195 | redhat_vex | mosparo: Rule package source URL stored SSRF enables internal HTTP probing | known not affected: 1 | 2026-05-18T19:58:43+00:00 | Vulnerability · Source |
| CVE-2022-45087 | redhat_vex | Cross-site Scripting in Smartpower Web | known not affected: 1 | 2026-05-18T19:58:41+00:00 | Vulnerability · Source |
| CVE-2022-45091 | redhat_vex | Cross-site Scripting in Smartpower Web | known not affected: 1 | 2026-05-18T19:58:41+00:00 | Vulnerability · Source |
| CVE-2022-45086 | redhat_vex | Cross-site Scripting in Smartpower Web | known not affected: 1 | 2026-05-18T19:58:40+00:00 | Vulnerability · Source |
| CVE-2022-45085 | redhat_vex | Server-Side Request Forgery in Smartpower Web | known not affected: 1 | 2026-05-18T19:58:40+00:00 | Vulnerability · Source |
| CVE-2026-44567 | redhat_vex | Open WebUI: Open WebUI Improper Authorization Control | known not affected: 1 | 2026-05-18T19:58:37+00:00 | Vulnerability · Source |
| CVE-2026-46407 | redhat_vex | Vvveb: admin/auth-token IDOR allows unauthorized disclosure of administrator REST API tokens | known not affected: 1 | 2026-05-18T19:58:35+00:00 | Vulnerability · Source |
| CVE-2026-8719 | redhat_vex | AI Engine 3.4.9 - Authenticated (Subscriber+) Privilege Escalation via Missing Authorization in MCP OAuth Bearer Token | known not affected: 1 | 2026-05-18T19:58:35+00:00 | Vulnerability · Source |
| CVE-2026-45398 | redhat_vex | Open WebUI: IDOR - Retrieval API Bypasses Knowledge Base Access Controls | known not affected: 1 | 2026-05-18T19:58:35+00:00 | Vulnerability · Source |
| CVE-2026-44129 | redhat_vex | Server-side template injection | known not affected: 1 | 2026-05-18T19:58:34+00:00 | Vulnerability · Source |
| CVE-2026-44302 | redhat_vex | Snappier: Infinite loop in SnappyStream decompression on malformed framed input | known not affected: 1 | 2026-05-18T19:58:33+00:00 | Vulnerability · Source |
| CVE-2026-44551 | redhat_vex | Open WebUI: LDAP Empty Password Authentication Bypass | known not affected: 1 | 2026-05-18T19:58:32+00:00 | Vulnerability · Source |
| CVE-2026-44257 | redhat_vex | efw4.X: RCE via zipslip | known not affected: 1 | 2026-05-18T19:58:30+00:00 | Vulnerability · Source |
| CVE-2026-44128 | redhat_vex | Unauthenticated Remote Code Execution | known not affected: 1 | 2026-05-18T19:58:28+00:00 | Vulnerability · Source |
| CVE-2026-44127 | redhat_vex | Local File Inclusion (LFI) and Arbitrary File Deletion | known not affected: 1 | 2026-05-18T19:58:27+00:00 | Vulnerability · Source |
| CVE-2026-44126 | redhat_vex | Insecure deserialization | known not affected: 1 | 2026-05-18T19:58:27+00:00 | Vulnerability · Source |
| CVE-2026-44125 | redhat_vex | Missing Authorization in GINAv2 | known not affected: 1 | 2026-05-18T19:58:27+00:00 | Vulnerability · Source |
| CVE-2026-42290 | redhat_vex | protobufjs-cli: OS Command Injection | known not affected: 1 | 2026-05-18T19:58:27+00:00 | Vulnerability · Source |
| CVE-2026-41895 | redhat_vex | changedetection.io: XXE vulnerability in the changedetection.io project | known not affected: 1 | 2026-05-18T19:58:25+00:00 | Vulnerability · Source |
| CVE-2026-2743 | redhat_vex | SEPPmail User Web Interface Arbitrary File Write to RCE | known not affected: 1 | 2026-05-18T19:58:25+00:00 | Vulnerability · Source |
| CVE-2026-42544 | redhat_vex | Granian: Unauthenticated DoS via WebSocket subprotocol header panic | known not affected: 1 | 2026-05-18T19:58:25+00:00 | Vulnerability · Source |
| CVE-2026-42288 | redhat_vex | ChurchCRM: Incomplete fix for CVE-2026-39337: Unauthenticated RCE in Setup Wizard via unsanitized DB_PASSWORD | known not affected: 1 | 2026-05-18T19:58:25+00:00 | Vulnerability · Source |
| CVE-2022-4557 | redhat_vex | SQL Injection in Smartpower Web | known not affected: 1 | 2026-05-18T19:58:24+00:00 | Vulnerability · Source |
| CVE-2022-45090 | redhat_vex | SQL Injection in Smartpower Web | known not affected: 1 | 2026-05-18T19:58:22+00:00 | Vulnerability · Source |
| CVE-2022-45089 | redhat_vex | SQL Injection in Smartpower Web | known not affected: 1 | 2026-05-18T19:58:21+00:00 | Vulnerability · Source |
| CVE-2022-45088 | redhat_vex | Local File Inclusion in Smartpower Web | known not affected: 1 | 2026-05-18T19:58:21+00:00 | Vulnerability · Source |
| CVE-2026-8755 | redhat_vex | fishaudio Bert-VITS2 Model hiyoriUI.py _get_all_models path traversal | known not affected: 1 | 2026-05-18T13:58:20+00:00 | Vulnerability · Source |
| CVE-2026-8747 | redhat_vex | Z-BlogPHP Commend Approval c_system_event.php CheckComment improper authorization | known not affected: 1 | 2026-05-18T13:58:18+00:00 | Vulnerability · Source |
| CVE-2026-8758 | redhat_vex | Metasoft 美特软件 MetaCRM upload3.jsp unrestricted upload | known not affected: 1 | 2026-05-18T13:58:16+00:00 | Vulnerability · Source |
| CVE-2026-8740 | redhat_vex | Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engine | known not affected: 1 | 2026-05-18T13:58:16+00:00 | Vulnerability · Source |
| CVE-2021-45479 | redhat_vex | XSS in Yordam Library Automation System | known not affected: 1 | 2026-05-18T13:58:15+00:00 | Vulnerability · Source |
| CVE-2026-8725 | redhat_vex | CoreWorxLab CAAL test-hass Endpoint webhooks.py server-side request forgery | known not affected: 1 | 2026-05-18T13:58:14+00:00 | Vulnerability · Source |
| CVE-2026-8734 | redhat_vex | Oinone Pamirs queryListByWrapper RSQLToSQLNodeConnector.makeVariable sql injection | known not affected: 1 | 2026-05-18T13:58:14+00:00 | Vulnerability · Source |
| CVE-2026-45346 | redhat_vex | Open WebUI: Stored Cross-Site Scripting in SVG Renderer | known not affected: 1 | 2026-05-18T13:58:13+00:00 | Vulnerability · Source |