VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299384 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-45347 | redhat_vex | Open WebUI: Blind server side request forgery (SSRF) via the PDF generate function | known not affected: 1 | 2026-05-18T13:58:13+00:00 | Vulnerability · Source |
| CVE-2026-45318 | redhat_vex | Open WebUI: Stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify) | known not affected: 1 | 2026-05-18T13:58:12+00:00 | Vulnerability · Source |
| CVE-2021-4195 | redhat_vex | XSS in Firmanet Software and Technology Customer Relation Manager | known not affected: 1 | 2026-05-18T13:58:11+00:00 | Vulnerability · Source |
| CVE-2021-44196 | redhat_vex | XSS in UBIT Information Technologies Student Information Management System | known not affected: 1 | 2026-05-18T13:58:11+00:00 | Vulnerability · Source |
| CVE-2026-45317 | redhat_vex | Open WebUI: Cross-Site Request Forgery (CSRF) via Image URL Manipulation | known not affected: 1 | 2026-05-18T13:58:11+00:00 | Vulnerability · Source |
| CVE-2021-45478 | redhat_vex | IDOR in Yordam Library Automation System | known not affected: 1 | 2026-05-18T13:58:10+00:00 | Vulnerability · Source |
| CVE-2021-45476 | redhat_vex | Information disclosure in Yordam Library Information Document Automation Program | known not affected: 1 | 2026-05-18T13:58:10+00:00 | Vulnerability · Source |
| CVE-2021-45477 | redhat_vex | IDOR in Yordam Library Automation System | known not affected: 1 | 2026-05-18T13:58:10+00:00 | Vulnerability · Source |
| CVE-2021-44795 | redhat_vex | Modifying User Permissions via Unauthorized Access in Single Connect | known not affected: 1 | 2026-05-18T13:58:09+00:00 | Vulnerability · Source |
| CVE-2021-44794 | redhat_vex | Information Leakege via Unauthorized Access in Single Connect | known not affected: 1 | 2026-05-18T13:58:09+00:00 | Vulnerability · Source |
| CVE-2021-45475 | redhat_vex | Information disclosure in Yordam Library Information Document Automation Program | known not affected: 1 | 2026-05-18T13:58:09+00:00 | Vulnerability · Source |
| CVE-2021-44792 | redhat_vex | Information Leakege via Unauthorized Access in Single Connect | known not affected: 1 | 2026-05-18T13:58:08+00:00 | Vulnerability · Source |
| CVE-2021-44197 | redhat_vex | XSS in UBIT Information Technologies Student Information Management System | known not affected: 1 | 2026-05-18T13:58:07+00:00 | Vulnerability · Source |
| CVE-2021-3806 | redhat_vex | Path Traversal in Pardus Software Center | known not affected: 1 | 2026-05-18T13:58:06+00:00 | Vulnerability · Source |
| CVE-2026-46728 | redhat_vex | CVE-2026-46728 | known not affected: 1 | 2026-05-18T13:58:05+00:00 | Vulnerability · Source |
| CVE-2021-3855 | redhat_vex | Command Injection in Liman Central Management System | known not affected: 1 | 2026-05-18T13:58:04+00:00 | Vulnerability · Source |
| CVE-2026-45395 | redhat_vex | Open WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Execution | known not affected: 1 | 2026-05-18T13:58:03+00:00 | Vulnerability · Source |
| CVE-2026-45401 | redhat_vex | Open WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints | known not affected: 1 | 2026-05-18T13:58:03+00:00 | Vulnerability · Source |
| CVE-2026-44570 | redhat_vex | Open WebUI: Inconsistent authorization controls within memories API | known not affected: 1 | 2026-05-18T13:58:02+00:00 | Vulnerability · Source |
| CVE-2026-44569 | redhat_vex | Open WebUI: Insecure Message Access Breaks Authorization | known not affected: 1 | 2026-05-18T13:58:02+00:00 | Vulnerability · Source |
| CVE-2026-44549 | redhat_vex | Open WebUI: Stored XSS in excel file preview | known not affected: 1 | 2026-05-18T13:58:01+00:00 | Vulnerability · Source |
| CVE-2021-47979 | redhat_vex | WordPress Plugin Backup and Restore 1.0.3 Arbitrary File Deletion | known not affected: 1 | 2026-05-18T13:58:01+00:00 | Vulnerability · Source |
| CVE-2026-44565 | redhat_vex | Open WebUI: Open WebUI Arbitrary File Write, Delete via Path Traversal | known not affected: 1 | 2026-05-18T13:58:01+00:00 | Vulnerability · Source |
| CVE-2021-4105 | redhat_vex | Unauthenticated Remote Code Execution on COSLAT Firewall | known not affected: 1 | 2026-05-18T13:58:01+00:00 | Vulnerability · Source |
| CVE-2021-47973 | redhat_vex | Sticky Notes Widget 3.0.6 Denial of Service via Buffer Overflow | known not affected: 1 | 2026-05-18T13:58:01+00:00 | Vulnerability · Source |
| CVE-2021-44793 | redhat_vex | Information Leakege via Unauthorized Access in Single Connect | known not affected: 1 | 2026-05-18T13:58:00+00:00 | Vulnerability · Source |
| CVE-2021-3854 | redhat_vex | SQLi in Glox Technology's Useroam Hotspot | known not affected: 1 | 2026-05-18T13:58:00+00:00 | Vulnerability · Source |
| CVE-2021-45031 | redhat_vex | Weak Authentication in Login Function of USC+ | known not affected: 1 | 2026-05-18T13:58:00+00:00 | Vulnerability · Source |
| CVE-2021-47956 | redhat_vex | EgavilanMedia PHPCRUD 1.0 SQL Injection via firstname | known not affected: 1 | 2026-05-18T13:58:00+00:00 | Vulnerability · Source |
| CVE-2021-3825 | redhat_vex | Missing Authorization Checks in LiderAhenk | known not affected: 1 | 2026-05-18T13:58:00+00:00 | Vulnerability · Source |
| CVE-2016-5210 | suse_vex | SUSE CVE CVE-2016-5210 | recommended: 8 | 2026-05-18T13:33:24+00:00 | Vulnerability · Source |
| CVE-2017-15748 | suse_vex | SUSE CVE CVE-2017-15748 | No product status | 2026-05-18T13:32:42+00:00 | Vulnerability · Source |
| CVE-2026-8389 | suse_vex | SUSE CVE CVE-2026-8389 | No product status | 2026-05-18T13:22:36+00:00 | Vulnerability · Source |
| CVE-2026-8390 | suse_vex | SUSE CVE CVE-2026-8390 | No product status | 2026-05-18T13:22:35+00:00 | Vulnerability · Source |
| CVE-2026-44309 | suse_vex | SUSE CVE CVE-2026-44309 | No product status | 2026-05-18T13:21:31+00:00 | Vulnerability · Source |
| CVE-2026-44310 | suse_vex | SUSE CVE CVE-2026-44310 | No product status | 2026-05-18T13:21:30+00:00 | Vulnerability · Source |
| CVE-2026-41646 | redhat_vex | github.com/projectdiscovery/nuclei: nuclei: Nuclei: Information disclosure via JavaScript template local file access bypass | known not affected: 1 | 2026-05-18T12:44:38+00:00 | Vulnerability · Source |
| CVE-2019-11840 | redhat_vex | golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter | fixed: 72 known affected: 22 known not affected: 475 | 2026-05-18T12:13:58+00:00 | Vulnerability · Source |
| CVE-2015-9096 | redhat_vex | ruby: SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands in Net::SMTP | fixed: 12 known affected: 68 known not affected: 21 | 2026-05-18T10:10:19+00:00 | Vulnerability · Source |
| CVE-2011-4815 | redhat_vex | ruby: hash table collisions CPU usage DoS (oCERT-2011-003) | fixed: 763 | 2026-05-18T10:07:39+00:00 | Vulnerability · Source |
| CVE-2008-1891 | redhat_vex | ruby: WEBrick CGI source disclosure | fixed: 12 | 2026-05-18T10:07:26+00:00 | Vulnerability · Source |
| CVE-2008-3655 | redhat_vex | ruby: multiple insufficient safe mode restrictions | fixed: 612 | 2026-05-18T10:07:26+00:00 | Vulnerability · Source |
| CVE-2013-1821 | redhat_vex | ruby: entity expansion DoS vulnerability in REXML | fixed: 448 known affected: 3 | 2026-05-18T10:01:06+00:00 | Vulnerability · Source |
| CVE-2014-6438 | redhat_vex | ruby: Unsafe parsing of long strings via decode_www_form_component method | fixed: 12 known affected: 11 known not affected: 78 | 2026-05-18T09:45:32+00:00 | Vulnerability · Source |
| CVE-2008-3905 | redhat_vex | ruby: use of predictable source port and transaction id in DNS requests done by resolv.rb module | fixed: 591 | 2026-05-18T09:45:25+00:00 | Vulnerability · Source |
| CVE-2008-3656 | redhat_vex | ruby: WEBrick DoS vulnerability (CPU consumption) | fixed: 387 | 2026-05-18T09:45:17+00:00 | Vulnerability · Source |
| CVE-2008-3657 | redhat_vex | ruby: missing "taintness" checks in dl module | fixed: 387 | 2026-05-18T09:45:17+00:00 | Vulnerability · Source |
| CVE-2024-39847 | redhat_vex | Arbitrary File Read and Server Side Request Forgery via XML External Entities in 4D Server SOAP | known not affected: 1 | 2026-05-18T01:57:15+00:00 | Vulnerability · Source |
| CVE-2024-13971 | redhat_vex | Arbitrary File Read and Server Side Request Forgery via XML External Entities in Lobster_pro | known not affected: 1 | 2026-05-18T01:57:15+00:00 | Vulnerability · Source |
| CVE-2013-3587 | suse_vex | SUSE CVE CVE-2013-3587 | No product status | 2026-05-18T01:27:04+00:00 | Vulnerability · Source |