VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
301600 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-11146 | redhat_vex | apt-cacher-ng: Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG | known not affected: 1 | 2026-05-06T15:24:22+00:00 | Vulnerability · Source |
| CVE-2025-59148 | redhat_vex | suricata-ids: Suricata NULL pointer dereference | known not affected: 1 | 2026-05-06T15:23:49+00:00 | Vulnerability · Source |
| CVE-2025-53538 | redhat_vex | suricata: Suricata resource starvation | known not affected: 1 | 2026-05-06T15:02:26+00:00 | Vulnerability · Source |
| CVE-2025-9175 | redhat_vex | shc: neurobin shc stack-based overflow | known not affected: 1 | 2026-05-06T15:02:26+00:00 | Vulnerability · Source |
| CVE-2026-27820 | microsoft_vex | zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption | fixed: 2 known affected: 3 | 2026-05-06T14:52:20+00:00 | Vulnerability · Source |
| CVE-2026-27141 | microsoft_vex | Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net | fixed: 3 known affected: 67 | 2026-05-06T14:43:42+00:00 | Vulnerability · Source |
| CVE-2025-58767 | microsoft_vex | REXML has a DoS condition when parsing malformed XML file | fixed: 2 known affected: 7 | 2026-05-06T14:39:02+00:00 | Vulnerability · Source |
| CVE-2025-44779 | redhat_vex | ollama: Ollama file deletion | known not affected: 1 | 2026-05-06T14:38:30+00:00 | Vulnerability · Source |
| CVE-2025-7700 | redhat_vex | FFmpeg: NULL Pointer Dereference in FFmpeg ALS Decoder (libavcodec/alsdec.c) | known not affected: 1 | 2026-05-06T14:38:28+00:00 | Vulnerability · Source |
| CVE-2026-7810 | redhat_vex | UsamaK98 python-notebook-mcp server.py add_cell path traversal | known not affected: 1 | 2026-05-06T14:21:51+00:00 | Vulnerability · Source |
| CVE-2026-7781 | redhat_vex | Open5GS amf-3gpp-access Endpoint nudm-handler.c udm_nudm_uecm_handle_amf_registration_update denial of service | known not affected: 1 | 2026-05-06T14:21:46+00:00 | Vulnerability · Source |
| CVE-2026-7833 | redhat_vex | EFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injection | known not affected: 1 | 2026-05-06T14:21:45+00:00 | Vulnerability · Source |
| CVE-2026-43569 | redhat_vex | OpenClaw < 2026.4.9 - Untrusted Provider Plugin Auto-enablement via Workspace Provider Auth | known not affected: 1 | 2026-05-06T14:21:45+00:00 | Vulnerability · Source |
| CVE-2026-6704 | redhat_vex | Blog Settings <= 1.0 - Reflected Cross-Site Scripting via 'page' Parameter | known not affected: 1 | 2026-05-06T14:21:45+00:00 | Vulnerability · Source |
| CVE-2026-5505 | redhat_vex | WP-Clippy <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-05-06T14:21:45+00:00 | Vulnerability · Source |
| CVE-2026-5294 | redhat_vex | GeekyBot <= 1.2.2 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation via 'geekybot_frontendajax' AJAX Action | known not affected: 1 | 2026-05-06T14:21:45+00:00 | Vulnerability · Source |
| CVE-2026-27693 | redhat_vex | traccar allows XML injection in KML and GPX exports | known not affected: 1 | 2026-05-06T14:21:44+00:00 | Vulnerability · Source |
| CVE-2026-43527 | redhat_vex | OpenClaw < 2026.4.14 - Server-Side Request Forgery via Private Network Navigation | known not affected: 1 | 2026-05-06T14:21:44+00:00 | Vulnerability · Source |
| CVE-2026-3359 | redhat_vex | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.42 - Unauthenticated SQL Injection via 'inputs' | known not affected: 1 | 2026-05-06T14:21:44+00:00 | Vulnerability · Source |
| CVE-2026-42220 | redhat_vex | nginx-ui: Authenticated settings disclosure exposes node.secret and enables trusted-node authentication abuse, backup exfiltration, and restore-based nginx-ui state rollback | known not affected: 1 | 2026-05-06T14:21:44+00:00 | Vulnerability · Source |
| CVE-2026-42435 | redhat_vex | OpenClaw 2026.2.22 < 2026.4.12 - Shell-Wrapper Detection Bypass via Environment Variable Assignment Injection | known not affected: 1 | 2026-05-06T14:21:44+00:00 | Vulnerability · Source |
| CVE-2026-43533 | redhat_vex | OpenClaw < 2026.4.10 - Arbitrary Local File Read via QQBot Media Tags | known not affected: 1 | 2026-05-06T14:21:44+00:00 | Vulnerability · Source |
| CVE-2025-34075 | redhat_vex | vagrant: HashiCorp Vagrant Host Code Execution | known not affected: 1 | 2026-05-06T13:52:51+00:00 | Vulnerability · Source |
| CVE-2025-7069 | redhat_vex | hdf5: HDF5 Heap Overflow | known affected: 1 | 2026-05-06T13:52:46+00:00 | Vulnerability · Source |
| CVE-2025-7068 | redhat_vex | hdf5: HDF5 Memory Leak Vulnerability | known affected: 1 | 2026-05-06T13:52:42+00:00 | Vulnerability · Source |
| CVE-2025-6375 | redhat_vex | poco: Poco MultipartInputStream Null Pointer Dereference | known not affected: 1 | 2026-05-06T13:52:18+00:00 | Vulnerability · Source |
| CVE-2025-49847 | redhat_vex | llama-cpp: llama.cpp Buffer Overflow | known not affected: 1 | 2026-05-06T13:49:47+00:00 | Vulnerability · Source |
| CVE-2024-58135 | redhat_vex | Mojolicious: Mojolicious versions from 7.28 through 9.39 for Perl may generate weak HMAC session secrets | known not affected: 1 | 2026-05-06T13:04:22+00:00 | Vulnerability · Source |
| CVE-2024-55069 | redhat_vex | ffmpeg: Null Pointer Dereference in ffmpeg | known not affected: 1 | 2026-05-06T13:04:04+00:00 | Vulnerability · Source |
| CVE-2024-58134 | redhat_vex | Mojolicious: Mojolicious versions from 0.999922 through 9.39 for Perl uses a hard coded string, or the application's class name, as a HMAC session secret by default | known not affected: 1 | 2026-05-06T13:04:04+00:00 | Vulnerability · Source |
| CVE-2025-46688 | redhat_vex | quickjs-ng: Heap-Based Buffer Overflow in QuickJS's JS_ReadBigInt Function | known not affected: 1 | 2026-05-06T12:59:16+00:00 | Vulnerability · Source |
| CVE-2025-46687 | redhat_vex | quickjs-ng: "Heap-Based Buffer Overflow in QuickJS's JS_ReadString Function | known not affected: 1 | 2026-05-06T12:59:13+00:00 | Vulnerability · Source |
| CVE-2025-32434 | redhat_vex | PyTorch: PyTorch: `torch.load` with `weights_only=True` leads to remote code execution | known not affected: 1 | 2026-05-06T12:59:11+00:00 | Vulnerability · Source |
| CVE-2025-3730 | redhat_vex | PyTorch: PyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of service | known not affected: 1 | 2026-05-06T12:59:11+00:00 | Vulnerability · Source |
| CVE-2025-30215 | redhat_vex | nats-server: NATS-Server Fails to Authorize Certain Jetstream Admin APIs | known not affected: 1 | 2026-05-06T12:49:39+00:00 | Vulnerability · Source |
| CVE-2024-26143 | redhat_vex | rubygem-actionpack: Possible XSS on translation helpers | known affected: 1 known not affected: 1 | 2026-05-06T11:59:21+00:00 | Vulnerability · Source |
| CVE-2024-27281 | redhat_vex | ruby: RCE vulnerability with .rdoc_options in RDoc | fixed: 983 known affected: 71 known not affected: 29 | 2026-05-06T11:56:08+00:00 | Vulnerability · Source |
| CVE-2026-43002 | redhat_vex | CVE-2026-43002 | known not affected: 1 | 2026-05-06T08:20:07+00:00 | Vulnerability · Source |
| CVE-2026-31282 | redhat_vex | CVE-2026-31282 | known not affected: 1 | 2026-05-06T08:20:07+00:00 | Vulnerability · Source |
| CVE-2026-7791 | redhat_vex | CVE-2026-7791 | known not affected: 1 | 2026-05-06T08:20:07+00:00 | Vulnerability · Source |
| CVE-2026-7585 | redhat_vex | Open5GS AMF nudm-handler.c amf_nudm_sdm_handle_provisioned denial of service | known not affected: 1 | 2026-05-06T02:20:13+00:00 | Vulnerability · Source |
| CVE-2026-7707 | redhat_vex | Open5GS UDR nudr-handler.c udr_nudr_dr_handle_subscription_context denial of service | known not affected: 1 | 2026-05-06T02:20:13+00:00 | Vulnerability · Source |
| CVE-2003-0886 | suse_vex | SUSE CVE CVE-2003-0886 | No product status | 2026-05-06T01:58:19+00:00 | Vulnerability · Source |
| CVE-2003-0960 | suse_vex | SUSE CVE CVE-2003-0960 | No product status | 2026-05-06T01:58:17+00:00 | Vulnerability · Source |
| CVE-2004-0975 | suse_vex | SUSE CVE CVE-2004-0975 | No product status | 2026-05-06T01:58:14+00:00 | Vulnerability · Source |
| CVE-2004-2014 | suse_vex | SUSE CVE CVE-2004-2014 | No product status | 2026-05-06T01:58:12+00:00 | Vulnerability · Source |
| CVE-2005-2023 | suse_vex | SUSE CVE CVE-2005-2023 | No product status | 2026-05-06T01:58:09+00:00 | Vulnerability · Source |
| CVE-2005-2871 | suse_vex | SUSE CVE CVE-2005-2871 | No product status | 2026-05-06T01:58:07+00:00 | Vulnerability · Source |
| CVE-2005-2929 | suse_vex | SUSE CVE CVE-2005-2929 | No product status | 2026-05-06T01:58:05+00:00 | Vulnerability · Source |
| CVE-2006-1014 | suse_vex | SUSE CVE CVE-2006-1014 | No product status | 2026-05-06T01:58:03+00:00 | Vulnerability · Source |