VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297730 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-47337 | redhat_vex | NULL pointer dereference in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation | known not affected: 1 | 2026-06-05T19:49:32+00:00 | Vulnerability · Source |
| CVE-2026-47090 | redhat_vex | Claude HUD 0.0.12 Terminal Injection via OSC 8 Hyperlinks | known not affected: 1 | 2026-06-05T19:49:32+00:00 | Vulnerability · Source |
| CVE-2026-47373 | redhat_vex | Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks | known not affected: 1 | 2026-06-05T19:49:31+00:00 | Vulnerability · Source |
| CVE-2026-29974 | redhat_vex | CVE-2026-29974 | known not affected: 1 | 2026-06-05T19:49:31+00:00 | Vulnerability · Source |
| CVE-2026-47713 | redhat_vex | AnythingLLM: Legacy mobile device tokens bypass multi-user workspace scoping after mode migration | known not affected: 1 | 2026-06-05T19:49:30+00:00 | Vulnerability · Source |
| CVE-2026-29226 | redhat_vex | Apache OFBiz: Low-Privilege SSRF in Content Component | known not affected: 1 | 2026-06-05T19:49:30+00:00 | Vulnerability · Source |
| CVE-2026-29972 | redhat_vex | CVE-2026-29972 | known not affected: 1 | 2026-06-05T19:49:29+00:00 | Vulnerability · Source |
| CVE-2026-29644 | redhat_vex | CVE-2026-29644 | known not affected: 1 | 2026-06-05T19:49:28+00:00 | Vulnerability · Source |
| CVE-2026-29220 | redhat_vex | Apache OFBiz: Low-Privilege LFI in Content Component | known not affected: 1 | 2026-06-05T19:49:28+00:00 | Vulnerability · Source |
| CVE-2026-29198 | redhat_vex | CVE-2026-29198 | known not affected: 1 | 2026-06-05T19:49:28+00:00 | Vulnerability · Source |
| CVE-2026-29207 | redhat_vex | Apache OFBiz: Low-Privilege SSTI Leading to RCE in the Content Component | known not affected: 1 | 2026-06-05T19:49:27+00:00 | Vulnerability · Source |
| CVE-2026-29975 | redhat_vex | CVE-2026-29975 | known not affected: 1 | 2026-06-05T19:49:26+00:00 | Vulnerability · Source |
| CVE-2026-29197 | redhat_vex | CVE-2026-29197 | known not affected: 1 | 2026-06-05T19:49:26+00:00 | Vulnerability · Source |
| CVE-2026-41358 | redhat_vex | OpenClaw < 2026.4.2 - Sender Allowlist Bypass via Slack Thread Context | known not affected: 1 | 2026-06-05T19:49:26+00:00 | Vulnerability · Source |
| CVE-2026-29179 | redhat_vex | October: Editor Sub-Permission Bypass for Asset and Blueprint File Operations | known not affected: 1 | 2026-06-05T19:49:26+00:00 | Vulnerability · Source |
| CVE-2026-29199 | redhat_vex | CVE-2026-29199 | known not affected: 1 | 2026-06-05T19:49:26+00:00 | Vulnerability · Source |
| CVE-2026-41376 | redhat_vex | OpenClaw < 2026.3.31 - Matrix Thread Context Allowlist Bypass via Sender Validation | known not affected: 1 | 2026-06-05T19:49:25+00:00 | Vulnerability · Source |
| CVE-2026-41381 | redhat_vex | OpenClaw < 2026.3.31 - Access Control Bypass in Discord Voice Manager via Channel Allowlist | known not affected: 1 | 2026-06-05T19:49:25+00:00 | Vulnerability · Source |
| CVE-2026-41408 | redhat_vex | OpenClaw < 2026.3.31 - Disk Exhaustion via Media Download Bypass | known not affected: 1 | 2026-06-05T19:49:25+00:00 | Vulnerability · Source |
| CVE-2026-41659 | redhat_vex | Admidio: Hidden Profile Field Values Leaked via Blind Search Oracle in Member Assignment | known not affected: 1 | 2026-06-05T19:49:25+00:00 | Vulnerability · Source |
| CVE-2026-41356 | redhat_vex | OpenClaw < 2026.3.31 - Incomplete WebSocket Session Termination in device.token.rotate | known not affected: 1 | 2026-06-05T19:49:24+00:00 | Vulnerability · Source |
| CVE-2026-41398 | redhat_vex | OpenClaw - Unauthorized Agent Request Dispatch via Untrusted Local-Network Pages in iOS A2UI Bridge | known not affected: 1 | 2026-06-05T19:49:24+00:00 | Vulnerability · Source |
| CVE-2026-41330 | redhat_vex | OpenClaw < 2026.3.31 - Environment Variable Override via Host Exec Policy | known not affected: 1 | 2026-06-05T19:49:24+00:00 | Vulnerability · Source |
| CVE-2026-41348 | redhat_vex | OpenClaw < 2026.3.31 - Group DM Channel Allowlist Bypass via Discord Slash Commands | known not affected: 1 | 2026-06-05T19:49:24+00:00 | Vulnerability · Source |
| CVE-2026-41402 | redhat_vex | OpenClaw < 2026.3.31 - Webhook Replay Cache Cross-Target messageId Scope Bypass | known not affected: 1 | 2026-06-05T19:49:23+00:00 | Vulnerability · Source |
| CVE-2026-41430 | redhat_vex | Press vulnerable to reflected XSS on login redirection | known not affected: 1 | 2026-06-05T19:49:23+00:00 | Vulnerability · Source |
| CVE-2026-41321 | redhat_vex | @astrojs/cloudflare: SSRF via redirect following in Cloudflare image-binding-transform endpoint | known not affected: 1 | 2026-06-05T19:49:22+00:00 | Vulnerability · Source |
| CVE-2026-41963 | redhat_vex | CVE-2026-41963 | known not affected: 1 | 2026-06-05T19:49:22+00:00 | Vulnerability · Source |
| CVE-2026-41406 | redhat_vex | OpenClaw < 2026.3.31 - Sender Allowlist Bypass via Thread History and Quoted Messages | known not affected: 1 | 2026-06-05T19:49:22+00:00 | Vulnerability · Source |
| CVE-2026-41873 | redhat_vex | Pony Mail: Admin account takeover via request smuggling | known not affected: 1 | 2026-06-05T19:49:21+00:00 | Vulnerability · Source |
| CVE-2026-41663 | redhat_vex | Admidio: CSRF on Admin Preferences Triggers Unauthorized Backup, .htaccess Write, and Email Send | known not affected: 1 | 2026-06-05T19:49:19+00:00 | Vulnerability · Source |
| CVE-2026-41357 | redhat_vex | OpenClaw < 2026.3.31 - Unsanitized Environment Variable Leakage in SSH Sandbox Backends | known not affected: 1 | 2026-06-05T19:49:18+00:00 | Vulnerability · Source |
| CVE-2026-41016 | redhat_vex | Apache Airflow Providers SMTP: No certificate validation on SMTP STARTTLS connections in SMTP provider | known not affected: 1 | 2026-06-05T19:49:18+00:00 | Vulnerability · Source |
| CVE-2026-41919 | redhat_vex | Apache OFBiz: Authentication Bypass due to Improper Neutralization of LDAP Special Elements in DN Construction | known not affected: 1 | 2026-06-05T19:49:17+00:00 | Vulnerability · Source |
| CVE-2026-41382 | redhat_vex | OpenClaw < 2026.3.31 - Discord Voice Ingress Authorization Bypass via Channel and Role Validation Gaps | known not affected: 1 | 2026-06-05T19:49:17+00:00 | Vulnerability · Source |
| CVE-2026-41018 | redhat_vex | Apache Airflow Providers Elasticsearch: Elasticsearch task-log handler leaks credentials embedded in the host URL | known not affected: 1 | 2026-06-05T19:49:16+00:00 | Vulnerability · Source |
| CVE-2026-41085 | redhat_vex | CVE-2026-41085 | known not affected: 1 | 2026-06-05T19:49:16+00:00 | Vulnerability · Source |
| CVE-2026-41498 | redhat_vex | Kimai: Team API Missing Object-Level Authorization | known not affected: 1 | 2026-06-05T19:49:16+00:00 | Vulnerability · Source |
| CVE-2026-41081 | redhat_vex | Apache Storm Client: Anonymous principal assigned on TLS client certificate verification failure | known not affected: 1 | 2026-06-05T19:49:16+00:00 | Vulnerability · Source |
| CVE-2026-41144 | redhat_vex | F´ (F Prime) has Integer Overflow in FileUplink | known not affected: 1 | 2026-06-05T19:49:16+00:00 | Vulnerability · Source |
| CVE-2026-41962 | redhat_vex | CVE-2026-41962 | known not affected: 1 | 2026-06-05T19:49:15+00:00 | Vulnerability · Source |
| CVE-2026-41908 | redhat_vex | OpenClaw < 2026.4.20 - Scope Enforcement Bypass in Assistant-Media Route | known not affected: 1 | 2026-06-05T19:49:15+00:00 | Vulnerability · Source |
| CVE-2026-50076 | redhat_vex | Apache Fory: Java ReplaceResolverSerializer deserialization checks bypass | known not affected: 1 | 2026-06-05T19:49:14+00:00 | Vulnerability · Source |
| CVE-2026-32270 | redhat_vex | Craft Commerce: Unauthenticated information disclosure in `commerce/payments/pay` can leak some customer order data on anonymous payments | known not affected: 1 | 2026-06-05T19:49:14+00:00 | Vulnerability · Source |
| CVE-2026-23902 | redhat_vex | Apache DolphinScheduler: Users are able to use tenants that are not defined on the platform during workflow execution. | known not affected: 1 | 2026-06-05T19:49:14+00:00 | Vulnerability · Source |
| CVE-2026-32803 | redhat_vex | CVE-2026-32803 | known not affected: 1 | 2026-06-05T19:49:14+00:00 | Vulnerability · Source |
| CVE-2026-5776 | redhat_vex | Email Encoder < 2.4.7 - Unauthenticated Stored XSS | known not affected: 1 | 2026-06-05T19:49:13+00:00 | Vulnerability · Source |
| CVE-2026-5826 | redhat_vex | code-projects Simple IT Discussion Forum edit-category.php cross site scripting | known not affected: 1 | 2026-06-05T19:49:13+00:00 | Vulnerability · Source |
| CVE-2026-5529 | redhat_vex | Dromara lamp-cloud DefUserController pageUser improper authorization | known not affected: 1 | 2026-06-05T19:49:13+00:00 | Vulnerability · Source |
| CVE-2026-5448 | redhat_vex | 1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore | known not affected: 1 | 2026-06-05T19:49:13+00:00 | Vulnerability · Source |