VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297749 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-6583 | redhat_vex | TransformerOptimus SuperAGI API Key Management Endpoint api_key.py edit_api_key authorization | known not affected: 1 | 2026-06-05T19:46:46+00:00 | Vulnerability · Source |
| CVE-2026-6745 | redhat_vex | Bagisto Custom Scripts cross site scripting | known not affected: 1 | 2026-06-05T19:46:45+00:00 | Vulnerability · Source |
| CVE-2026-6628 | redhat_vex | phili67 Ecclesia CRM Query Viewer view ValidateInput sql injection | known not affected: 1 | 2026-06-05T19:46:44+00:00 | Vulnerability · Source |
| CVE-2026-33447 | redhat_vex | CVE-2026-33447 | known not affected: 1 | 2026-06-05T19:46:44+00:00 | Vulnerability · Source |
| CVE-2026-6367 | redhat_vex | Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003 | known not affected: 1 | 2026-06-05T19:46:44+00:00 | Vulnerability · Source |
| CVE-2026-33212 | redhat_vex | Weblate: Improper access control for pending tasks in API | known not affected: 1 | 2026-06-05T19:46:43+00:00 | Vulnerability · Source |
| CVE-2026-33858 | redhat_vex | Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom API | known not affected: 1 | 2026-06-05T19:46:42+00:00 | Vulnerability · Source |
| CVE-2026-33449 | redhat_vex | Message handler buffer overflow in clients prior to 14.50 | known not affected: 1 | 2026-06-05T19:46:42+00:00 | Vulnerability · Source |
| CVE-2026-33386 | redhat_vex | XSS in QuickCMS | known not affected: 1 | 2026-06-05T19:46:42+00:00 | Vulnerability · Source |
| CVE-2026-33877 | redhat_vex | ApostropheCMS: User Enumeration via Timing Side Channel in Password Reset Endpoint | known not affected: 1 | 2026-06-05T19:46:41+00:00 | Vulnerability · Source |
| CVE-2026-42443 | redhat_vex | NanaZip: Integer divide-by-zero in NanaZip UFS inode offset calculation | known not affected: 1 | 2026-06-05T19:46:41+00:00 | Vulnerability · Source |
| CVE-2026-33558 | redhat_vex | Apache Kafka, Apache Kafka Clients: Information Exposure Through Network Client Log Output | known not affected: 1 | 2026-06-05T19:46:41+00:00 | Vulnerability · Source |
| CVE-2026-33585 | redhat_vex | Arqit SKA-Platform Improper Handling of Parameters Vulnerability | known not affected: 1 | 2026-06-05T19:46:40+00:00 | Vulnerability · Source |
| CVE-2026-33659 | redhat_vex | EspoCRM: SSRF via DNS Rebinding in Attachment fromImageUrl Endpoint Allows Internal Network Access | known not affected: 1 | 2026-06-05T19:46:40+00:00 | Vulnerability · Source |
| CVE-2026-33565 | redhat_vex | kernel_linux_common_modules has a Race Condition vulnerability | known not affected: 1 | 2026-06-05T19:46:39+00:00 | Vulnerability · Source |
| CVE-2026-42520 | redhat_vex | CVE-2026-42520 | known not affected: 1 | 2026-06-05T19:46:38+00:00 | Vulnerability · Source |
| CVE-2026-42474 | redhat_vex | CVE-2026-42474 | known not affected: 1 | 2026-06-05T19:46:38+00:00 | Vulnerability · Source |
| CVE-2026-42421 | redhat_vex | OpenClaw < 2026.4.8 - WebSocket Session Persistence via Shared Gateway Token Rotation | known not affected: 1 | 2026-06-05T19:46:37+00:00 | Vulnerability · Source |
| CVE-2026-42478 | redhat_vex | CVE-2026-42478 | known not affected: 1 | 2026-06-05T19:46:36+00:00 | Vulnerability · Source |
| CVE-2026-42524 | redhat_vex | CVE-2026-42524 | known not affected: 1 | 2026-06-05T19:46:36+00:00 | Vulnerability · Source |
| CVE-2026-42865 | redhat_vex | Inbox Zero: Cross-account cleaner email stream exposure | known not affected: 1 | 2026-06-05T19:46:35+00:00 | Vulnerability · Source |
| CVE-2026-42526 | redhat_vex | Apache Airflow Amazon provider: Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backends | known not affected: 1 | 2026-06-05T19:46:34+00:00 | Vulnerability · Source |
| CVE-2026-42481 | redhat_vex | CVE-2026-42481 | known not affected: 1 | 2026-06-05T19:46:34+00:00 | Vulnerability · Source |
| CVE-2026-42472 | redhat_vex | CVE-2026-42472 | known not affected: 1 | 2026-06-05T19:46:34+00:00 | Vulnerability · Source |
| CVE-2026-42670 | redhat_vex | WordPress Five Star Restaurant Reservations plugin <= 2.7.14 - Payment Bypass vulnerability | known not affected: 1 | 2026-06-05T19:46:33+00:00 | Vulnerability · Source |
| CVE-2026-42522 | redhat_vex | CVE-2026-42522 | known not affected: 1 | 2026-06-05T19:46:32+00:00 | Vulnerability · Source |
| CVE-2026-42485 | redhat_vex | CVE-2026-42485 | known not affected: 1 | 2026-06-05T19:46:32+00:00 | Vulnerability · Source |
| CVE-2026-42360 | redhat_vex | Apache Airflow: Rendered template truncation bypasses nested sensitive-key masking | known not affected: 1 | 2026-06-05T19:46:32+00:00 | Vulnerability · Source |
| CVE-2026-42476 | redhat_vex | CVE-2026-42476 | known not affected: 1 | 2026-06-05T19:46:32+00:00 | Vulnerability · Source |
| CVE-2026-42467 | redhat_vex | CVE-2026-42467 | known not affected: 1 | 2026-06-05T19:46:31+00:00 | Vulnerability · Source |
| CVE-2026-42521 | redhat_vex | CVE-2026-42521 | known not affected: 1 | 2026-06-05T19:46:31+00:00 | Vulnerability · Source |
| CVE-2026-42626 | redhat_vex | CVE-2026-42626 | known not affected: 1 | 2026-06-05T19:46:31+00:00 | Vulnerability · Source |
| CVE-2026-42473 | redhat_vex | CVE-2026-42473 | known not affected: 1 | 2026-06-05T19:46:31+00:00 | Vulnerability · Source |
| CVE-2026-24661 | redhat_vex | Unbounded Request Body Read in MS Teams Plugin {{/changes}} Webhook Endpoint | known not affected: 1 | 2026-06-05T19:46:30+00:00 | Vulnerability · Source |
| CVE-2026-42471 | redhat_vex | CVE-2026-42471 | known not affected: 1 | 2026-06-05T19:46:29+00:00 | Vulnerability · Source |
| CVE-2026-42873 | redhat_vex | WeGIA: Error Handling Upload DocDependente | known not affected: 1 | 2026-06-05T19:46:29+00:00 | Vulnerability · Source |
| CVE-2026-42523 | redhat_vex | CVE-2026-42523 | known not affected: 1 | 2026-06-05T19:46:29+00:00 | Vulnerability · Source |
| CVE-2026-42525 | redhat_vex | CVE-2026-42525 | known not affected: 1 | 2026-06-05T19:46:28+00:00 | Vulnerability · Source |
| CVE-2026-42480 | redhat_vex | CVE-2026-42480 | known not affected: 1 | 2026-06-05T19:46:28+00:00 | Vulnerability · Source |
| CVE-2026-42479 | redhat_vex | CVE-2026-42479 | known not affected: 1 | 2026-06-05T19:46:27+00:00 | Vulnerability · Source |
| CVE-2026-20449 | redhat_vex | CVE-2026-20449 | known not affected: 1 | 2026-06-05T19:46:26+00:00 | Vulnerability · Source |
| CVE-2026-42475 | redhat_vex | CVE-2026-42475 | known not affected: 1 | 2026-06-05T19:46:26+00:00 | Vulnerability · Source |
| CVE-2026-42448 | redhat_vex | wormhole receive, with --output pointing at an existing directory can be path-traversed | known not affected: 1 | 2026-06-05T19:46:26+00:00 | Vulnerability · Source |
| CVE-2026-24069 | redhat_vex | Improper Enforcement of Disabled Accounts in WebUI SSO in Kiuwan SAST | known not affected: 1 | 2026-06-05T19:46:26+00:00 | Vulnerability · Source |
| CVE-2026-2900 | redhat_vex | Missing Authorization in GitLab | known not affected: 1 | 2026-06-05T19:46:25+00:00 | Vulnerability · Source |
| CVE-2026-24761 | redhat_vex | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key | known not affected: 1 | 2026-06-05T19:46:25+00:00 | Vulnerability · Source |
| CVE-2026-24710 | redhat_vex | CVE-2026-24710 | known not affected: 1 | 2026-06-05T19:46:25+00:00 | Vulnerability · Source |
| CVE-2026-2401 | redhat_vex | CVE-2026-2401 | known not affected: 1 | 2026-06-05T19:46:24+00:00 | Vulnerability · Source |
| CVE-2026-20685 | redhat_vex | CVE-2026-20685 | known not affected: 1 | 2026-06-05T19:46:23+00:00 | Vulnerability · Source |
| CVE-2026-20456 | redhat_vex | CVE-2026-20456 | known not affected: 1 | 2026-06-05T19:46:22+00:00 | Vulnerability · Source |