VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297763 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-47316 | redhat_vex | CVE-2026-47316 | known not affected: 1 | 2026-06-05T19:37:16+00:00 | Vulnerability · Source |
| CVE-2026-47271 | redhat_vex | pam_usb: OOM guards removed by -DNDEBUG cause NULL dereference and authentication process crash | known not affected: 1 | 2026-06-05T19:37:16+00:00 | Vulnerability · Source |
| CVE-2026-47325 | redhat_vex | Weak password policy in ProjectsAndPrograms school-management-system | known not affected: 1 | 2026-06-05T19:37:16+00:00 | Vulnerability · Source |
| CVE-2026-47307 | redhat_vex | CVE-2026-47307 | known not affected: 1 | 2026-06-05T19:37:15+00:00 | Vulnerability · Source |
| CVE-2026-47312 | redhat_vex | CVE-2026-47312 | known not affected: 1 | 2026-06-05T19:37:15+00:00 | Vulnerability · Source |
| CVE-2026-47707 | redhat_vex | Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification | known not affected: 1 | 2026-06-05T19:37:13+00:00 | Vulnerability · Source |
| CVE-2026-47332 | redhat_vex | Out-of-bounds read in Ubuntu Linux AppArmor notification handling | known not affected: 1 | 2026-06-05T19:37:13+00:00 | Vulnerability · Source |
| CVE-2026-47745 | redhat_vex | Shopper: Missing per-action authorization on PaymentMethods, Currencies and Carriers admin tables | known not affected: 1 | 2026-06-05T19:37:12+00:00 | Vulnerability · Source |
| CVE-2026-47273 | redhat_vex | pam_usb: XPath injection via PAM-supplied identifiers in pam_usb configuration queries | known not affected: 1 | 2026-06-05T19:37:10+00:00 | Vulnerability · Source |
| CVE-2026-47741 | redhat_vex | Shopper: Race condition on Discount.usage_limit allows silent over-redemption | known not affected: 1 | 2026-06-05T19:37:10+00:00 | Vulnerability · Source |
| CVE-2026-47309 | redhat_vex | CVE-2026-47309 | known not affected: 1 | 2026-06-05T19:37:10+00:00 | Vulnerability · Source |
| CVE-2026-47324 | redhat_vex | Stored XSS in Multiple Points in ProjectsAndPrograms school-management-system | known not affected: 1 | 2026-06-05T19:37:10+00:00 | Vulnerability · Source |
| CVE-2026-47270 | redhat_vex | pam_usb: strtok() race condition in multi-threaded PAM hosts can corrupt deny_remote result | known not affected: 1 | 2026-06-05T19:37:09+00:00 | Vulnerability · Source |
| CVE-2026-47728 | redhat_vex | Bugsink: Project scoping missing in sourcemap and debug-file lookup | known not affected: 1 | 2026-06-05T19:37:08+00:00 | Vulnerability · Source |
| CVE-2026-47315 | redhat_vex | CVE-2026-47315 | known not affected: 1 | 2026-06-05T19:37:08+00:00 | Vulnerability · Source |
| CVE-2026-47328 | redhat_vex | Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling | known not affected: 1 | 2026-06-05T19:37:07+00:00 | Vulnerability · Source |
| CVE-2026-47782 | redhat_vex | CVE-2026-47782 | known not affected: 1 | 2026-06-05T19:37:07+00:00 | Vulnerability · Source |
| CVE-2026-47706 | redhat_vex | Strawberry GraphQL has a Circular Fragment Reference DOS | known not affected: 1 | 2026-06-05T19:37:06+00:00 | Vulnerability · Source |
| CVE-2026-47313 | redhat_vex | CVE-2026-47313 | known not affected: 1 | 2026-06-05T19:37:05+00:00 | Vulnerability · Source |
| CVE-2026-47672 | redhat_vex | epa4all-client: Unauthenticated REST API for Patient Record Writes | known not affected: 1 | 2026-06-05T19:37:04+00:00 | Vulnerability · Source |
| CVE-2026-29051 | redhat_vex | melange has Path Traversal via .PKGINFO in --persist-lint-results | known not affected: 1 | 2026-06-05T19:37:04+00:00 | Vulnerability · Source |
| CVE-2026-47676 | redhat_vex | Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths | known not affected: 1 | 2026-06-05T19:37:03+00:00 | Vulnerability · Source |
| CVE-2026-47694 | redhat_vex | WWBN AVideo: Stored XSS via unescaped Gallery category description | known not affected: 1 | 2026-06-05T19:37:03+00:00 | Vulnerability · Source |
| CVE-2026-47308 | redhat_vex | CVE-2026-47308 | known not affected: 1 | 2026-06-05T19:37:03+00:00 | Vulnerability · Source |
| CVE-2026-47119 | redhat_vex | Agent Zero < 1.15 Stored XSS via image_get API Endpoint | known not affected: 1 | 2026-06-05T19:37:02+00:00 | Vulnerability · Source |
| CVE-2026-41691 | redhat_vex | i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns | known not affected: 1 | 2026-06-05T19:37:01+00:00 | Vulnerability · Source |
| CVE-2026-47317 | redhat_vex | CVE-2026-47317 | known not affected: 1 | 2026-06-05T19:37:01+00:00 | Vulnerability · Source |
| CVE-2026-47335 | redhat_vex | NULL pointer dereference in Ubuntu Linux AppArmor notification handling | known not affected: 1 | 2026-06-05T19:37:00+00:00 | Vulnerability · Source |
| CVE-2026-47326 | redhat_vex | Memory leak in Ubuntu Linux AppArmor large notification response allocation | known not affected: 1 | 2026-06-05T19:37:00+00:00 | Vulnerability · Source |
| CVE-2026-41655 | redhat_vex | Admidio: Path Traversal in ECard Preview Allows Reading Arbitrary Server Files Including Database Credentials | known not affected: 1 | 2026-06-05T19:36:59+00:00 | Vulnerability · Source |
| CVE-2026-41970 | redhat_vex | CVE-2026-41970 | known not affected: 1 | 2026-06-05T19:36:58+00:00 | Vulnerability · Source |
| CVE-2026-41457 | redhat_vex | OwnTone Server < 29.1 SQL Injection via query and filter Parameters | known not affected: 1 | 2026-06-05T19:36:58+00:00 | Vulnerability · Source |
| CVE-2026-41664 | redhat_vex | CVE-2026-41664 | known not affected: 1 | 2026-06-05T19:36:57+00:00 | Vulnerability · Source |
| CVE-2026-41062 | redhat_vex | WWBN/AVideo has an incomplete fix for a directory traversal bypass via query string in ReceiveImage downloadURL parameters | known not affected: 1 | 2026-06-05T19:36:56+00:00 | Vulnerability · Source |
| CVE-2026-41961 | redhat_vex | CVE-2026-41961 | known not affected: 1 | 2026-06-05T19:36:56+00:00 | Vulnerability · Source |
| CVE-2026-41332 | redhat_vex | OpenClaw < 2026.3.28 - Code Execution via Missing Environment Variable Blocklist | known not affected: 1 | 2026-06-05T19:36:56+00:00 | Vulnerability · Source |
| CVE-2026-41484 | redhat_vex | OpenTelemetry.Exporter.OneCollector vulnerable to denial of service via unbounded HTTP error response body | known not affected: 1 | 2026-06-05T19:36:56+00:00 | Vulnerability · Source |
| CVE-2026-41350 | redhat_vex | OpenClaw < 2026.3.31 - Session Visibility Bypass via session_status in Unsandboxed Invocations | known not affected: 1 | 2026-06-05T19:36:55+00:00 | Vulnerability · Source |
| CVE-2026-41233 | redhat_vex | Froxlor has a Reseller Domain Quota Bypass via Unvalidated adminid Parameter in Domains.add() | known not affected: 1 | 2026-06-05T19:36:54+00:00 | Vulnerability · Source |
| CVE-2026-41969 | redhat_vex | CVE-2026-41969 | known not affected: 1 | 2026-06-05T19:36:53+00:00 | Vulnerability · Source |
| CVE-2026-41530 | redhat_vex | CVE-2026-41530 | known not affected: 1 | 2026-06-05T19:36:53+00:00 | Vulnerability · Source |
| CVE-2026-41206 | redhat_vex | PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_code | known not affected: 1 | 2026-06-05T19:36:52+00:00 | Vulnerability · Source |
| CVE-2026-41912 | redhat_vex | OpenClaw < 2026.4.8 - Server-Side Request Forgery Policy Bypass via Interaction-Triggered Navigation | known not affected: 1 | 2026-06-05T19:36:51+00:00 | Vulnerability · Source |
| CVE-2026-41318 | redhat_vex | AnythingLLM vulnerable to stored DOM XSS in chart caption renderer - LLM-driven prompt injection produces executable HTML via unsanitized renderMarkdown(content.caption) in Chartable component | known not affected: 1 | 2026-06-05T19:36:51+00:00 | Vulnerability · Source |
| CVE-2026-41183 | redhat_vex | FreeScout allows non-folder conversation queries to disclose assigned-only hidden conversations | known not affected: 1 | 2026-06-05T19:36:50+00:00 | Vulnerability · Source |
| CVE-2026-41354 | redhat_vex | OpenClaw < 2026.4.2 - Insufficient Scope in Zalo Webhook Replay Dedupe Keys | known not affected: 1 | 2026-06-05T19:36:50+00:00 | Vulnerability · Source |
| CVE-2026-41426 | redhat_vex | pretalx: Email injection via unescaped user-controlled placeholders in pretalx mail templates | known not affected: 1 | 2026-06-05T19:36:50+00:00 | Vulnerability · Source |
| CVE-2026-41372 | redhat_vex | OpenClaw < 2026.4.2 - Loopback Protection Bypass via Trailing-Dot Localhost in CDP Discovery | known not affected: 1 | 2026-06-05T19:36:50+00:00 | Vulnerability · Source |
| CVE-2026-41345 | redhat_vex | OpenClaw < 2026.3.31 - Authorization Header Leak via Cross-Origin Redirect in Media Download | known not affected: 1 | 2026-06-05T19:36:49+00:00 | Vulnerability · Source |
| CVE-2026-41129 | redhat_vex | Craft CMS has Server-Side Request Forgery (SSRF) with Asset Uploads Mutations | known not affected: 1 | 2026-06-05T19:36:49+00:00 | Vulnerability · Source |