VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297766 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-20170 | redhat_vex | CVE-2026-20170 | known not affected: 1 | 2026-06-05T19:29:13+00:00 | Vulnerability · Source |
| CVE-2026-20772 | redhat_vex | CVE-2026-20772 | known not affected: 1 | 2026-06-05T19:29:13+00:00 | Vulnerability · Source |
| CVE-2026-20169 | redhat_vex | Cisco IoT Field Network Director Command Injection Vulnerability | known not affected: 1 | 2026-06-05T19:29:12+00:00 | Vulnerability · Source |
| CVE-2026-20206 | redhat_vex | Cisco ThousandEyes BrowserBot Command Injection Vulnerability | known not affected: 1 | 2026-06-05T19:29:11+00:00 | Vulnerability · Source |
| CVE-2026-20233 | redhat_vex | Cisco Webex Meetings Cross-Site Scripting Vulnerability | known not affected: 1 | 2026-06-05T19:29:11+00:00 | Vulnerability · Source |
| CVE-2026-20161 | redhat_vex | Cisco ThousandEyes Enterprise Agent Arbitrary File Overwrite Vulnerability | known not affected: 1 | 2026-06-05T19:29:11+00:00 | Vulnerability · Source |
| CVE-2026-20202 | redhat_vex | Improper Input Validation during User Account Creation in Splunk Enterprise | known not affected: 1 | 2026-06-05T19:29:10+00:00 | Vulnerability · Source |
| CVE-2026-20219 | redhat_vex | CVE-2026-20219 | known not affected: 1 | 2026-06-05T19:29:10+00:00 | Vulnerability · Source |
| CVE-2026-46830 | redhat_vex | CVE-2026-46830 | known not affected: 1 | 2026-06-05T19:29:09+00:00 | Vulnerability · Source |
| CVE-2026-46470 | redhat_vex | CVE-2026-46470 | known not affected: 1 | 2026-06-05T19:29:09+00:00 | Vulnerability · Source |
| CVE-2026-46416 | redhat_vex | Microsoft UFO shared WebSocket handler state causes cross-client response hijacking | known not affected: 1 | 2026-06-05T19:29:08+00:00 | Vulnerability · Source |
| CVE-2026-46469 | redhat_vex | CVE-2026-46469 | known not affected: 1 | 2026-06-05T19:29:08+00:00 | Vulnerability · Source |
| CVE-2026-46430 | redhat_vex | Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS | known not affected: 1 | 2026-06-05T19:29:07+00:00 | Vulnerability · Source |
| CVE-2026-46685 | redhat_vex | RustFS: Reflective CORS with credentials on S3 listener; unauthenticated license metadata endpoint on console | known not affected: 1 | 2026-06-05T19:29:07+00:00 | Vulnerability · Source |
| CVE-2026-46337 | redhat_vex | WWBN AVideo: Unauthenticated Arbitrary Image Read via Path Traversal in `view/img/image404Raw.php` | known not affected: 1 | 2026-06-05T19:29:06+00:00 | Vulnerability · Source |
| CVE-2026-46843 | redhat_vex | CVE-2026-46843 | known not affected: 1 | 2026-06-05T19:29:06+00:00 | Vulnerability · Source |
| CVE-2026-46841 | redhat_vex | CVE-2026-46841 | known not affected: 1 | 2026-06-05T19:29:06+00:00 | Vulnerability · Source |
| CVE-2026-46544 | redhat_vex | Microsoft UFO reuses client-supplied WebSocket session IDs and replays stale task results to new authenticated requesters | known not affected: 1 | 2026-06-05T19:29:05+00:00 | Vulnerability · Source |
| CVE-2026-46721 | redhat_vex | Broken Access Control in extension "Frontend User Registration" (sf_register) | known not affected: 1 | 2026-06-05T19:29:05+00:00 | Vulnerability · Source |
| CVE-2026-46842 | redhat_vex | CVE-2026-46842 | known not affected: 1 | 2026-06-05T19:29:04+00:00 | Vulnerability · Source |
| CVE-2026-28735 | redhat_vex | GitHub OAuth Scope Validation | known not affected: 1 | 2026-06-05T19:29:04+00:00 | Vulnerability · Source |
| CVE-2026-46383 | redhat_vex | Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install` | known not affected: 1 | 2026-06-05T19:29:04+00:00 | Vulnerability · Source |
| CVE-2026-46356 | redhat_vex | Fleet: IP spoofing allows bypassing API rate limiting | known not affected: 1 | 2026-06-05T19:29:03+00:00 | Vulnerability · Source |
| CVE-2026-46431 | redhat_vex | Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: * | known not affected: 1 | 2026-06-05T19:29:03+00:00 | Vulnerability · Source |
| CVE-2026-28733 | redhat_vex | filemanagement_storage_service has an use after free vulnerability | known not affected: 1 | 2026-06-05T19:29:02+00:00 | Vulnerability · Source |
| CVE-2026-46561 | redhat_vex | pyLoad: SSRF via HTTP Redirect Bypass in parse_urls API | known not affected: 1 | 2026-06-05T19:29:02+00:00 | Vulnerability · Source |
| CVE-2026-46538 | redhat_vex | Microsoft UFO accepts cross-device TASK_END messages by session_id only, allowing peer task-result injection | known not affected: 1 | 2026-06-05T19:29:02+00:00 | Vulnerability · Source |
| CVE-2026-46723 | redhat_vex | Information Disclosure in extension "Faceted Search" (ke_search) | known not affected: 1 | 2026-06-05T19:29:01+00:00 | Vulnerability · Source |
| CVE-2026-28511 | redhat_vex | elabftw has entry title leakage through autocompletion search | known not affected: 1 | 2026-06-05T19:29:01+00:00 | Vulnerability · Source |
| CVE-2026-28263 | redhat_vex | CVE-2026-28263 | known not affected: 1 | 2026-06-05T19:29:01+00:00 | Vulnerability · Source |
| CVE-2026-28759 | redhat_vex | Insufficient authorization in shared channel membership sync allows remote cluster to remove users from arbitrary channels | known not affected: 1 | 2026-06-05T19:29:00+00:00 | Vulnerability · Source |
| CVE-2026-28221 | redhat_vex | Wazuh: Pre-auth stack-based buffer overflow in wazuh-remoted print_hex_string() due to signed char promotion on x86_64 | known not affected: 1 | 2026-06-05T19:28:59+00:00 | Vulnerability · Source |
| CVE-2026-28758 | redhat_vex | BIG-IP iControl REST vulnerability | known not affected: 1 | 2026-06-05T19:28:58+00:00 | Vulnerability · Source |
| CVE-2026-28553 | redhat_vex | CVE-2026-28553 | known not affected: 1 | 2026-06-05T19:28:58+00:00 | Vulnerability · Source |
| CVE-2026-28116 | redhat_vex | WordPress Progress Planner plugin <= 1.9.0 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:28:58+00:00 | Vulnerability · Source |
| CVE-2026-28444 | redhat_vex | Typebot: IDOR in Result Logs Endpoint Allows Cross-Workspace Data Disclosure | known not affected: 1 | 2026-06-05T19:28:57+00:00 | Vulnerability · Source |
| CVE-2026-37505 | redhat_vex | CVE-2026-37505 | known not affected: 1 | 2026-06-05T19:28:56+00:00 | Vulnerability · Source |
| CVE-2026-37504 | redhat_vex | CVE-2026-37504 | known not affected: 1 | 2026-06-05T19:28:56+00:00 | Vulnerability · Source |
| CVE-2026-28732 | redhat_vex | Slash command trigger-word update allowed command hijacking | known not affected: 1 | 2026-06-05T19:28:56+00:00 | Vulnerability · Source |
| CVE-2026-37503 | redhat_vex | CVE-2026-37503 | known not affected: 1 | 2026-06-05T19:28:55+00:00 | Vulnerability · Source |
| CVE-2026-31953 | redhat_vex | Xibo CMS has Stored XSS via Notification Body with Zero-Click Execution on Login | known not affected: 1 | 2026-06-05T19:28:54+00:00 | Vulnerability · Source |
| CVE-2026-31205 | redhat_vex | CVE-2026-31205 | known not affected: 1 | 2026-06-05T19:28:54+00:00 | Vulnerability · Source |
| CVE-2026-31927 | redhat_vex | Anviz CX7 Firmware Relative Path Traversal | known not affected: 1 | 2026-06-05T19:28:53+00:00 | Vulnerability · Source |
| CVE-2026-31893 | redhat_vex | Tunnelblick arbitrary file read via symlink following in tunnelblickd | known not affected: 1 | 2026-06-05T19:28:53+00:00 | Vulnerability · Source |
| CVE-2026-31956 | redhat_vex | Xibo CMS has Preview and SavedReport IDOR via disableUserCheck without controller-level authorization | known not affected: 1 | 2026-06-05T19:28:53+00:00 | Vulnerability · Source |
| CVE-2026-4377 | redhat_vex | Use of Weak Credentials in D-Link DWR-X1820 router | known not affected: 1 | 2026-06-05T19:28:52+00:00 | Vulnerability · Source |
| CVE-2026-4917 | redhat_vex | IBM Guardium Data Protection is affected by multiple vulnerabilities | known not affected: 1 | 2026-06-05T19:28:52+00:00 | Vulnerability · Source |
| CVE-2026-4782 | redhat_vex | Avada Builder <= 3.15.2 - Authenticated (Subscriber+) Arbitrary File Read via 'custom_svg' Shortcode Parameter | known not affected: 1 | 2026-06-05T19:28:51+00:00 | Vulnerability · Source |
| CVE-2026-4665 | redhat_vex | WP Carousel Free <= 2.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-caption' Attribute | known not affected: 1 | 2026-06-05T19:28:51+00:00 | Vulnerability · Source |
| CVE-2026-4683 | redhat_vex | Smartcat Translator for WPML <= 3.1.77 - Missing Authorization to Unauthenticated Plugin Settings Update | known not affected: 1 | 2026-06-05T19:28:51+00:00 | Vulnerability · Source |