VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297779 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-4118 | redhat_vex | Call To Action Plugin <= 3.1.3 - Cross-Site Request Forgery via Settings Update | known not affected: 1 | 2026-06-05T19:28:00+00:00 | Vulnerability · Source |
| CVE-2026-4002 | redhat_vex | Petje.af <= 2.1.8 - Cross-Site Request Forgery to Account Deletion via 'petjeaf_disconnect' AJAX Action | known not affected: 1 | 2026-06-05T19:27:59+00:00 | Vulnerability · Source |
| CVE-2026-22054 | redhat_vex | CVE-2026-22054 | known not affected: 1 | 2026-06-05T19:27:58+00:00 | Vulnerability · Source |
| CVE-2026-4279 | redhat_vex | Bread & Butter: Content Gating for Verified Leads <= 8.2.0.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:27:58+00:00 | Vulnerability · Source |
| CVE-2026-22573 | redhat_vex | CVE-2026-22573 | known not affected: 1 | 2026-06-05T19:27:57+00:00 | Vulnerability · Source |
| CVE-2026-4011 | redhat_vex | Power Charts <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:27:57+00:00 | Vulnerability · Source |
| CVE-2026-22872 | redhat_vex | Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability | known not affected: 1 | 2026-06-05T19:27:56+00:00 | Vulnerability · Source |
| CVE-2026-22692 | redhat_vex | October CMS: Twig Sandbox Bypass via Collection Methods | known not affected: 1 | 2026-06-05T19:27:56+00:00 | Vulnerability · Source |
| CVE-2026-22616 | redhat_vex | CVE-2026-22616 | known not affected: 1 | 2026-06-05T19:27:55+00:00 | Vulnerability · Source |
| CVE-2026-22726 | redhat_vex | Route Services Firewall Bypass | known not affected: 1 | 2026-06-05T19:27:54+00:00 | Vulnerability · Source |
| CVE-2026-22618 | redhat_vex | CVE-2026-22618 | known not affected: 1 | 2026-06-05T19:27:53+00:00 | Vulnerability · Source |
| CVE-2026-22155 | redhat_vex | CVE-2026-22155 | known not affected: 1 | 2026-06-05T19:27:52+00:00 | Vulnerability · Source |
| CVE-2026-22003 | redhat_vex | CVE-2026-22003 | known not affected: 1 | 2026-06-05T19:27:51+00:00 | Vulnerability · Source |
| CVE-2026-22880 | redhat_vex | Mobile SSO authentication flow allows credential theft via malicious server | known not affected: 1 | 2026-06-05T19:27:49+00:00 | Vulnerability · Source |
| CVE-2026-22574 | redhat_vex | CVE-2026-22574 | known not affected: 1 | 2026-06-05T19:27:49+00:00 | Vulnerability · Source |
| CVE-2026-22615 | redhat_vex | CVE-2026-22615 | known not affected: 1 | 2026-06-05T19:27:47+00:00 | Vulnerability · Source |
| CVE-2026-22077 | redhat_vex | Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet | known not affected: 1 | 2026-06-05T19:27:47+00:00 | Vulnerability · Source |
| CVE-2026-22707 | redhat_vex | Strapi Upload Plugin MIME Validation Bypass via Content API | known not affected: 1 | 2026-06-05T19:27:46+00:00 | Vulnerability · Source |
| CVE-2026-22617 | redhat_vex | CVE-2026-22617 | known not affected: 1 | 2026-06-05T19:27:46+00:00 | Vulnerability · Source |
| CVE-2026-22006 | redhat_vex | CVE-2026-22006 | known not affected: 1 | 2026-06-05T19:27:45+00:00 | Vulnerability · Source |
| CVE-2026-22154 | redhat_vex | CVE-2026-22154 | known not affected: 1 | 2026-06-05T19:27:44+00:00 | Vulnerability · Source |
| CVE-2026-22019 | redhat_vex | CVE-2026-22019 | known not affected: 1 | 2026-06-05T19:27:43+00:00 | Vulnerability · Source |
| CVE-2026-22055 | redhat_vex | CVE-2026-22055 | known not affected: 1 | 2026-06-05T19:27:43+00:00 | Vulnerability · Source |
| CVE-2026-22576 | redhat_vex | CVE-2026-22576 | known not affected: 1 | 2026-06-05T19:27:42+00:00 | Vulnerability · Source |
| CVE-2026-40548 | redhat_vex | Unrestricted Upload of File with Dangerous Type in SOPlanning | known not affected: 1 | 2026-06-05T19:27:41+00:00 | Vulnerability · Source |
| CVE-2026-40944 | redhat_vex | Oxia: TLS CA certificate chain validation fails with multi-certificate PEM bundles | known not affected: 1 | 2026-06-05T19:27:41+00:00 | Vulnerability · Source |
| CVE-2026-40584 | redhat_vex | RansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information Exposure | known not affected: 1 | 2026-06-05T19:27:40+00:00 | Vulnerability · Source |
| CVE-2026-40908 | redhat_vex | WWBN AVideo has an Unauthenticated Information Disclosure via git.json.php that Exposes Developer Emails and Deployed Version | known not affected: 1 | 2026-06-05T19:27:39+00:00 | Vulnerability · Source |
| CVE-2026-40980 | redhat_vex | CVE-2026-40980 | known not affected: 1 | 2026-06-05T19:27:39+00:00 | Vulnerability · Source |
| CVE-2026-40566 | redhat_vex | FreeScout vulnerable to SSRF via IMAP/SMTP Connection Test Endpoints | known not affected: 1 | 2026-06-05T19:27:38+00:00 | Vulnerability · Source |
| CVE-2026-40935 | redhat_vex | WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failure | known not affected: 1 | 2026-06-05T19:27:37+00:00 | Vulnerability · Source |
| CVE-2026-40881 | redhat_vex | Zebra: addr/addrv2 Deserialization Resource Exhaustion | known not affected: 1 | 2026-06-05T19:27:37+00:00 | Vulnerability · Source |
| CVE-2026-40296 | redhat_vex | PhpSpreadsheet vulnerable to XSS in HTML writer via custom number format codes | known not affected: 1 | 2026-06-05T19:27:36+00:00 | Vulnerability · Source |
| CVE-2026-40098 | redhat_vex | OpenMage LTS imports cross-user wishlist item via shared wishlist code, leading to private option disclosure and file-disclosure variant | known not affected: 1 | 2026-06-05T19:27:36+00:00 | Vulnerability · Source |
| CVE-2026-40179 | redhat_vex | Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer | known not affected: 1 | 2026-06-05T19:27:35+00:00 | Vulnerability · Source |
| CVE-2026-40979 | redhat_vex | CVE-2026-40979 | known not affected: 1 | 2026-06-05T19:27:34+00:00 | Vulnerability · Source |
| CVE-2026-40001 | redhat_vex | Local privilege escalation vulnerability in ZTE PROCESS Guard service of the cloud computer client | known not affected: 1 | 2026-06-05T19:27:34+00:00 | Vulnerability · Source |
| CVE-2026-40603 | redhat_vex | Chartbrew: Incorrect Access Control in /api/project/dashboard/:brewName via same-team override | known not affected: 1 | 2026-06-05T19:27:33+00:00 | Vulnerability · Source |
| CVE-2026-40045 | redhat_vex | OpenClaw < 2026.4.2 - Cleartext Credential Transmission via Unencrypted WebSocket Gateway Endpoints | known not affected: 1 | 2026-06-05T19:27:33+00:00 | Vulnerability · Source |
| CVE-2026-40135 | redhat_vex | OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | known not affected: 1 | 2026-06-05T19:27:32+00:00 | Vulnerability · Source |
| CVE-2026-40265 | redhat_vex | Note Mark has Broken Access Control on Asset Download | known not affected: 1 | 2026-06-05T19:27:31+00:00 | Vulnerability · Source |
| CVE-2026-40889 | redhat_vex | Frappe HR has Improper Access Control on Files | known not affected: 1 | 2026-06-05T19:27:31+00:00 | Vulnerability · Source |
| CVE-2026-40117 | redhat_vex | PraisonAIAgents Affected by Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate | known not affected: 1 | 2026-06-05T19:27:31+00:00 | Vulnerability · Source |
| CVE-2026-40094 | redhat_vex | nimiq-blockchain: network-libp2p untrusted peer can crash address book via empty peer contact addresses | known not affected: 1 | 2026-06-05T19:27:29+00:00 | Vulnerability · Source |
| CVE-2026-40544 | redhat_vex | Stored XSS in SOPlanning | known not affected: 1 | 2026-06-05T19:27:29+00:00 | Vulnerability · Source |
| CVE-2026-40229 | redhat_vex | Helpy 2.8.0 - Stored XSS in post author display via PostsHelper | known not affected: 1 | 2026-06-05T19:27:29+00:00 | Vulnerability · Source |
| CVE-2026-40571 | redhat_vex | NamelessMC: Reactions on private or blocking profile posts can be modified without proper authorization | known not affected: 1 | 2026-06-05T19:27:28+00:00 | Vulnerability · Source |
| CVE-2026-40894 | redhat_vex | OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers | known not affected: 1 | 2026-06-05T19:27:27+00:00 | Vulnerability · Source |
| CVE-2026-40302 | redhat_vex | zrok has reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering | known not affected: 1 | 2026-06-05T19:27:25+00:00 | Vulnerability · Source |
| CVE-2026-40939 | redhat_vex | DSF: Missing Session Timeout for OIDC Sessions | known not affected: 1 | 2026-06-05T19:27:25+00:00 | Vulnerability · Source |