VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298211 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-22155 | redhat_vex | CVE-2026-22155 | known not affected: 1 | 2026-06-05T19:27:52+00:00 | Vulnerability · Source |
| CVE-2026-22003 | redhat_vex | CVE-2026-22003 | known not affected: 1 | 2026-06-05T19:27:51+00:00 | Vulnerability · Source |
| CVE-2026-22880 | redhat_vex | Mobile SSO authentication flow allows credential theft via malicious server | known not affected: 1 | 2026-06-05T19:27:49+00:00 | Vulnerability · Source |
| CVE-2026-22574 | redhat_vex | CVE-2026-22574 | known not affected: 1 | 2026-06-05T19:27:49+00:00 | Vulnerability · Source |
| CVE-2026-22615 | redhat_vex | CVE-2026-22615 | known not affected: 1 | 2026-06-05T19:27:47+00:00 | Vulnerability · Source |
| CVE-2026-22077 | redhat_vex | Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet | known not affected: 1 | 2026-06-05T19:27:47+00:00 | Vulnerability · Source |
| CVE-2026-22707 | redhat_vex | Strapi Upload Plugin MIME Validation Bypass via Content API | known not affected: 1 | 2026-06-05T19:27:46+00:00 | Vulnerability · Source |
| CVE-2026-22617 | redhat_vex | CVE-2026-22617 | known not affected: 1 | 2026-06-05T19:27:46+00:00 | Vulnerability · Source |
| CVE-2026-22006 | redhat_vex | CVE-2026-22006 | known not affected: 1 | 2026-06-05T19:27:45+00:00 | Vulnerability · Source |
| CVE-2026-22154 | redhat_vex | CVE-2026-22154 | known not affected: 1 | 2026-06-05T19:27:44+00:00 | Vulnerability · Source |
| CVE-2026-22019 | redhat_vex | CVE-2026-22019 | known not affected: 1 | 2026-06-05T19:27:43+00:00 | Vulnerability · Source |
| CVE-2026-22055 | redhat_vex | CVE-2026-22055 | known not affected: 1 | 2026-06-05T19:27:43+00:00 | Vulnerability · Source |
| CVE-2026-22576 | redhat_vex | CVE-2026-22576 | known not affected: 1 | 2026-06-05T19:27:42+00:00 | Vulnerability · Source |
| CVE-2026-40548 | redhat_vex | Unrestricted Upload of File with Dangerous Type in SOPlanning | known not affected: 1 | 2026-06-05T19:27:41+00:00 | Vulnerability · Source |
| CVE-2026-40944 | redhat_vex | Oxia: TLS CA certificate chain validation fails with multi-certificate PEM bundles | known not affected: 1 | 2026-06-05T19:27:41+00:00 | Vulnerability · Source |
| CVE-2026-40584 | redhat_vex | RansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information Exposure | known not affected: 1 | 2026-06-05T19:27:40+00:00 | Vulnerability · Source |
| CVE-2026-40908 | redhat_vex | WWBN AVideo has an Unauthenticated Information Disclosure via git.json.php that Exposes Developer Emails and Deployed Version | known not affected: 1 | 2026-06-05T19:27:39+00:00 | Vulnerability · Source |
| CVE-2026-40980 | redhat_vex | CVE-2026-40980 | known not affected: 1 | 2026-06-05T19:27:39+00:00 | Vulnerability · Source |
| CVE-2026-40566 | redhat_vex | FreeScout vulnerable to SSRF via IMAP/SMTP Connection Test Endpoints | known not affected: 1 | 2026-06-05T19:27:38+00:00 | Vulnerability · Source |
| CVE-2026-40935 | redhat_vex | WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failure | known not affected: 1 | 2026-06-05T19:27:37+00:00 | Vulnerability · Source |
| CVE-2026-40881 | redhat_vex | Zebra: addr/addrv2 Deserialization Resource Exhaustion | known not affected: 1 | 2026-06-05T19:27:37+00:00 | Vulnerability · Source |
| CVE-2026-40296 | redhat_vex | PhpSpreadsheet vulnerable to XSS in HTML writer via custom number format codes | known not affected: 1 | 2026-06-05T19:27:36+00:00 | Vulnerability · Source |
| CVE-2026-40098 | redhat_vex | OpenMage LTS imports cross-user wishlist item via shared wishlist code, leading to private option disclosure and file-disclosure variant | known not affected: 1 | 2026-06-05T19:27:36+00:00 | Vulnerability · Source |
| CVE-2026-40179 | redhat_vex | Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer | known not affected: 1 | 2026-06-05T19:27:35+00:00 | Vulnerability · Source |
| CVE-2026-40979 | redhat_vex | CVE-2026-40979 | known not affected: 1 | 2026-06-05T19:27:34+00:00 | Vulnerability · Source |
| CVE-2026-40001 | redhat_vex | Local privilege escalation vulnerability in ZTE PROCESS Guard service of the cloud computer client | known not affected: 1 | 2026-06-05T19:27:34+00:00 | Vulnerability · Source |
| CVE-2026-40603 | redhat_vex | Chartbrew: Incorrect Access Control in /api/project/dashboard/:brewName via same-team override | known not affected: 1 | 2026-06-05T19:27:33+00:00 | Vulnerability · Source |
| CVE-2026-40045 | redhat_vex | OpenClaw < 2026.4.2 - Cleartext Credential Transmission via Unencrypted WebSocket Gateway Endpoints | known not affected: 1 | 2026-06-05T19:27:33+00:00 | Vulnerability · Source |
| CVE-2026-40135 | redhat_vex | OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | known not affected: 1 | 2026-06-05T19:27:32+00:00 | Vulnerability · Source |
| CVE-2026-40265 | redhat_vex | Note Mark has Broken Access Control on Asset Download | known not affected: 1 | 2026-06-05T19:27:31+00:00 | Vulnerability · Source |
| CVE-2026-40889 | redhat_vex | Frappe HR has Improper Access Control on Files | known not affected: 1 | 2026-06-05T19:27:31+00:00 | Vulnerability · Source |
| CVE-2026-40117 | redhat_vex | PraisonAIAgents Affected by Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate | known not affected: 1 | 2026-06-05T19:27:31+00:00 | Vulnerability · Source |
| CVE-2026-40094 | redhat_vex | nimiq-blockchain: network-libp2p untrusted peer can crash address book via empty peer contact addresses | known not affected: 1 | 2026-06-05T19:27:29+00:00 | Vulnerability · Source |
| CVE-2026-40544 | redhat_vex | Stored XSS in SOPlanning | known not affected: 1 | 2026-06-05T19:27:29+00:00 | Vulnerability · Source |
| CVE-2026-40229 | redhat_vex | Helpy 2.8.0 - Stored XSS in post author display via PostsHelper | known not affected: 1 | 2026-06-05T19:27:29+00:00 | Vulnerability · Source |
| CVE-2026-40571 | redhat_vex | NamelessMC: Reactions on private or blocking profile posts can be modified without proper authorization | known not affected: 1 | 2026-06-05T19:27:28+00:00 | Vulnerability · Source |
| CVE-2026-40894 | redhat_vex | OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers | known not affected: 1 | 2026-06-05T19:27:27+00:00 | Vulnerability · Source |
| CVE-2026-40302 | redhat_vex | zrok has reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering | known not affected: 1 | 2026-06-05T19:27:25+00:00 | Vulnerability · Source |
| CVE-2026-40939 | redhat_vex | DSF: Missing Session Timeout for OIDC Sessions | known not affected: 1 | 2026-06-05T19:27:25+00:00 | Vulnerability · Source |
| CVE-2026-40966 | redhat_vex | VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration | known not affected: 1 | 2026-06-05T19:27:24+00:00 | Vulnerability · Source |
| CVE-2026-40212 | redhat_vex | CVE-2026-40212 | known not affected: 1 | 2026-06-05T19:27:23+00:00 | Vulnerability · Source |
| CVE-2026-40230 | redhat_vex | Helpy 2.8.0 - Stored XSS in knowledgebase Doc body rendering | known not affected: 1 | 2026-06-05T19:27:22+00:00 | Vulnerability · Source |
| CVE-2026-40942 | redhat_vex | DSF: Inverted Time Comparison in OIDC JWKS and Token Cache | known not affected: 1 | 2026-06-05T19:27:21+00:00 | Vulnerability · Source |
| CVE-2026-40384 | redhat_vex | Joomla! Core - [20260510] - Path traversal in com_media webservice endpoint | known not affected: 1 | 2026-06-05T19:27:21+00:00 | Vulnerability · Source |
| CVE-2026-40951 | redhat_vex | Memory corruption in Secure Access Windows clients prior to 14.50 | known not affected: 1 | 2026-06-05T19:27:20+00:00 | Vulnerability · Source |
| CVE-2026-40096 | redhat_vex | immich: Open Redirect via Shared Album name | known not affected: 1 | 2026-06-05T19:27:18+00:00 | Vulnerability · Source |
| CVE-2026-40896 | redhat_vex | OpenProject has Cross-Project Meeting Agenda Item Injection via Unscoped Section Lookup | known not affected: 1 | 2026-06-05T19:27:17+00:00 | Vulnerability · Source |
| CVE-2026-40304 | redhat_vex | zrok's broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend records | known not affected: 1 | 2026-06-05T19:27:17+00:00 | Vulnerability · Source |
| CVE-2026-40151 | redhat_vex | PraisonAI Affected by Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS | known not affected: 1 | 2026-06-05T19:27:16+00:00 | Vulnerability · Source |
| CVE-2026-40214 | redhat_vex | CVE-2026-40214 | known not affected: 1 | 2026-06-05T19:27:15+00:00 | Vulnerability · Source |