VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298279 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-8419 | redhat_vex | Amazon Scraper <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update | known not affected: 1 | 2026-06-05T19:23:55+00:00 | Vulnerability · Source |
| CVE-2026-8653 | redhat_vex | MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' Parameter | known not affected: 1 | 2026-06-05T19:23:55+00:00 | Vulnerability · Source |
| CVE-2026-8239 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to IDOR in '/ccm/frontend/conversations/get_rating' | known not affected: 1 | 2026-06-05T19:23:54+00:00 | Vulnerability · Source |
| CVE-2026-8842 | redhat_vex | Google+ Link Name <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:23:54+00:00 | Vulnerability · Source |
| CVE-2026-8716 | redhat_vex | Use of Incorrectly-Resolved Name or Reference in GitLab | known not affected: 1 | 2026-06-05T19:23:54+00:00 | Vulnerability · Source |
| CVE-2026-35661 | redhat_vex | OpenClaw < 2026.3.25 - Telegram DM-Scoped Inline Button Callback Authorization Bypass | known not affected: 1 | 2026-06-05T19:23:54+00:00 | Vulnerability · Source |
| CVE-2026-35153 | redhat_vex | CVE-2026-35153 | known not affected: 1 | 2026-06-05T19:23:54+00:00 | Vulnerability · Source |
| CVE-2026-8941 | redhat_vex | CDN Linker lite <= 1.3.1 - Cross-Site Request Forgery to Plugin Settings Update | known not affected: 1 | 2026-06-05T19:23:53+00:00 | Vulnerability · Source |
| CVE-2026-8707 | redhat_vex | NS Product icon badge <= 1.2.4 - Reflected Cross-Site Scripting via PHP_SELF | known not affected: 1 | 2026-06-05T19:23:52+00:00 | Vulnerability · Source |
| CVE-2026-8626 | redhat_vex | SponsorMe <= 0.5.2 - Reflected Cross-Site Scripting via PHP_SELF Parameter | known not affected: 1 | 2026-06-05T19:23:52+00:00 | Vulnerability · Source |
| CVE-2026-35634 | redhat_vex | OpenClaw < 2026.3.23 - Authentication Bypass via Local-Direct Requests in Canvas Gateway | known not affected: 1 | 2026-06-05T19:23:51+00:00 | Vulnerability · Source |
| CVE-2026-35247 | redhat_vex | CVE-2026-35247 | known not affected: 1 | 2026-06-05T19:23:51+00:00 | Vulnerability · Source |
| CVE-2026-35014 | redhat_vex | Open ISES Tickets < 3.44.2 Reflected XSS via routes_nm.php ticket_id Parameter | known not affected: 1 | 2026-06-05T19:23:51+00:00 | Vulnerability · Source |
| CVE-2026-35049 | redhat_vex | wire-ios has Persistent Remote DoS via Integer Underflow | known not affected: 1 | 2026-06-05T19:23:51+00:00 | Vulnerability · Source |
| CVE-2026-35212 | redhat_vex | OpenCTI has XSS in the rendering of email-message observable body data | known not affected: 1 | 2026-06-05T19:23:50+00:00 | Vulnerability · Source |
| CVE-2026-35041 | redhat_vex | ReDoS in fast-jwt when using RegExp in allowed* leading to CPU exhaustion during token verification | known not affected: 1 | 2026-06-05T19:23:49+00:00 | Vulnerability · Source |
| CVE-2026-35221 | redhat_vex | Joomla! Core - [20260506] - Authenticated blind SQLi in com_finder | known not affected: 1 | 2026-06-05T19:23:49+00:00 | Vulnerability · Source |
| CVE-2026-35656 | redhat_vex | OpenClaw < 2026.3.22 - XFF Loopback Spoofing Bypass in Canvas Authentication and Rate Limiter | known not affected: 1 | 2026-06-05T19:23:49+00:00 | Vulnerability · Source |
| CVE-2026-35072 | redhat_vex | CVE-2026-35072 | known not affected: 1 | 2026-06-05T19:23:48+00:00 | Vulnerability · Source |
| CVE-2026-35629 | redhat_vex | OpenClaw < 2026.3.25 - Server-Side Request Forgery via Unguarded Configured Base URLs in Channel Extensions | known not affected: 1 | 2026-06-05T19:23:47+00:00 | Vulnerability · Source |
| CVE-2026-35504 | redhat_vex | Subnet Solutions PowerSYSTEM Center CRLF injection | known not affected: 1 | 2026-06-05T19:23:47+00:00 | Vulnerability · Source |
| CVE-2026-35252 | redhat_vex | CVE-2026-35252 | known not affected: 1 | 2026-06-05T19:23:47+00:00 | Vulnerability · Source |
| CVE-2026-35647 | redhat_vex | OpenClaw < 2026.3.25 - Direct Message Policy Bypass via Verification Notices | known not affected: 1 | 2026-06-05T19:23:46+00:00 | Vulnerability · Source |
| CVE-2026-35665 | redhat_vex | OpenClaw < 2026.3.24 - Denial of Service via Feishu Webhook Pre-Auth Body Parsing | known not affected: 1 | 2026-06-05T19:23:46+00:00 | Vulnerability · Source |
| CVE-2026-35593 | redhat_vex | Trilium Notes has Local File Inclusion via upload modified file API endpoint | known not affected: 1 | 2026-06-05T19:23:45+00:00 | Vulnerability · Source |
| CVE-2026-35623 | redhat_vex | OpenClaw < 2026.3.25 - Brute-Force Attack via Missing Webhook Password Rate Limiting | known not affected: 1 | 2026-06-05T19:23:44+00:00 | Vulnerability · Source |
| CVE-2026-35074 | redhat_vex | CVE-2026-35074 | known not affected: 1 | 2026-06-05T19:23:44+00:00 | Vulnerability · Source |
| CVE-2026-35443 | redhat_vex | NamelessMC: Forum reactions bypass the "view own topics only" restriction | known not affected: 1 | 2026-06-05T19:23:44+00:00 | Vulnerability · Source |
| CVE-2026-35496 | redhat_vex | CVE-2026-35496 | known not affected: 1 | 2026-06-05T19:23:43+00:00 | Vulnerability · Source |
| CVE-2026-35487 | redhat_vex | text-generation-webui has a Path Traversal in load_prompt() — .txt file read without authentication | known not affected: 1 | 2026-06-05T19:23:43+00:00 | Vulnerability · Source |
| CVE-2026-35012 | redhat_vex | Open ISES Tickets < 3.44.2 Reflected XSS via add_facnote.php ticket_id Parameter | known not affected: 1 | 2026-06-05T19:23:42+00:00 | Vulnerability · Source |
| CVE-2026-35667 | redhat_vex | OpenClaw < 2026.3.24 - Improper Process Termination via Unpatched killProcessTree in shell-utils.ts | known not affected: 1 | 2026-06-05T19:23:42+00:00 | Vulnerability · Source |
| CVE-2026-35586 | redhat_vex | Authorization Bypass for SSL Certificate/Key Configuration Due to Option Name Mismatch in pyload-ng | known not affected: 1 | 2026-06-05T19:23:41+00:00 | Vulnerability · Source |
| CVE-2026-35070 | redhat_vex | CVE-2026-35070 | known not affected: 1 | 2026-06-05T19:23:40+00:00 | Vulnerability · Source |
| CVE-2026-35232 | redhat_vex | CVE-2026-35232 | known not affected: 1 | 2026-06-05T19:23:40+00:00 | Vulnerability · Source |
| CVE-2026-35034 | redhat_vex | Jellyfin: Potential Application DoS from excessively large SyncPlay group names | known not affected: 1 | 2026-06-05T19:23:39+00:00 | Vulnerability · Source |
| CVE-2026-35599 | redhat_vex | Vikunja has an Algorithmic Complexity DoS in Repeating Task Handler | known not affected: 1 | 2026-06-05T19:23:38+00:00 | Vulnerability · Source |
| CVE-2026-35241 | redhat_vex | CVE-2026-35241 | known not affected: 1 | 2026-06-05T19:23:38+00:00 | Vulnerability · Source |
| CVE-2026-35061 | redhat_vex | Anviz Products Missing Authorization | known not affected: 1 | 2026-06-05T19:23:37+00:00 | Vulnerability · Source |
| CVE-2026-35447 | redhat_vex | NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes | known not affected: 1 | 2026-06-05T19:23:36+00:00 | Vulnerability · Source |
| CVE-2026-35483 | redhat_vex | text-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authentication | known not affected: 1 | 2026-06-05T19:23:36+00:00 | Vulnerability · Source |
| CVE-2026-35645 | redhat_vex | OpenClaw < 2026.3.25 - Privilege Escalation via Synthetic operator.admin in deleteSession | known not affected: 1 | 2026-06-05T19:23:36+00:00 | Vulnerability · Source |
| CVE-2026-35627 | redhat_vex | OpenClaw < 2026.3.22 - Unauthenticated Cryptographic Work in Nostr Inbound DM Handling | known not affected: 1 | 2026-06-05T19:23:35+00:00 | Vulnerability · Source |
| CVE-2026-35165 | redhat_vex | LORIS has incorrect access checks in document_repository | known not affected: 1 | 2026-06-05T19:23:35+00:00 | Vulnerability · Source |
| CVE-2026-35462 | redhat_vex | Papra Does Not Reject Expired API Keys | known not affected: 1 | 2026-06-05T19:23:34+00:00 | Vulnerability · Source |
| CVE-2026-35479 | redhat_vex | InvenTree Plugin Installation - Insufficient Permissions | known not affected: 1 | 2026-06-05T19:23:34+00:00 | Vulnerability · Source |
| CVE-2026-35655 | redhat_vex | OpenClaw < 2026.3.22 - Identity Spoofing via rawInput Tool in ACP Permission Resolution | known not affected: 1 | 2026-06-05T19:23:34+00:00 | Vulnerability · Source |
| CVE-2026-35255 | redhat_vex | CVE-2026-35255 | known not affected: 1 | 2026-06-05T19:23:34+00:00 | Vulnerability · Source |
| CVE-2026-35220 | redhat_vex | Joomla! Core - [20260505] - CSRF in user activation endpoint | known not affected: 1 | 2026-06-05T19:23:33+00:00 | Vulnerability · Source |
| CVE-2026-35008 | redhat_vex | Open ISES Tickets < 3.44.2 Reflected XSS via single.php ticket_id Parameter | known not affected: 1 | 2026-06-05T19:23:32+00:00 | Vulnerability · Source |