VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298280 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-35008 | redhat_vex | Open ISES Tickets < 3.44.2 Reflected XSS via single.php ticket_id Parameter | known not affected: 1 | 2026-06-05T19:23:32+00:00 | Vulnerability · Source |
| CVE-2026-35659 | redhat_vex | OpenClaw < 2026.3.22 - Unresolved Service Metadata Routing via Bonjour and DNS-SD Discovery | known not affected: 1 | 2026-06-05T19:23:32+00:00 | Vulnerability · Source |
| CVE-2026-35233 | redhat_vex | CVE-2026-35233 | known not affected: 1 | 2026-06-05T19:23:31+00:00 | Vulnerability · Source |
| CVE-2026-35637 | redhat_vex | OpenClaw < 2026.3.22 - Premature Cite Expansion Before Authorization in Channel and DM | known not affected: 1 | 2026-06-05T19:23:31+00:00 | Vulnerability · Source |
| CVE-2026-35673 | redhat_vex | OpenClaw < 2026.4.29 - SSRF Policy Bypass via Browser Debug/Export Routes | known not affected: 1 | 2026-06-05T19:23:31+00:00 | Vulnerability · Source |
| CVE-2026-35646 | redhat_vex | OpenClaw < 2026.3.25 - Pre-Authentication Rate-Limit Bypass in Webhook Token Validation | known not affected: 1 | 2026-06-05T19:23:30+00:00 | Vulnerability · Source |
| CVE-2026-35460 | redhat_vex | Papra has an HTML Injection in Transactional Emails via Unescaped User Display Name | known not affected: 1 | 2026-06-05T19:23:29+00:00 | Vulnerability · Source |
| CVE-2026-35073 | redhat_vex | CVE-2026-35073 | known not affected: 1 | 2026-06-05T19:23:29+00:00 | Vulnerability · Source |
| CVE-2026-35244 | redhat_vex | CVE-2026-35244 | known not affected: 1 | 2026-06-05T19:23:29+00:00 | Vulnerability · Source |
| CVE-2026-35011 | redhat_vex | Open ISES Tickets < 3.44.2 Reflected XSS via opena.php frm_call Parameter | known not affected: 1 | 2026-06-05T19:23:28+00:00 | Vulnerability · Source |
| CVE-2026-35248 | redhat_vex | CVE-2026-35248 | known not affected: 1 | 2026-06-05T19:23:27+00:00 | Vulnerability · Source |
| CVE-2026-35640 | redhat_vex | OpenClaw < 2026.3.25 - Denial of Service via Unauthenticated Webhook Request Parsing | known not affected: 1 | 2026-06-05T19:23:27+00:00 | Vulnerability · Source |
| CVE-2026-35451 | redhat_vex | Twenty: Stored XSS via BlockNote FileBlock | known not affected: 1 | 2026-06-05T19:23:26+00:00 | Vulnerability · Source |
| CVE-2026-35491 | redhat_vex | Pi-hole FTL: CLI API sessions can import Teleporter archives and modify configuration | known not affected: 1 | 2026-06-05T19:23:24+00:00 | Vulnerability · Source |
| CVE-2026-35608 | redhat_vex | QuickDrop has stored XSS in SVG file preview endpoint allowing JavaScript execution | known not affected: 1 | 2026-06-05T19:23:24+00:00 | Vulnerability · Source |
| CVE-2026-35662 | redhat_vex | OpenClaw < 2026.3.22 - Missing controlScope Enforcement in Send Action | known not affected: 1 | 2026-06-05T19:23:22+00:00 | Vulnerability · Source |
| CVE-2026-25293 | redhat_vex | Incorrect authorization in PLC FW | known not affected: 1 | 2026-06-05T19:23:14+00:00 | Vulnerability · Source |
| CVE-2026-25787 | redhat_vex | CVE-2026-25787 | known not affected: 1 | 2026-06-05T19:23:14+00:00 | Vulnerability · Source |
| CVE-2026-42484 | redhat_vex | hashcat: heap-based buffer overflow in hex_to_binary in the PKZIP hash parser in hashcat | known not affected: 1 | 2026-06-05T19:23:14+00:00 | Vulnerability · Source |
| CVE-2026-25606 | redhat_vex | SQL Injection in STER | known not affected: 1 | 2026-06-05T19:23:13+00:00 | Vulnerability · Source |
| CVE-2026-25660 | redhat_vex | Authentication bypass for certain API calls | known not affected: 1 | 2026-06-05T19:23:13+00:00 | Vulnerability · Source |
| CVE-2026-25208 | redhat_vex | CVE-2026-25208 | known not affected: 1 | 2026-06-05T19:23:13+00:00 | Vulnerability · Source |
| CVE-2026-25776 | redhat_vex | CVE-2026-25776 | known not affected: 1 | 2026-06-05T19:23:13+00:00 | Vulnerability · Source |
| CVE-2026-25550 | redhat_vex | Seagull Software BarTender Unauthenticated RCE via .NET Remoting Service | known not affected: 1 | 2026-06-05T19:23:13+00:00 | Vulnerability · Source |
| CVE-2026-25112 | redhat_vex | CVE-2026-25112 | known not affected: 1 | 2026-06-05T19:23:13+00:00 | Vulnerability · Source |
| CVE-2026-25789 | redhat_vex | CVE-2026-25789 | known not affected: 1 | 2026-06-05T19:23:13+00:00 | Vulnerability · Source |
| CVE-2026-25879 | redhat_vex | Langroid has Prompt to SQL Injection, Leading to RCE | known not affected: 1 | 2026-06-05T19:23:12+00:00 | Vulnerability · Source |
| CVE-2026-25781 | redhat_vex | kernel_liteos_a has an out-of-bounds write vulnerability | known not affected: 1 | 2026-06-05T19:23:12+00:00 | Vulnerability · Source |
| CVE-2026-25104 | redhat_vex | CVE-2026-25104 | known not affected: 1 | 2026-06-05T19:23:11+00:00 | Vulnerability · Source |
| CVE-2026-25058 | redhat_vex | Vexa's unauthenticated internal transcript endpoint exposed by default | known not affected: 1 | 2026-06-05T19:23:11+00:00 | Vulnerability · Source |
| CVE-2026-25207 | redhat_vex | CVE-2026-25207 | known not affected: 1 | 2026-06-05T19:23:10+00:00 | Vulnerability · Source |
| CVE-2026-25786 | redhat_vex | CVE-2026-25786 | known not affected: 1 | 2026-06-05T19:23:10+00:00 | Vulnerability · Source |
| CVE-2026-25524 | redhat_vex | OpenMage LTS's Phar Deserialization leads to Remote Code Execution | known not affected: 1 | 2026-06-05T19:23:09+00:00 | Vulnerability · Source |
| CVE-2026-25551 | redhat_vex | Seagull Software BarTender Deserialization Privilege Escalation via .NET Remoting Service | known not affected: 1 | 2026-06-05T19:23:08+00:00 | Vulnerability · Source |
| CVE-2026-25775 | redhat_vex | SenseLive X3050 Missing authentication for critical function | known not affected: 1 | 2026-06-05T19:23:07+00:00 | Vulnerability · Source |
| CVE-2026-25713 | redhat_vex | CVE-2026-25713 | known not affected: 1 | 2026-06-05T19:23:07+00:00 | Vulnerability · Source |
| CVE-2026-25205 | redhat_vex | CVE-2026-25205 | known not affected: 1 | 2026-06-05T19:23:06+00:00 | Vulnerability · Source |
| CVE-2026-25654 | redhat_vex | CVE-2026-25654 | known not affected: 1 | 2026-06-05T19:23:05+00:00 | Vulnerability · Source |
| CVE-2026-43941 | redhat_vex | Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click | known not affected: 1 | 2026-06-05T19:23:04+00:00 | Vulnerability · Source |
| CVE-2026-43967 | redhat_vex | Quadratic fragment-name uniqueness check causes denial of service in absinthe | known not affected: 1 | 2026-06-05T19:23:04+00:00 | Vulnerability · Source |
| CVE-2026-25861 | redhat_vex | QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php | known not affected: 1 | 2026-06-05T19:23:04+00:00 | Vulnerability · Source |
| CVE-2026-43886 | redhat_vex | Outline: OAuth Scope Validation Logic Error Allows Privilege Escalation to Wildcard API Access | known not affected: 1 | 2026-06-05T19:23:04+00:00 | Vulnerability · Source |
| CVE-2026-43985 | redhat_vex | Taultulli has CSRF in /configUpdate via missing anti-CSRF and method restriction that allows admin credential takeover | known not affected: 1 | 2026-06-05T19:23:03+00:00 | Vulnerability · Source |
| CVE-2026-43899 | redhat_vex | DeepChat: Incomplete Fix for CVE-2025-55733 leads to Remote Code Execution via Markdown Links bypassing `isValidExternalUrl` | known not affected: 1 | 2026-06-05T19:23:03+00:00 | Vulnerability · Source |
| CVE-2026-43981 | redhat_vex | Algernon: Race Condition in handle() shared LState | known not affected: 1 | 2026-06-05T19:23:02+00:00 | Vulnerability · Source |
| CVE-2026-43567 | redhat_vex | OpenClaw < 2026.4.10 - Path Traversal in screen_record outPath Parameter | known not affected: 1 | 2026-06-05T19:23:02+00:00 | Vulnerability · Source |
| CVE-2026-43990 | redhat_vex | JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper | known not affected: 1 | 2026-06-05T19:23:01+00:00 | Vulnerability · Source |
| CVE-2026-43873 | redhat_vex | WWBN AVideo: Unauthenticated Disclosure of CloneSite `myKey` via Error Echo in `cloneClient.json.php` Enables Cross-Site DB Dump of the Configured Clone Server | known not affected: 1 | 2026-06-05T19:23:01+00:00 | Vulnerability · Source |
| CVE-2026-43639 | redhat_vex | Bitwarden Server < 2026.4.0 Missing Authorization via Provider Clients | known not affected: 1 | 2026-06-05T19:23:01+00:00 | Vulnerability · Source |
| CVE-2026-43884 | redhat_vex | WWBN AVideo: SSRF Protection Bypass via HTTP Redirect and DNS Rebinding in isSSRFSafeURL() | known not affected: 1 | 2026-06-05T19:23:00+00:00 | Vulnerability · Source |