VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298383 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-25551 | redhat_vex | Seagull Software BarTender Deserialization Privilege Escalation via .NET Remoting Service | known not affected: 1 | 2026-06-05T19:23:08+00:00 | Vulnerability · Source |
| CVE-2026-25775 | redhat_vex | SenseLive X3050 Missing authentication for critical function | known not affected: 1 | 2026-06-05T19:23:07+00:00 | Vulnerability · Source |
| CVE-2026-25713 | redhat_vex | CVE-2026-25713 | known not affected: 1 | 2026-06-05T19:23:07+00:00 | Vulnerability · Source |
| CVE-2026-25205 | redhat_vex | CVE-2026-25205 | known not affected: 1 | 2026-06-05T19:23:06+00:00 | Vulnerability · Source |
| CVE-2026-25654 | redhat_vex | CVE-2026-25654 | known not affected: 1 | 2026-06-05T19:23:05+00:00 | Vulnerability · Source |
| CVE-2026-43941 | redhat_vex | Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click | known not affected: 1 | 2026-06-05T19:23:04+00:00 | Vulnerability · Source |
| CVE-2026-43967 | redhat_vex | Quadratic fragment-name uniqueness check causes denial of service in absinthe | known not affected: 1 | 2026-06-05T19:23:04+00:00 | Vulnerability · Source |
| CVE-2026-25861 | redhat_vex | QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php | known not affected: 1 | 2026-06-05T19:23:04+00:00 | Vulnerability · Source |
| CVE-2026-43886 | redhat_vex | Outline: OAuth Scope Validation Logic Error Allows Privilege Escalation to Wildcard API Access | known not affected: 1 | 2026-06-05T19:23:04+00:00 | Vulnerability · Source |
| CVE-2026-43985 | redhat_vex | Taultulli has CSRF in /configUpdate via missing anti-CSRF and method restriction that allows admin credential takeover | known not affected: 1 | 2026-06-05T19:23:03+00:00 | Vulnerability · Source |
| CVE-2026-43899 | redhat_vex | DeepChat: Incomplete Fix for CVE-2025-55733 leads to Remote Code Execution via Markdown Links bypassing `isValidExternalUrl` | known not affected: 1 | 2026-06-05T19:23:03+00:00 | Vulnerability · Source |
| CVE-2026-43981 | redhat_vex | Algernon: Race Condition in handle() shared LState | known not affected: 1 | 2026-06-05T19:23:02+00:00 | Vulnerability · Source |
| CVE-2026-43567 | redhat_vex | OpenClaw < 2026.4.10 - Path Traversal in screen_record outPath Parameter | known not affected: 1 | 2026-06-05T19:23:02+00:00 | Vulnerability · Source |
| CVE-2026-43990 | redhat_vex | JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper | known not affected: 1 | 2026-06-05T19:23:01+00:00 | Vulnerability · Source |
| CVE-2026-43873 | redhat_vex | WWBN AVideo: Unauthenticated Disclosure of CloneSite `myKey` via Error Echo in `cloneClient.json.php` Enables Cross-Site DB Dump of the Configured Clone Server | known not affected: 1 | 2026-06-05T19:23:01+00:00 | Vulnerability · Source |
| CVE-2026-43639 | redhat_vex | Bitwarden Server < 2026.4.0 Missing Authorization via Provider Clients | known not affected: 1 | 2026-06-05T19:23:01+00:00 | Vulnerability · Source |
| CVE-2026-43884 | redhat_vex | WWBN AVideo: SSRF Protection Bypass via HTTP Redirect and DNS Rebinding in isSSRFSafeURL() | known not affected: 1 | 2026-06-05T19:23:00+00:00 | Vulnerability · Source |
| CVE-2026-43633 | redhat_vex | HestiaCP 1.9.0-1.9.4 Deserialization RCE via Web Terminal | known not affected: 1 | 2026-06-05T19:23:00+00:00 | Vulnerability · Source |
| CVE-2026-43624 | redhat_vex | F5-TTS 1.1.20 Path Traversal via finetune_gradio.py create_data_project() | known not affected: 1 | 2026-06-05T19:23:00+00:00 | Vulnerability · Source |
| CVE-2026-43893 | redhat_vex | exiftool-vendored: Argument injection via newline characters in tag names | known not affected: 1 | 2026-06-05T19:22:59+00:00 | Vulnerability · Source |
| CVE-2026-43938 | redhat_vex | YAF.NET: Unauthenticated Stored Second-Order XSS in Admin Event Log via Reflected `User-Agent` Header | known not affected: 1 | 2026-06-05T19:22:59+00:00 | Vulnerability · Source |
| CVE-2026-43888 | redhat_vex | Outline: Zip Extraction Path Escape via PATH_MAX Truncation in Collection Import | known not affected: 1 | 2026-06-05T19:22:58+00:00 | Vulnerability · Source |
| CVE-2026-43530 | redhat_vex | OpenClaw 2026.2.23 < 2026.4.12 - Weakened Exec Approval Binding via busybox and toybox Applet Execution | known not affected: 1 | 2026-06-05T19:22:58+00:00 | Vulnerability · Source |
| CVE-2026-43916 | redhat_vex | pam_authnft: Heap buffer overflow in NETLINK_SOCK_DIAG reply walker | known not affected: 1 | 2026-06-05T19:22:57+00:00 | Vulnerability · Source |
| CVE-2026-43943 | redhat_vex | electerm: RCE via malicious SSH server filename in openFileWithEditor | known not affected: 1 | 2026-06-05T19:22:57+00:00 | Vulnerability · Source |
| CVE-2026-43625 | redhat_vex | CodexBar < 0.32.0 Session Cookie Exposure via HTTP Redirect | known not affected: 1 | 2026-06-05T19:22:57+00:00 | Vulnerability · Source |
| CVE-2026-43897 | redhat_vex | Link Preview JS: vunerable to IPv6 and internal loopback attacks | known not affected: 1 | 2026-06-05T19:22:57+00:00 | Vulnerability · Source |
| CVE-2026-43526 | redhat_vex | OpenClaw < 2026.4.12 - Server-Side Request Forgery via QQBot Reply Media URL Handling | known not affected: 1 | 2026-06-05T19:22:56+00:00 | Vulnerability · Source |
| CVE-2026-43940 | redhat_vex | electerm: Path traversal in electerm runWidget leads to arbitrary code execution | known not affected: 1 | 2026-06-05T19:22:56+00:00 | Vulnerability · Source |
| CVE-2026-43571 | redhat_vex | OpenClaw < 2026.4.10 - Untrusted Workspace Plugin Shadow Resolution in Channel Setup | known not affected: 1 | 2026-06-05T19:22:56+00:00 | Vulnerability · Source |
| CVE-2026-43634 | redhat_vex | HestiaCP 1.2.0-1.9.4 IP Spoofing via CF-Connecting-IP Header | known not affected: 1 | 2026-06-05T19:22:55+00:00 | Vulnerability · Source |
| CVE-2026-43535 | redhat_vex | OpenClaw < 2026.4.14 - Authorization Context Reuse in Collect-Mode Queue Batches | known not affected: 1 | 2026-06-05T19:22:55+00:00 | Vulnerability · Source |
| CVE-2026-43984 | redhat_vex | Tautulli has stored XSS in logFile via guest-controlled log_js_errors input | known not affected: 1 | 2026-06-05T19:22:54+00:00 | Vulnerability · Source |
| CVE-2026-43948 | redhat_vex | wger: cross-tenant password reset and plaintext disclosure via gym=None bypass | known not affected: 1 | 2026-06-05T19:22:54+00:00 | Vulnerability · Source |
| CVE-2026-43900 | redhat_vex | DeepChat: Persistent DOM XSS via HTML Entity Encoding in `<antArtifact>` SVG Rendering (Bypass of `svgSanitizer.ts`) | known not affected: 1 | 2026-06-05T19:22:54+00:00 | Vulnerability · Source |
| CVE-2026-43991 | redhat_vex | JunoClaw: plugin-shell shell-injection bypass via substring blocklist | known not affected: 1 | 2026-06-05T19:22:54+00:00 | Vulnerability · Source |
| CVE-2026-43988 | redhat_vex | Vanetza: Remote Denial of Service via Uncaught Exception in ASN.1/OER Parsing | known not affected: 1 | 2026-06-05T19:22:53+00:00 | Vulnerability · Source |
| CVE-2026-43531 | redhat_vex | OpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env File | known not affected: 1 | 2026-06-05T19:22:53+00:00 | Vulnerability · Source |
| CVE-2026-43898 | redhat_vex | SandboxJS: Sandbox escape via Function.caller leakage of internal call op | known not affected: 1 | 2026-06-05T19:22:53+00:00 | Vulnerability · Source |
| CVE-2026-43935 | redhat_vex | e107: Host Header Injection in e107 password reset enables phishing | known not affected: 1 | 2026-06-05T19:22:52+00:00 | Vulnerability · Source |
| CVE-2026-43566 | redhat_vex | OpenClaw 2026.4.7 < 2026.4.14 - Privilege Escalation via Untrusted Webhook Wake Events | known not affected: 1 | 2026-06-05T19:22:52+00:00 | Vulnerability · Source |
| CVE-2026-43937 | redhat_vex | YAF.NET: Pre-Handler Authorization Bypass on Admin Pages Enabling Blind SQL Execution via `/Admin/RunSql` | known not affected: 1 | 2026-06-05T19:22:51+00:00 | Vulnerability · Source |
| CVE-2026-43892 | redhat_vex | AntSword: Incomplete noxss() sanitization leads to 1-click RCE via jquery.terminal format code injection | known not affected: 1 | 2026-06-05T19:22:51+00:00 | Vulnerability · Source |
| CVE-2026-43874 | redhat_vex | WWBN AVideo: Incomplete Fix for YPTSocket autoEvalCodeOnHTML Strip: Unauthenticated Cross-User JavaScript Execution via `$msg['json']` Relay Bypass | known not affected: 1 | 2026-06-05T19:22:51+00:00 | Vulnerability · Source |
| CVE-2026-43982 | redhat_vex | Algernon: Path traversal file write via savein() | known not affected: 1 | 2026-06-05T19:22:50+00:00 | Vulnerability · Source |
| CVE-2026-7068 | redhat_vex | D-Link DIR-825 nmbd sserver.c NMBD_process buffer overflow | known not affected: 1 | 2026-06-05T19:22:50+00:00 | Vulnerability · Source |
| CVE-2026-43986 | redhat_vex | Tautulli vulnerable to unauthenticated SSRF in /image/<hash> via attacker-seeded image hash replay | known not affected: 1 | 2026-06-05T19:22:50+00:00 | Vulnerability · Source |
| CVE-2026-7123 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi setIptvCfg os command injection | known not affected: 1 | 2026-06-05T19:22:49+00:00 | Vulnerability · Source |
| CVE-2026-7365 | redhat_vex | IBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installation | known not affected: 1 | 2026-06-05T19:22:49+00:00 | Vulnerability · Source |
| CVE-2026-7330 | redhat_vex | Auto Affiliate Links <= 6.8.8 - Unauthenticated Stored Cross-Site Scripting via 'url' Parameter | known not affected: 1 | 2026-06-05T19:22:49+00:00 | Vulnerability · Source |