VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298615 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-25606 | redhat_vex | SQL Injection in STER | known not affected: 1 | 2026-06-05T19:23:13+00:00 | Vulnerability · Source |
| CVE-2026-25660 | redhat_vex | Authentication bypass for certain API calls | known not affected: 1 | 2026-06-05T19:23:13+00:00 | Vulnerability · Source |
| CVE-2026-25208 | redhat_vex | CVE-2026-25208 | known not affected: 1 | 2026-06-05T19:23:13+00:00 | Vulnerability · Source |
| CVE-2026-25776 | redhat_vex | CVE-2026-25776 | known not affected: 1 | 2026-06-05T19:23:13+00:00 | Vulnerability · Source |
| CVE-2026-25550 | redhat_vex | Seagull Software BarTender Unauthenticated RCE via .NET Remoting Service | known not affected: 1 | 2026-06-05T19:23:13+00:00 | Vulnerability · Source |
| CVE-2026-25112 | redhat_vex | CVE-2026-25112 | known not affected: 1 | 2026-06-05T19:23:13+00:00 | Vulnerability · Source |
| CVE-2026-25789 | redhat_vex | CVE-2026-25789 | known not affected: 1 | 2026-06-05T19:23:13+00:00 | Vulnerability · Source |
| CVE-2026-25879 | redhat_vex | Langroid has Prompt to SQL Injection, Leading to RCE | known not affected: 1 | 2026-06-05T19:23:12+00:00 | Vulnerability · Source |
| CVE-2026-25781 | redhat_vex | kernel_liteos_a has an out-of-bounds write vulnerability | known not affected: 1 | 2026-06-05T19:23:12+00:00 | Vulnerability · Source |
| CVE-2026-25104 | redhat_vex | CVE-2026-25104 | known not affected: 1 | 2026-06-05T19:23:11+00:00 | Vulnerability · Source |
| CVE-2026-25058 | redhat_vex | Vexa's unauthenticated internal transcript endpoint exposed by default | known not affected: 1 | 2026-06-05T19:23:11+00:00 | Vulnerability · Source |
| CVE-2026-25207 | redhat_vex | CVE-2026-25207 | known not affected: 1 | 2026-06-05T19:23:10+00:00 | Vulnerability · Source |
| CVE-2026-25786 | redhat_vex | CVE-2026-25786 | known not affected: 1 | 2026-06-05T19:23:10+00:00 | Vulnerability · Source |
| CVE-2026-25524 | redhat_vex | OpenMage LTS's Phar Deserialization leads to Remote Code Execution | known not affected: 1 | 2026-06-05T19:23:09+00:00 | Vulnerability · Source |
| CVE-2026-25551 | redhat_vex | Seagull Software BarTender Deserialization Privilege Escalation via .NET Remoting Service | known not affected: 1 | 2026-06-05T19:23:08+00:00 | Vulnerability · Source |
| CVE-2026-25775 | redhat_vex | SenseLive X3050 Missing authentication for critical function | known not affected: 1 | 2026-06-05T19:23:07+00:00 | Vulnerability · Source |
| CVE-2026-25713 | redhat_vex | CVE-2026-25713 | known not affected: 1 | 2026-06-05T19:23:07+00:00 | Vulnerability · Source |
| CVE-2026-25205 | redhat_vex | CVE-2026-25205 | known not affected: 1 | 2026-06-05T19:23:06+00:00 | Vulnerability · Source |
| CVE-2026-25654 | redhat_vex | CVE-2026-25654 | known not affected: 1 | 2026-06-05T19:23:05+00:00 | Vulnerability · Source |
| CVE-2026-43941 | redhat_vex | Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click | known not affected: 1 | 2026-06-05T19:23:04+00:00 | Vulnerability · Source |
| CVE-2026-43967 | redhat_vex | Quadratic fragment-name uniqueness check causes denial of service in absinthe | known not affected: 1 | 2026-06-05T19:23:04+00:00 | Vulnerability · Source |
| CVE-2026-25861 | redhat_vex | QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php | known not affected: 1 | 2026-06-05T19:23:04+00:00 | Vulnerability · Source |
| CVE-2026-43886 | redhat_vex | Outline: OAuth Scope Validation Logic Error Allows Privilege Escalation to Wildcard API Access | known not affected: 1 | 2026-06-05T19:23:04+00:00 | Vulnerability · Source |
| CVE-2026-43985 | redhat_vex | Taultulli has CSRF in /configUpdate via missing anti-CSRF and method restriction that allows admin credential takeover | known not affected: 1 | 2026-06-05T19:23:03+00:00 | Vulnerability · Source |
| CVE-2026-43899 | redhat_vex | DeepChat: Incomplete Fix for CVE-2025-55733 leads to Remote Code Execution via Markdown Links bypassing `isValidExternalUrl` | known not affected: 1 | 2026-06-05T19:23:03+00:00 | Vulnerability · Source |
| CVE-2026-43981 | redhat_vex | Algernon: Race Condition in handle() shared LState | known not affected: 1 | 2026-06-05T19:23:02+00:00 | Vulnerability · Source |
| CVE-2026-43567 | redhat_vex | OpenClaw < 2026.4.10 - Path Traversal in screen_record outPath Parameter | known not affected: 1 | 2026-06-05T19:23:02+00:00 | Vulnerability · Source |
| CVE-2026-43990 | redhat_vex | JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper | known not affected: 1 | 2026-06-05T19:23:01+00:00 | Vulnerability · Source |
| CVE-2026-43873 | redhat_vex | WWBN AVideo: Unauthenticated Disclosure of CloneSite `myKey` via Error Echo in `cloneClient.json.php` Enables Cross-Site DB Dump of the Configured Clone Server | known not affected: 1 | 2026-06-05T19:23:01+00:00 | Vulnerability · Source |
| CVE-2026-43639 | redhat_vex | Bitwarden Server < 2026.4.0 Missing Authorization via Provider Clients | known not affected: 1 | 2026-06-05T19:23:01+00:00 | Vulnerability · Source |
| CVE-2026-43884 | redhat_vex | WWBN AVideo: SSRF Protection Bypass via HTTP Redirect and DNS Rebinding in isSSRFSafeURL() | known not affected: 1 | 2026-06-05T19:23:00+00:00 | Vulnerability · Source |
| CVE-2026-43633 | redhat_vex | HestiaCP 1.9.0-1.9.4 Deserialization RCE via Web Terminal | known not affected: 1 | 2026-06-05T19:23:00+00:00 | Vulnerability · Source |
| CVE-2026-43624 | redhat_vex | F5-TTS 1.1.20 Path Traversal via finetune_gradio.py create_data_project() | known not affected: 1 | 2026-06-05T19:23:00+00:00 | Vulnerability · Source |
| CVE-2026-43893 | redhat_vex | exiftool-vendored: Argument injection via newline characters in tag names | known not affected: 1 | 2026-06-05T19:22:59+00:00 | Vulnerability · Source |
| CVE-2026-43938 | redhat_vex | YAF.NET: Unauthenticated Stored Second-Order XSS in Admin Event Log via Reflected `User-Agent` Header | known not affected: 1 | 2026-06-05T19:22:59+00:00 | Vulnerability · Source |
| CVE-2026-43888 | redhat_vex | Outline: Zip Extraction Path Escape via PATH_MAX Truncation in Collection Import | known not affected: 1 | 2026-06-05T19:22:58+00:00 | Vulnerability · Source |
| CVE-2026-43530 | redhat_vex | OpenClaw 2026.2.23 < 2026.4.12 - Weakened Exec Approval Binding via busybox and toybox Applet Execution | known not affected: 1 | 2026-06-05T19:22:58+00:00 | Vulnerability · Source |
| CVE-2026-43916 | redhat_vex | pam_authnft: Heap buffer overflow in NETLINK_SOCK_DIAG reply walker | known not affected: 1 | 2026-06-05T19:22:57+00:00 | Vulnerability · Source |
| CVE-2026-43943 | redhat_vex | electerm: RCE via malicious SSH server filename in openFileWithEditor | known not affected: 1 | 2026-06-05T19:22:57+00:00 | Vulnerability · Source |
| CVE-2026-43625 | redhat_vex | CodexBar < 0.32.0 Session Cookie Exposure via HTTP Redirect | known not affected: 1 | 2026-06-05T19:22:57+00:00 | Vulnerability · Source |
| CVE-2026-43897 | redhat_vex | Link Preview JS: vunerable to IPv6 and internal loopback attacks | known not affected: 1 | 2026-06-05T19:22:57+00:00 | Vulnerability · Source |
| CVE-2026-43526 | redhat_vex | OpenClaw < 2026.4.12 - Server-Side Request Forgery via QQBot Reply Media URL Handling | known not affected: 1 | 2026-06-05T19:22:56+00:00 | Vulnerability · Source |
| CVE-2026-43940 | redhat_vex | electerm: Path traversal in electerm runWidget leads to arbitrary code execution | known not affected: 1 | 2026-06-05T19:22:56+00:00 | Vulnerability · Source |
| CVE-2026-43571 | redhat_vex | OpenClaw < 2026.4.10 - Untrusted Workspace Plugin Shadow Resolution in Channel Setup | known not affected: 1 | 2026-06-05T19:22:56+00:00 | Vulnerability · Source |
| CVE-2026-43634 | redhat_vex | HestiaCP 1.2.0-1.9.4 IP Spoofing via CF-Connecting-IP Header | known not affected: 1 | 2026-06-05T19:22:55+00:00 | Vulnerability · Source |
| CVE-2026-43535 | redhat_vex | OpenClaw < 2026.4.14 - Authorization Context Reuse in Collect-Mode Queue Batches | known not affected: 1 | 2026-06-05T19:22:55+00:00 | Vulnerability · Source |
| CVE-2026-43984 | redhat_vex | Tautulli has stored XSS in logFile via guest-controlled log_js_errors input | known not affected: 1 | 2026-06-05T19:22:54+00:00 | Vulnerability · Source |
| CVE-2026-43948 | redhat_vex | wger: cross-tenant password reset and plaintext disclosure via gym=None bypass | known not affected: 1 | 2026-06-05T19:22:54+00:00 | Vulnerability · Source |
| CVE-2026-43900 | redhat_vex | DeepChat: Persistent DOM XSS via HTML Entity Encoding in `<antArtifact>` SVG Rendering (Bypass of `svgSanitizer.ts`) | known not affected: 1 | 2026-06-05T19:22:54+00:00 | Vulnerability · Source |
| CVE-2026-43991 | redhat_vex | JunoClaw: plugin-shell shell-injection bypass via substring blocklist | known not affected: 1 | 2026-06-05T19:22:54+00:00 | Vulnerability · Source |