VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298613 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-29206 | redhat_vex | CVE-2026-29206 | known not affected: 1 | 2026-06-05T19:21:12+00:00 | Vulnerability · Source |
| CVE-2026-29204 | redhat_vex | CVE-2026-29204 | known not affected: 1 | 2026-06-05T19:21:12+00:00 | Vulnerability · Source |
| CVE-2026-29205 | redhat_vex | CVE-2026-29205 | known not affected: 1 | 2026-06-05T19:21:11+00:00 | Vulnerability · Source |
| CVE-2026-41952 | redhat_vex | CVE-2026-41952 | known not affected: 1 | 2026-06-05T19:21:11+00:00 | Vulnerability · Source |
| CVE-2026-41574 | redhat_vex | Nhost Vulnerable to Account Takeover via OAuth Email Verification Bypass | known not affected: 1 | 2026-06-05T19:21:10+00:00 | Vulnerability · Source |
| CVE-2026-41259 | redhat_vex | Mastodon: Insufficient verification of email addresses | known not affected: 1 | 2026-06-05T19:21:10+00:00 | Vulnerability · Source |
| CVE-2026-41295 | redhat_vex | OpenClaw < 2026.4.2 - Untrusted Workspace Channel Shadow Code Execution during Built-in Channel Setup | known not affected: 1 | 2026-06-05T19:21:10+00:00 | Vulnerability · Source |
| CVE-2026-41349 | redhat_vex | OpenClaw < 2026.3.28 - Agentic Consent Bypass via config.patch | known not affected: 1 | 2026-06-05T19:21:09+00:00 | Vulnerability · Source |
| CVE-2026-41583 | redhat_vex | ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling | known not affected: 1 | 2026-06-05T19:21:09+00:00 | Vulnerability · Source |
| CVE-2026-41268 | redhat_vex | Flowise: Flowise Parameter Override Bypass Remote Command Execution | known not affected: 1 | 2026-06-05T19:21:09+00:00 | Vulnerability · Source |
| CVE-2026-41385 | redhat_vex | OpenClaw < 2026.3.31 - Nostr Private Key Exposure via config.get Redaction Bypass | known not affected: 1 | 2026-06-05T19:21:08+00:00 | Vulnerability · Source |
| CVE-2026-41286 | redhat_vex | Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant B | known not affected: 1 | 2026-06-05T19:21:08+00:00 | Vulnerability · Source |
| CVE-2026-41431 | redhat_vex | Zen Browser MAR updater ships with signature verification removed — unsigned updates accepted | known not affected: 1 | 2026-06-05T19:21:07+00:00 | Vulnerability · Source |
| CVE-2026-41512 | redhat_vex | Remote code execution via JavaScript injection in `BrowserAutomation::PlaywrightService` | known not affected: 1 | 2026-06-05T19:21:07+00:00 | Vulnerability · Source |
| CVE-2026-41170 | redhat_vex | Squidex has SSRF via Backup Restore Endpoint — Admin-Controlled URL Download Allows Internal and External Requests | known not affected: 1 | 2026-06-05T19:21:06+00:00 | Vulnerability · Source |
| CVE-2026-41422 | redhat_vex | Daptin vulnerable to SQL injection via unvalidated goqu.L() calls in aggregate API | known not affected: 1 | 2026-06-05T19:21:06+00:00 | Vulnerability · Source |
| CVE-2026-41143 | redhat_vex | YesWiki vulnerable to authenticated SQL Injection via id_fiche in EntryManager::formatDataBeforeSave() | known not affected: 1 | 2026-06-05T19:21:05+00:00 | Vulnerability · Source |
| CVE-2026-41323 | redhat_vex | Kyverno: ServiceAccount token leaked to external servers via apiCall service URL | known not affected: 1 | 2026-06-05T19:21:05+00:00 | Vulnerability · Source |
| CVE-2026-41552 | redhat_vex | Path Traversal in PDF Export Module | known not affected: 1 | 2026-06-05T19:21:04+00:00 | Vulnerability · Source |
| CVE-2026-41192 | redhat_vex | FreeScout's client-controlled attachment IDs allow deletion of existing conversation attachments | known not affected: 1 | 2026-06-05T19:21:04+00:00 | Vulnerability · Source |
| CVE-2026-41273 | redhat_vex | Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow | known not affected: 1 | 2026-06-05T19:21:04+00:00 | Vulnerability · Source |
| CVE-2026-41237 | redhat_vex | Froxlor has an incomplete fix for CVE-2026-30932 | known not affected: 1 | 2026-06-05T19:21:04+00:00 | Vulnerability · Source |
| CVE-2026-41039 | redhat_vex | Information Disclosure Vulnerability in Quantum Networks Router QN-I-470 | known not affected: 1 | 2026-06-05T19:21:04+00:00 | Vulnerability · Source |
| CVE-2026-41219 | redhat_vex | BIG-IP QKView vulnerability | known not affected: 1 | 2026-06-05T19:21:03+00:00 | Vulnerability · Source |
| CVE-2026-41057 | redhat_vex | AVideo has CORS Origin Reflection Bypass via plugin/API/router.php and allowOrigin(true) that Exposes Authenticated API Responses | known not affected: 1 | 2026-06-05T19:21:03+00:00 | Vulnerability · Source |
| CVE-2026-41309 | redhat_vex | Open Source Social Network (OSSN) Vulnerable to Resource Exhaustion via Malicious Image Processing | known not affected: 1 | 2026-06-05T19:21:02+00:00 | Vulnerability · Source |
| CVE-2026-41228 | redhat_vex | Froxlor has Local File Inclusion via path traversal in API `def_language` parameter that leads to Remote Code Execution | known not affected: 1 | 2026-06-05T19:21:02+00:00 | Vulnerability · Source |
| CVE-2026-41336 | redhat_vex | OpenClaw < 2026.3.31 - Arbitrary Hook Code Execution via OPENCLAW_BUNDLED_HOOKS_DIR Environment Variable Override | known not affected: 1 | 2026-06-05T19:21:02+00:00 | Vulnerability · Source |
| CVE-2026-41660 | redhat_vex | Admidio: Inverted 2FA Reset Authorization Check Lets Group Leaders Strip Admin TOTP | known not affected: 1 | 2026-06-05T19:21:01+00:00 | Vulnerability · Source |
| CVE-2026-41705 | redhat_vex | CVE-2026-41705 | known not affected: 1 | 2026-06-05T19:21:01+00:00 | Vulnerability · Source |
| CVE-2026-41507 | redhat_vex | Remote Code Execution (RCE) via String Literal Injection into math-codegen | known not affected: 1 | 2026-06-05T19:21:01+00:00 | Vulnerability · Source |
| CVE-2026-41264 | redhat_vex | Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-05T19:21:01+00:00 | Vulnerability · Source |
| CVE-2026-41327 | redhat_vex | Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field | known not affected: 1 | 2026-06-05T19:21:00+00:00 | Vulnerability · Source |
| CVE-2026-41040 | redhat_vex | CVE-2026-41040 | known not affected: 1 | 2026-06-05T19:21:00+00:00 | Vulnerability · Source |
| CVE-2026-41956 | redhat_vex | BIG-IP TMM Vulnerability | known not affected: 1 | 2026-06-05T19:20:59+00:00 | Vulnerability · Source |
| CVE-2026-41211 | redhat_vex | `vite-plus/binding` has path traversal `downloadPackageManager()` that leads to writes outside of `VP_HOME` | known not affected: 1 | 2026-06-05T19:20:59+00:00 | Vulnerability · Source |
| CVE-2026-41587 | redhat_vex | CI4MS: Unrestricted PHP File Upload via Theme Installation Leads to Authenticated Remote Code Execution | known not affected: 1 | 2026-06-05T19:20:59+00:00 | Vulnerability · Source |
| CVE-2026-41299 | redhat_vex | OpenClaw < 2026.3.28 - Client Identity Spoofing in chat.send Gateway Provenance Guard | known not affected: 1 | 2026-06-05T19:20:58+00:00 | Vulnerability · Source |
| CVE-2026-41220 | redhat_vex | CVE-2026-41220 | known not affected: 1 | 2026-06-05T19:20:58+00:00 | Vulnerability · Source |
| CVE-2026-41497 | redhat_vex | Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAI | known not affected: 1 | 2026-06-05T19:20:57+00:00 | Vulnerability · Source |
| CVE-2026-41202 | redhat_vex | ci4ms Backup::restore is vulnerable to Zip Slip leading to RCE | known not affected: 1 | 2026-06-05T19:20:57+00:00 | Vulnerability · Source |
| CVE-2026-41653 | redhat_vex | BentoPDF: Stored XSS via Markdown Editor Leading to Persistent File Exfiltration | known not affected: 1 | 2026-06-05T19:20:56+00:00 | Vulnerability · Source |
| CVE-2026-41491 | redhat_vex | Dapr: Service Invocation path traversal ACL bypass | known not affected: 1 | 2026-06-05T19:20:55+00:00 | Vulnerability · Source |
| CVE-2026-41554 | redhat_vex | WordPress Bricks Builder theme 1.9.2-2.2 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:20:55+00:00 | Vulnerability · Source |
| CVE-2026-41167 | redhat_vex | Jellystat has SQL Injection that leads to to Remote Code Execution | known not affected: 1 | 2026-06-05T19:20:54+00:00 | Vulnerability · Source |
| CVE-2026-41428 | redhat_vex | Budibase: Authentication Bypass via Unanchored Regex in Public Endpoint Matcher — Unauthenticated Access to Protected Endpoints | known not affected: 1 | 2026-06-05T19:20:54+00:00 | Vulnerability · Source |
| CVE-2026-41644 | redhat_vex | monetr is vulnerable to server-side request forgery in Lunch Flow link creation and refresh | known not affected: 1 | 2026-06-05T19:20:54+00:00 | Vulnerability · Source |
| CVE-2026-41688 | redhat_vex | Incomplete fix for CVE-2026-33399: SSRF in Wallos | known not affected: 1 | 2026-06-05T19:20:53+00:00 | Vulnerability · Source |
| CVE-2026-41905 | redhat_vex | FreeScout vulnerable to SSRF via Helper::sanitizeRemoteUrl: redirect destination not re-validated, allowing internal HTTP / cloud-metadata access | known not affected: 1 | 2026-06-05T19:20:53+00:00 | Vulnerability · Source |
| CVE-2026-41068 | redhat_vex | Kyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix) | known not affected: 1 | 2026-06-05T19:20:53+00:00 | Vulnerability · Source |