VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298613 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-41227 | redhat_vex | BIG-IP HTTP/2 Layer 7 Dos Protection vulnerability | known not affected: 1 | 2026-06-05T19:20:34+00:00 | Vulnerability · Source |
| CVE-2026-41133 | redhat_vex | pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass) | known not affected: 1 | 2026-06-05T19:20:34+00:00 | Vulnerability · Source |
| CVE-2026-41641 | redhat_vex | NocoBase Vulnerable to SQL Validation Bypass via `sqlCollection:update` Missing `checkSQL` Call | known not affected: 1 | 2026-06-05T19:20:33+00:00 | Vulnerability · Source |
| CVE-2026-41524 | redhat_vex | Ajax30/BraveCMS-2.0: Stored XSS in Page / Article Content | known not affected: 1 | 2026-06-05T19:20:33+00:00 | Vulnerability · Source |
| CVE-2026-41146 | redhat_vex | facil.io and downstream iodine ruby gem vulnerable to uncontrolled resource consumption and loop with unreachable exit condition | known not affected: 1 | 2026-06-05T19:20:33+00:00 | Vulnerability · Source |
| CVE-2026-41380 | redhat_vex | OpenClaw < 2026.3.28 - Arbitrary Execution Allowlist via Wrapper Carrier Executables | known not affected: 1 | 2026-06-05T19:20:32+00:00 | Vulnerability · Source |
| CVE-2026-41065 | redhat_vex | Tautulli Vulnerable to Unauthenticated/Authenticated Remote Code Execution via Newsletter Custom Template Directory | known not affected: 1 | 2026-06-05T19:20:32+00:00 | Vulnerability · Source |
| CVE-2026-41191 | redhat_vex | FreeScout's signature only mailbox permission allows unauthorized mailbox chat setting changes | known not affected: 1 | 2026-06-05T19:20:31+00:00 | Vulnerability · Source |
| CVE-2026-41371 | redhat_vex | OpenClaw < 2026.3.28 - Privilege Escalation via chat.send Reset Command | known not affected: 1 | 2026-06-05T19:20:31+00:00 | Vulnerability · Source |
| CVE-2026-41038 | redhat_vex | Weak Password Policy Vulnerability in Quantum Networks Router QN-I-470 | known not affected: 1 | 2026-06-05T19:20:31+00:00 | Vulnerability · Source |
| CVE-2026-41551 | redhat_vex | CVE-2026-41551 | known not affected: 1 | 2026-06-05T19:20:30+00:00 | Vulnerability · Source |
| CVE-2026-41713 | redhat_vex | Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor | known not affected: 1 | 2026-06-05T19:20:30+00:00 | Vulnerability · Source |
| CVE-2026-41236 | redhat_vex | Froxlor has privilege escalation in SSH key synchronization via symlinked `authorized_keys` path | known not affected: 1 | 2026-06-05T19:20:30+00:00 | Vulnerability · Source |
| CVE-2026-41218 | redhat_vex | BIG-IP PEM iRules vulnerability | known not affected: 1 | 2026-06-05T19:20:29+00:00 | Vulnerability · Source |
| CVE-2026-41137 | redhat_vex | Flowise: Code Injection in CSVAgent leads to Authenticated RCE | known not affected: 1 | 2026-06-05T19:20:28+00:00 | Vulnerability · Source |
| CVE-2026-41056 | redhat_vex | AVideos has CORS Origin Reflection with Credentials on Sensitive API Endpoints that Enables Cross-Origin Account Takeover | known not affected: 1 | 2026-06-05T19:20:28+00:00 | Vulnerability · Source |
| CVE-2026-41379 | redhat_vex | OpenClaw < 2026.3.28 - Privilege Escalation via chat.send to Admin-Class Talk Voice Config | known not affected: 1 | 2026-06-05T19:20:27+00:00 | Vulnerability · Source |
| CVE-2026-41496 | redhat_vex | PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315) | known not affected: 1 | 2026-06-05T19:20:27+00:00 | Vulnerability · Source |
| CVE-2026-41201 | redhat_vex | CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS Version 2 | known not affected: 1 | 2026-06-05T19:20:27+00:00 | Vulnerability · Source |
| CVE-2026-41904 | redhat_vex | FreeScout Stored XSS vulnerability in mailbox auto-reply: payload reaches every customer's email client (no CSP), bypassing strip_tags validator with mixed text+HTML content | known not affected: 1 | 2026-06-05T19:20:26+00:00 | Vulnerability · Source |
| CVE-2026-41883 | redhat_vex | OmniFaces: EL injection via crafted resource name in wildcard CDN mapping | known not affected: 1 | 2026-06-05T19:20:26+00:00 | Vulnerability · Source |
| CVE-2026-41649 | redhat_vex | Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces | known not affected: 1 | 2026-06-05T19:20:26+00:00 | Vulnerability · Source |
| CVE-2026-41964 | redhat_vex | CVE-2026-41964 | known not affected: 1 | 2026-06-05T19:20:26+00:00 | Vulnerability · Source |
| CVE-2026-41586 | redhat_vex | ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCE | known not affected: 1 | 2026-06-05T19:20:26+00:00 | Vulnerability · Source |
| CVE-2026-41265 | redhat_vex | Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-05T19:20:25+00:00 | Vulnerability · Source |
| CVE-2026-41229 | redhat_vex | Froxlor has a PHP Code Injection via Unescaped Single Quotes in userdata.inc.php Generation (MysqlServer API) | known not affected: 1 | 2026-06-05T19:20:25+00:00 | Vulnerability · Source |
| CVE-2026-41571 | redhat_vex | Note Mark: OIDC-registered users authenticated by submitting password "null" | known not affected: 1 | 2026-06-05T19:20:24+00:00 | Vulnerability · Source |
| CVE-2026-41328 | redhat_vex | Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field | known not affected: 1 | 2026-06-05T19:20:24+00:00 | Vulnerability · Source |
| CVE-2026-41553 | redhat_vex | Remote Code Execution in PDF Export Module | known not affected: 1 | 2026-06-05T19:20:24+00:00 | Vulnerability · Source |
| CVE-2026-41490 | redhat_vex | Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations | known not affected: 1 | 2026-06-05T19:20:24+00:00 | Vulnerability · Source |
| CVE-2026-41454 | redhat_vex | WeKan < 8.35 Missing Authorization via Integration REST API | known not affected: 1 | 2026-06-05T19:20:23+00:00 | Vulnerability · Source |
| CVE-2026-41058 | redhat_vex | AVideo has an incomplete fix for CVE-2026-33293 (Path Traversal) in AVideo | known not affected: 1 | 2026-06-05T19:20:23+00:00 | Vulnerability · Source |
| CVE-2026-41175 | redhat_vex | Statamic: Unsafe method invocation via query value resolution allows data destruction | known not affected: 1 | 2026-06-05T19:20:23+00:00 | Vulnerability · Source |
| CVE-2026-41193 | redhat_vex | FreeScout has Zip Slip path traversal in module installation that allows arbitrary file write leading to RCE | known not affected: 1 | 2026-06-05T19:20:22+00:00 | Vulnerability · Source |
| CVE-2026-41274 | redhat_vex | Flowise: Cypher Injection in GraphCypherQAChain | known not affected: 1 | 2026-06-05T19:20:22+00:00 | Vulnerability · Source |
| CVE-2026-41399 | redhat_vex | OpenClaw < 2026.3.28 - Denial of Service via Unbounded Pre-auth WebSocket Upgrades | known not affected: 1 | 2026-06-05T19:20:21+00:00 | Vulnerability · Source |
| CVE-2026-41957 | redhat_vex | BIG-IP and BIG-IQ Configuration utility vulnerability | known not affected: 1 | 2026-06-05T19:20:21+00:00 | Vulnerability · Source |
| CVE-2026-41500 | redhat_vex | electerm has Command Injection Vulnerability via runMac function | known not affected: 1 | 2026-06-05T19:20:21+00:00 | Vulnerability · Source |
| CVE-2026-41670 | redhat_vex | Admidio: SAML Response Sent to Unvalidated Assertion Consumer Service URL from AuthnRequest | known not affected: 1 | 2026-06-05T19:20:21+00:00 | Vulnerability · Source |
| CVE-2026-41858 | redhat_vex | CVE-2026-41858 | known not affected: 1 | 2026-06-05T19:20:21+00:00 | Vulnerability · Source |
| CVE-2026-41230 | redhat_vex | Froxlor has a BIND Zone File Injection via Unsanitized DNS Record Content in DomainZones::add() | known not affected: 1 | 2026-06-05T19:20:20+00:00 | Vulnerability · Source |
| CVE-2026-41203 | redhat_vex | ci4ms Theme::upload is vulnerable to Zip Slip leading to RCE | known not affected: 1 | 2026-06-05T19:20:20+00:00 | Vulnerability · Source |
| CVE-2026-41588 | redhat_vex | RELATE: Timing Attack Vulnerability in course/auth.py — check_sign_in_key() | known not affected: 1 | 2026-06-05T19:20:19+00:00 | Vulnerability · Source |
| CVE-2026-41669 | redhat_vex | Admidio: SAML Signature Validation Result Ignored — Forged AuthnRequests and LogoutRequests Processed | known not affected: 1 | 2026-06-05T19:20:17+00:00 | Vulnerability · Source |
| CVE-2026-41032 | redhat_vex | Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers | known not affected: 1 | 2026-06-05T19:20:17+00:00 | Vulnerability · Source |
| CVE-2026-41900 | redhat_vex | OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment | known not affected: 1 | 2026-06-05T19:20:16+00:00 | Vulnerability · Source |
| CVE-2026-41180 | redhat_vex | PsiTransfer: Upload PATCH path traversal can create `config.<NODE_ENV>.js` and lead to code execution on restart | known not affected: 1 | 2026-06-05T19:20:16+00:00 | Vulnerability · Source |
| CVE-2026-41225 | redhat_vex | iControl REST vulnerability | known not affected: 1 | 2026-06-05T19:20:16+00:00 | Vulnerability · Source |
| CVE-2026-41702 | redhat_vex | TOCTOU local privilege escalation vulnerability | known not affected: 1 | 2026-06-05T19:20:16+00:00 | Vulnerability · Source |
| CVE-2026-41405 | redhat_vex | OpenClaw < 2026.3.31 - Resource Exhaustion via Unauthenticated MS Teams Webhook Body Parsing | known not affected: 1 | 2026-06-05T19:20:15+00:00 | Vulnerability · Source |