VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298667 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-35672 | redhat_vex | phpMyFAQ - Authentication Bypass via Empty API Token | known not affected: 1 | 2026-06-05T19:10:06+00:00 | Vulnerability · Source |
| CVE-2026-35078 | redhat_vex | Arbitrary file delete vulnerability in method ugw-logstop | known not affected: 1 | 2026-06-05T19:10:06+00:00 | Vulnerability · Source |
| CVE-2026-35618 | redhat_vex | OpenClaw < 2026.3.23 - Replay Identity Drift via Query-Only Variants in Plivo V2 Verification | known not affected: 1 | 2026-06-05T19:10:06+00:00 | Vulnerability · Source |
| CVE-2026-35246 | redhat_vex | CVE-2026-35246 | known not affected: 1 | 2026-06-05T19:10:05+00:00 | Vulnerability · Source |
| CVE-2026-35084 | redhat_vex | Stack buffer overflow in method dali-devconfig | known not affected: 1 | 2026-06-05T19:10:05+00:00 | Vulnerability · Source |
| CVE-2026-35075 | redhat_vex | Hardcoded default Password for Service Account | known not affected: 1 | 2026-06-05T19:10:04+00:00 | Vulnerability · Source |
| CVE-2026-35525 | redhat_vex | LiquidJS has a root restriction bypass for partial and layout loading through symlinked templates | known not affected: 1 | 2026-06-05T19:10:04+00:00 | Vulnerability · Source |
| CVE-2026-35228 | redhat_vex | CVE-2026-35228 | known not affected: 1 | 2026-06-05T19:10:04+00:00 | Vulnerability · Source |
| CVE-2026-35668 | redhat_vex | OpenClaw < 2026.3.24 - Sandbox Media Root Bypass via Unnormalized mediaUrl and fileUrl Parameters | known not affected: 1 | 2026-06-05T19:10:03+00:00 | Vulnerability · Source |
| CVE-2026-35521 | redhat_vex | Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.hosts Newline Injection | known not affected: 1 | 2026-06-05T19:10:03+00:00 | Vulnerability · Source |
| CVE-2026-35242 | redhat_vex | CVE-2026-35242 | known not affected: 1 | 2026-06-05T19:10:02+00:00 | Vulnerability · Source |
| CVE-2026-35080 | redhat_vex | Arbitrary file delete vulnerability in method ugw-restoreinfo | known not affected: 1 | 2026-06-05T19:10:02+00:00 | Vulnerability · Source |
| CVE-2026-35503 | redhat_vex | SenseLive X3050 Use of Hard-coded Credentials | known not affected: 1 | 2026-06-05T19:10:01+00:00 | Vulnerability · Source |
| CVE-2026-35675 | redhat_vex | phpMyFAQ - Authentication Bypass via Missing Password Reset Token in /api/user/password/update | known not affected: 1 | 2026-06-05T19:09:58+00:00 | Vulnerability · Source |
| CVE-2026-35071 | redhat_vex | CVE-2026-35071 | known not affected: 1 | 2026-06-05T19:09:58+00:00 | Vulnerability · Source |
| CVE-2026-35062 | redhat_vex | iControl SOAP vulnerability | known not affected: 1 | 2026-06-05T19:09:58+00:00 | Vulnerability · Source |
| CVE-2026-35277 | redhat_vex | CVE-2026-35277 | known not affected: 1 | 2026-06-05T19:09:57+00:00 | Vulnerability · Source |
| CVE-2026-35196 | redhat_vex | Chamilo LMS has OS Command Injection via export_all_certificates action | known not affected: 1 | 2026-06-05T19:09:57+00:00 | Vulnerability · Source |
| CVE-2026-35079 | redhat_vex | Arbitrary file delete vulnerability in method ugw-restore | known not affected: 1 | 2026-06-05T19:09:57+00:00 | Vulnerability · Source |
| CVE-2026-35251 | redhat_vex | CVE-2026-35251 | known not affected: 1 | 2026-06-05T19:09:57+00:00 | Vulnerability · Source |
| CVE-2026-35574 | redhat_vex | ChurchCRM has a Stored XSS in Person Profile - Add a Note | known not affected: 1 | 2026-06-05T19:09:56+00:00 | Vulnerability · Source |
| CVE-2026-35457 | redhat_vex | libp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustion | known not affected: 1 | 2026-06-05T19:09:56+00:00 | Vulnerability · Source |
| CVE-2026-35682 | redhat_vex | Anviz CX2 Lite Command Injection | known not affected: 1 | 2026-06-05T19:09:55+00:00 | Vulnerability · Source |
| CVE-2026-35604 | redhat_vex | File Browser share links remain accessible after Share/Download permissions are revoked | known not affected: 1 | 2026-06-05T19:09:54+00:00 | Vulnerability · Source |
| CVE-2026-35082 | redhat_vex | Local file inclusion vulnerability and deletion in ugw-logread method | known not affected: 1 | 2026-06-05T19:09:54+00:00 | Vulnerability · Source |
| CVE-2026-35631 | redhat_vex | OpenClaw < 2026.3.22 - Missing Authorization Enforcement in Internal ACP Chat Commands | known not affected: 1 | 2026-06-05T19:09:54+00:00 | Vulnerability · Source |
| CVE-2026-35064 | redhat_vex | SenseLive X3050 Missing authentication for critical function | known not affected: 1 | 2026-06-05T19:09:54+00:00 | Vulnerability · Source |
| CVE-2026-35589 | redhat_vex | nanobot: Cross-Site WebSocket Hijacking in WhatsApp Bridge (CVE-2026-2577 Fix Update) | known not affected: 1 | 2026-06-05T19:09:53+00:00 | Vulnerability · Source |
| CVE-2026-35033 | redhat_vex | Jellyfin: Potential SSRF + Arbitrary file read via stream argument injection | known not affected: 1 | 2026-06-05T19:09:49+00:00 | Vulnerability · Source |
| CVE-2026-35231 | redhat_vex | CVE-2026-35231 | known not affected: 1 | 2026-06-05T19:09:48+00:00 | Vulnerability · Source |
| CVE-2026-35572 | redhat_vex | SSRF via Referer header in ChurchCRM allows server-side HTTP/HTTPS requests to arbitrary hosts | known not affected: 1 | 2026-06-05T19:09:48+00:00 | Vulnerability · Source |
| CVE-2026-35653 | redhat_vex | OpenClaw < 2026.3.24 - Incorrect Authorization in POST /reset-profile via browser.request | known not affected: 1 | 2026-06-05T19:09:48+00:00 | Vulnerability · Source |
| CVE-2026-35077 | redhat_vex | Arbitrary file delete vulnerability in method ugw-delete-file | known not affected: 1 | 2026-06-05T19:09:48+00:00 | Vulnerability · Source |
| CVE-2026-35266 | redhat_vex | CVE-2026-35266 | known not affected: 1 | 2026-06-05T19:09:47+00:00 | Vulnerability · Source |
| CVE-2026-35446 | redhat_vex | LORIS has a path traversal in FilesDownloadHandler | known not affected: 1 | 2026-06-05T19:09:47+00:00 | Vulnerability · Source |
| CVE-2026-35644 | redhat_vex | OpenClaw < 2026.3.22 - Credential Exposure via baseUrl Fields in Gateway Snapshots | known not affected: 1 | 2026-06-05T19:09:47+00:00 | Vulnerability · Source |
| CVE-2026-35482 | redhat_vex | alf.io has an Authenticated RCE via Extension Script Sandbox Escape | known not affected: 1 | 2026-06-05T19:09:47+00:00 | Vulnerability · Source |
| CVE-2026-35464 | redhat_vex | pyLoad has an incomplete fix for CVE-2026-33509: unprotected storage_folder enables arbitrary file write to Flask session store and code execution | known not affected: 1 | 2026-06-05T19:09:46+00:00 | Vulnerability · Source |
| CVE-2024-7083 | redhat_vex | Email Encoder < 2.3.4 - Admin+ Stored XSS | known not affected: 1 | 2026-06-05T18:49:10+00:00 | Vulnerability · Source |
| CVE-2024-21950 | redhat_vex | CVE-2024-21950 | known not affected: 1 | 2026-06-05T18:49:09+00:00 | Vulnerability · Source |
| CVE-2024-30167 | redhat_vex | CVE-2024-30167 | known not affected: 1 | 2026-06-05T18:49:07+00:00 | Vulnerability · Source |
| CVE-2024-33722 | redhat_vex | CVE-2024-33722 | known not affected: 1 | 2026-06-05T18:49:07+00:00 | Vulnerability · Source |
| CVE-2024-47272 | redhat_vex | CVE-2024-47272 | known not affected: 1 | 2026-06-05T18:49:06+00:00 | Vulnerability · Source |
| CVE-2024-47270 | redhat_vex | CVE-2024-47270 | known not affected: 1 | 2026-06-05T18:49:05+00:00 | Vulnerability · Source |
| CVE-2024-27686 | redhat_vex | CVE-2024-27686 | known not affected: 1 | 2026-06-05T18:49:05+00:00 | Vulnerability · Source |
| CVE-2024-47267 | redhat_vex | CVE-2024-47267 | known not affected: 1 | 2026-06-05T18:49:05+00:00 | Vulnerability · Source |
| CVE-2024-45257 | redhat_vex | CVE-2024-45257 | known not affected: 1 | 2026-06-05T18:49:04+00:00 | Vulnerability · Source |
| CVE-2024-51092 | redhat_vex | CVE-2024-51092 | known not affected: 1 | 2026-06-05T18:49:03+00:00 | Vulnerability · Source |
| CVE-2024-51394 | redhat_vex | CVE-2024-51394 | known not affected: 1 | 2026-06-05T18:49:03+00:00 | Vulnerability · Source |
| CVE-2024-33288 | redhat_vex | CVE-2024-33288 | known not affected: 1 | 2026-06-05T18:49:02+00:00 | Vulnerability · Source |