VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298678 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-10231 | suse_vex | SUSE CVE CVE-2026-10231 | known affected: 533 | 2026-06-02T01:44:47+00:00 | Vulnerability · Source |
| CVE-2026-10233 | suse_vex | SUSE CVE CVE-2026-10233 | known affected: 533 | 2026-06-02T01:44:45+00:00 | Vulnerability · Source |
| CVE-2026-23679 | microsoft_vex | libusb < 1.0.30 NULL Pointer Dereference in parse_interface() | known not affected: 2 | 2026-06-02T01:44:44+00:00 | Vulnerability · Source |
| CVE-2026-10267 | suse_vex | SUSE CVE CVE-2026-10267 | No product status | 2026-06-02T01:44:44+00:00 | Vulnerability · Source |
| CVE-2026-10268 | suse_vex | SUSE CVE CVE-2026-10268 | No product status | 2026-06-02T01:44:43+00:00 | Vulnerability · Source |
| CVE-2026-44898 | microsoft_vex | Mistune TOC Anchor Injection XSS | fixed: 1 known affected: 1 | 2026-06-02T01:44:33+00:00 | Vulnerability · Source |
| CVE-2026-35579 | microsoft_vex | CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transports | fixed: 1 known affected: 1 | 2026-06-02T01:44:29+00:00 | Vulnerability · Source |
| CVE-2026-44897 | microsoft_vex | Mistune Heading ID Attribute Injection XSS | fixed: 1 known affected: 1 | 2026-06-02T01:44:27+00:00 | Vulnerability · Source |
| CVE-2026-44708 | microsoft_vex | Mistune Math Plugin XSS Escape Bypass | fixed: 1 known affected: 1 | 2026-06-02T01:44:20+00:00 | Vulnerability · Source |
| CVE-2026-44844 | microsoft_vex | eml_parser: Recursion DoS via nested message/rfc822 attachments | known not affected: 1 | 2026-06-02T01:44:12+00:00 | Vulnerability · Source |
| CVE-2026-34757 | microsoft_vex | LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure | fixed: 1 known affected: 2 known not affected: 6 | 2026-06-02T01:44:10+00:00 | Vulnerability · Source |
| CVE-2026-6402 | microsoft_vex | webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins | known not affected: 1 | 2026-06-02T01:43:59+00:00 | Vulnerability · Source |
| CVE-2026-23389 | suse_vex | SUSE CVE CVE-2026-23389 | known affected: 245 known not affected: 20 | 2026-06-02T01:43:48+00:00 | Vulnerability · Source |
| CVE-2026-39832 | microsoft_vex | Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent | fixed: 4 known affected: 4 known not affected: 1 | 2026-06-02T01:42:42+00:00 | Vulnerability · Source |
| CVE-2026-42508 | microsoft_vex | Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts | fixed: 2 known affected: 2 known not affected: 1 | 2026-06-02T01:42:36+00:00 | Vulnerability · Source |
| CVE-2026-46595 | microsoft_vex | Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh | known not affected: 5 | 2026-06-02T01:41:43+00:00 | Vulnerability · Source |
| CVE-2025-14575 | microsoft_vex | Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading | known not affected: 1 | 2026-06-02T01:40:45+00:00 | Vulnerability · Source |
| CVE-2026-8723 | microsoft_vex | qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly | known not affected: 1 | 2026-06-02T01:40:39+00:00 | Vulnerability · Source |
| CVE-2026-3592 | microsoft_vex | Amplification vulnerabilities via self-pointed glue records | fixed: 1 known affected: 1 | 2026-06-02T01:40:26+00:00 | Vulnerability · Source |
| CVE-2026-43103 | suse_vex | SUSE CVE CVE-2026-43103 | known affected: 227 | 2026-06-02T01:39:29+00:00 | Vulnerability · Source |
| CVE-2026-43173 | suse_vex | SUSE CVE CVE-2026-43173 | known affected: 102 known not affected: 125 | 2026-06-02T01:39:18+00:00 | Vulnerability · Source |
| CVE-2026-43463 | suse_vex | SUSE CVE CVE-2026-43463 | known not affected: 227 | 2026-06-02T01:38:57+00:00 | Vulnerability · Source |
| CVE-2026-45324 | suse_vex | SUSE CVE CVE-2026-45324 | No product status | 2026-06-02T01:38:34+00:00 | Vulnerability · Source |
| CVE-2026-45352 | suse_vex | SUSE CVE CVE-2026-45352 | known affected: 5 | 2026-06-02T01:38:33+00:00 | Vulnerability · Source |
| CVE-2026-45613 | suse_vex | SUSE CVE CVE-2026-45613 | No product status | 2026-06-02T01:38:31+00:00 | Vulnerability · Source |
| CVE-2020-8561 | redhat_vex | kubernetes: Webhook redirect in kube-apiserver | known affected: 14 known not affected: 8 | 2026-06-01T23:25:37+00:00 | Vulnerability · Source |
| CVE-2020-8554 | redhat_vex | kubernetes: MITM using LoadBalancer or ExternalIPs | fixed: 24 known not affected: 68 | 2026-06-01T23:25:37+00:00 | Vulnerability · Source |
| CVE-2026-4387 | redhat_vex | Unencrypted storage of authentication state in StrongDM Desktop Application state.kv file | known not affected: 1 | 2026-06-01T22:03:56+00:00 | Vulnerability · Source |
| CVE-2026-9092 | redhat_vex | CVE-2026-9092 | known not affected: 1 | 2026-06-01T22:03:54+00:00 | Vulnerability · Source |
| CVE-2026-45361 | redhat_vex | Apache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default) | known not affected: 1 | 2026-06-01T22:03:51+00:00 | Vulnerability · Source |
| CVE-2026-39292 | redhat_vex | CVE-2026-39292 | known not affected: 1 | 2026-06-01T22:03:50+00:00 | Vulnerability · Source |
| CVE-2026-38945 | redhat_vex | CVE-2026-38945 | known not affected: 1 | 2026-06-01T22:03:50+00:00 | Vulnerability · Source |
| CVE-2026-10173 | redhat_vex | Orthanc Explorer 2 URL StudyList.vue cross site scripting | known not affected: 1 | 2026-06-01T22:03:49+00:00 | Vulnerability · Source |
| CVE-2026-36324 | redhat_vex | CVE-2026-36324 | known not affected: 1 | 2026-06-01T22:03:49+00:00 | Vulnerability · Source |
| CVE-2026-10172 | redhat_vex | Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload | known not affected: 1 | 2026-06-01T22:03:48+00:00 | Vulnerability · Source |
| CVE-2026-10117 | redhat_vex | Open5GS nghttp2-server.c ogs_pool_id_calloc denial of service | known not affected: 1 | 2026-06-01T22:03:47+00:00 | Vulnerability · Source |
| CVE-2026-10113 | redhat_vex | Open5GS Shared NF-profile nnrf-handler.c denial of service | known not affected: 1 | 2026-06-01T22:03:47+00:00 | Vulnerability · Source |
| CVE-2026-10166 | redhat_vex | Edimax BR-6478AC POST Request formWlbasic command injection | known not affected: 1 | 2026-06-01T22:03:47+00:00 | Vulnerability · Source |
| CVE-2026-10155 | redhat_vex | Bdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injection | known not affected: 1 | 2026-06-01T22:03:47+00:00 | Vulnerability · Source |
| CVE-2025-48615 | redhat_vex | CVE-2025-48615 | known not affected: 1 | 2026-06-01T22:03:46+00:00 | Vulnerability · Source |
| CVE-2025-69600 | redhat_vex | CVE-2025-69600 | known not affected: 1 | 2026-06-01T22:03:46+00:00 | Vulnerability · Source |
| CVE-2026-10112 | redhat_vex | sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scripting | known not affected: 1 | 2026-06-01T22:03:46+00:00 | Vulnerability · Source |
| CVE-2025-48612 | redhat_vex | CVE-2025-48612 | known not affected: 1 | 2026-06-01T22:03:46+00:00 | Vulnerability · Source |
| CVE-2025-48600 | redhat_vex | CVE-2025-48600 | known not affected: 1 | 2026-06-01T22:03:45+00:00 | Vulnerability · Source |
| CVE-2025-48581 | redhat_vex | CVE-2025-48581 | known not affected: 1 | 2026-06-01T22:03:43+00:00 | Vulnerability · Source |
| CVE-2026-9352 | redhat_vex | NousResearch hermes-agent Messaging Gateway local.py _make_run_env information disclosure | known not affected: 1 | 2026-06-01T22:03:42+00:00 | Vulnerability · Source |
| CVE-2026-48810 | redhat_vex | FreeScout: Thread Edit Authorization Bypass via Missing Mailbox Check | known not affected: 1 | 2026-06-01T22:03:41+00:00 | Vulnerability · Source |
| CVE-2026-48811 | redhat_vex | FreeScout: Thread Deletion Bypasses Mailbox Access Revocation | known not affected: 1 | 2026-06-01T22:03:41+00:00 | Vulnerability · Source |
| CVE-2026-47742 | redhat_vex | Shopper: Missing authorization on Product admin Livewire sub-form components | known not affected: 1 | 2026-06-01T22:03:40+00:00 | Vulnerability · Source |
| CVE-2026-44651 | redhat_vex | SillyTavern: Reflected XSS vulnerability in the CORS proxy middleware | known not affected: 1 | 2026-06-01T22:03:40+00:00 | Vulnerability · Source |