VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298679 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-35696 | redhat_vex | CVE-2023-35696 | known not affected: 1 | 2026-06-01T16:02:40+00:00 | Vulnerability · Source |
| CVE-2023-1547 | redhat_vex | SQLi in Elra Computers Parkmatik | known not affected: 1 | 2026-06-01T16:02:39+00:00 | Vulnerability · Source |
| CVE-2023-1462 | redhat_vex | IDOR in Digikent | known not affected: 1 | 2026-06-01T16:02:39+00:00 | Vulnerability · Source |
| CVE-2023-23446 | redhat_vex | CVE-2023-23446 | known not affected: 1 | 2026-06-01T16:02:39+00:00 | Vulnerability · Source |
| CVE-2023-23445 | redhat_vex | CVE-2023-23445 | known not affected: 1 | 2026-06-01T16:02:39+00:00 | Vulnerability · Source |
| CVE-2023-1508 | redhat_vex | SQLi in AdamPOS's Mobilmen Terminal Software | known not affected: 1 | 2026-06-01T16:02:38+00:00 | Vulnerability · Source |
| CVE-2023-1251 | redhat_vex | SQLi in Wolvox | known not affected: 1 | 2026-06-01T16:02:38+00:00 | Vulnerability · Source |
| CVE-2023-1267 | redhat_vex | SQLi in Ulkem Company's PtteM Kart | known not affected: 1 | 2026-06-01T16:02:38+00:00 | Vulnerability · Source |
| CVE-2023-1246 | redhat_vex | Files or Directories Accessible to External Parties in Saysis Starcities | known not affected: 1 | 2026-06-01T16:02:38+00:00 | Vulnerability · Source |
| CVE-2023-1153 | redhat_vex | SQLi in Pacsrapor | known not affected: 1 | 2026-06-01T16:02:37+00:00 | Vulnerability · Source |
| CVE-2023-1091 | redhat_vex | SQL Injection found in ALPATA's Licensed Warehousing Automation System | known not affected: 1 | 2026-06-01T16:02:37+00:00 | Vulnerability · Source |
| CVE-2023-1152 | redhat_vex | SQLi in Utarit Persolus | known not affected: 1 | 2026-06-01T16:02:37+00:00 | Vulnerability · Source |
| CVE-2023-1050 | redhat_vex | SQLi in As Koc Web Report System | known not affected: 1 | 2026-06-01T16:02:37+00:00 | Vulnerability · Source |
| CVE-2023-1064 | redhat_vex | SQLi in Uzay Baskul's Weighbridge Automation Software | known not affected: 1 | 2026-06-01T16:02:37+00:00 | Vulnerability · Source |
| CVE-2023-1114 | redhat_vex | Improper Input Validation on e-Belediye | known not affected: 1 | 2026-06-01T16:02:37+00:00 | Vulnerability · Source |
| CVE-2023-1198 | redhat_vex | SQLi in Saysis Starcities | known not affected: 1 | 2026-06-01T16:02:37+00:00 | Vulnerability · Source |
| CVE-2023-0839 | redhat_vex | Improper Error Handling in inSCADA | known not affected: 1 | 2026-06-01T16:02:36+00:00 | Vulnerability · Source |
| CVE-2023-0882 | redhat_vex | Authorization Bypass Through User-Controlled Key on Single Connect | known not affected: 1 | 2026-06-01T16:02:36+00:00 | Vulnerability · Source |
| CVE-2023-1014 | redhat_vex | Information disclosure in Vira-Investing | known not affected: 1 | 2026-06-01T16:02:36+00:00 | Vulnerability · Source |
| CVE-2023-0939 | redhat_vex | Multiple SQL Injection on NTN Information Technologies' Online Services software | known not affected: 1 | 2026-06-01T16:02:36+00:00 | Vulnerability · Source |
| CVE-2023-0979 | redhat_vex | SQLi in MedDataPACS | known not affected: 1 | 2026-06-01T16:02:36+00:00 | Vulnerability · Source |
| CVE-2023-0320 | redhat_vex | XSS in UBYS | known not affected: 1 | 2026-06-01T16:02:35+00:00 | Vulnerability · Source |
| CVE-2026-48864 | microsoft_vex | Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data | known affected: 1 | 2026-06-01T14:44:15+00:00 | Vulnerability · Source |
| CVE-2026-10018 | suse_vex | SUSE CVE CVE-2026-10018 | recommended: 4 | 2026-06-01T00:58:39+00:00 | Vulnerability · Source |
| CVE-2007-6429 | suse_vex | SUSE CVE CVE-2007-6429 | recommended: 22 | 2026-05-31T01:46:56+00:00 | Vulnerability · Source |
| CVE-2014-8730 | suse_vex | SUSE CVE CVE-2014-8730 | No product status | 2026-05-31T01:46:20+00:00 | Vulnerability · Source |
| CVE-2018-10657 | suse_vex | SUSE CVE CVE-2018-10657 | No product status | 2026-05-31T01:45:06+00:00 | Vulnerability · Source |
| CVE-2020-11725 | suse_vex | SUSE CVE CVE-2020-11725 | No product status | 2026-05-31T01:44:26+00:00 | Vulnerability · Source |
| CVE-2021-36368 | suse_vex | SUSE CVE CVE-2021-36368 | No product status | 2026-05-31T01:44:06+00:00 | Vulnerability · Source |
| CVE-2025-13230 | microsoft_vex | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | fixed: 1 known affected: 9 | 2026-05-31T01:41:09+00:00 | Vulnerability · Source |
| CVE-2025-13226 | microsoft_vex | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | fixed: 1 known affected: 9 | 2026-05-31T01:41:02+00:00 | Vulnerability · Source |
| CVE-2025-13227 | microsoft_vex | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | fixed: 1 known affected: 5 | 2026-05-31T01:40:55+00:00 | Vulnerability · Source |
| CVE-2024-36137 | microsoft_vex | A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. Node.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a "read-only" file descriptor to change the owner and permissions of a file. | fixed: 1 known affected: 1 under investigation: 4 | 2026-05-31T01:40:05+00:00 | Vulnerability · Source |
| CVE-2024-22018 | microsoft_vex | A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used. This flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files that they do not have explicit read access to. This vulnerability affects all users using the experimental permission model in Node.js 20 and Node.js 21. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. | fixed: 1 known affected: 1 under investigation: 4 | 2026-05-31T01:39:56+00:00 | Vulnerability · Source |
| CVE-2026-41240 | suse_vex | SUSE CVE CVE-2026-41240 | recommended: 3 | 2026-05-31T01:35:07+00:00 | Vulnerability · Source |
| CVE-2026-48840 | suse_vex | SUSE CVE CVE-2026-48840 | No product status | 2026-05-31T01:32:13+00:00 | Vulnerability · Source |
| CVE-2026-46174 | microsoft_vex | x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache | fixed: 1 known affected: 1 | 2026-05-30T14:43:26+00:00 | Vulnerability · Source |
| CVE-2026-44283 | microsoft_vex | etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks | fixed: 1 known affected: 1 | 2026-05-30T14:40:23+00:00 | Vulnerability · Source |
| CVE-2026-41401 | microsoft_vex | libyang - Heap Use-After-Free Write in XML Metadata Parsing | fixed: 1 known affected: 1 | 2026-05-30T14:03:44+00:00 | Vulnerability · Source |
| CVE-2026-8070 | redhat_vex | CVE-2026-8070 | known not affected: 1 | 2026-05-30T08:13:06+00:00 | Vulnerability · Source |
| CVE-2026-48116 | redhat_vex | AnythingLLM: RCE via ripgrep --pre argument injection in filesystem-search-files agent skill | known not affected: 1 | 2026-05-30T08:13:05+00:00 | Vulnerability · Source |
| CVE-2026-45374 | redhat_vex | CodeWhale: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files | known not affected: 1 | 2026-05-30T08:13:05+00:00 | Vulnerability · Source |
| CVE-2026-45373 | redhat_vex | CodeWhale: SSRF IPV6 bypass | known not affected: 1 | 2026-05-30T08:13:05+00:00 | Vulnerability · Source |
| CVE-2026-45343 | redhat_vex | LinkAce - Stored XSS via Unsanitized SSO User's Name Rendered in Admin Audit Log Allows Session Hijacking | known not affected: 1 | 2026-05-30T08:13:04+00:00 | Vulnerability · Source |
| CVE-2026-45332 | redhat_vex | Automad Broken Access Control: unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint | known not affected: 1 | 2026-05-30T08:13:04+00:00 | Vulnerability · Source |
| CVE-2026-45310 | redhat_vex | CodeWhale: SSRF via HTTP Redirect Bypass in fetch_url Tool | known not affected: 1 | 2026-05-30T08:13:04+00:00 | Vulnerability · Source |
| CVE-2026-45058 | redhat_vex | electerm: Import unsafe bookmark data could lead to unsafe operation when click local type bookmark | known not affected: 1 | 2026-05-30T08:13:03+00:00 | Vulnerability · Source |
| CVE-2026-45261 | redhat_vex | GitButler: Link injection via forge integration enables arbitrary script execution | known not affected: 1 | 2026-05-30T08:13:03+00:00 | Vulnerability · Source |
| CVE-2026-45288 | redhat_vex | Marten has an SQL injection vulnerability in its full-text search regConfig parameter | known not affected: 1 | 2026-05-30T08:13:03+00:00 | Vulnerability · Source |
| CVE-2026-10044 | redhat_vex | ai-goofish-monitor Unauthenticated Arbitrary File Read via GET /api/prompts/ | known not affected: 1 | 2026-05-30T08:13:02+00:00 | Vulnerability · Source |