VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298679 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-44882 | redhat_vex | Portainer: Kubernetes middleware continues after token validation failure, bypassing endpoint authorization | known not affected: 1 | 2026-05-30T08:13:02+00:00 | Vulnerability · Source |
| CVE-2026-45039 | redhat_vex | RustFS: Internode RPC HMAC secret falls back to public default credential, enabling peer impersonation | known not affected: 1 | 2026-05-30T08:13:02+00:00 | Vulnerability · Source |
| CVE-2026-41897 | redhat_vex | MantisBT: Reflected XSS in Rendering Dynamic Custom Textarea Field | known not affected: 1 | 2026-05-30T08:13:02+00:00 | Vulnerability · Source |
| CVE-2026-32847 | redhat_vex | DeepCode 1.2.0 Path Traversal via SPA Catch-All Route in main.py | known not affected: 1 | 2026-05-30T08:13:02+00:00 | Vulnerability · Source |
| CVE-2004-2761 | suse_vex | SUSE CVE CVE-2004-2761 | No product status | 2026-05-30T02:32:05+00:00 | Vulnerability · Source |
| CVE-2010-0386 | suse_vex | SUSE CVE CVE-2010-0386 | No product status | 2026-05-30T02:31:51+00:00 | Vulnerability · Source |
| CVE-2010-4478 | suse_vex | SUSE CVE CVE-2010-4478 | No product status | 2026-05-30T02:31:47+00:00 | Vulnerability · Source |
| CVE-2015-1916 | suse_vex | SUSE CVE CVE-2015-1916 | known affected: 15 known not affected: 1 | 2026-05-30T02:31:21+00:00 | Vulnerability · Source |
| CVE-2017-5196 | suse_vex | SUSE CVE CVE-2017-5196 | recommended: 4 | 2026-05-30T02:30:59+00:00 | Vulnerability · Source |
| CVE-2018-18021 | suse_vex | SUSE CVE CVE-2018-18021 | known affected: 34 known not affected: 326 | 2026-05-30T02:30:27+00:00 | Vulnerability · Source |
| CVE-2019-10876 | suse_vex | SUSE CVE CVE-2019-10876 | known not affected: 11 recommended: 919 | 2026-05-30T02:30:08+00:00 | Vulnerability · Source |
| CVE-2020-35450 | suse_vex | SUSE CVE CVE-2020-35450 | No product status | 2026-05-30T02:29:28+00:00 | Vulnerability · Source |
| CVE-2024-34063 | suse_vex | SUSE CVE CVE-2024-34063 | recommended: 2 | 2026-05-30T02:26:53+00:00 | Vulnerability · Source |
| CVE-2024-43513 | suse_vex | SUSE CVE CVE-2024-43513 | No product status | 2026-05-30T02:26:31+00:00 | Vulnerability · Source |
| CVE-2026-23295 | suse_vex | SUSE CVE CVE-2026-23295 | known not affected: 263 | 2026-05-30T02:14:21+00:00 | Vulnerability · Source |
| CVE-2026-45102 | redhat_vex | OneUptime: RCE due to Node.js' vm module escape via error objects and infinite recursion | known not affected: 1 | 2026-05-30T02:12:50+00:00 | Vulnerability · Source |
| CVE-2026-47673 | redhat_vex | Hono: JWT middleware accepts any Authorization scheme, not only Bearer | known not affected: 1 | 2026-05-30T02:12:50+00:00 | Vulnerability · Source |
| CVE-2026-44796 | redhat_vex | Nautobot: Object bulk rename UI actions vulnerable to denial of service by crafted regular expression (REDoS) | known not affected: 1 | 2026-05-30T02:12:50+00:00 | Vulnerability · Source |
| CVE-2026-45296 | redhat_vex | OpenReplay: Cross-tenant information disclosure in app_apikey projectKey routes via missing tenant binding | known not affected: 1 | 2026-05-30T02:12:50+00:00 | Vulnerability · Source |
| CVE-2026-47274 | redhat_vex | pam_usb: Uncontrolled search path in pam_usb tools allows privilege escalation via PATH manipulation | known not affected: 1 | 2026-05-30T02:12:50+00:00 | Vulnerability · Source |
| CVE-2026-46402 | redhat_vex | Microsoft UFO uses untrusted task_name in log paths, allowing authenticated path traversal and log file creation outside the logs directory | known not affected: 1 | 2026-05-30T02:12:50+00:00 | Vulnerability · Source |
| CVE-2026-35671 | redhat_vex | phpMyFAQ - Insecure Direct Object Reference in User Password API | known not affected: 1 | 2026-05-30T02:12:48+00:00 | Vulnerability · Source |
| CVE-2025-0130 | redhat_vex | PAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted Packets | known not affected: 1 | 2026-05-30T02:12:48+00:00 | Vulnerability · Source |
| CVE-2026-44358 | redhat_vex | Espressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action Entrypoint | known not affected: 1 | 2026-05-30T02:12:48+00:00 | Vulnerability · Source |
| CVE-2026-44247 | redhat_vex | Volcano: Webhook server vulnerable to OOM due to unbounded HTTP request body size | known not affected: 1 | 2026-05-30T02:12:48+00:00 | Vulnerability · Source |
| CVE-2026-44794 | redhat_vex | Nautobot: REST API permits creation of GenericForeignKey references to objects that the user should not be able to reference | known not affected: 1 | 2026-05-30T02:12:48+00:00 | Vulnerability · Source |
| CVE-2026-44713 | redhat_vex | pam_usb: Command injection via $TMUX environment variable leads to RCE as root | known not affected: 1 | 2026-05-30T02:12:48+00:00 | Vulnerability · Source |
| CVE-2026-44543 | redhat_vex | Local Path Provisioner: HelperPod Template Injection | known not affected: 1 | 2026-05-30T02:12:48+00:00 | Vulnerability · Source |
| CVE-2026-37540 | suse_vex | SUSE CVE CVE-2026-37540 | No product status | 2026-05-30T02:07:57+00:00 | Vulnerability · Source |
| CVE-2026-41150 | suse_vex | SUSE CVE CVE-2026-41150 | No product status | 2026-05-30T02:07:22+00:00 | Vulnerability · Source |
| CVE-2026-41159 | suse_vex | SUSE CVE CVE-2026-41159 | No product status | 2026-05-30T02:07:20+00:00 | Vulnerability · Source |
| CVE-2026-41565 | suse_vex | SUSE CVE CVE-2026-41565 | No product status | 2026-05-30T02:07:10+00:00 | Vulnerability · Source |
| CVE-2026-45078 | suse_vex | SUSE CVE CVE-2026-45078 | recommended: 1 | 2026-05-30T02:05:16+00:00 | Vulnerability · Source |
| CVE-2026-48155 | suse_vex | SUSE CVE CVE-2026-48155 | No product status | 2026-05-30T01:59:44+00:00 | Vulnerability · Source |
| CVE-2026-48156 | suse_vex | SUSE CVE CVE-2026-48156 | No product status | 2026-05-30T01:59:42+00:00 | Vulnerability · Source |
| CVE-2026-49127 | suse_vex | SUSE CVE CVE-2026-49127 | No product status | 2026-05-30T01:59:21+00:00 | Vulnerability · Source |
| CVE-2026-49128 | suse_vex | SUSE CVE CVE-2026-49128 | No product status | 2026-05-30T01:59:19+00:00 | Vulnerability · Source |
| CVE-2026-49129 | suse_vex | SUSE CVE CVE-2026-49129 | No product status | 2026-05-30T01:59:18+00:00 | Vulnerability · Source |
| CVE-2026-49130 | suse_vex | SUSE CVE CVE-2026-49130 | No product status | 2026-05-30T01:59:16+00:00 | Vulnerability · Source |
| CVE-2016-8858 | redhat_vex | openssh: Memory exhaustion due to unregistered KEXINIT handler after receiving message | known not affected: 18 | 2026-05-29T21:09:49+00:00 | Vulnerability · Source |
| CVE-2010-5107 | redhat_vex | openssh: Prevent connection slot exhaustion attacks | fixed: 265 known affected: 1 | 2026-05-29T21:09:49+00:00 | Vulnerability · Source |
| CVE-2016-10011 | redhat_vex | openssh: Leak of host private key material to privilege-separated child process via realloc() | fixed: 456 known affected: 9 | 2026-05-29T21:08:02+00:00 | Vulnerability · Source |
| CVE-2016-10012 | redhat_vex | openssh: Bounds check can be evaded in the shared memory manager used by pre-authentication compression support | fixed: 456 known affected: 9 | 2026-05-29T21:08:02+00:00 | Vulnerability · Source |
| CVE-2016-10010 | redhat_vex | openssh: privilege escalation via Unix domain socket forwarding | known not affected: 19 | 2026-05-29T21:08:01+00:00 | Vulnerability · Source |
| CVE-2016-6210 | redhat_vex | openssh: User enumeration via covert timing channel | fixed: 720 known affected: 1 | 2026-05-29T21:05:20+00:00 | Vulnerability · Source |
| CVE-2016-9535 | redhat_vex | libtiff: Predictor heap-buffer-overflow | fixed: 488 known affected: 3 | 2026-05-29T21:05:20+00:00 | Vulnerability · Source |
| CVE-2016-10009 | redhat_vex | openssh: loading of untrusted PKCS#11 modules in ssh-agent | fixed: 456 known affected: 9 | 2026-05-29T21:05:20+00:00 | Vulnerability · Source |
| CVE-2026-9416 | redhat_vex | code-projects Employee Management System myprofile.php cross site scripting | known not affected: 1 | 2026-05-29T20:13:19+00:00 | Vulnerability · Source |
| CVE-2026-9518 | redhat_vex | hemant6488 CodeIgniter-StudentManagementSystem Students Controller view_students.php addStudent cross site scripting | known not affected: 1 | 2026-05-29T20:13:19+00:00 | Vulnerability · Source |
| CVE-2026-9370 | redhat_vex | ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt | known not affected: 1 | 2026-05-29T20:13:18+00:00 | Vulnerability · Source |