VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298679 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-3660 | redhat_vex | IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Authentication Bypass | known not affected: 1 | 2026-05-28T08:12:43+00:00 | Vulnerability · Source |
| CVE-2026-8834 | redhat_vex | IBM HTTP Server is affected by multiple vulnerabilities | known not affected: 1 | 2026-05-28T08:12:43+00:00 | Vulnerability · Source |
| CVE-2026-44728 | redhat_vex | Improper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjs | known not affected: 1 | 2026-05-28T08:12:43+00:00 | Vulnerability · Source |
| CVE-2025-43306 | redhat_vex | CVE-2025-43306 | known not affected: 1 | 2026-05-28T08:12:43+00:00 | Vulnerability · Source |
| CVE-2020-18670 | suse_vex | SUSE CVE CVE-2020-18670 | recommended: 3 | 2026-05-28T04:08:09+00:00 | Vulnerability · Source |
| CVE-2024-3817 | suse_vex | SUSE CVE CVE-2024-3817 | recommended: 10 | 2026-05-28T04:05:56+00:00 | Vulnerability · Source |
| CVE-2026-6921 | suse_vex | SUSE CVE CVE-2026-6921 | recommended: 10 | 2026-05-28T04:00:08+00:00 | Vulnerability · Source |
| CVE-2026-44353 | suse_vex | SUSE CVE CVE-2026-44353 | recommended: 1 | 2026-05-28T03:57:51+00:00 | Vulnerability · Source |
| CVE-2026-44838 | suse_vex | SUSE CVE CVE-2026-44838 | known not affected: 80 | 2026-05-28T03:57:47+00:00 | Vulnerability · Source |
| CVE-2026-42782 | redhat_vex | Apache Syncope: Post-auth RCE via Groovy static | known not affected: 1 | 2026-05-28T02:12:52+00:00 | Vulnerability · Source |
| CVE-2025-68710 | redhat_vex | CVE-2025-68710 | known not affected: 1 | 2026-05-28T02:12:52+00:00 | Vulnerability · Source |
| CVE-2026-9579 | redhat_vex | JeecgBoot SysUser userEdit user.getUsername access control | known not affected: 1 | 2026-05-27T20:14:20+00:00 | Vulnerability · Source |
| CVE-2026-9527 | redhat_vex | itsourcecode Electronic Judging System judges.php cross site scripting | known not affected: 1 | 2026-05-27T20:14:19+00:00 | Vulnerability · Source |
| CVE-2026-9533 | redhat_vex | Totolink CA750-PoE Setting cstecgi.cgi recvUpgradeNewFw os command injection | known not affected: 1 | 2026-05-27T20:14:19+00:00 | Vulnerability · Source |
| CVE-2026-9568 | redhat_vex | ThingsBoard YAML provision getGatewayDockerComposeFile code injection | known not affected: 1 | 2026-05-27T20:14:19+00:00 | Vulnerability · Source |
| CVE-2026-9484 | redhat_vex | SourceCodester Student Grades Management System classroom.php removeStudentFromClassroom improper authorization | known not affected: 1 | 2026-05-27T20:14:18+00:00 | Vulnerability · Source |
| CVE-2026-9472 | redhat_vex | dazeb markdown-downloader index.ts create_subdirectory path traversal | known not affected: 1 | 2026-05-27T20:14:18+00:00 | Vulnerability · Source |
| CVE-2026-9424 | redhat_vex | Edimax EW-7438RPn Content-Type formWlanMP os command injection | known not affected: 1 | 2026-05-27T20:14:18+00:00 | Vulnerability · Source |
| CVE-2026-9394 | redhat_vex | Besen BS20 EV Charging Station Bluetooth Low Energy weak password | known not affected: 1 | 2026-05-27T20:14:17+00:00 | Vulnerability · Source |
| CVE-2026-9412 | redhat_vex | SourceCodester Indian Invoicing System Backend Endpoint access control | known not affected: 1 | 2026-05-27T20:14:17+00:00 | Vulnerability · Source |
| CVE-2026-9418 | redhat_vex | code-projects Employee Management System changepassemp.php cross site scripting | known not affected: 1 | 2026-05-27T20:14:17+00:00 | Vulnerability · Source |
| CVE-2026-9400 | redhat_vex | Edimax BR-6675nD POST Request formUSBStorage command injection | known not affected: 1 | 2026-05-27T20:14:17+00:00 | Vulnerability · Source |
| CVE-2026-9342 | redhat_vex | SourceCodester Hospitals Patient Records Management System view_history.php sql injection | known not affected: 1 | 2026-05-27T20:14:15+00:00 | Vulnerability · Source |
| CVE-2026-9379 | redhat_vex | Edimax BR-6675nD POST Request formWpsStart command injection | known not affected: 1 | 2026-05-27T20:14:15+00:00 | Vulnerability · Source |
| CVE-2026-9301 | redhat_vex | omec-project amf NGReset Message memory corruption | known not affected: 1 | 2026-05-27T20:14:14+00:00 | Vulnerability · Source |
| CVE-2025-4528 | redhat_vex | Dígitro NGC Explorer session expiration | known not affected: 1 | 2026-05-27T20:14:10+00:00 | Vulnerability · Source |
| CVE-2025-4527 | redhat_vex | Dígitro NGC Explorer Password Transmission client-side enforcement of server-side security | known not affected: 1 | 2026-05-27T20:14:06+00:00 | Vulnerability · Source |
| CVE-2025-4526 | redhat_vex | Dígitro NGC Explorer Configuration missing password field masking | known not affected: 1 | 2026-05-27T20:14:05+00:00 | Vulnerability · Source |
| CVE-2026-9372 | redhat_vex | ItzCrazyKns Vane Model Provider API route.ts server-side request forgery | known not affected: 1 | 2026-05-27T20:14:00+00:00 | Vulnerability · Source |
| CVE-2026-9366 | redhat_vex | NousResearch hermes-agent prompt_builder.py _scan_context_content injection | known not affected: 1 | 2026-05-27T20:13:59+00:00 | Vulnerability · Source |
| CVE-2026-9354 | redhat_vex | NousResearch hermes-agent Slack Agent/Mattermost Agent escape output | known not affected: 1 | 2026-05-27T20:13:56+00:00 | Vulnerability · Source |
| CVE-2026-48593 | redhat_vex | Unbounded range expansion in cron describe causes memory exhaustion in oban_web | known not affected: 1 | 2026-05-27T20:13:55+00:00 | Vulnerability · Source |
| CVE-2026-48592 | redhat_vex | Missing authorization check on save-job event handler in oban_web | known not affected: 1 | 2026-05-27T20:13:54+00:00 | Vulnerability · Source |
| CVE-2026-44831 | redhat_vex | Snipe-IT: XSS vulnerability in component notes | known not affected: 1 | 2026-05-27T20:13:54+00:00 | Vulnerability · Source |
| CVE-2026-46620 | redhat_vex | e107: CSRF in comment.php moderation endpoints via token-optional validation in session_handler::check() | known not affected: 1 | 2026-05-27T20:13:53+00:00 | Vulnerability · Source |
| CVE-2026-48135 | redhat_vex | HTTP service can incorrectly process malformed HTTP requests | known not affected: 1 | 2026-05-27T20:13:53+00:00 | Vulnerability · Source |
| CVE-2026-44833 | redhat_vex | Snipe-IT: Open redirect vulnerability | known not affected: 1 | 2026-05-27T20:13:52+00:00 | Vulnerability · Source |
| CVE-2026-44502 | redhat_vex | Bugsink: SSRF bypass in `validate_webhook_url` | known not affected: 1 | 2026-05-27T20:13:46+00:00 | Vulnerability · Source |
| CVE-2026-42335 | redhat_vex | MaxKB: SSRF Bypass in MaxKB OSS URL Fetch due to URL Parsing Discrepancy | known not affected: 1 | 2026-05-27T20:13:46+00:00 | Vulnerability · Source |
| CVE-2026-44707 | redhat_vex | Chatwoot: Pre-Account Takeover via OAuth on Unconfirmed Accounts | known not affected: 1 | 2026-05-27T20:13:46+00:00 | Vulnerability · Source |
| CVE-2026-41917 | redhat_vex | OpenKM 6.3.12 Local File Inclusion via Admin Scripting | known not affected: 1 | 2026-05-27T20:13:45+00:00 | Vulnerability · Source |
| CVE-2026-41164 | redhat_vex | nuts-node: JWT type confusion in v1 access token introspection allows VP replay as access token | known not affected: 1 | 2026-05-27T20:13:44+00:00 | Vulnerability · Source |
| CVE-2026-24201 | redhat_vex | CVE-2026-24201 | known not affected: 1 | 2026-05-27T20:13:43+00:00 | Vulnerability · Source |
| CVE-2026-24199 | redhat_vex | CVE-2026-24199 | known not affected: 1 | 2026-05-27T20:13:42+00:00 | Vulnerability · Source |
| CVE-2026-24198 | redhat_vex | CVE-2026-24198 | known not affected: 1 | 2026-05-27T20:13:42+00:00 | Vulnerability · Source |
| CVE-2026-24197 | redhat_vex | CVE-2026-24197 | known not affected: 1 | 2026-05-27T20:13:40+00:00 | Vulnerability · Source |
| CVE-2026-24182 | redhat_vex | CVE-2026-24182 | known not affected: 1 | 2026-05-27T20:13:39+00:00 | Vulnerability · Source |
| CVE-2026-9478 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setParentalRules os command injection | known not affected: 1 | 2026-05-27T20:13:36+00:00 | Vulnerability · Source |
| CVE-2026-9385 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setTracerouteCfg os command injection | known not affected: 1 | 2026-05-27T20:13:36+00:00 | Vulnerability · Source |
| CVE-2026-9348 | redhat_vex | Edimax EW-7438RPn webs mp stack-based overflow | known not affected: 1 | 2026-05-27T20:13:36+00:00 | Vulnerability · Source |