VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298679 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-9284 | redhat_vex | WooCommerce PayPal Payments <= 4.0.1 - Missing Authorization to Unauthenticated Order Manipulation and Information Disclosure | known not affected: 1 | 2026-05-26T20:14:07+00:00 | Vulnerability · Source |
| CVE-2026-9344 | redhat_vex | Edimax EW-7438RPn webs formWpsStart stack-based overflow | known not affected: 1 | 2026-05-26T20:14:07+00:00 | Vulnerability · Source |
| CVE-2026-9058 | redhat_vex | Improper Certificate Verification in Szafir SDK | known not affected: 1 | 2026-05-26T20:14:06+00:00 | Vulnerability · Source |
| CVE-2026-8652 | redhat_vex | CVE-2026-8652 | known not affected: 1 | 2026-05-26T20:14:06+00:00 | Vulnerability · Source |
| CVE-2026-6897 | redhat_vex | Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Update via 'wishlistmember_team_accounts_save_settings' AJAX action | known not affected: 1 | 2026-05-26T20:14:05+00:00 | Vulnerability · Source |
| CVE-2026-7766 | redhat_vex | Path Traversal in Kenik cameras | known not affected: 1 | 2026-05-26T20:14:05+00:00 | Vulnerability · Source |
| CVE-2026-6419 | redhat_vex | Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_get_screen' AJAX action | known not affected: 1 | 2026-05-26T20:14:05+00:00 | Vulnerability · Source |
| CVE-2026-6895 | redhat_vex | Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_export_settings' AJAX Action | known not affected: 1 | 2026-05-26T20:14:05+00:00 | Vulnerability · Source |
| CVE-2026-5843 | redhat_vex | Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading | known not affected: 1 | 2026-05-26T20:14:05+00:00 | Vulnerability · Source |
| CVE-2026-5817 | redhat_vex | Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends | known not affected: 1 | 2026-05-26T20:14:04+00:00 | Vulnerability · Source |
| CVE-2026-47077 | redhat_vex | Unbounded body accumulation in HTTP/3 response loop in hackney | known not affected: 1 | 2026-05-26T20:14:03+00:00 | Vulnerability · Source |
| CVE-2026-47067 | redhat_vex | Atom table exhaustion via unrecognized URL schemes in hackney | known not affected: 1 | 2026-05-26T20:14:03+00:00 | Vulnerability · Source |
| CVE-2026-47071 | redhat_vex | SOCKS5 TLS upgrade ignores caller timeout in hackney | known not affected: 1 | 2026-05-26T20:14:03+00:00 | Vulnerability · Source |
| CVE-2026-47073 | redhat_vex | Unbounded memory consumption in WebSocket client in hackney | known not affected: 1 | 2026-05-26T20:14:03+00:00 | Vulnerability · Source |
| CVE-2026-47066 | redhat_vex | Infinite loop in Alt-Svc header parser in hackney | known not affected: 1 | 2026-05-26T20:14:02+00:00 | Vulnerability · Source |
| CVE-2026-3515 | redhat_vex | Argument Injection in prefecthq/prefect | known not affected: 1 | 2026-05-26T20:14:00+00:00 | Vulnerability · Source |
| CVE-2026-42901 | redhat_vex | Microsoft Entra ID Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-26T20:14:00+00:00 | Vulnerability · Source |
| CVE-2026-44159 | redhat_vex | Tyler Identity Local (TID-L) default administrative credentials | known not affected: 1 | 2026-05-26T20:14:00+00:00 | Vulnerability · Source |
| CVE-2026-41147 | redhat_vex | NukeViet CMS: Stored Cross-Site Scripting (XSS) via insufficient server-side input sanitization in Request class | known not affected: 1 | 2026-05-26T20:13:59+00:00 | Vulnerability · Source |
| CVE-2026-40597 | redhat_vex | MantisBT has a Content Security Policy bypass via attachments | known not affected: 1 | 2026-05-26T20:13:58+00:00 | Vulnerability · Source |
| CVE-2026-40607 | redhat_vex | MantisBT is Vulnerable to Stored XSS Through its Saved-Filter Owner Column | known not affected: 1 | 2026-05-26T20:13:57+00:00 | Vulnerability · Source |
| CVE-2026-35430 | redhat_vex | Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-26T20:13:56+00:00 | Vulnerability · Source |
| CVE-2026-40166 | redhat_vex | authentik: Non-admin user can retrieve confidential OAuth client_secret via /api/v3/oauth2/access_tokens/ | known not affected: 1 | 2026-05-26T20:13:56+00:00 | Vulnerability · Source |
| CVE-2026-3294 | redhat_vex | Authentication Logic Vulnerability on Multiple TP-Link Range Extenders | known not affected: 1 | 2026-05-26T20:13:56+00:00 | Vulnerability · Source |
| CVE-2026-25193 | redhat_vex | CVE-2026-25193 | known not affected: 1 | 2026-05-26T20:13:55+00:00 | Vulnerability · Source |
| CVE-2026-33137 | redhat_vex | XWiki Platform has an Unauthenticated XAR Import via REST /wikis/{wikiName} | known not affected: 1 | 2026-05-26T20:13:55+00:00 | Vulnerability · Source |
| CVE-2025-1782 | redhat_vex | Unsanitized input in language form field | known not affected: 1 | 2026-05-26T20:13:55+00:00 | Vulnerability · Source |
| CVE-2026-1773 | redhat_vex | CVE-2026-1773 | known not affected: 1 | 2026-05-26T20:13:55+00:00 | Vulnerability · Source |
| CVE-2026-9413 | redhat_vex | SourceCodester Indian Invoicing System category.php cross site scripting | known not affected: 1 | 2026-05-26T14:12:58+00:00 | Vulnerability · Source |
| CVE-2026-9449 | redhat_vex | code-projects Employee Management System changepassemp.php sql injection | known not affected: 1 | 2026-05-26T14:12:55+00:00 | Vulnerability · Source |
| CVE-2026-9437 | redhat_vex | DTStack Taier REST API Runtime.exec os command injection | known not affected: 1 | 2026-05-26T14:12:55+00:00 | Vulnerability · Source |
| CVE-2026-9419 | redhat_vex | code-projects Employee Management System empproject.php cross site scripting | known not affected: 1 | 2026-05-26T14:12:54+00:00 | Vulnerability · Source |
| CVE-2026-9395 | redhat_vex | Besen BS20 EV Charging Station BLE/UDP insufficiently protected credentials | known not affected: 1 | 2026-05-26T14:12:53+00:00 | Vulnerability · Source |
| CVE-2026-9347 | redhat_vex | Edimax EW-7438RPn webs formWizSurvey os command injection | known not affected: 1 | 2026-05-26T14:12:53+00:00 | Vulnerability · Source |
| CVE-2026-9361 | redhat_vex | Edimax EW-7438RPn POST Request formAccep formAccept command injection | known not affected: 1 | 2026-05-26T14:12:53+00:00 | Vulnerability · Source |
| CVE-2026-9300 | redhat_vex | omec-project amf NGSetupRequest memory corruption | known not affected: 1 | 2026-05-26T14:12:52+00:00 | Vulnerability · Source |
| CVE-2026-9306 | redhat_vex | QuantumNous new-api Midjourney Image Relay Endpoint relay-router.go GetByOnlyMJId authorization | known not affected: 1 | 2026-05-26T14:12:52+00:00 | Vulnerability · Source |
| CVE-2026-41362 | redhat_vex | OpenClaw 2026.2.19 through 2026.3.30 - Webhook Replay Dedupe Cache Event Suppression via Shared Authentication | known not affected: 1 | 2026-05-26T14:12:52+00:00 | Vulnerability · Source |
| CVE-2026-32067 | redhat_vex | OpenClaw < 2026.2.26 - Cross-Account Authorization Bypass in DM Pairing Store | known not affected: 1 | 2026-05-26T14:12:51+00:00 | Vulnerability · Source |
| CVE-2026-9367 | redhat_vex | NousResearch hermes-agent terminal_tool approval.py detect_dangerous_command os command injection | known not affected: 1 | 2026-05-26T14:12:51+00:00 | Vulnerability · Source |
| CVE-2026-9353 | redhat_vex | NousResearch hermes-agent Skills Guard Multi-Word Prompt skills_guard.py injection | known not affected: 1 | 2026-05-26T14:12:51+00:00 | Vulnerability · Source |
| CVE-2026-9373 | redhat_vex | JeecgBoot OpenAPI Endpoint call improper authentication | known not affected: 1 | 2026-05-26T14:12:51+00:00 | Vulnerability · Source |
| CVE-2026-42827 | redhat_vex | M365 Copilot Information Disclosure Vulnerability | known not affected: 1 | 2026-05-26T14:12:50+00:00 | Vulnerability · Source |
| CVE-2026-42429 | redhat_vex | OpenClaw < 2026.4.8 - Privilege Escalation via Gateway Plugin HTTP Authentication | known not affected: 1 | 2026-05-26T14:12:48+00:00 | Vulnerability · Source |
| CVE-2026-41455 | redhat_vex | WeKan < 8.35 SSRF via Webhook URL | known not affected: 1 | 2026-05-26T14:12:47+00:00 | Vulnerability · Source |
| CVE-2026-41300 | redhat_vex | OpenClaw < 2026.3.31 - Preservation of Attacker-Discovered Endpoints in Remote Onboarding | known not affected: 1 | 2026-05-26T14:12:47+00:00 | Vulnerability · Source |
| CVE-2026-32984 | redhat_vex | Heap buffer overflow in wazuh-authd | known not affected: 1 | 2026-05-26T14:12:46+00:00 | Vulnerability · Source |
| CVE-2026-40864 | redhat_vex | JupyterHub: Cross-origin form POSTs bypass XSRF | known not affected: 1 | 2026-05-26T14:12:46+00:00 | Vulnerability · Source |
| CVE-2026-32896 | redhat_vex | OpenClaw < 2026.2.21 - Unauthenticated Webhook Access via Passwordless Fallback in BlueBubbles Plugin | known not affected: 1 | 2026-05-26T14:12:45+00:00 | Vulnerability · Source |
| CVE-2026-32022 | redhat_vex | OpenClaw < 2026.2.21 - Arbitrary File Read via grep -e Flag Policy Bypass | known not affected: 1 | 2026-05-26T14:12:45+00:00 | Vulnerability · Source |