VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298679 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-28395 | redhat_vex | OpenClaw 2026.1.14-1 < 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrl | known not affected: 1 | 2026-05-26T14:12:44+00:00 | Vulnerability · Source |
| CVE-2026-22677 | redhat_vex | Hermes WebUI < 0.51.44 Path Traversal via Session Import Endpoint | known not affected: 1 | 2026-05-26T14:12:44+00:00 | Vulnerability · Source |
| CVE-2026-23620 | redhat_vex | GFI MailEssentials AI < 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File Enumeration | known not affected: 1 | 2026-05-26T14:12:44+00:00 | Vulnerability · Source |
| CVE-2022-50945 | redhat_vex | WordPress 3dady Real-Time Web Stats 1.0 Stored XSS | known not affected: 1 | 2026-05-26T14:12:43+00:00 | Vulnerability · Source |
| CVE-2026-22217 | redhat_vex | OpenClaw 2026.2.22 < 2026.2.23 - Arbitrary Binary Execution via $SHELL Environment Variable Trusted Prefix Fallback | known not affected: 1 | 2026-05-26T14:12:43+00:00 | Vulnerability · Source |
| CVE-2026-22190 | redhat_vex | Panda3D <= 1.10.16 egg-mkfont Format String Information Disclosure | known not affected: 1 | 2026-05-26T14:12:43+00:00 | Vulnerability · Source |
| CVE-2026-22675 | redhat_vex | OCS Inventory NG Server Stored XSS via User-Agent | known not affected: 1 | 2026-05-26T14:12:43+00:00 | Vulnerability · Source |
| CVE-2026-22189 | redhat_vex | Panda3D <= 1.10.16 egg-mkfont Stack Buffer Overflow | known not affected: 1 | 2026-05-26T14:12:42+00:00 | Vulnerability · Source |
| CVE-2026-22188 | redhat_vex | Panda3D <= 1.10.16 Deploy-Stub Stack Exhaustion via Unbounded alloca() | known not affected: 1 | 2026-05-26T14:12:42+00:00 | Vulnerability · Source |
| CVE-2021-47968 | redhat_vex | Podcast Generator 3.1 Persistent Cross-Site Scripting via long_description | known not affected: 1 | 2026-05-26T14:12:41+00:00 | Vulnerability · Source |
| CVE-2022-50960 | redhat_vex | WordPress International Sms Contact Form 7 Integration 1.2 XSS | known not affected: 1 | 2026-05-26T14:12:41+00:00 | Vulnerability · Source |
| CVE-2021-47975 | redhat_vex | WordPress Plugin WP Learn Manager 1.1.2 Stored XSS | known not affected: 1 | 2026-05-26T14:12:41+00:00 | Vulnerability · Source |
| CVE-2025-66572 | redhat_vex | Loaded Commerce 6.6 Client-Side Template Injection (CSTI) | known not affected: 1 | 2026-05-26T14:12:41+00:00 | Vulnerability · Source |
| CVE-2021-47931 | redhat_vex | Exponent CMS 2.6 Multiple Vulnerabilities Stored XSS Authentication | known not affected: 1 | 2026-05-26T14:12:39+00:00 | Vulnerability · Source |
| CVE-2026-9461 | redhat_vex | Edimax EW-7438RPn formRadius stack-based overflow | known not affected: 1 | 2026-05-26T14:12:39+00:00 | Vulnerability · Source |
| CVE-2026-9462 | redhat_vex | Edimax EW-7438RPn formWpsProxyEnable stack-based overflow | known not affected: 1 | 2026-05-26T14:12:36+00:00 | Vulnerability · Source |
| CVE-2026-9456 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setOpenVpnCfg os command injection | known not affected: 1 | 2026-05-26T14:12:35+00:00 | Vulnerability · Source |
| CVE-2026-9443 | redhat_vex | Edimax BR-6478AC POST Request formL2TPSetup buffer overflow | known not affected: 1 | 2026-05-26T14:12:34+00:00 | Vulnerability · Source |
| CVE-2026-9455 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi UploadOpenVpnCert os command injection | known not affected: 1 | 2026-05-26T14:12:34+00:00 | Vulnerability · Source |
| CVE-2026-9425 | redhat_vex | Edimax EW-7438RPn formWlanMP stack-based overflow | known not affected: 1 | 2026-05-26T14:12:33+00:00 | Vulnerability · Source |
| CVE-2026-9431 | redhat_vex | Tenda F1202 PptpUserAdd fromPptpUserAdd stack-based overflow | known not affected: 1 | 2026-05-26T14:12:33+00:00 | Vulnerability · Source |
| CVE-2026-9407 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setFirewallType os command injection | known not affected: 1 | 2026-05-26T14:12:33+00:00 | Vulnerability · Source |
| CVE-2026-9386 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setLanguageCfg os command injection | known not affected: 1 | 2026-05-26T14:12:32+00:00 | Vulnerability · Source |
| CVE-2026-9401 | redhat_vex | Edimax BR-6675nD POST Request formWanTcpipSetup buffer overflow | known not affected: 1 | 2026-05-26T14:12:32+00:00 | Vulnerability · Source |
| CVE-2026-9380 | redhat_vex | Edimax BR-6675nD POST Request formL2TPSetup buffer overflow | known not affected: 1 | 2026-05-26T14:12:31+00:00 | Vulnerability · Source |
| CVE-2026-48249 | redhat_vex | Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php | known not affected: 1 | 2026-05-26T14:12:31+00:00 | Vulnerability · Source |
| CVE-2026-9294 | redhat_vex | Edimax BR-6428NS POST Request formWanTcpipSetup buffer overflow | known not affected: 1 | 2026-05-26T14:12:31+00:00 | Vulnerability · Source |
| CVE-2026-48248 | redhat_vex | Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php | known not affected: 1 | 2026-05-26T14:12:31+00:00 | Vulnerability · Source |
| CVE-2026-6898 | redhat_vex | WishList Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Generate API Secret Key via 'wlm3_generate_api_key' AJAX action | known not affected: 1 | 2026-05-26T14:12:31+00:00 | Vulnerability · Source |
| CVE-2026-47280 | redhat_vex | Azure Resource Manager Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-26T14:12:29+00:00 | Vulnerability · Source |
| CVE-2026-45659 | redhat_vex | Microsoft SharePoint Remote Code Execution Vulnerability | known not affected: 1 | 2026-05-26T14:12:28+00:00 | Vulnerability · Source |
| CVE-2026-45444 | redhat_vex | WordPress Gift Cards For WooCommerce Pro plugin <= 4.2.6 - Arbitrary File Upload vulnerability | known not affected: 1 | 2026-05-26T14:12:28+00:00 | Vulnerability · Source |
| CVE-2026-42437 | redhat_vex | OpenClaw 2026.4.9 < 2026.4.10 - Denial of Service via Oversized WebSocket Frames in Voice-call Realtime Path | known not affected: 1 | 2026-05-26T14:12:27+00:00 | Vulnerability · Source |
| CVE-2026-41922 | redhat_vex | WDR201A WiFi Extender OS Command Injection via wireless.cgi | known not affected: 1 | 2026-05-26T14:12:26+00:00 | Vulnerability · Source |
| CVE-2026-42432 | redhat_vex | OpenClaw < 2026.4.8 - Command Escalation via Node Pairing Reconnect Bypass | known not affected: 1 | 2026-05-26T14:12:26+00:00 | Vulnerability · Source |
| CVE-2026-33843 | redhat_vex | Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-26T14:12:26+00:00 | Vulnerability · Source |
| CVE-2026-41471 | redhat_vex | Easy PayPal Events & Tickets < 1.4 Information Disclosure via QR Code Endpoint | known not affected: 1 | 2026-05-26T14:12:25+00:00 | Vulnerability · Source |
| CVE-2026-32062 | redhat_vex | OpenClaw 2026.2.21-2 < 2026.2.22 - Unauthenticated WebSocket Resource Exhaustion via Media Stream | known not affected: 1 | 2026-05-26T14:12:25+00:00 | Vulnerability · Source |
| CVE-2026-41104 | redhat_vex | Microsoft Planetary Computer Pro Information Disclosure Vulnerability | known not affected: 1 | 2026-05-26T14:12:24+00:00 | Vulnerability · Source |
| CVE-2026-41465 | redhat_vex | ProjeQtor < 12.4.4 Path Traversal via dynamicDialog.php | known not affected: 1 | 2026-05-26T14:12:24+00:00 | Vulnerability · Source |
| CVE-2026-41090 | redhat_vex | Microsoft Copilot Tampering Vulnerability | known not affected: 1 | 2026-05-26T14:12:23+00:00 | Vulnerability · Source |
| CVE-2026-40412 | redhat_vex | Azure Orbital Spatio Remote Code Execution Vulnerability | known not affected: 1 | 2026-05-26T14:12:23+00:00 | Vulnerability · Source |
| CVE-2026-40411 | redhat_vex | Azure Virtual Network Gateway Remote Code Execution Vulnerability | known not affected: 1 | 2026-05-26T14:12:22+00:00 | Vulnerability · Source |
| CVE-2026-32253 | redhat_vex | Sunshine: Authentication bypass via improper client certificate validation | known not affected: 1 | 2026-05-26T14:12:21+00:00 | Vulnerability · Source |
| CVE-2026-39968 | redhat_vex | TypeBot: Cross-Workspace Credential Theft via Bot-Engine Preview Endpoint | known not affected: 1 | 2026-05-26T14:12:21+00:00 | Vulnerability · Source |
| CVE-2026-32841 | redhat_vex | Edimax GS-5008PL <= 1.00.54 Global Authentication State Across All Clients | known not affected: 1 | 2026-05-26T14:12:21+00:00 | Vulnerability · Source |
| CVE-2026-28522 | redhat_vex | arduino-TuyaOpen WiFiUDP Null Pointer Dereference Denial of Service | known not affected: 1 | 2026-05-26T14:12:19+00:00 | Vulnerability · Source |
| CVE-2026-27509 | redhat_vex | Unitree Go2 Missing DDS Authentication Enables Adjacent RCE | known not affected: 1 | 2026-05-26T14:12:17+00:00 | Vulnerability · Source |
| CVE-2026-22665 | redhat_vex | prompts.chat Identity Confusion via Case-Sensitive Username Handling | known not affected: 1 | 2026-05-26T14:12:17+00:00 | Vulnerability · Source |
| CVE-2026-26147 | redhat_vex | Azure Stack HCI Information Disclosure Vulnerability | known not affected: 1 | 2026-05-26T14:12:17+00:00 | Vulnerability · Source |