VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298679 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-23750 | redhat_vex | Golioth Pouch (prior to commit 1b2219a1) BLE GATT Heap-based Buffer Overflow | known not affected: 1 | 2026-05-26T14:12:16+00:00 | Vulnerability · Source |
| CVE-2026-23663 | redhat_vex | Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability | known not affected: 1 | 2026-05-26T14:12:15+00:00 | Vulnerability · Source |
| CVE-2026-23652 | redhat_vex | Microsoft Power Pages Remote Code Execution Vulnerability | known not affected: 1 | 2026-05-26T14:12:15+00:00 | Vulnerability · Source |
| CVE-2026-22661 | redhat_vex | prompts.chat Path Traversal via Skill File Handling | known not affected: 1 | 2026-05-26T14:12:14+00:00 | Vulnerability · Source |
| CVE-2026-22664 | redhat_vex | prompts.chat SSRF via Fal.ai Media Status Polling | known not affected: 1 | 2026-05-26T14:12:14+00:00 | Vulnerability · Source |
| CVE-2026-22208 | redhat_vex | OpenS100 Portrayal Engine Unrestricted Lua Standard Library Access | known not affected: 1 | 2026-05-26T14:12:14+00:00 | Vulnerability · Source |
| CVE-2025-34163 | redhat_vex | Dongsheng Logistics Software Unauthenticated Arbitrary File Upload | known not affected: 1 | 2026-05-26T14:12:13+00:00 | Vulnerability · Source |
| CVE-2025-34186 | redhat_vex | Ilevia EVE X1/X5 Server 4.7.18.0.eden Authentication Bypass | known not affected: 1 | 2026-05-26T14:12:13+00:00 | Vulnerability · Source |
| CVE-2025-34162 | redhat_vex | Bian Que Feijiu Intelligent Emergency and Quality Control System SQL Injection via GetLyfsByParams | known not affected: 1 | 2026-05-26T14:12:13+00:00 | Vulnerability · Source |
| CVE-2025-34523 | redhat_vex | Arcserve UDP < 10.2 Pre-Authentication Heap Overflow | known not affected: 1 | 2026-05-26T14:12:13+00:00 | Vulnerability · Source |
| CVE-2025-68648 | redhat_vex | CVE-2025-68648 | known not affected: 1 | 2026-05-26T14:12:13+00:00 | Vulnerability · Source |
| CVE-2026-34474 | redhat_vex | CVE-2026-34474 | known not affected: 1 | 2026-05-26T08:12:31+00:00 | Vulnerability · Source |
| CVE-2026-34473 | redhat_vex | CVE-2026-34473 | known not affected: 1 | 2026-05-26T08:12:31+00:00 | Vulnerability · Source |
| CVE-2026-45228 | redhat_vex | Quark Drive (quark-auto-save) < 0.8.5 Stored XSS via System Configuration | known not affected: 1 | 2026-05-26T02:12:55+00:00 | Vulnerability · Source |
| CVE-2026-44992 | redhat_vex | OpenClaw 2026.4.5 through 2026.4.19 - MiniMax API Host Override via Workspace dotenv | known not affected: 1 | 2026-05-26T02:12:54+00:00 | Vulnerability · Source |
| CVE-2021-47963 | redhat_vex | Anote 1.0 Persistent Cross-Site Scripting Leading to Code Execution | known not affected: 1 | 2026-05-26T02:12:53+00:00 | Vulnerability · Source |
| CVE-2026-41363 | redhat_vex | OpenClaw 2026.2.6 < 2026.3.28 - Arbitrary File Read via Feishu upload_image Parameter | known not affected: 1 | 2026-05-26T02:12:53+00:00 | Vulnerability · Source |
| CVE-2026-41367 | redhat_vex | OpenClaw 2026.2.14 < 2026.3.28 - Policy Enforcement Bypass in Discord Component Interactions | known not affected: 1 | 2026-05-26T02:12:53+00:00 | Vulnerability · Source |
| CVE-2026-34961 | redhat_vex | barebox ext4 Extent Parsing Out-of-Bounds Read | known not affected: 1 | 2026-05-26T02:12:52+00:00 | Vulnerability · Source |
| CVE-2026-26351 | redhat_vex | GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php | known not affected: 1 | 2026-05-26T02:12:51+00:00 | Vulnerability · Source |
| CVE-2026-22678 | redhat_vex | Webmin < 2.641 Stored XSS via System and Server Status | known not affected: 1 | 2026-05-26T02:12:51+00:00 | Vulnerability · Source |
| CVE-2022-50954 | redhat_vex | WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusion | known not affected: 1 | 2026-05-26T02:12:50+00:00 | Vulnerability · Source |
| CVE-2025-34512 | redhat_vex | Ilevia EVE X1 Server 4.7.18.0.eden Reflected XSS | known not affected: 1 | 2026-05-26T02:12:50+00:00 | Vulnerability · Source |
| CVE-2021-47817 | redhat_vex | OpenEMR 5.0.2.1 - Remote Code Execution | known not affected: 1 | 2026-05-26T02:12:49+00:00 | Vulnerability · Source |
| CVE-2021-47836 | redhat_vex | Markdown Explorer 0.1.1 - Persistent Cross-Site Scripting | known not affected: 1 | 2026-05-26T02:12:49+00:00 | Vulnerability · Source |
| CVE-2026-45229 | redhat_vex | Quark Drive (quark-auto-save) < 0.8.5 Mass Assignment via POST /update | known not affected: 1 | 2026-05-26T02:12:48+00:00 | Vulnerability · Source |
| CVE-2026-41458 | redhat_vex | OwnTone Server < 29.1 Race Condition DoS via DAAP Login | known not affected: 1 | 2026-05-26T02:12:47+00:00 | Vulnerability · Source |
| CVE-2026-6257 | redhat_vex | Vvveb CMS < v1.0.8.2 Remote Code Execution via Media Management | known not affected: 1 | 2026-05-26T02:12:47+00:00 | Vulnerability · Source |
| CVE-2026-6249 | redhat_vex | Vvveb CMS 1.0.8.2 Remote Code Execution via Media Upload | known not affected: 1 | 2026-05-26T02:12:47+00:00 | Vulnerability · Source |
| CVE-2026-43568 | redhat_vex | OpenClaw 2026.4.5 through 2026.4.9 - Privilege Escalation via Memory Dreaming Configuration in /dreaming Endpoint | known not affected: 1 | 2026-05-26T02:12:45+00:00 | Vulnerability · Source |
| CVE-2026-41938 | redhat_vex | Vvveb < 1.0.8.2 RCE via Media Upload Handler | known not affected: 1 | 2026-05-26T02:12:44+00:00 | Vulnerability · Source |
| CVE-2026-41934 | redhat_vex | Vvveb < 1.0.8.2 Authenticated RCE via Code Editor | known not affected: 1 | 2026-05-26T02:12:43+00:00 | Vulnerability · Source |
| CVE-2026-41937 | redhat_vex | Vvveb < 1.0.8.3 Unrestricted File Upload RCE via Plugin Upload | known not affected: 1 | 2026-05-26T02:12:43+00:00 | Vulnerability · Source |
| CVE-2026-34960 | redhat_vex | barebox Out-of-Bounds Read in DHCP Option Parsing | known not affected: 1 | 2026-05-26T02:12:42+00:00 | Vulnerability · Source |
| CVE-2026-28557 | redhat_vex | wpForo Forum < 2.4.16 Privilege Escalation via Role Synchronization Handler | known not affected: 1 | 2026-05-26T02:12:42+00:00 | Vulnerability · Source |
| CVE-2026-40037 | redhat_vex | OpenClaw < 2026.3.31 - Unsafe Request Body Replay via fetchWithSsrFGuard Cross-Origin Redirects | known not affected: 1 | 2026-05-26T02:12:42+00:00 | Vulnerability · Source |
| CVE-2021-47965 | redhat_vex | WordPress Plugin WP Super Edit 2.5.4 Unrestricted File Upload | known not affected: 1 | 2026-05-26T02:12:42+00:00 | Vulnerability · Source |
| CVE-2026-27743 | redhat_vex | SPIP referer_spam < 1.3.0 Unauthenticated SQL Injection | known not affected: 1 | 2026-05-26T02:12:41+00:00 | Vulnerability · Source |
| CVE-2026-25863 | redhat_vex | Conditional Fields for Contact Form 7 < 2.7.3 DoS via Uncontrolled Resource Consumption | known not affected: 1 | 2026-05-26T02:12:41+00:00 | Vulnerability · Source |
| CVE-2026-23696 | redhat_vex | Windmill < 1.603.3 File Ownership Handling SQLi RCE | known not affected: 1 | 2026-05-26T02:12:41+00:00 | Vulnerability · Source |
| CVE-2026-28525 | redhat_vex | SWUpdate Integer Underflow in Multipart Upload Parser | known not affected: 1 | 2026-05-26T02:12:41+00:00 | Vulnerability · Source |
| CVE-2025-15620 | redhat_vex | HiOS Switch Platform Denial-of-Service via Web Interface | known not affected: 1 | 2026-05-26T02:12:40+00:00 | Vulnerability · Source |
| CVE-2026-22194 | redhat_vex | GestSup <= 3.2.60 CSRF Allows Privileged Actions | known not affected: 1 | 2026-05-26T02:12:40+00:00 | Vulnerability · Source |
| CVE-2026-0625 | redhat_vex | D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint | known not affected: 1 | 2026-05-26T02:12:40+00:00 | Vulnerability · Source |
| CVE-2024-14033 | redhat_vex | Hirschmann EagleSDV Denial of Service via TLS | known not affected: 1 | 2026-05-26T02:12:39+00:00 | Vulnerability · Source |
| CVE-2023-54348 | redhat_vex | ERPGo SaaS 3.9 CSV Injection via Vendor Creation | known not affected: 1 | 2026-05-26T02:12:39+00:00 | Vulnerability · Source |
| CVE-2021-47977 | redhat_vex | WordPress Anti-Malware Security Bruteforce Firewall <= 4.20.72 Directory Traversal | known not affected: 1 | 2026-05-26T02:12:39+00:00 | Vulnerability · Source |
| CVE-2023-54345 | redhat_vex | Frappe Framework ERPNext 13.4.0 Remote Code Execution | known not affected: 1 | 2026-05-26T02:12:39+00:00 | Vulnerability · Source |
| CVE-2023-53888 | redhat_vex | Zomplog 3.9 Remote Code Execution via Authenticated File Manipulation | known not affected: 1 | 2026-05-26T02:12:39+00:00 | Vulnerability · Source |
| CVE-2023-7343 | redhat_vex | Belden Industrial HiVision Arbitrary Code Execution via Malicious Project File | known not affected: 1 | 2026-05-26T02:12:39+00:00 | Vulnerability · Source |