VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299359 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-3515 | redhat_vex | Argument Injection in prefecthq/prefect | known not affected: 1 | 2026-05-26T20:14:00+00:00 | Vulnerability · Source |
| CVE-2026-42901 | redhat_vex | Microsoft Entra ID Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-26T20:14:00+00:00 | Vulnerability · Source |
| CVE-2026-44159 | redhat_vex | Tyler Identity Local (TID-L) default administrative credentials | known not affected: 1 | 2026-05-26T20:14:00+00:00 | Vulnerability · Source |
| CVE-2026-41147 | redhat_vex | NukeViet CMS: Stored Cross-Site Scripting (XSS) via insufficient server-side input sanitization in Request class | known not affected: 1 | 2026-05-26T20:13:59+00:00 | Vulnerability · Source |
| CVE-2026-40597 | redhat_vex | MantisBT has a Content Security Policy bypass via attachments | known not affected: 1 | 2026-05-26T20:13:58+00:00 | Vulnerability · Source |
| CVE-2026-40607 | redhat_vex | MantisBT is Vulnerable to Stored XSS Through its Saved-Filter Owner Column | known not affected: 1 | 2026-05-26T20:13:57+00:00 | Vulnerability · Source |
| CVE-2026-35430 | redhat_vex | Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-26T20:13:56+00:00 | Vulnerability · Source |
| CVE-2026-40166 | redhat_vex | authentik: Non-admin user can retrieve confidential OAuth client_secret via /api/v3/oauth2/access_tokens/ | known not affected: 1 | 2026-05-26T20:13:56+00:00 | Vulnerability · Source |
| CVE-2026-3294 | redhat_vex | Authentication Logic Vulnerability on Multiple TP-Link Range Extenders | known not affected: 1 | 2026-05-26T20:13:56+00:00 | Vulnerability · Source |
| CVE-2026-25193 | redhat_vex | CVE-2026-25193 | known not affected: 1 | 2026-05-26T20:13:55+00:00 | Vulnerability · Source |
| CVE-2026-33137 | redhat_vex | XWiki Platform has an Unauthenticated XAR Import via REST /wikis/{wikiName} | known not affected: 1 | 2026-05-26T20:13:55+00:00 | Vulnerability · Source |
| CVE-2025-1782 | redhat_vex | Unsanitized input in language form field | known not affected: 1 | 2026-05-26T20:13:55+00:00 | Vulnerability · Source |
| CVE-2026-1773 | redhat_vex | CVE-2026-1773 | known not affected: 1 | 2026-05-26T20:13:55+00:00 | Vulnerability · Source |
| CVE-2026-9413 | redhat_vex | SourceCodester Indian Invoicing System category.php cross site scripting | known not affected: 1 | 2026-05-26T14:12:58+00:00 | Vulnerability · Source |
| CVE-2026-9449 | redhat_vex | code-projects Employee Management System changepassemp.php sql injection | known not affected: 1 | 2026-05-26T14:12:55+00:00 | Vulnerability · Source |
| CVE-2026-9437 | redhat_vex | DTStack Taier REST API Runtime.exec os command injection | known not affected: 1 | 2026-05-26T14:12:55+00:00 | Vulnerability · Source |
| CVE-2026-9419 | redhat_vex | code-projects Employee Management System empproject.php cross site scripting | known not affected: 1 | 2026-05-26T14:12:54+00:00 | Vulnerability · Source |
| CVE-2026-9395 | redhat_vex | Besen BS20 EV Charging Station BLE/UDP insufficiently protected credentials | known not affected: 1 | 2026-05-26T14:12:53+00:00 | Vulnerability · Source |
| CVE-2026-9347 | redhat_vex | Edimax EW-7438RPn webs formWizSurvey os command injection | known not affected: 1 | 2026-05-26T14:12:53+00:00 | Vulnerability · Source |
| CVE-2026-9361 | redhat_vex | Edimax EW-7438RPn POST Request formAccep formAccept command injection | known not affected: 1 | 2026-05-26T14:12:53+00:00 | Vulnerability · Source |
| CVE-2026-9300 | redhat_vex | omec-project amf NGSetupRequest memory corruption | known not affected: 1 | 2026-05-26T14:12:52+00:00 | Vulnerability · Source |
| CVE-2026-9306 | redhat_vex | QuantumNous new-api Midjourney Image Relay Endpoint relay-router.go GetByOnlyMJId authorization | known not affected: 1 | 2026-05-26T14:12:52+00:00 | Vulnerability · Source |
| CVE-2026-41362 | redhat_vex | OpenClaw 2026.2.19 through 2026.3.30 - Webhook Replay Dedupe Cache Event Suppression via Shared Authentication | known not affected: 1 | 2026-05-26T14:12:52+00:00 | Vulnerability · Source |
| CVE-2026-32067 | redhat_vex | OpenClaw < 2026.2.26 - Cross-Account Authorization Bypass in DM Pairing Store | known not affected: 1 | 2026-05-26T14:12:51+00:00 | Vulnerability · Source |
| CVE-2026-9367 | redhat_vex | NousResearch hermes-agent terminal_tool approval.py detect_dangerous_command os command injection | known not affected: 1 | 2026-05-26T14:12:51+00:00 | Vulnerability · Source |
| CVE-2026-9353 | redhat_vex | NousResearch hermes-agent Skills Guard Multi-Word Prompt skills_guard.py injection | known not affected: 1 | 2026-05-26T14:12:51+00:00 | Vulnerability · Source |
| CVE-2026-9373 | redhat_vex | JeecgBoot OpenAPI Endpoint call improper authentication | known not affected: 1 | 2026-05-26T14:12:51+00:00 | Vulnerability · Source |
| CVE-2026-42827 | redhat_vex | M365 Copilot Information Disclosure Vulnerability | known not affected: 1 | 2026-05-26T14:12:50+00:00 | Vulnerability · Source |
| CVE-2026-42429 | redhat_vex | OpenClaw < 2026.4.8 - Privilege Escalation via Gateway Plugin HTTP Authentication | known not affected: 1 | 2026-05-26T14:12:48+00:00 | Vulnerability · Source |
| CVE-2026-41455 | redhat_vex | WeKan < 8.35 SSRF via Webhook URL | known not affected: 1 | 2026-05-26T14:12:47+00:00 | Vulnerability · Source |
| CVE-2026-41300 | redhat_vex | OpenClaw < 2026.3.31 - Preservation of Attacker-Discovered Endpoints in Remote Onboarding | known not affected: 1 | 2026-05-26T14:12:47+00:00 | Vulnerability · Source |
| CVE-2026-32984 | redhat_vex | Heap buffer overflow in wazuh-authd | known not affected: 1 | 2026-05-26T14:12:46+00:00 | Vulnerability · Source |
| CVE-2026-40864 | redhat_vex | JupyterHub: Cross-origin form POSTs bypass XSRF | known not affected: 1 | 2026-05-26T14:12:46+00:00 | Vulnerability · Source |
| CVE-2026-32896 | redhat_vex | OpenClaw < 2026.2.21 - Unauthenticated Webhook Access via Passwordless Fallback in BlueBubbles Plugin | known not affected: 1 | 2026-05-26T14:12:45+00:00 | Vulnerability · Source |
| CVE-2026-32022 | redhat_vex | OpenClaw < 2026.2.21 - Arbitrary File Read via grep -e Flag Policy Bypass | known not affected: 1 | 2026-05-26T14:12:45+00:00 | Vulnerability · Source |
| CVE-2026-28395 | redhat_vex | OpenClaw 2026.1.14-1 < 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrl | known not affected: 1 | 2026-05-26T14:12:44+00:00 | Vulnerability · Source |
| CVE-2026-22677 | redhat_vex | Hermes WebUI < 0.51.44 Path Traversal via Session Import Endpoint | known not affected: 1 | 2026-05-26T14:12:44+00:00 | Vulnerability · Source |
| CVE-2026-23620 | redhat_vex | GFI MailEssentials AI < 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File Enumeration | known not affected: 1 | 2026-05-26T14:12:44+00:00 | Vulnerability · Source |
| CVE-2022-50945 | redhat_vex | WordPress 3dady Real-Time Web Stats 1.0 Stored XSS | known not affected: 1 | 2026-05-26T14:12:43+00:00 | Vulnerability · Source |
| CVE-2026-22217 | redhat_vex | OpenClaw 2026.2.22 < 2026.2.23 - Arbitrary Binary Execution via $SHELL Environment Variable Trusted Prefix Fallback | known not affected: 1 | 2026-05-26T14:12:43+00:00 | Vulnerability · Source |
| CVE-2026-22190 | redhat_vex | Panda3D <= 1.10.16 egg-mkfont Format String Information Disclosure | known not affected: 1 | 2026-05-26T14:12:43+00:00 | Vulnerability · Source |
| CVE-2026-22675 | redhat_vex | OCS Inventory NG Server Stored XSS via User-Agent | known not affected: 1 | 2026-05-26T14:12:43+00:00 | Vulnerability · Source |
| CVE-2026-22189 | redhat_vex | Panda3D <= 1.10.16 egg-mkfont Stack Buffer Overflow | known not affected: 1 | 2026-05-26T14:12:42+00:00 | Vulnerability · Source |
| CVE-2026-22188 | redhat_vex | Panda3D <= 1.10.16 Deploy-Stub Stack Exhaustion via Unbounded alloca() | known not affected: 1 | 2026-05-26T14:12:42+00:00 | Vulnerability · Source |
| CVE-2021-47968 | redhat_vex | Podcast Generator 3.1 Persistent Cross-Site Scripting via long_description | known not affected: 1 | 2026-05-26T14:12:41+00:00 | Vulnerability · Source |
| CVE-2022-50960 | redhat_vex | WordPress International Sms Contact Form 7 Integration 1.2 XSS | known not affected: 1 | 2026-05-26T14:12:41+00:00 | Vulnerability · Source |
| CVE-2021-47975 | redhat_vex | WordPress Plugin WP Learn Manager 1.1.2 Stored XSS | known not affected: 1 | 2026-05-26T14:12:41+00:00 | Vulnerability · Source |
| CVE-2025-66572 | redhat_vex | Loaded Commerce 6.6 Client-Side Template Injection (CSTI) | known not affected: 1 | 2026-05-26T14:12:41+00:00 | Vulnerability · Source |
| CVE-2021-47931 | redhat_vex | Exponent CMS 2.6 Multiple Vulnerabilities Stored XSS Authentication | known not affected: 1 | 2026-05-26T14:12:39+00:00 | Vulnerability · Source |
| CVE-2026-9461 | redhat_vex | Edimax EW-7438RPn formRadius stack-based overflow | known not affected: 1 | 2026-05-26T14:12:39+00:00 | Vulnerability · Source |