VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299385 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-42552 | redhat_vex | Flight: Sensitive information disclosure via default error handler in flightphp/core | known not affected: 1 | 2026-05-15T19:57:07+00:00 | Vulnerability · Source |
| CVE-2026-23998 | redhat_vex | Fleet has a Windows MDM management endpoint authentication bypass | known not affected: 1 | 2026-05-15T19:57:07+00:00 | Vulnerability · Source |
| CVE-2025-69443 | redhat_vex | CVE-2025-69443 | known not affected: 1 | 2026-05-15T19:57:07+00:00 | Vulnerability · Source |
| CVE-2026-42031 | redhat_vex | CKAN: Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql` | known not affected: 1 | 2026-05-15T19:57:07+00:00 | Vulnerability · Source |
| CVE-2026-24712 | redhat_vex | CVE-2026-24712 | known not affected: 1 | 2026-05-15T19:57:07+00:00 | Vulnerability · Source |
| CVE-2026-22706 | redhat_vex | Strapi: Password Reset Does Not Revoke Existing Refresh Sessions | known not affected: 1 | 2026-05-15T19:57:07+00:00 | Vulnerability · Source |
| CVE-2026-26191 | redhat_vex | Fleet vulnerable to OS command injection in software packages | known not affected: 1 | 2026-05-15T19:57:07+00:00 | Vulnerability · Source |
| CVE-2026-42301 | redhat_vex | pyp2spec: python: pyp2spec: Arbitrary command execution via unescaped RPM macro directives | known not affected: 1 | 2026-05-15T16:04:57+00:00 | Vulnerability · Source |
| CVE-2026-42154 | microsoft_vex | Prometheus: remote read endpoint allows denial of service via crafted snappy payload | fixed: 1 known affected: 1 under investigation: 1 | 2026-05-15T14:41:52+00:00 | Vulnerability · Source |
| CVE-2026-33079 | microsoft_vex | Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles | fixed: 1 known affected: 1 | 2026-05-15T14:41:41+00:00 | Vulnerability · Source |
| CVE-2026-32934 | microsoft_vex | CoreDNS DNS-over-QUIC unbounded goroutine growth leads to denial of service | fixed: 1 known affected: 1 | 2026-05-15T14:40:12+00:00 | Vulnerability · Source |
| CVE-2026-32936 | microsoft_vex | CoreDNS DoH GET path missing size validation causes CPU and memory amplification | fixed: 1 known affected: 1 | 2026-05-15T14:40:06+00:00 | Vulnerability · Source |
| CVE-2026-33489 | microsoft_vex | CoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparison | fixed: 1 known affected: 1 | 2026-05-15T14:39:59+00:00 | Vulnerability · Source |
| CVE-2026-33190 | microsoft_vex | CoreDNS TSIG authentication bypass on encrypted DNS transports | fixed: 1 known affected: 1 | 2026-05-15T14:39:52+00:00 | Vulnerability · Source |
| CVE-2026-35469 | microsoft_vex | SpdyStream: DOS on CRI | fixed: 11 known affected: 11 under investigation: 12 | 2026-05-15T14:39:45+00:00 | Vulnerability · Source |
| CVE-2026-24711 | redhat_vex | CVE-2026-24711 | known not affected: 1 | 2026-05-15T13:57:03+00:00 | Vulnerability · Source |
| CVE-2026-34263 | redhat_vex | Missing authentication check in SAP Commerce cloud configuration | known not affected: 1 | 2026-05-15T13:57:03+00:00 | Vulnerability · Source |
| CVE-2026-41684 | redhat_vex | github.com/lxc/incus: Incus: Denial of Service via crafted backup archive | known not affected: 1 | 2026-05-15T12:57:50+00:00 | Vulnerability · Source |
| CVE-2026-41648 | redhat_vex | incus: Incus: Denial of Service via crafted image or backup tarball | known not affected: 1 | 2026-05-15T12:57:49+00:00 | Vulnerability · Source |
| CVE-2026-40243 | redhat_vex | github.com/lxc/incus: incus: Incus: Authentication bypass due to broken OVN TLS validation | known not affected: 1 | 2026-05-15T12:39:36+00:00 | Vulnerability · Source |
| CVE-2026-35254 | redhat_vex | Oracle OCI CLI: Oracle OCI CLI: Arbitrary file placement via unauthenticated network access | known not affected: 1 | 2026-05-15T12:34:52+00:00 | Vulnerability · Source |
| CVE-2026-6073 | redhat_vex | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | known not affected: 1 | 2026-05-15T07:57:04+00:00 | Vulnerability · Source |
| CVE-2026-6335 | redhat_vex | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | known not affected: 1 | 2026-05-15T07:57:02+00:00 | Vulnerability · Source |
| CVE-2026-7481 | redhat_vex | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | known not affected: 1 | 2026-05-15T07:57:01+00:00 | Vulnerability · Source |
| CVE-2026-7377 | redhat_vex | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | known not affected: 1 | 2026-05-15T07:57:01+00:00 | Vulnerability · Source |
| CVE-2026-30906 | redhat_vex | CVE-2026-30906 | known not affected: 1 | 2026-05-15T07:57:00+00:00 | Vulnerability · Source |
| CVE-2026-0240 | redhat_vex | Trust Protection Foundation: Sensitive Information Disclosure Vulnerability | known not affected: 1 | 2026-05-15T07:57:00+00:00 | Vulnerability · Source |
| CVE-2026-0242 | redhat_vex | Trust Protection Foundation: SQL Injection Vulnerability | known not affected: 1 | 2026-05-15T07:57:00+00:00 | Vulnerability · Source |
| CVE-2026-30905 | redhat_vex | CVE-2026-30905 | known not affected: 1 | 2026-05-15T07:57:00+00:00 | Vulnerability · Source |
| CVE-2022-23817 | redhat_vex | CVE-2022-23817 | known not affected: 1 | 2026-05-15T07:57:00+00:00 | Vulnerability · Source |
| CVE-2026-0236 | redhat_vex | Prisma Browser: Code Injection Enables Security Controls Bypass | known not affected: 1 | 2026-05-15T07:57:00+00:00 | Vulnerability · Source |
| CVE-2026-0249 | redhat_vex | GlobalProtect App: Certificate Validation Bypass Vulnerabilities | known not affected: 1 | 2026-05-15T07:57:00+00:00 | Vulnerability · Source |
| CVE-2013-1959 | suse_vex | SUSE CVE CVE-2013-1959 | No product status | 2026-05-15T02:21:10+00:00 | Vulnerability · Source |
| CVE-2013-4246 | suse_vex | SUSE CVE CVE-2013-4246 | recommended: 314 | 2026-05-15T02:20:59+00:00 | Vulnerability · Source |
| CVE-2014-8183 | suse_vex | SUSE CVE CVE-2014-8183 | known affected: 1 known not affected: 90 | 2026-05-15T02:20:35+00:00 | Vulnerability · Source |
| CVE-2015-5740 | suse_vex | SUSE CVE CVE-2015-5740 | No product status | 2026-05-15T02:19:58+00:00 | Vulnerability · Source |
| CVE-2016-5211 | suse_vex | SUSE CVE CVE-2016-5211 | recommended: 10 | 2026-05-15T02:19:23+00:00 | Vulnerability · Source |
| CVE-2016-6251 | suse_vex | SUSE CVE CVE-2016-6251 | known affected: 9 known not affected: 13 | 2026-05-15T02:19:13+00:00 | Vulnerability · Source |
| CVE-2016-9244 | suse_vex | SUSE CVE CVE-2016-9244 | No product status | 2026-05-15T02:19:03+00:00 | Vulnerability · Source |
| CVE-2017-2644 | suse_vex | SUSE CVE CVE-2017-2644 | No product status | 2026-05-15T02:18:42+00:00 | Vulnerability · Source |
| CVE-2017-5186 | suse_vex | SUSE CVE CVE-2017-5186 | No product status | 2026-05-15T02:18:36+00:00 | Vulnerability · Source |
| CVE-2017-5195 | suse_vex | SUSE CVE CVE-2017-5195 | recommended: 4 | 2026-05-15T02:18:34+00:00 | Vulnerability · Source |
| CVE-2017-9454 | suse_vex | SUSE CVE CVE-2017-9454 | No product status | 2026-05-15T02:18:05+00:00 | Vulnerability · Source |
| CVE-2017-9615 | suse_vex | SUSE CVE CVE-2017-9615 | No product status | 2026-05-15T02:18:03+00:00 | Vulnerability · Source |
| CVE-2017-9772 | suse_vex | SUSE CVE CVE-2017-9772 | known not affected: 74 recommended: 290 | 2026-05-15T02:18:00+00:00 | Vulnerability · Source |
| CVE-2017-9779 | suse_vex | SUSE CVE CVE-2017-9779 | known not affected: 74 | 2026-05-15T02:17:59+00:00 | Vulnerability · Source |
| CVE-2017-11424 | suse_vex | SUSE CVE CVE-2017-11424 | No product status | 2026-05-15T02:17:52+00:00 | Vulnerability · Source |
| CVE-2017-15722 | suse_vex | SUSE CVE CVE-2017-15722 | recommended: 4 | 2026-05-15T02:17:30+00:00 | Vulnerability · Source |
| CVE-2017-15753 | suse_vex | SUSE CVE CVE-2017-15753 | No product status | 2026-05-15T02:17:29+00:00 | Vulnerability · Source |
| CVE-2017-15758 | suse_vex | SUSE CVE CVE-2017-15758 | No product status | 2026-05-15T02:17:28+00:00 | Vulnerability · Source |