VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299385 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-44220 | redhat_vex | ciguard: discover_pipeline_files follows symlinks out of scan root | known not affected: 1 | 2026-05-13T20:23:41+00:00 | Vulnerability · Source |
| CVE-2026-42442 | redhat_vex | NanaZip: Null-pointer dereference in NanaZip UFS parser when root inode is a symlink | known not affected: 1 | 2026-05-13T20:23:41+00:00 | Vulnerability · Source |
| CVE-2026-42355 | redhat_vex | NanaZip: Uncontrolled recursion in NanaZip Electron ASAR parser causes stack exhaustion | known not affected: 1 | 2026-05-13T20:23:40+00:00 | Vulnerability · Source |
| CVE-2026-42188 | redhat_vex | Geyser: Server-Side Request Forgery (SSRF) via Player Head Texture URL | known not affected: 1 | 2026-05-13T20:23:39+00:00 | Vulnerability · Source |
| CVE-2026-42195 | redhat_vex | Unvalidated gitlab URL parameter redirects OAuth authorize step to attacker-controlled host | known not affected: 1 | 2026-05-13T20:23:39+00:00 | Vulnerability · Source |
| CVE-2026-28943 | redhat_vex | CVE-2026-28943 | known not affected: 1 | 2026-05-13T20:23:39+00:00 | Vulnerability · Source |
| CVE-2026-28996 | redhat_vex | CVE-2026-28996 | known not affected: 1 | 2026-05-13T20:23:39+00:00 | Vulnerability · Source |
| CVE-2026-28915 | redhat_vex | CVE-2026-28915 | known not affected: 1 | 2026-05-13T20:23:37+00:00 | Vulnerability · Source |
| CVE-2026-28914 | redhat_vex | CVE-2026-28914 | known not affected: 1 | 2026-05-13T20:23:35+00:00 | Vulnerability · Source |
| CVE-2026-42891 | redhat_vex | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability | known not affected: 1 | 2026-05-13T20:23:34+00:00 | Vulnerability · Source |
| CVE-2026-44874 | redhat_vex | Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface | known not affected: 1 | 2026-05-13T20:23:33+00:00 | Vulnerability · Source |
| CVE-2026-8225 | redhat_vex | Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_handle_delete denial of service | known not affected: 1 | 2026-05-13T20:23:33+00:00 | Vulnerability · Source |
| CVE-2026-44873 | redhat_vex | Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System | known not affected: 1 | 2026-05-13T20:23:33+00:00 | Vulnerability · Source |
| CVE-2026-44215 | redhat_vex | NanaZip: Heap out-of-bounds write in NanaZip UFS directory parser | known not affected: 1 | 2026-05-13T20:23:32+00:00 | Vulnerability · Source |
| CVE-2026-43901 | redhat_vex | Wireshark MCP: Arbitrary file write via export_objects when WIRESHARK_MCP_ALLOWED_DIRS is not configured | known not affected: 1 | 2026-05-13T20:23:31+00:00 | Vulnerability · Source |
| CVE-2026-42871 | redhat_vex | WeGIA: Error Handling familiar_docfamiliar | known not affected: 1 | 2026-05-13T20:23:31+00:00 | Vulnerability · Source |
| CVE-2026-43876 | redhat_vex | WWBN AVideo: HTML Injection in notifySubscribers.json.php Enables Platform-Branded Phishing Emails to Channel Subscribers | known not affected: 1 | 2026-05-13T20:23:31+00:00 | Vulnerability · Source |
| CVE-2026-43882 | redhat_vex | WWBN AVideo: Unauthenticated CRLF/ICS Injection in Scheduler downloadICS.php Allows Calendar Event Spoofing | known not affected: 1 | 2026-05-13T20:23:31+00:00 | Vulnerability · Source |
| CVE-2026-42857 | redhat_vex | Open edX Platform: Stored CSS Injection in Email Notifications via Incomplete HTML Sanitization | known not affected: 1 | 2026-05-13T20:23:30+00:00 | Vulnerability · Source |
| CVE-2026-42830 | redhat_vex | Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-13T20:23:29+00:00 | Vulnerability · Source |
| CVE-2026-42206 | redhat_vex | Roadiz OpenID Connect nonce generated but never validated — ID token replay attack | known not affected: 1 | 2026-05-13T20:23:29+00:00 | Vulnerability · Source |
| CVE-2026-42446 | redhat_vex | NanaZip: Stack out-of-bounds read in NanaZip ZealFS bitmap parser | known not affected: 1 | 2026-05-13T20:23:29+00:00 | Vulnerability · Source |
| CVE-2026-42838 | redhat_vex | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-13T20:23:29+00:00 | Vulnerability · Source |
| CVE-2026-42180 | redhat_vex | Lemmy: SSRF in /api/v3/post via Webmention dispatch | known not affected: 1 | 2026-05-13T20:23:29+00:00 | Vulnerability · Source |
| CVE-2026-42177 | redhat_vex | linux-entra-sso: PRT SSO cookie can leak to attacker-controlled hosts when broad host permissions are granted | known not affected: 1 | 2026-05-13T20:23:28+00:00 | Vulnerability · Source |
| CVE-2026-42175 | redhat_vex | requests-hardened: Server-Side Request Forgery (SSRF) in requests-hardened RFC 6598 | known not affected: 1 | 2026-05-13T20:23:26+00:00 | Vulnerability · Source |
| CVE-2026-41610 | redhat_vex | Visual Studio Code Security Feature Bypass Vulnerability | known not affected: 1 | 2026-05-13T20:23:26+00:00 | Vulnerability · Source |
| CVE-2026-41614 | redhat_vex | M365 Copilot for Desktop Spoofing Vulnerability | known not affected: 1 | 2026-05-13T20:23:24+00:00 | Vulnerability · Source |
| CVE-2026-41612 | redhat_vex | Visual Studio Code Information Disclosure Vulnerability | known not affected: 1 | 2026-05-13T20:23:24+00:00 | Vulnerability · Source |
| CVE-2026-41100 | redhat_vex | Microsoft 365 Copilot for Android Spoofing Vulnerability | known not affected: 1 | 2026-05-13T20:23:23+00:00 | Vulnerability · Source |
| CVE-2026-41097 | redhat_vex | Secure Boot Security Feature Bypass Vulnerability | known not affected: 1 | 2026-05-13T20:23:23+00:00 | Vulnerability · Source |
| CVE-2026-41495 | redhat_vex | n8n-MCP Logs Sensitive Request Data on Unauthorized /mcp Requests | known not affected: 1 | 2026-05-13T20:23:23+00:00 | Vulnerability · Source |
| CVE-2026-40638 | redhat_vex | CVE-2026-40638 | known not affected: 1 | 2026-05-13T20:23:22+00:00 | Vulnerability · Source |
| CVE-2026-40380 | redhat_vex | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | known not affected: 1 | 2026-05-13T20:23:21+00:00 | Vulnerability · Source |
| CVE-2026-40416 | redhat_vex | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability | known not affected: 1 | 2026-05-13T20:23:21+00:00 | Vulnerability · Source |
| CVE-2026-40374 | redhat_vex | Microsoft Power Automate Desktop Information Disclosure Vulnerability | known not affected: 1 | 2026-05-13T20:23:21+00:00 | Vulnerability · Source |
| CVE-2026-34962 | redhat_vex | barebox ext4 Directory Parsing Infinite Loop Denial of Service | known not affected: 1 | 2026-05-13T20:23:19+00:00 | Vulnerability · Source |
| CVE-2026-35422 | redhat_vex | Windows TCP/IP Driver Security Feature Bypass Vulnerability | known not affected: 1 | 2026-05-13T20:23:19+00:00 | Vulnerability · Source |
| CVE-2026-35440 | redhat_vex | Microsoft Word Information Disclosure Vulnerability | known not affected: 1 | 2026-05-13T20:23:19+00:00 | Vulnerability · Source |
| CVE-2026-35423 | redhat_vex | Windows 11 Telnet Client Information Disclosure Vulnerability | known not affected: 1 | 2026-05-13T20:23:19+00:00 | Vulnerability · Source |
| CVE-2026-35419 | redhat_vex | Windows DWM Core Library Information Disclosure Vulnerability | known not affected: 1 | 2026-05-13T20:23:19+00:00 | Vulnerability · Source |
| CVE-2026-34655 | redhat_vex | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | known not affected: 1 | 2026-05-13T20:23:17+00:00 | Vulnerability · Source |
| CVE-2026-34350 | redhat_vex | Windows Storport Miniport Driver Denial of Service Vulnerability | known not affected: 1 | 2026-05-13T20:23:16+00:00 | Vulnerability · Source |
| CVE-2026-34339 | redhat_vex | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability | known not affected: 1 | 2026-05-13T20:23:15+00:00 | Vulnerability · Source |
| CVE-2026-32209 | redhat_vex | Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability | known not affected: 1 | 2026-05-13T20:23:14+00:00 | Vulnerability · Source |
| CVE-2026-2300 | redhat_vex | BJ Lazy Load <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom HTML Block | known not affected: 1 | 2026-05-13T20:23:13+00:00 | Vulnerability · Source |
| CVE-2026-32185 | redhat_vex | Microsoft Teams Spoofing Vulnerability | known not affected: 1 | 2026-05-13T20:23:13+00:00 | Vulnerability · Source |
| CVE-2026-8430 | redhat_vex | SPIP < 4.4.14 Remote Code Execution via nginx | known not affected: 1 | 2026-05-13T20:23:12+00:00 | Vulnerability · Source |
| CVE-2026-44866 | redhat_vex | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 | known not affected: 1 | 2026-05-13T20:23:11+00:00 | Vulnerability · Source |
| CVE-2026-44870 | redhat_vex | Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems | known not affected: 1 | 2026-05-13T20:23:11+00:00 | Vulnerability · Source |