VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299385 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-8429 | redhat_vex | SPIP < 4.4.14 Remote Code Execution via Private Space | known not affected: 1 | 2026-05-13T20:23:11+00:00 | Vulnerability · Source |
| CVE-2026-44869 | redhat_vex | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 | known not affected: 1 | 2026-05-13T20:23:11+00:00 | Vulnerability · Source |
| CVE-2026-44872 | redhat_vex | Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface | known not affected: 1 | 2026-05-13T20:23:11+00:00 | Vulnerability · Source |
| CVE-2026-44864 | redhat_vex | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems | known not affected: 1 | 2026-05-13T20:23:09+00:00 | Vulnerability · Source |
| CVE-2026-44865 | redhat_vex | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 | known not affected: 1 | 2026-05-13T20:23:09+00:00 | Vulnerability · Source |
| CVE-2026-44861 | redhat_vex | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems | known not affected: 1 | 2026-05-13T20:23:09+00:00 | Vulnerability · Source |
| CVE-2026-44860 | redhat_vex | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems | known not affected: 1 | 2026-05-13T20:23:09+00:00 | Vulnerability · Source |
| CVE-2026-44863 | redhat_vex | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems | known not affected: 1 | 2026-05-13T20:23:09+00:00 | Vulnerability · Source |
| CVE-2026-44862 | redhat_vex | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems | known not affected: 1 | 2026-05-13T20:23:09+00:00 | Vulnerability · Source |
| CVE-2026-44856 | redhat_vex | Authenticated Stack-Based Buffer Overflow in PAPI Services | known not affected: 1 | 2026-05-13T20:23:08+00:00 | Vulnerability · Source |
| CVE-2026-44859 | redhat_vex | Authenticated Stack-Based Buffer Overflow in PAPI Services | known not affected: 1 | 2026-05-13T20:23:06+00:00 | Vulnerability · Source |
| CVE-2026-44858 | redhat_vex | Authenticated Stack-Based Buffer Overflow in PAPI Services | known not affected: 1 | 2026-05-13T20:23:05+00:00 | Vulnerability · Source |
| CVE-2026-44857 | redhat_vex | Authenticated Stack-Based Buffer Overflow in PAPI Services | known not affected: 1 | 2026-05-13T20:23:04+00:00 | Vulnerability · Source |
| CVE-2026-44854 | redhat_vex | Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface | known not affected: 1 | 2026-05-13T20:23:03+00:00 | Vulnerability · Source |
| CVE-2026-44853 | redhat_vex | Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface | known not affected: 1 | 2026-05-13T20:23:03+00:00 | Vulnerability · Source |
| CVE-2026-44855 | redhat_vex | Authenticated Stack-Based Buffer Overflow in PAPI Services | known not affected: 1 | 2026-05-13T20:23:03+00:00 | Vulnerability · Source |
| CVE-2026-44852 | redhat_vex | Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface | known not affected: 1 | 2026-05-13T20:23:02+00:00 | Vulnerability · Source |
| CVE-2026-44221 | redhat_vex | ArcadeDB: Cross-database authorization bypass and unsecured newly-created databases | known not affected: 1 | 2026-05-13T20:23:01+00:00 | Vulnerability · Source |
| CVE-2026-44183 | redhat_vex | Cleanuparr: X-Forwarded-For leftmost parsing allows remote unauthenticated admin takeover when reverse-proxy mode is enabled | known not affected: 1 | 2026-05-13T20:23:01+00:00 | Vulnerability · Source |
| CVE-2026-44012 | redhat_vex | Craft CMS: Missing Volume Permission Check in AssetsController::actionShowInFolder Allows Information Disclosure | known not affected: 1 | 2026-05-13T20:23:01+00:00 | Vulnerability · Source |
| CVE-2026-44010 | redhat_vex | Craft CMS: Missing Authorization in GraphQL Address Resolver Allows Cross-Scope PII Disclosure | known not affected: 1 | 2026-05-13T20:23:01+00:00 | Vulnerability · Source |
| CVE-2026-43992 | redhat_vex | JunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter | known not affected: 1 | 2026-05-13T20:23:00+00:00 | Vulnerability · Source |
| CVE-2026-43929 | redhat_vex | ssrfcheck: Server-Side Request Forgery (SSRF) and Incomplete List of Disallowed Inputs | known not affected: 1 | 2026-05-13T20:23:00+00:00 | Vulnerability · Source |
| CVE-2026-43993 | redhat_vex | JunoClaw: SSRF in WAVS computeDataVerify allows cloud-metadata and internal-service access | known not affected: 1 | 2026-05-13T20:23:00+00:00 | Vulnerability · Source |
| CVE-2026-43939 | redhat_vex | YAF.NET: Stored XSS in Forum Thread Posts/Replies Allowing Arbitrary JavaScript Execution for All Thread Viewers | known not affected: 1 | 2026-05-13T20:23:00+00:00 | Vulnerability · Source |
| CVE-2026-43983 | redhat_vex | Pocket ID: OIDC refresh token flow bypasses authorization revocation, account disabling, and group restrictions | known not affected: 1 | 2026-05-13T20:23:00+00:00 | Vulnerability · Source |
| CVE-2026-43891 | redhat_vex | changedetection.io: Arbitrary Local File Read via crafted backup restore | known not affected: 1 | 2026-05-13T20:22:59+00:00 | Vulnerability · Source |
| CVE-2026-43890 | redhat_vex | Outline: IDOR in subscriptions.create allows cross-tenant subscription on private documents (sibling of GHSA-23jj-rp48-w7q7) | known not affected: 1 | 2026-05-13T20:22:58+00:00 | Vulnerability · Source |
| CVE-2026-43640 | redhat_vex | Bitwarden Server < 2026.4.1 Authentication Bypass via SCIM API Key | known not affected: 1 | 2026-05-13T20:22:57+00:00 | Vulnerability · Source |
| CVE-2026-42898 | redhat_vex | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | known not affected: 1 | 2026-05-13T20:22:56+00:00 | Vulnerability · Source |
| CVE-2026-42896 | redhat_vex | Windows DWM Core Library Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-13T20:22:55+00:00 | Vulnerability · Source |
| CVE-2026-42893 | redhat_vex | Microsoft Outlook for iOS Tampering Vulnerability | known not affected: 1 | 2026-05-13T20:22:55+00:00 | Vulnerability · Source |
| CVE-2026-42882 | redhat_vex | oxyno-zeta/s3-proxy: Security Issues in Resource Path Matching | known not affected: 1 | 2026-05-13T20:22:54+00:00 | Vulnerability · Source |
| CVE-2026-41693 | redhat_vex | i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite | known not affected: 1 | 2026-05-13T20:22:54+00:00 | Vulnerability · Source |
| CVE-2026-42831 | redhat_vex | Microsoft Office Remote Code Execution Vulnerability | known not affected: 1 | 2026-05-13T20:22:53+00:00 | Vulnerability · Source |
| CVE-2026-42832 | redhat_vex | Microsoft Office Spoofing Vulnerability | known not affected: 1 | 2026-05-13T20:22:53+00:00 | Vulnerability · Source |
| CVE-2026-42575 | redhat_vex | apko doesn't verify downloaded apk packages against APKINDEX checksum (package substitution possible) | known not affected: 1 | 2026-05-13T20:22:52+00:00 | Vulnerability · Source |
| CVE-2026-42823 | redhat_vex | Azure Logic Apps Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-13T20:22:52+00:00 | Vulnerability · Source |
| CVE-2026-42825 | redhat_vex | Windows Telephony Service Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-13T20:22:52+00:00 | Vulnerability · Source |
| CVE-2026-42141 | redhat_vex | Xibo: Authenticated Server-Side Request Forgery (SSRF) in Library Upload via URL functionality | known not affected: 1 | 2026-05-13T20:22:51+00:00 | Vulnerability · Source |
| CVE-2026-42461 | redhat_vex | Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets) | known not affected: 1 | 2026-05-13T20:22:51+00:00 | Vulnerability · Source |
| CVE-2026-42556 | redhat_vex | Postiz stored XSS in public preview page | known not affected: 1 | 2026-05-13T20:22:51+00:00 | Vulnerability · Source |
| CVE-2026-42454 | redhat_vex | Termix: OS Command Injection in Docker Container Management Endpoints | known not affected: 1 | 2026-05-13T20:22:51+00:00 | Vulnerability · Source |
| CVE-2026-41613 | redhat_vex | Visual Studio Code Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-13T20:22:50+00:00 | Vulnerability · Source |
| CVE-2026-42345 | redhat_vex | FastGPT: Cloud metadata endpoint SSRF protection bypass via port specification, IPv6 mapping, hex/decimal IP encoding, and trailing dot | known not affected: 1 | 2026-05-13T20:22:50+00:00 | Vulnerability · Source |
| CVE-2026-42048 | redhat_vex | Langflow: Path Traversal in Langflow Knowledge Bases API | known not affected: 1 | 2026-05-13T20:22:49+00:00 | Vulnerability · Source |
| CVE-2026-42300 | redhat_vex | DevGuard: Unauthenticated identity assertion via `X-Admin-Token` header | known not affected: 1 | 2026-05-13T20:22:49+00:00 | Vulnerability · Source |
| CVE-2026-41611 | redhat_vex | Visual Studio Code Remote Code Execution Vulnerability | known not affected: 1 | 2026-05-13T20:22:47+00:00 | Vulnerability · Source |
| CVE-2026-41576 | redhat_vex | Ajax30/BraveCMS-2.0: Stored HTML Injection in Contact Email via nl2br() and Unescaped Blade Template | known not affected: 1 | 2026-05-13T20:22:46+00:00 | Vulnerability · Source |
| CVE-2026-41520 | redhat_vex | Cillium exposes sensitive information included in the cilium-bugtool debug archive | known not affected: 1 | 2026-05-13T20:22:45+00:00 | Vulnerability · Source |