VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299422 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-44854 | redhat_vex | Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface | known not affected: 1 | 2026-05-13T20:23:03+00:00 | Vulnerability · Source |
| CVE-2026-44853 | redhat_vex | Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface | known not affected: 1 | 2026-05-13T20:23:03+00:00 | Vulnerability · Source |
| CVE-2026-44855 | redhat_vex | Authenticated Stack-Based Buffer Overflow in PAPI Services | known not affected: 1 | 2026-05-13T20:23:03+00:00 | Vulnerability · Source |
| CVE-2026-44852 | redhat_vex | Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface | known not affected: 1 | 2026-05-13T20:23:02+00:00 | Vulnerability · Source |
| CVE-2026-44221 | redhat_vex | ArcadeDB: Cross-database authorization bypass and unsecured newly-created databases | known not affected: 1 | 2026-05-13T20:23:01+00:00 | Vulnerability · Source |
| CVE-2026-44183 | redhat_vex | Cleanuparr: X-Forwarded-For leftmost parsing allows remote unauthenticated admin takeover when reverse-proxy mode is enabled | known not affected: 1 | 2026-05-13T20:23:01+00:00 | Vulnerability · Source |
| CVE-2026-44012 | redhat_vex | Craft CMS: Missing Volume Permission Check in AssetsController::actionShowInFolder Allows Information Disclosure | known not affected: 1 | 2026-05-13T20:23:01+00:00 | Vulnerability · Source |
| CVE-2026-44010 | redhat_vex | Craft CMS: Missing Authorization in GraphQL Address Resolver Allows Cross-Scope PII Disclosure | known not affected: 1 | 2026-05-13T20:23:01+00:00 | Vulnerability · Source |
| CVE-2026-43992 | redhat_vex | JunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter | known not affected: 1 | 2026-05-13T20:23:00+00:00 | Vulnerability · Source |
| CVE-2026-43929 | redhat_vex | ssrfcheck: Server-Side Request Forgery (SSRF) and Incomplete List of Disallowed Inputs | known not affected: 1 | 2026-05-13T20:23:00+00:00 | Vulnerability · Source |
| CVE-2026-43993 | redhat_vex | JunoClaw: SSRF in WAVS computeDataVerify allows cloud-metadata and internal-service access | known not affected: 1 | 2026-05-13T20:23:00+00:00 | Vulnerability · Source |
| CVE-2026-43939 | redhat_vex | YAF.NET: Stored XSS in Forum Thread Posts/Replies Allowing Arbitrary JavaScript Execution for All Thread Viewers | known not affected: 1 | 2026-05-13T20:23:00+00:00 | Vulnerability · Source |
| CVE-2026-43983 | redhat_vex | Pocket ID: OIDC refresh token flow bypasses authorization revocation, account disabling, and group restrictions | known not affected: 1 | 2026-05-13T20:23:00+00:00 | Vulnerability · Source |
| CVE-2026-43891 | redhat_vex | changedetection.io: Arbitrary Local File Read via crafted backup restore | known not affected: 1 | 2026-05-13T20:22:59+00:00 | Vulnerability · Source |
| CVE-2026-43890 | redhat_vex | Outline: IDOR in subscriptions.create allows cross-tenant subscription on private documents (sibling of GHSA-23jj-rp48-w7q7) | known not affected: 1 | 2026-05-13T20:22:58+00:00 | Vulnerability · Source |
| CVE-2026-43640 | redhat_vex | Bitwarden Server < 2026.4.1 Authentication Bypass via SCIM API Key | known not affected: 1 | 2026-05-13T20:22:57+00:00 | Vulnerability · Source |
| CVE-2026-42898 | redhat_vex | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | known not affected: 1 | 2026-05-13T20:22:56+00:00 | Vulnerability · Source |
| CVE-2026-42896 | redhat_vex | Windows DWM Core Library Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-13T20:22:55+00:00 | Vulnerability · Source |
| CVE-2026-42893 | redhat_vex | Microsoft Outlook for iOS Tampering Vulnerability | known not affected: 1 | 2026-05-13T20:22:55+00:00 | Vulnerability · Source |
| CVE-2026-42882 | redhat_vex | oxyno-zeta/s3-proxy: Security Issues in Resource Path Matching | known not affected: 1 | 2026-05-13T20:22:54+00:00 | Vulnerability · Source |
| CVE-2026-41693 | redhat_vex | i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite | known not affected: 1 | 2026-05-13T20:22:54+00:00 | Vulnerability · Source |
| CVE-2026-42831 | redhat_vex | Microsoft Office Remote Code Execution Vulnerability | known not affected: 1 | 2026-05-13T20:22:53+00:00 | Vulnerability · Source |
| CVE-2026-42832 | redhat_vex | Microsoft Office Spoofing Vulnerability | known not affected: 1 | 2026-05-13T20:22:53+00:00 | Vulnerability · Source |
| CVE-2026-42575 | redhat_vex | apko doesn't verify downloaded apk packages against APKINDEX checksum (package substitution possible) | known not affected: 1 | 2026-05-13T20:22:52+00:00 | Vulnerability · Source |
| CVE-2026-42823 | redhat_vex | Azure Logic Apps Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-13T20:22:52+00:00 | Vulnerability · Source |
| CVE-2026-42825 | redhat_vex | Windows Telephony Service Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-13T20:22:52+00:00 | Vulnerability · Source |
| CVE-2026-42141 | redhat_vex | Xibo: Authenticated Server-Side Request Forgery (SSRF) in Library Upload via URL functionality | known not affected: 1 | 2026-05-13T20:22:51+00:00 | Vulnerability · Source |
| CVE-2026-42461 | redhat_vex | Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets) | known not affected: 1 | 2026-05-13T20:22:51+00:00 | Vulnerability · Source |
| CVE-2026-42556 | redhat_vex | Postiz stored XSS in public preview page | known not affected: 1 | 2026-05-13T20:22:51+00:00 | Vulnerability · Source |
| CVE-2026-42454 | redhat_vex | Termix: OS Command Injection in Docker Container Management Endpoints | known not affected: 1 | 2026-05-13T20:22:51+00:00 | Vulnerability · Source |
| CVE-2026-41613 | redhat_vex | Visual Studio Code Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-13T20:22:50+00:00 | Vulnerability · Source |
| CVE-2026-42345 | redhat_vex | FastGPT: Cloud metadata endpoint SSRF protection bypass via port specification, IPv6 mapping, hex/decimal IP encoding, and trailing dot | known not affected: 1 | 2026-05-13T20:22:50+00:00 | Vulnerability · Source |
| CVE-2026-42048 | redhat_vex | Langflow: Path Traversal in Langflow Knowledge Bases API | known not affected: 1 | 2026-05-13T20:22:49+00:00 | Vulnerability · Source |
| CVE-2026-42300 | redhat_vex | DevGuard: Unauthenticated identity assertion via `X-Admin-Token` header | known not affected: 1 | 2026-05-13T20:22:49+00:00 | Vulnerability · Source |
| CVE-2026-41611 | redhat_vex | Visual Studio Code Remote Code Execution Vulnerability | known not affected: 1 | 2026-05-13T20:22:47+00:00 | Vulnerability · Source |
| CVE-2026-41576 | redhat_vex | Ajax30/BraveCMS-2.0: Stored HTML Injection in Contact Email via nl2br() and Unescaped Blade Template | known not affected: 1 | 2026-05-13T20:22:46+00:00 | Vulnerability · Source |
| CVE-2026-41520 | redhat_vex | Cillium exposes sensitive information included in the cilium-bugtool debug archive | known not affected: 1 | 2026-05-13T20:22:45+00:00 | Vulnerability · Source |
| CVE-2026-41489 | redhat_vex | Pi-hole: Local privilege escalation via config-controlled path in root-executed service hooks | known not affected: 1 | 2026-05-13T20:22:44+00:00 | Vulnerability · Source |
| CVE-2026-41109 | redhat_vex | GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability | known not affected: 1 | 2026-05-13T20:22:43+00:00 | Vulnerability · Source |
| CVE-2026-41103 | redhat_vex | Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-13T20:22:43+00:00 | Vulnerability · Source |
| CVE-2026-41107 | redhat_vex | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | known not affected: 1 | 2026-05-13T20:22:43+00:00 | Vulnerability · Source |
| CVE-2026-41101 | redhat_vex | Microsoft Word for Android Spoofing Vulnerability | known not affected: 1 | 2026-05-13T20:22:42+00:00 | Vulnerability · Source |
| CVE-2026-41102 | redhat_vex | Microsoft PowerPoint for Android Spoofing Vulnerability | known not affected: 1 | 2026-05-13T20:22:42+00:00 | Vulnerability · Source |
| CVE-2026-41095 | redhat_vex | Data Deduplication Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-13T20:22:41+00:00 | Vulnerability · Source |
| CVE-2026-41096 | redhat_vex | Windows DNS Client Remote Code Execution Vulnerability | known not affected: 1 | 2026-05-13T20:22:41+00:00 | Vulnerability · Source |
| CVE-2026-41094 | redhat_vex | Microsoft Data Formulator Remote Code Execution Vulnerability | known not affected: 1 | 2026-05-13T20:22:41+00:00 | Vulnerability · Source |
| CVE-2026-41089 | redhat_vex | Windows Netlogon Remote Code Execution Vulnerability | known not affected: 1 | 2026-05-13T20:22:40+00:00 | Vulnerability · Source |
| CVE-2026-40419 | redhat_vex | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-13T20:22:39+00:00 | Vulnerability · Source |
| CVE-2026-41086 | redhat_vex | Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-13T20:22:39+00:00 | Vulnerability · Source |
| CVE-2026-40417 | redhat_vex | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability | known not affected: 1 | 2026-05-13T20:22:37+00:00 | Vulnerability · Source |