VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299464 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-33111 | redhat_vex | Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability | known not affected: 1 | 2026-05-12T20:21:11+00:00 | Vulnerability · Source |
| CVE-2026-34327 | redhat_vex | Microsoft Partner Center Spoofing Vulnerability | known not affected: 1 | 2026-05-12T20:21:11+00:00 | Vulnerability · Source |
| CVE-2026-33823 | redhat_vex | Microsoft Team Events Portal Information Disclosure Vulnerability | known not affected: 1 | 2026-05-12T20:21:11+00:00 | Vulnerability · Source |
| CVE-2026-20696 | redhat_vex | CVE-2026-20696 | known not affected: 1 | 2026-05-12T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-28830 | redhat_vex | CVE-2026-28830 | known not affected: 1 | 2026-05-12T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-25836 | redhat_vex | CVE-2026-25836 | known not affected: 1 | 2026-05-12T20:21:10+00:00 | Vulnerability · Source |
| CVE-2025-65418 | redhat_vex | CVE-2025-65418 | known not affected: 1 | 2026-05-12T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-28819 | redhat_vex | CVE-2026-28819 | known not affected: 1 | 2026-05-12T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-41685 | redhat_vex | lxc/incus: Incus: Denial of Service via large data uploads | known not affected: 1 | 2026-05-12T19:38:21+00:00 | Vulnerability · Source |
| CVE-2026-41647 | redhat_vex | Incus: Incus: Denial of Service via truncated storage bucket backup file import | known not affected: 1 | 2026-05-12T19:38:21+00:00 | Vulnerability · Source |
| CVE-2026-40197 | redhat_vex | github.com/lxc/incus: Incus: Denial of Service via nil-pointer dereference in custom volume import | known not affected: 1 | 2026-05-12T19:38:21+00:00 | Vulnerability · Source |
| CVE-2026-35527 | redhat_vex | github.com/lxc/incus: Incus: Server-Side Request Forgery (SSRF) allows information disclosure | known not affected: 1 | 2026-05-12T19:38:21+00:00 | Vulnerability · Source |
| CVE-2026-40251 | redhat_vex | github.com/lxc/incus: Incus: Denial of Service via tampered backup archives | known not affected: 1 | 2026-05-12T19:38:21+00:00 | Vulnerability · Source |
| CVE-2026-40195 | redhat_vex | incus: Incus: Denial of Service via malformed backup metadata import | known not affected: 1 | 2026-05-12T19:38:21+00:00 | Vulnerability · Source |
| CVE-2026-41645 | redhat_vex | nuclei: github.com/projectdiscovery/nuclei: Nuclei: Information disclosure via DSL expression injection | known not affected: 1 | 2026-05-12T18:01:35+00:00 | Vulnerability · Source |
| CVE-2026-8289 | redhat_vex | Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service | known not affected: 1 | 2026-05-12T14:21:28+00:00 | Vulnerability · Source |
| CVE-2026-38566 | redhat_vex | CVE-2026-38566 | known not affected: 1 | 2026-05-12T14:21:27+00:00 | Vulnerability · Source |
| CVE-2026-8272 | redhat_vex | D-Link DNS-320 webfile_mgr.cgi chown os command injection | known not affected: 1 | 2026-05-12T14:21:26+00:00 | Vulnerability · Source |
| CVE-2026-38567 | redhat_vex | CVE-2026-38567 | known not affected: 1 | 2026-05-12T14:21:25+00:00 | Vulnerability · Source |
| CVE-2026-30635 | redhat_vex | CVE-2026-30635 | known not affected: 1 | 2026-05-12T14:21:24+00:00 | Vulnerability · Source |
| CVE-2026-42648 | redhat_vex | WordPress Spectra plugin <= 2.19.22 - Broken Access Control vulnerability | known not affected: 1 | 2026-05-12T14:21:24+00:00 | Vulnerability · Source |
| CVE-2026-42645 | redhat_vex | WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.11.0 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-05-12T14:21:23+00:00 | Vulnerability · Source |
| CVE-2025-61624 | redhat_vex | CVE-2025-61624 | known not affected: 1 | 2026-05-12T14:21:23+00:00 | Vulnerability · Source |
| CVE-2025-53847 | redhat_vex | CVE-2025-53847 | known not affected: 1 | 2026-05-12T14:21:22+00:00 | Vulnerability · Source |
| CVE-2026-42641 | redhat_vex | WordPress Share This Image plugin <= 2.14 - Server Side Request Forgery (SSRF) vulnerability | known not affected: 1 | 2026-05-12T14:21:22+00:00 | Vulnerability · Source |
| CVE-2026-42643 | redhat_vex | WordPress Image Widget plugin <= 4.4.11 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-05-12T14:21:22+00:00 | Vulnerability · Source |
| CVE-2025-43992 | redhat_vex | CVE-2025-43992 | known not affected: 1 | 2026-05-12T14:21:22+00:00 | Vulnerability · Source |
| CVE-2026-42642 | redhat_vex | WordPress GiveWP plugin <= 4.14.5 - Broken Access Control vulnerability | known not affected: 1 | 2026-05-12T14:21:22+00:00 | Vulnerability · Source |
| CVE-2026-42652 | redhat_vex | WordPress User Registration plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-05-12T14:21:21+00:00 | Vulnerability · Source |
| CVE-2026-42646 | redhat_vex | WordPress TaxoPress plugin <= 3.44.0 - SQL Injection vulnerability | known not affected: 1 | 2026-05-12T14:21:21+00:00 | Vulnerability · Source |
| CVE-2026-0300 | redhat_vex | PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal | known not affected: 1 | 2026-05-12T14:21:21+00:00 | Vulnerability · Source |
| CVE-2025-40899 | redhat_vex | Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0 | known not affected: 1 | 2026-05-12T14:21:21+00:00 | Vulnerability · Source |
| CVE-2025-23384 | redhat_vex | CVE-2025-23384 | known not affected: 1 | 2026-05-12T14:21:20+00:00 | Vulnerability · Source |
| CVE-2025-40897 | redhat_vex | Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0 | known not affected: 1 | 2026-05-12T14:21:20+00:00 | Vulnerability · Source |
| CVE-2024-56181 | redhat_vex | CVE-2024-56181 | known not affected: 1 | 2026-05-12T14:21:20+00:00 | Vulnerability · Source |
| CVE-2025-40742 | redhat_vex | CVE-2025-40742 | known not affected: 1 | 2026-05-12T14:21:20+00:00 | Vulnerability · Source |
| CVE-2024-56182 | redhat_vex | CVE-2024-56182 | known not affected: 1 | 2026-05-12T14:21:20+00:00 | Vulnerability · Source |
| CVE-2025-23773 | redhat_vex | WordPress Delete All Posts plugin <= 1.1.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-05-12T14:21:20+00:00 | Vulnerability · Source |
| CVE-2023-27043 | redhat_vex | python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple | fixed: 1062 known affected: 41 known not affected: 105 | 2026-05-12T12:22:47+00:00 | Vulnerability · Source |
| CVE-2025-5197 | redhat_vex | transformers: Transformers ReDoS Vulnerability | known affected: 94 known not affected: 1 | 2026-05-12T10:58:01+00:00 | Vulnerability · Source |
| CVE-2021-41617 | redhat_vex | openssh: privilege escalation when AuthorizedKeysCommand or AuthorizedPrincipalsCommand are configured | fixed: 467 known affected: 7 known not affected: 7 | 2026-05-12T10:23:02+00:00 | Vulnerability · Source |
| CVE-2021-4090 | redhat_vex | kernel: Overflow of bmval[bmlen-1] in nfsd4_decode_bitmap function | known not affected: 196 | 2026-05-12T10:22:47+00:00 | Vulnerability · Source |
| CVE-2025-15367 | redhat_vex | cpython: POP3 command injection in user-controlled commands | fixed: 2220 known affected: 10 known not affected: 106 | 2026-05-12T08:27:34+00:00 | Vulnerability · Source |
| CVE-2025-15366 | redhat_vex | cpython: IMAP command injection in user-controlled commands | fixed: 2220 known affected: 10 known not affected: 106 | 2026-05-12T08:27:32+00:00 | Vulnerability · Source |
| CVE-2026-8254 | redhat_vex | Devs Palace ERP Online sales_save cross site scripting | known not affected: 1 | 2026-05-12T08:20:36+00:00 | Vulnerability · Source |
| CVE-2026-8266 | redhat_vex | Open5GS SMF gsm-build.c gsm_build_pdu_session_establishment_accept denial of service | known not affected: 1 | 2026-05-12T08:20:36+00:00 | Vulnerability · Source |
| CVE-2026-8210 | redhat_vex | aandrew-me tgpt Update helper.go helper.Update command injection | known not affected: 1 | 2026-05-12T08:20:34+00:00 | Vulnerability · Source |
| CVE-2026-8248 | redhat_vex | Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service | known not affected: 1 | 2026-05-12T08:20:34+00:00 | Vulnerability · Source |
| CVE-2026-8191 | redhat_vex | Wavlink NU516U1 adm.cgi wifi_region os command injection | known not affected: 1 | 2026-05-12T08:20:34+00:00 | Vulnerability · Source |
| CVE-2026-8228 | redhat_vex | Wavlink NU516U1 wireless.cgi advance os command injection | known not affected: 1 | 2026-05-12T08:20:34+00:00 | Vulnerability · Source |