VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299669 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-8190 | redhat_vex | Wavlink NU516U1 adm.cgi wan os command injection | known not affected: 1 | 2026-05-11T20:27:01+00:00 | Vulnerability · Source |
| CVE-2026-8189 | redhat_vex | Wavlink NU516U1 adm.cgi wzdrepeater os command injection | known not affected: 1 | 2026-05-11T20:27:01+00:00 | Vulnerability · Source |
| CVE-2026-8188 | redhat_vex | Wavlink NU516U1 adm.cgi change_wifi_password os command injection | known not affected: 1 | 2026-05-11T20:27:00+00:00 | Vulnerability · Source |
| CVE-2026-45182 | redhat_vex | CVE-2026-45182 | known not affected: 1 | 2026-05-11T20:26:59+00:00 | Vulnerability · Source |
| CVE-2026-41517 | redhat_vex | Emlog: Remote Code Execution via Malicious Plugin Upload | known not affected: 1 | 2026-05-11T20:26:59+00:00 | Vulnerability · Source |
| CVE-2026-44286 | redhat_vex | FastGPT: SSRF Vulnerability in Laf Workflow Node via Missing Internal Address Validation | known not affected: 1 | 2026-05-11T20:26:59+00:00 | Vulnerability · Source |
| CVE-2025-69599 | redhat_vex | CVE-2025-69599 | known not affected: 1 | 2026-05-11T20:26:57+00:00 | Vulnerability · Source |
| CVE-2025-67887 | redhat_vex | CVE-2025-67887 | known not affected: 1 | 2026-05-11T20:26:57+00:00 | Vulnerability · Source |
| CVE-2025-56513 | redhat_vex | CVE-2025-56513 | known not affected: 1 | 2026-05-11T20:26:55+00:00 | Vulnerability · Source |
| CVE-2023-42346 | redhat_vex | CVE-2023-42346 | known not affected: 1 | 2026-05-11T20:26:55+00:00 | Vulnerability · Source |
| CVE-2026-8241 | redhat_vex | Industrial Application Software IAS Canias ERP RMI iasGetServerInfoEvent improper authorization | known not affected: 1 | 2026-05-11T20:26:52+00:00 | Vulnerability · Source |
| CVE-2026-8216 | redhat_vex | Industrial Application Software IAS Canias ERP Java RMI Session Management iasServerRemoteInterface.doAction improper authentication | known not affected: 1 | 2026-05-11T20:26:52+00:00 | Vulnerability · Source |
| CVE-2026-8226 | redhat_vex | Open5GS types.c ogs_pcc_rule_install_flow_from_media denial of service | known not affected: 1 | 2026-05-11T20:26:51+00:00 | Vulnerability · Source |
| CVE-2026-8232 | redhat_vex | Dotouch XproUPF UPF Process libvlib.so vlib_worker_loop denial of service | known not affected: 1 | 2026-05-11T20:26:51+00:00 | Vulnerability · Source |
| CVE-2026-8224 | redhat_vex | Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of service | known not affected: 1 | 2026-05-11T20:26:50+00:00 | Vulnerability · Source |
| CVE-2026-8223 | redhat_vex | Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send denial of service | known not affected: 1 | 2026-05-11T20:26:49+00:00 | Vulnerability · Source |
| CVE-2026-8209 | redhat_vex | CVE-2026-8209 | known not affected: 1 | 2026-05-11T20:26:49+00:00 | Vulnerability · Source |
| CVE-2026-8215 | redhat_vex | Industrial Application Software IAS Canias ERP RMI iasRequestFileEvent path traversal | known not affected: 1 | 2026-05-11T20:26:47+00:00 | Vulnerability · Source |
| CVE-2026-8214 | redhat_vex | Industrial Application Software IAS Canias ERP RMI doAction improper authentication | known not affected: 1 | 2026-05-11T20:26:46+00:00 | Vulnerability · Source |
| CVE-2026-8187 | redhat_vex | Open5GS UPF gtp-path.c _gtpv1_u_recv_cb resource consumption | known not affected: 1 | 2026-05-11T20:26:43+00:00 | Vulnerability · Source |
| CVE-2026-8198 | redhat_vex | Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity <= 3.3.6 - Unauthenticated Information Disclosure via REST API | known not affected: 1 | 2026-05-11T20:26:43+00:00 | Vulnerability · Source |
| CVE-2026-8186 | redhat_vex | Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-of-bounds | known not affected: 1 | 2026-05-11T20:26:42+00:00 | Vulnerability · Source |
| CVE-2026-45181 | redhat_vex | CVE-2026-45181 | known not affected: 1 | 2026-05-11T20:26:41+00:00 | Vulnerability · Source |
| CVE-2026-42576 | redhat_vex | apko `DiscoverKeys` has a panic on non-rsa jwks key that causes crash during key discovery | known not affected: 1 | 2026-05-11T20:26:40+00:00 | Vulnerability · Source |
| CVE-2026-44284 | redhat_vex | FastGPT: Stored MCP tool URL SSRF in FastGPT workflow execution | known not affected: 1 | 2026-05-11T20:26:40+00:00 | Vulnerability · Source |
| CVE-2026-42456 | redhat_vex | AnythingLLM: Cross-User TTS Audio Disclosure via Chat ID (IDOR) | known not affected: 1 | 2026-05-11T20:26:39+00:00 | Vulnerability · Source |
| CVE-2026-42346 | redhat_vex | Postiz: TOCTOU DNS rebinding bypasses all SSRF URL validation paths | known not affected: 1 | 2026-05-11T20:26:39+00:00 | Vulnerability · Source |
| CVE-2026-42344 | redhat_vex | FastGPT: DNS rebinding TOCTOU bypass in isInternalAddress allows SSRF on all protected endpoints | known not affected: 1 | 2026-05-11T20:26:37+00:00 | Vulnerability · Source |
| CVE-2026-42333 | redhat_vex | quarkus-openapi-generator has overly broad path-parameter matching that sends authentication headers to unintended operations | known not affected: 1 | 2026-05-11T20:26:37+00:00 | Vulnerability · Source |
| CVE-2026-42291 | redhat_vex | SysReptor: Read-write access to personal notes by sharing-link creation with no authorization in SysReptor Professional | known not affected: 1 | 2026-05-11T20:26:36+00:00 | Vulnerability · Source |
| CVE-2026-42174 | redhat_vex | Kirby: User avatar creation, replacement and deletion are not gated by user update permissions | known not affected: 1 | 2026-05-11T20:26:35+00:00 | Vulnerability · Source |
| CVE-2026-42209 | redhat_vex | FlashMQ: Division by zero crash when using non-default deferred retained message setting | known not affected: 1 | 2026-05-11T20:26:34+00:00 | Vulnerability · Source |
| CVE-2026-42202 | redhat_vex | nova-toggle-5: Improper authorization on toggle endpoint allowed non-Nova users to modify boolean fields | known not affected: 1 | 2026-05-11T20:26:32+00:00 | Vulnerability · Source |
| CVE-2026-42199 | redhat_vex | Grid: Integer Overflow in Grid::expand_rows Leads to Safe-API Undefined Behavior | known not affected: 1 | 2026-05-11T20:26:32+00:00 | Vulnerability · Source |
| CVE-2026-42181 | redhat_vex | Lemmy: SSRF and internal image disclosure in post link metadata via unvalidated og:image | known not affected: 1 | 2026-05-11T20:26:31+00:00 | Vulnerability · Source |
| CVE-2026-42051 | redhat_vex | Kirby: System API endpoint leaks license data and installed version to authenticated users | known not affected: 1 | 2026-05-11T20:26:30+00:00 | Vulnerability · Source |
| CVE-2026-41511 | redhat_vex | OpenMcdf has an Infinite loop DoS via crafted CFB directory cycle | known not affected: 1 | 2026-05-11T20:26:29+00:00 | Vulnerability · Source |
| CVE-2026-41692 | redhat_vex | i18nextify is vulnerable to DOM XSS via javascript:/data: URL schemes in translated href/src attributes | known not affected: 1 | 2026-05-11T20:26:29+00:00 | Vulnerability · Source |
| CVE-2026-41308 | redhat_vex | Password Pusher: JSON API `/p.json` file upload alias bypasses file-push authentication | known not affected: 1 | 2026-05-11T20:26:29+00:00 | Vulnerability · Source |
| CVE-2026-41161 | redhat_vex | Username Enumeration via Timing Attack | known not affected: 1 | 2026-05-11T20:26:27+00:00 | Vulnerability · Source |
| CVE-2026-35404 | redhat_vex | Open edX Platform has an Open Redirect in Survey Views via Unvalidated redirect_url Parameter | known not affected: 1 | 2026-05-11T20:26:27+00:00 | Vulnerability · Source |
| CVE-2026-35154 | redhat_vex | CVE-2026-35154 | known not affected: 1 | 2026-05-11T20:26:25+00:00 | Vulnerability · Source |
| CVE-2026-32683 | redhat_vex | CVE-2026-32683 | known not affected: 1 | 2026-05-11T20:26:24+00:00 | Vulnerability · Source |
| CVE-2026-29202 | redhat_vex | CVE-2026-29202 | known not affected: 1 | 2026-05-11T20:26:23+00:00 | Vulnerability · Source |
| CVE-2026-1749 | redhat_vex | CVE-2026-1749 | known not affected: 1 | 2026-05-11T20:26:22+00:00 | Vulnerability · Source |
| CVE-2025-15634 | redhat_vex | HCL BigFix WebUI is affected by a missing authorization vulnerability | known not affected: 1 | 2026-05-11T20:26:21+00:00 | Vulnerability · Source |
| CVE-2026-0674 | redhat_vex | WordPress Campaign Monitor for WordPress plugin <= 2.9.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-05-11T20:26:21+00:00 | Vulnerability · Source |
| CVE-2025-15633 | redhat_vex | HCL BigFix WebUI is affected by an improper authorization vulnerability | known not affected: 1 | 2026-05-11T20:26:20+00:00 | Vulnerability · Source |
| CVE-2022-50970 | redhat_vex | WordPress Plugin AAWP 3.16 Reflected XSS via tab Parameter | known not affected: 1 | 2026-05-11T20:26:20+00:00 | Vulnerability · Source |
| CVE-2022-50968 | redhat_vex | uBidAuction 2.0.1 auctions manage Reflected XSS | known not affected: 1 | 2026-05-11T20:26:19+00:00 | Vulnerability · Source |