VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
300859 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-41654 | redhat_vex | Weblate is Vulnerable to Authenticated SSRF via Project Backup Import bypassing validate_repo_url | known not affected: 1 | 2026-05-08T20:21:12+00:00 | Vulnerability · Source |
| CVE-2026-32852 | redhat_vex | MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter | known not affected: 1 | 2026-05-08T20:21:11+00:00 | Vulnerability · Source |
| CVE-2026-39921 | redhat_vex | GeoNode < 4.4.5, 5.0.2 SSRF via Document Upload | known not affected: 1 | 2026-05-08T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-35632 | redhat_vex | OpenClaw <= 2026.2.22 - Symlink Traversal via IDENTITY.md appendFile in agents.create/update | known not affected: 1 | 2026-05-08T20:21:09+00:00 | Vulnerability · Source |
| CVE-2026-32983 | redhat_vex | SSL/TLS Renegotiation DoS in Wazuh Manager authd service | known not affected: 1 | 2026-05-08T20:21:09+00:00 | Vulnerability · Source |
| CVE-2026-44349 | redhat_vex | Daptin fuzzy search injects unvalidated column name into raw SQL | known not affected: 1 | 2026-05-08T20:21:08+00:00 | Vulnerability · Source |
| CVE-2026-41924 | redhat_vex | WDR201A WiFi Extender OS Command Injection via makeRequest.cgi | known not affected: 1 | 2026-05-08T20:21:07+00:00 | Vulnerability · Source |
| CVE-2026-41936 | redhat_vex | Vvveb < 1.0.8.2 XML External Entity Injection via Import | known not affected: 1 | 2026-05-08T20:21:07+00:00 | Vulnerability · Source |
| CVE-2026-41925 | redhat_vex | WDR201A WiFi Extender OS Command Injection via adm.cgi (reboot_time) | known not affected: 1 | 2026-05-08T20:21:07+00:00 | Vulnerability · Source |
| CVE-2026-41930 | redhat_vex | Vvveb < 1.0.8.2 Hard-coded Credentials Information Disclosure via phpMyAdmin | known not affected: 1 | 2026-05-08T20:21:07+00:00 | Vulnerability · Source |
| CVE-2026-41906 | redhat_vex | FreeScout: Conversation Change-Customer Cross-Mailbox Authorization Bypass | known not affected: 1 | 2026-05-08T20:21:06+00:00 | Vulnerability · Source |
| CVE-2026-40031 | redhat_vex | MemProcFS < 5.17 DLL/Shared Library Hijacking | known not affected: 1 | 2026-05-08T20:21:06+00:00 | Vulnerability · Source |
| CVE-2026-40035 | redhat_vex | Unfurl - Werkzeug Debugger Exposure via String Config Parsing | known not affected: 1 | 2026-05-08T20:21:06+00:00 | Vulnerability · Source |
| CVE-2026-39907 | redhat_vex | Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via WCF SOAP | known not affected: 1 | 2026-05-08T20:21:05+00:00 | Vulnerability · Source |
| CVE-2026-40030 | redhat_vex | parseusbs < 1.9 Command Injection via Volume Path Argument | known not affected: 1 | 2026-05-08T20:21:05+00:00 | Vulnerability · Source |
| CVE-2026-39906 | redhat_vex | Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via .NET Remoting | known not affected: 1 | 2026-05-08T20:21:05+00:00 | Vulnerability · Source |
| CVE-2026-39918 | redhat_vex | Vvveb < 1.0.8.1 Code Injection via Installation Endpoint | known not affected: 1 | 2026-05-08T20:21:05+00:00 | Vulnerability · Source |
| CVE-2026-40029 | redhat_vex | parseusbs < 1.9 Command Injection via Crafted LNK Filename | known not affected: 1 | 2026-05-08T20:21:05+00:00 | Vulnerability · Source |
| CVE-2026-32851 | redhat_vex | MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter | known not affected: 1 | 2026-05-08T20:21:04+00:00 | Vulnerability · Source |
| CVE-2026-32850 | redhat_vex | MailEnable < 10.55 Reflected XSS via ManageShares.aspx SelectedIndex Parameter | known not affected: 1 | 2026-05-08T20:21:04+00:00 | Vulnerability · Source |
| CVE-2025-63705 | redhat_vex | CVE-2025-63705 | known not affected: 1 | 2026-05-08T20:21:04+00:00 | Vulnerability · Source |
| CVE-2026-32838 | redhat_vex | Edimax GS-5008PL <= 1.00.54 Transmits Credentials Over Cleartext HTTP | known not affected: 1 | 2026-05-08T20:21:04+00:00 | Vulnerability · Source |
| CVE-2026-32842 | redhat_vex | Edimax GS-5008PL <= 1.00.54 Admin Credentials Stored in Cleartext | known not affected: 1 | 2026-05-08T20:21:04+00:00 | Vulnerability · Source |
| CVE-2026-32840 | redhat_vex | Edimax GS-5008PL <= 1.00.54 Stored XSS via Device Name | known not affected: 1 | 2026-05-08T20:21:04+00:00 | Vulnerability · Source |
| CVE-2026-32839 | redhat_vex | Edimax GS-5008PL <= 1.00.54 CSRF via Management CGI Endpoints | known not affected: 1 | 2026-05-08T20:21:04+00:00 | Vulnerability · Source |
| CVE-2011-3009 | redhat_vex | ruby: Properly initialize the random number generator when forking new process | fixed: 763 | 2026-05-08T15:05:36+00:00 | Vulnerability · Source |
| CVE-2011-2705 | redhat_vex | ruby: Properly initialize the random number generator when forking new process | fixed: 388 known affected: 2 | 2026-05-08T15:05:34+00:00 | Vulnerability · Source |
| CVE-2011-2686 | redhat_vex | ruby: Properly initialize the random number generator when forking new process | fixed: 12 known affected: 12 | 2026-05-08T15:05:27+00:00 | Vulnerability · Source |
| CVE-2026-34424 | redhat_vex | Smart Slider 3 Pro 3.5.1.35 Supply Chain Attack Remote Access Toolkit | known not affected: 1 | 2026-05-08T14:21:51+00:00 | Vulnerability · Source |
| CVE-2025-68900 | redhat_vex | WordPress Enfold theme <= 7.1.3 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-05-08T14:21:51+00:00 | Vulnerability · Source |
| CVE-2026-34429 | redhat_vex | Vvveb < 1.0.8.1 Stored XSS via Media Upload and Rename | known not affected: 1 | 2026-05-08T14:21:51+00:00 | Vulnerability · Source |
| CVE-2026-34427 | redhat_vex | Vvveb < 1.0.8.1 Privilege Escalation via admin/user/save | known not affected: 1 | 2026-05-08T14:21:51+00:00 | Vulnerability · Source |
| CVE-2026-34428 | redhat_vex | Vvveb < 1.0.8.1 SSRF via oEmbedProxy | known not affected: 1 | 2026-05-08T14:21:51+00:00 | Vulnerability · Source |
| CVE-2008-2664 | redhat_vex | ruby: Unsafe use of alloca in rb_str_format() | fixed: 612 | 2026-05-08T12:52:42+00:00 | Vulnerability · Source |
| CVE-2023-47268 | redhat_vex | PrusaSlicer: Slic3r: PrusaSlicer: Arbitrary code execution via crafted 3mf project file | known not affected: 1 | 2026-05-08T12:00:28+00:00 | Vulnerability · Source |
| CVE-2011-0188 | redhat_vex | ruby: memory corruption in BigDecimal on 64bit platforms | fixed: 367 | 2026-05-08T10:43:26+00:00 | Vulnerability · Source |
| CVE-2008-2726 | redhat_vex | ruby: integer overflow in rb_ary_splice/update/replace() - beg + rlen | fixed: 612 | 2026-05-08T10:43:25+00:00 | Vulnerability · Source |
| CVE-2008-2663 | redhat_vex | ruby: Integer overflows in rb_ary_store() | fixed: 612 | 2026-05-08T10:43:22+00:00 | Vulnerability · Source |
| CVE-2008-2725 | redhat_vex | ruby: integer overflow in rb_ary_splice/update/replace() - REALLOC_N | fixed: 612 | 2026-05-08T10:43:21+00:00 | Vulnerability · Source |
| CVE-2008-2662 | redhat_vex | ruby: Integer overflows in rb_str_buf_append() | fixed: 387 | 2026-05-08T10:43:21+00:00 | Vulnerability · Source |
| CVE-2003-0850 | suse_vex | SUSE CVE CVE-2003-0850 | No product status | 2026-05-08T02:45:57+00:00 | Vulnerability · Source |
| CVE-2004-0884 | suse_vex | SUSE CVE CVE-2004-0884 | No product status | 2026-05-08T02:45:55+00:00 | Vulnerability · Source |
| CVE-2004-2770 | suse_vex | SUSE CVE CVE-2004-2770 | No product status | 2026-05-08T02:45:53+00:00 | Vulnerability · Source |
| CVE-2005-3964 | suse_vex | SUSE CVE CVE-2005-3964 | No product status | 2026-05-08T02:45:48+00:00 | Vulnerability · Source |
| CVE-2007-1376 | suse_vex | SUSE CVE CVE-2007-1376 | No product status | 2026-05-08T02:45:41+00:00 | Vulnerability · Source |
| CVE-2007-3379 | suse_vex | SUSE CVE CVE-2007-3379 | No product status | 2026-05-08T02:45:38+00:00 | Vulnerability · Source |
| CVE-2007-3850 | suse_vex | SUSE CVE CVE-2007-3850 | No product status | 2026-05-08T02:45:37+00:00 | Vulnerability · Source |
| CVE-2007-6035 | suse_vex | SUSE CVE CVE-2007-6035 | No product status | 2026-05-08T02:45:35+00:00 | Vulnerability · Source |
| CVE-2007-6720 | suse_vex | SUSE CVE CVE-2007-6720 | known affected: 4 recommended: 86 | 2026-05-08T02:45:33+00:00 | Vulnerability · Source |
| CVE-2008-0053 | suse_vex | SUSE CVE CVE-2008-0053 | No product status | 2026-05-08T02:45:31+00:00 | Vulnerability · Source |