VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
301597 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-5957 | redhat_vex | EmailKit <= 1.6.5 - Authenticated (Author+) Arbitrary File Read via 'emailkit-editor-template' REST Parameter | known not affected: 1 | 2026-05-06T20:21:56+00:00 | Vulnerability · Source |
| CVE-2026-42436 | redhat_vex | OpenClaw < 2026.4.14 - Internal Page Content Exposure via Browser Snapshot and Screenshot Routes | known not affected: 1 | 2026-05-06T20:21:55+00:00 | Vulnerability · Source |
| CVE-2026-3601 | redhat_vex | User Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Limited Page Content Modification | known not affected: 1 | 2026-05-06T20:21:54+00:00 | Vulnerability · Source |
| CVE-2026-35453 | redhat_vex | PhpSpreadsheet XSS via number format text substitution in HTML Writer | known not affected: 1 | 2026-05-06T20:21:54+00:00 | Vulnerability · Source |
| CVE-2026-42077 | redhat_vex | Evolver: Prototype Pollution via `Object.assign()` in mailbox store operations | known not affected: 1 | 2026-05-06T20:21:54+00:00 | Vulnerability · Source |
| CVE-2026-42228 | redhat_vex | n8n: Hijacking of Unauthenticated Chat Execution | known not affected: 1 | 2026-05-06T20:21:54+00:00 | Vulnerability · Source |
| CVE-2026-42092 | redhat_vex | Global Settings Publication Exposes Sensitive Configuration to Any Authenticated User in Titra | known not affected: 1 | 2026-05-06T20:21:54+00:00 | Vulnerability · Source |
| CVE-2026-2948 | redhat_vex | Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Server-Side Request Forgery via 'imageUrl' | known not affected: 1 | 2026-05-06T20:21:53+00:00 | Vulnerability · Source |
| CVE-2026-2868 | redhat_vex | Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'separatorIconSVG' | known not affected: 1 | 2026-05-06T20:21:52+00:00 | Vulnerability · Source |
| CVE-2026-28510 | redhat_vex | elabftw allows MFA bypass during login | known not affected: 1 | 2026-05-06T20:21:51+00:00 | Vulnerability · Source |
| CVE-2026-7865 | redhat_vex | Hidden Console Command | known not affected: 1 | 2026-05-06T20:21:51+00:00 | Vulnerability · Source |
| CVE-2026-7854 | redhat_vex | D-Link DI-8100 POST Parameter url_rule.asp url_rule_asp buffer overflow | known not affected: 1 | 2026-05-06T20:21:50+00:00 | Vulnerability · Source |
| CVE-2026-42084 | redhat_vex | OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence | known not affected: 1 | 2026-05-06T20:21:50+00:00 | Vulnerability · Source |
| CVE-2026-7412 | redhat_vex | CVE-2026-7412 | known not affected: 1 | 2026-05-06T20:21:49+00:00 | Vulnerability · Source |
| CVE-2026-33975 | redhat_vex | twenty-server SSRF protection bypass via IPv4-mapped IPv6 address normalization | known not affected: 1 | 2026-05-06T20:21:49+00:00 | Vulnerability · Source |
| CVE-2026-7411 | redhat_vex | CVE-2026-7411 | known not affected: 1 | 2026-05-06T20:21:49+00:00 | Vulnerability · Source |
| CVE-2026-43534 | redhat_vex | OpenClaw < 2026.4.10 - Unsanitized External Input in Agent Hook Events | known not affected: 1 | 2026-05-06T20:21:48+00:00 | Vulnerability · Source |
| CVE-2026-43528 | redhat_vex | OpenClaw < 2026.4.14 - Redaction Bypass via sourceConfig and runtimeConfig Aliases | known not affected: 1 | 2026-05-06T20:21:48+00:00 | Vulnerability · Source |
| CVE-2026-41926 | redhat_vex | WDR201A WiFi Extender OS Command Injection via firewall.cgi | known not affected: 1 | 2026-05-06T20:21:47+00:00 | Vulnerability · Source |
| CVE-2026-34462 | redhat_vex | Sandboxie-Plus ProcessServer boxname stack buffer overflows via unterminated wide string copy | known not affected: 1 | 2026-05-06T20:21:47+00:00 | Vulnerability · Source |
| CVE-2026-42222 | redhat_vex | nginx-ui: Unauthenticated first-boot instance claim via POST /api/install allows remote bootstrap takeover | known not affected: 1 | 2026-05-06T20:21:47+00:00 | Vulnerability · Source |
| CVE-2026-34464 | redhat_vex | Sandboxie-Plus NamedPipeServer OpenHandler stack overflow via unterminated server field | known not affected: 1 | 2026-05-06T20:21:46+00:00 | Vulnerability · Source |
| CVE-2026-40280 | redhat_vex | Gotenberg SSRF via case-insensitive URL scheme bypass in webhook and downloadFrom deny-lists | known not affected: 1 | 2026-05-06T20:21:46+00:00 | Vulnerability · Source |
| CVE-2026-3298 | redhat_vex | Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes | known not affected: 1 | 2026-05-06T20:21:46+00:00 | Vulnerability · Source |
| CVE-2026-40329 | redhat_vex | SQL Injection vulnerability via sortBy in beanFeed | known not affected: 1 | 2026-05-06T20:21:46+00:00 | Vulnerability · Source |
| CVE-2026-34459 | redhat_vex | Sandboxie-Plus sandbox escape via uninitialized memory leak and stack overflow in GetRawInputDeviceInfoSlave | known not affected: 1 | 2026-05-06T20:21:45+00:00 | Vulnerability · Source |
| CVE-2026-32689 | redhat_vex | Long-poll NDJSON body splitting causes unbounded memory allocation in Phoenix | known not affected: 1 | 2026-05-06T20:21:45+00:00 | Vulnerability · Source |
| CVE-2026-32603 | redhat_vex | Sandboxie kernel driver denial of service via malformed IOCTL from sandboxed process | known not affected: 1 | 2026-05-06T20:21:45+00:00 | Vulnerability · Source |
| CVE-2026-34461 | redhat_vex | Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalation | known not affected: 1 | 2026-05-06T20:21:45+00:00 | Vulnerability · Source |
| CVE-2025-20205 | redhat_vex | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | known not affected: 1 | 2026-05-06T20:21:44+00:00 | Vulnerability · Source |
| CVE-2026-25588 | redhat_vex | RedisTimeSeries RESTORE invalid memory access may allow remote code execution | known not affected: 1 | 2026-05-06T20:21:44+00:00 | Vulnerability · Source |
| CVE-2026-26015 | redhat_vex | Unauthenticated RCE in DocsGPT MCP STDIO Configuration | known not affected: 1 | 2026-05-06T20:21:44+00:00 | Vulnerability · Source |
| CVE-2025-66369 | redhat_vex | CVE-2025-66369 | known not affected: 1 | 2026-05-06T20:21:44+00:00 | Vulnerability · Source |
| CVE-2026-27960 | redhat_vex | OpenCTI privilege escalation and unauthenticated access via default admin account | known not affected: 1 | 2026-05-06T20:21:44+00:00 | Vulnerability · Source |
| CVE-2025-20204 | redhat_vex | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | known not affected: 1 | 2026-05-06T20:21:44+00:00 | Vulnerability · Source |
| CVE-2025-15578 | redhat_vex | maypole: Maypole for Perl generates session ids insecurely | known not affected: 1 | 2026-05-06T17:52:20+00:00 | Vulnerability · Source |
| CVE-2025-14010 | redhat_vex | ansible-collection-community-general: ansible-collection-community-general: Keycloak user module leaks credentials in verbose output | known affected: 6 | 2026-05-06T16:49:04+00:00 | Vulnerability · Source |
| CVE-2025-12819 | redhat_vex | pgbouncer: Untrusted search path in auth_query connection in PgBouncer | known not affected: 1 | 2026-05-06T16:47:44+00:00 | Vulnerability · Source |
| CVE-2025-12120 | redhat_vex | lite-xl: Code injection in Lite XL | known not affected: 1 | 2026-05-06T16:47:44+00:00 | Vulnerability · Source |
| CVE-2025-8083 | redhat_vex | vuetify: Vuetify Prototype Pollution via Preset options | known not affected: 1 | 2026-05-06T16:47:40+00:00 | Vulnerability · Source |
| CVE-2025-12121 | redhat_vex | lite-xl: Command injection in Lite XL | known not affected: 1 | 2026-05-06T16:32:57+00:00 | Vulnerability · Source |
| CVE-2024-51317 | redhat_vex | netsurf: Use after free in NetSurf | known not affected: 1 | 2026-05-06T16:32:57+00:00 | Vulnerability · Source |
| CVE-2025-60360 | redhat_vex | radare2: radare2 memory leak | known not affected: 1 | 2026-05-06T15:28:08+00:00 | Vulnerability · Source |
| CVE-2025-61224 | redhat_vex | dokuwiki: Dokuwiki cross site scripting | known not affected: 1 | 2026-05-06T15:24:39+00:00 | Vulnerability · Source |
| CVE-2025-59149 | redhat_vex | Suricata: Suricata: Stack buffer overflow in rule parser when processing long keywords with transforms | known not affected: 1 | 2026-05-06T15:24:34+00:00 | Vulnerability · Source |
| CVE-2025-12343 | redhat_vex | FFmpeg: Double-Free Vulnerability in FFmpeg TensorFlow DNN Backend | known not affected: 1 | 2026-05-06T15:24:31+00:00 | Vulnerability · Source |
| CVE-2025-11147 | redhat_vex | apt-cacher-ng: Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG | known not affected: 1 | 2026-05-06T15:24:22+00:00 | Vulnerability · Source |
| CVE-2025-11146 | redhat_vex | apt-cacher-ng: Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG | known not affected: 1 | 2026-05-06T15:24:22+00:00 | Vulnerability · Source |
| CVE-2025-59148 | redhat_vex | suricata-ids: Suricata NULL pointer dereference | known not affected: 1 | 2026-05-06T15:23:49+00:00 | Vulnerability · Source |
| CVE-2025-53538 | redhat_vex | suricata: Suricata resource starvation | known not affected: 1 | 2026-05-06T15:02:26+00:00 | Vulnerability · Source |