VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
301613 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-4062 | redhat_vex | Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'object_ids' Parameter | known not affected: 1 | 2026-05-04T20:21:03+00:00 | Vulnerability · Source |
| CVE-2026-40601 | redhat_vex | Chartbrew: Missing Authorization in /api/chart/:chart_id/query via team-level refresh toggle | known not affected: 1 | 2026-05-04T20:21:02+00:00 | Vulnerability · Source |
| CVE-2026-0703 | redhat_vex | NextMove Lite - Thank You Page for WooCommerce <= 2.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'xlwcty_current_date' Shortcode | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2026-36762 | redhat_vex | CVE-2026-36762 | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2025-56568 | redhat_vex | CVE-2025-56568 | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2025-14726 | redhat_vex | Widgets for Social Photo Feed <= 1.8 - Missing Authentication to Unauthenticated Plugin Settings Access/Update via trustindex_feed_hook_instagram REST API endpoints | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2026-3143 | redhat_vex | Total Upkeep <= 1.17.1 - Missing Authorization to Unauthenticated Rollback Cancellation | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2026-2052 | redhat_vex | Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2026-36765 | redhat_vex | CVE-2026-36765 | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2025-46115 | redhat_vex | CVE-2025-46115 | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2025-70072 | redhat_vex | Assimp: Assimp: Denial of Service via FBXConverter components | known not affected: 8 | 2026-05-04T16:57:14+00:00 | Vulnerability · Source |
| CVE-2025-70070 | redhat_vex | Assimp: Assimp: Denial of Service via FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry() | known not affected: 8 | 2026-05-04T16:57:14+00:00 | Vulnerability · Source |
| CVE-2017-15108 | redhat_vex | spice-vdagent: Improper validation of xfers->save_dir in vdagent_file_xfers_data() | known affected: 3 | 2026-05-04T15:08:20+00:00 | Vulnerability · Source |
| CVE-2017-1000376 | redhat_vex | libffi: Requests an executable stack | known not affected: 8 | 2026-05-04T15:03:51+00:00 | Vulnerability · Source |
| CVE-2017-15133 | redhat_vex | miekg-dns: Denial of service via TCP serving code | known affected: 1 | 2026-05-04T15:03:49+00:00 | Vulnerability · Source |
| CVE-2017-20230 | microsoft_vex | Storable versions before 3.05 for Perl has a stack overflow | known affected: 2 | 2026-05-04T14:42:27+00:00 | Vulnerability · Source |
| CVE-2026-31700 | microsoft_vex | net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() | fixed: 1 known affected: 1 | 2026-05-04T14:41:14+00:00 | Vulnerability · Source |
| CVE-2026-31708 | microsoft_vex | smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path | fixed: 1 known affected: 1 | 2026-05-04T14:41:08+00:00 | Vulnerability · Source |
| CVE-2026-31698 | microsoft_vex | crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed | fixed: 1 known affected: 1 | 2026-05-04T14:40:49+00:00 | Vulnerability · Source |
| CVE-2026-31696 | microsoft_vex | rxrpc: Fix missing validation of ticket length in non-XDR key preparsing | fixed: 1 known affected: 1 | 2026-05-04T14:40:43+00:00 | Vulnerability · Source |
| CVE-2026-43033 | microsoft_vex | crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption | fixed: 1 known affected: 1 | 2026-05-04T14:40:36+00:00 | Vulnerability · Source |
| CVE-2026-31705 | microsoft_vex | ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment | fixed: 1 known affected: 1 | 2026-05-04T14:40:30+00:00 | Vulnerability · Source |
| CVE-2026-31694 | microsoft_vex | fuse: reject oversized dirents in page cache | fixed: 1 known affected: 1 | 2026-05-04T14:40:23+00:00 | Vulnerability · Source |
| CVE-2026-31699 | microsoft_vex | crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed | fixed: 1 known affected: 1 | 2026-05-04T14:40:17+00:00 | Vulnerability · Source |
| CVE-2026-31711 | microsoft_vex | smb: server: fix active_num_conn leak on transport allocation failure | fixed: 1 known affected: 1 | 2026-05-04T14:40:11+00:00 | Vulnerability · Source |
| CVE-2026-31697 | microsoft_vex | crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed | fixed: 1 known affected: 1 | 2026-05-04T14:39:59+00:00 | Vulnerability · Source |
| CVE-2026-41263 | redhat_vex | github.com/traefik/traefik: Traefik: Username enumeration via timing side-channel in BasicAuth middleware | known affected: 1 | 2026-05-04T10:17:06+00:00 | Vulnerability · Source |
| CVE-2026-23442 | microsoft_vex | ipv6: add NULL checks for idev in SRv6 paths | fixed: 1 known affected: 3 | 2026-05-02T14:38:31+00:00 | Vulnerability · Source |
| CVE-2026-23444 | microsoft_vex | wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure | fixed: 1 known affected: 3 | 2026-05-02T14:38:26+00:00 | Vulnerability · Source |
| CVE-2026-23399 | microsoft_vex | nf_tables: nft_dynset: fix possible stateful expression memleak in error path | fixed: 1 known affected: 4 | 2026-05-02T14:38:16+00:00 | Vulnerability · Source |
| CVE-2026-23389 | microsoft_vex | ice: Fix memory leak in ice_set_ringparam() | fixed: 1 known affected: 4 | 2026-05-02T14:38:11+00:00 | Vulnerability · Source |
| CVE-2026-23374 | microsoft_vex | blktrace: fix __this_cpu_read/write in preemptible context | fixed: 1 known affected: 4 | 2026-05-02T14:38:06+00:00 | Vulnerability · Source |
| CVE-2025-38531 | microsoft_vex | iio: common: st_sensors: Fix use of uninitialize device structs | fixed: 1 known affected: 14 | 2026-05-02T14:37:37+00:00 | Vulnerability · Source |
| CVE-2025-21739 | microsoft_vex | scsi: ufs: core: Fix use-after free in init error and remove paths | fixed: 1 known affected: 11 known not affected: 2 | 2026-05-02T14:37:20+00:00 | Vulnerability · Source |
| CVE-2026-6543 | redhat_vex | Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint | known not affected: 1 | 2026-05-02T08:47:32+00:00 | Vulnerability · Source |
| CVE-2026-35243 | redhat_vex | CVE-2026-35243 | known not affected: 1 | 2026-05-02T08:47:32+00:00 | Vulnerability · Source |
| CVE-2026-2311 | redhat_vex | IBM i is affected by a privilege escalation vulnerability in Web Administration GUI [] | known not affected: 1 | 2026-05-02T08:47:32+00:00 | Vulnerability · Source |
| CVE-2026-7505 | redhat_vex | nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorization | known not affected: 1 | 2026-05-02T02:47:56+00:00 | Vulnerability · Source |
| CVE-2026-7551 | redhat_vex | HKUDS OpenHarness Remote Command Execution via /bridge Slash Command | known not affected: 1 | 2026-05-02T02:47:56+00:00 | Vulnerability · Source |
| CVE-2026-7546 | redhat_vex | Totolink NR1800X lighttpd find_host_ip stack-based overflow | known not affected: 1 | 2026-05-02T02:47:56+00:00 | Vulnerability · Source |
| CVE-2026-7518 | redhat_vex | Open5GS AMF SBI Endpoint sdmsubscription-notify amf_namf_callback_handle_sdm_data_change_notify denial of service | known not affected: 1 | 2026-05-02T02:47:56+00:00 | Vulnerability · Source |
| CVE-2002-1336 | suse_vex | SUSE CVE CVE-2002-1336 | No product status | 2026-05-02T01:42:49+00:00 | Vulnerability · Source |
| CVE-2004-0460 | suse_vex | SUSE CVE CVE-2004-0460 | No product status | 2026-05-02T01:42:47+00:00 | Vulnerability · Source |
| CVE-2005-0988 | suse_vex | SUSE CVE CVE-2005-0988 | No product status | 2026-05-02T01:42:45+00:00 | Vulnerability · Source |
| CVE-2006-0645 | suse_vex | SUSE CVE CVE-2006-0645 | No product status | 2026-05-02T01:42:39+00:00 | Vulnerability · Source |
| CVE-2006-1526 | suse_vex | SUSE CVE CVE-2006-1526 | No product status | 2026-05-02T01:42:37+00:00 | Vulnerability · Source |
| CVE-2006-2314 | suse_vex | SUSE CVE CVE-2006-2314 | known affected: 5 | 2026-05-02T01:42:35+00:00 | Vulnerability · Source |
| CVE-2006-3016 | suse_vex | SUSE CVE CVE-2006-3016 | No product status | 2026-05-02T01:42:34+00:00 | Vulnerability · Source |
| CVE-2007-0126 | suse_vex | SUSE CVE CVE-2007-0126 | No product status | 2026-05-02T01:42:28+00:00 | Vulnerability · Source |
| CVE-2007-0882 | suse_vex | SUSE CVE CVE-2007-0882 | No product status | 2026-05-02T01:42:27+00:00 | Vulnerability · Source |