VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
302102 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-34462 | redhat_vex | Sandboxie-Plus ProcessServer boxname stack buffer overflows via unterminated wide string copy | known not affected: 1 | 2026-05-06T20:21:47+00:00 | Vulnerability · Source |
| CVE-2026-42222 | redhat_vex | nginx-ui: Unauthenticated first-boot instance claim via POST /api/install allows remote bootstrap takeover | known not affected: 1 | 2026-05-06T20:21:47+00:00 | Vulnerability · Source |
| CVE-2026-34464 | redhat_vex | Sandboxie-Plus NamedPipeServer OpenHandler stack overflow via unterminated server field | known not affected: 1 | 2026-05-06T20:21:46+00:00 | Vulnerability · Source |
| CVE-2026-40280 | redhat_vex | Gotenberg SSRF via case-insensitive URL scheme bypass in webhook and downloadFrom deny-lists | known not affected: 1 | 2026-05-06T20:21:46+00:00 | Vulnerability · Source |
| CVE-2026-3298 | redhat_vex | Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes | known not affected: 1 | 2026-05-06T20:21:46+00:00 | Vulnerability · Source |
| CVE-2026-40329 | redhat_vex | SQL Injection vulnerability via sortBy in beanFeed | known not affected: 1 | 2026-05-06T20:21:46+00:00 | Vulnerability · Source |
| CVE-2026-34459 | redhat_vex | Sandboxie-Plus sandbox escape via uninitialized memory leak and stack overflow in GetRawInputDeviceInfoSlave | known not affected: 1 | 2026-05-06T20:21:45+00:00 | Vulnerability · Source |
| CVE-2026-32689 | redhat_vex | Long-poll NDJSON body splitting causes unbounded memory allocation in Phoenix | known not affected: 1 | 2026-05-06T20:21:45+00:00 | Vulnerability · Source |
| CVE-2026-32603 | redhat_vex | Sandboxie kernel driver denial of service via malformed IOCTL from sandboxed process | known not affected: 1 | 2026-05-06T20:21:45+00:00 | Vulnerability · Source |
| CVE-2026-34461 | redhat_vex | Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalation | known not affected: 1 | 2026-05-06T20:21:45+00:00 | Vulnerability · Source |
| CVE-2025-20205 | redhat_vex | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | known not affected: 1 | 2026-05-06T20:21:44+00:00 | Vulnerability · Source |
| CVE-2026-25588 | redhat_vex | RedisTimeSeries RESTORE invalid memory access may allow remote code execution | known not affected: 1 | 2026-05-06T20:21:44+00:00 | Vulnerability · Source |
| CVE-2026-26015 | redhat_vex | Unauthenticated RCE in DocsGPT MCP STDIO Configuration | known not affected: 1 | 2026-05-06T20:21:44+00:00 | Vulnerability · Source |
| CVE-2025-66369 | redhat_vex | CVE-2025-66369 | known not affected: 1 | 2026-05-06T20:21:44+00:00 | Vulnerability · Source |
| CVE-2026-27960 | redhat_vex | OpenCTI privilege escalation and unauthenticated access via default admin account | known not affected: 1 | 2026-05-06T20:21:44+00:00 | Vulnerability · Source |
| CVE-2025-20204 | redhat_vex | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | known not affected: 1 | 2026-05-06T20:21:44+00:00 | Vulnerability · Source |
| CVE-2025-15578 | redhat_vex | maypole: Maypole for Perl generates session ids insecurely | known not affected: 1 | 2026-05-06T17:52:20+00:00 | Vulnerability · Source |
| CVE-2025-14010 | redhat_vex | ansible-collection-community-general: ansible-collection-community-general: Keycloak user module leaks credentials in verbose output | known affected: 6 | 2026-05-06T16:49:04+00:00 | Vulnerability · Source |
| CVE-2025-12819 | redhat_vex | pgbouncer: Untrusted search path in auth_query connection in PgBouncer | known not affected: 1 | 2026-05-06T16:47:44+00:00 | Vulnerability · Source |
| CVE-2025-12120 | redhat_vex | lite-xl: Code injection in Lite XL | known not affected: 1 | 2026-05-06T16:47:44+00:00 | Vulnerability · Source |
| CVE-2025-8083 | redhat_vex | vuetify: Vuetify Prototype Pollution via Preset options | known not affected: 1 | 2026-05-06T16:47:40+00:00 | Vulnerability · Source |
| CVE-2025-12121 | redhat_vex | lite-xl: Command injection in Lite XL | known not affected: 1 | 2026-05-06T16:32:57+00:00 | Vulnerability · Source |
| CVE-2024-51317 | redhat_vex | netsurf: Use after free in NetSurf | known not affected: 1 | 2026-05-06T16:32:57+00:00 | Vulnerability · Source |
| CVE-2025-60360 | redhat_vex | radare2: radare2 memory leak | known not affected: 1 | 2026-05-06T15:28:08+00:00 | Vulnerability · Source |
| CVE-2025-61224 | redhat_vex | dokuwiki: Dokuwiki cross site scripting | known not affected: 1 | 2026-05-06T15:24:39+00:00 | Vulnerability · Source |
| CVE-2025-59149 | redhat_vex | Suricata: Suricata: Stack buffer overflow in rule parser when processing long keywords with transforms | known not affected: 1 | 2026-05-06T15:24:34+00:00 | Vulnerability · Source |
| CVE-2025-12343 | redhat_vex | FFmpeg: Double-Free Vulnerability in FFmpeg TensorFlow DNN Backend | known not affected: 1 | 2026-05-06T15:24:31+00:00 | Vulnerability · Source |
| CVE-2025-11147 | redhat_vex | apt-cacher-ng: Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG | known not affected: 1 | 2026-05-06T15:24:22+00:00 | Vulnerability · Source |
| CVE-2025-11146 | redhat_vex | apt-cacher-ng: Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG | known not affected: 1 | 2026-05-06T15:24:22+00:00 | Vulnerability · Source |
| CVE-2025-59148 | redhat_vex | suricata-ids: Suricata NULL pointer dereference | known not affected: 1 | 2026-05-06T15:23:49+00:00 | Vulnerability · Source |
| CVE-2025-53538 | redhat_vex | suricata: Suricata resource starvation | known not affected: 1 | 2026-05-06T15:02:26+00:00 | Vulnerability · Source |
| CVE-2025-9175 | redhat_vex | shc: neurobin shc stack-based overflow | known not affected: 1 | 2026-05-06T15:02:26+00:00 | Vulnerability · Source |
| CVE-2026-27820 | microsoft_vex | zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption | fixed: 2 known affected: 3 | 2026-05-06T14:52:20+00:00 | Vulnerability · Source |
| CVE-2026-27141 | microsoft_vex | Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net | fixed: 3 known affected: 67 | 2026-05-06T14:43:42+00:00 | Vulnerability · Source |
| CVE-2025-58767 | microsoft_vex | REXML has a DoS condition when parsing malformed XML file | fixed: 2 known affected: 7 | 2026-05-06T14:39:02+00:00 | Vulnerability · Source |
| CVE-2025-44779 | redhat_vex | ollama: Ollama file deletion | known not affected: 1 | 2026-05-06T14:38:30+00:00 | Vulnerability · Source |
| CVE-2025-7700 | redhat_vex | FFmpeg: NULL Pointer Dereference in FFmpeg ALS Decoder (libavcodec/alsdec.c) | known not affected: 1 | 2026-05-06T14:38:28+00:00 | Vulnerability · Source |
| CVE-2026-7810 | redhat_vex | UsamaK98 python-notebook-mcp server.py add_cell path traversal | known not affected: 1 | 2026-05-06T14:21:51+00:00 | Vulnerability · Source |
| CVE-2026-7781 | redhat_vex | Open5GS amf-3gpp-access Endpoint nudm-handler.c udm_nudm_uecm_handle_amf_registration_update denial of service | known not affected: 1 | 2026-05-06T14:21:46+00:00 | Vulnerability · Source |
| CVE-2026-7833 | redhat_vex | EFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injection | known not affected: 1 | 2026-05-06T14:21:45+00:00 | Vulnerability · Source |
| CVE-2026-43569 | redhat_vex | OpenClaw < 2026.4.9 - Untrusted Provider Plugin Auto-enablement via Workspace Provider Auth | known not affected: 1 | 2026-05-06T14:21:45+00:00 | Vulnerability · Source |
| CVE-2026-6704 | redhat_vex | Blog Settings <= 1.0 - Reflected Cross-Site Scripting via 'page' Parameter | known not affected: 1 | 2026-05-06T14:21:45+00:00 | Vulnerability · Source |
| CVE-2026-5505 | redhat_vex | WP-Clippy <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-05-06T14:21:45+00:00 | Vulnerability · Source |
| CVE-2026-5294 | redhat_vex | GeekyBot <= 1.2.2 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation via 'geekybot_frontendajax' AJAX Action | known not affected: 1 | 2026-05-06T14:21:45+00:00 | Vulnerability · Source |
| CVE-2026-27693 | redhat_vex | traccar allows XML injection in KML and GPX exports | known not affected: 1 | 2026-05-06T14:21:44+00:00 | Vulnerability · Source |
| CVE-2026-43527 | redhat_vex | OpenClaw < 2026.4.14 - Server-Side Request Forgery via Private Network Navigation | known not affected: 1 | 2026-05-06T14:21:44+00:00 | Vulnerability · Source |
| CVE-2026-3359 | redhat_vex | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.42 - Unauthenticated SQL Injection via 'inputs' | known not affected: 1 | 2026-05-06T14:21:44+00:00 | Vulnerability · Source |
| CVE-2026-42220 | redhat_vex | nginx-ui: Authenticated settings disclosure exposes node.secret and enables trusted-node authentication abuse, backup exfiltration, and restore-based nginx-ui state rollback | known not affected: 1 | 2026-05-06T14:21:44+00:00 | Vulnerability · Source |
| CVE-2026-42435 | redhat_vex | OpenClaw 2026.2.22 < 2026.4.12 - Shell-Wrapper Detection Bypass via Environment Variable Assignment Injection | known not affected: 1 | 2026-05-06T14:21:44+00:00 | Vulnerability · Source |
| CVE-2026-43533 | redhat_vex | OpenClaw < 2026.4.10 - Arbitrary Local File Read via QQBot Media Tags | known not affected: 1 | 2026-05-06T14:21:44+00:00 | Vulnerability · Source |