VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
305582 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-0966 | microsoft_vex | Libssh: buffer underflow in ssh_get_hexa() on invalid input | fixed: 4 known affected: 4 | 2026-05-01T01:39:01+00:00 | Vulnerability · Source |
| CVE-2026-0967 | microsoft_vex | Libssh: libssh: denial of service via inefficient regular expression processing | fixed: 4 known affected: 4 | 2026-05-01T01:38:53+00:00 | Vulnerability · Source |
| CVE-2026-0965 | microsoft_vex | Libssh: libssh: denial of service via improper configuration file handling | fixed: 4 known affected: 4 | 2026-05-01T01:38:46+00:00 | Vulnerability · Source |
| CVE-2026-6706 | redhat_vex | CVE-2026-6706 | known not affected: 1 | 2026-04-30T20:48:23+00:00 | Vulnerability · Source |
| CVE-2026-40557 | redhat_vex | Apache Storm Prometheus Reporter: Disabling TLS verification for Prometheus Reporter also disables it for all other connections | known not affected: 1 | 2026-04-30T20:48:23+00:00 | Vulnerability · Source |
| CVE-2026-7403 | redhat_vex | geldata gel-mcp server.py fetch_rule path traversal | known not affected: 1 | 2026-04-30T20:48:22+00:00 | Vulnerability · Source |
| CVE-2026-6911 | redhat_vex | Authentication Bypass via Missing JWT Signature Verification in AWS Ops Wheel | known not affected: 1 | 2026-04-30T20:48:22+00:00 | Vulnerability · Source |
| CVE-2026-41940 | redhat_vex | WebPros cPanel and WHM Authentication Bypass via Login Flow | known not affected: 1 | 2026-04-30T20:48:22+00:00 | Vulnerability · Source |
| CVE-2026-3259 | redhat_vex | Sensitive Data Disclosure in BigQuery via Materialized View Error Messages | known not affected: 1 | 2026-04-30T20:48:21+00:00 | Vulnerability · Source |
| CVE-2026-35569 | redhat_vex | ApostropheCMS: Stored XSS in SEO Fields Leads to Authenticated API Data Exposure in ApostropheCMS | known not affected: 1 | 2026-04-30T20:48:21+00:00 | Vulnerability · Source |
| CVE-2026-1858 | redhat_vex | wget2: wget2: Improper certificate validation allows server impersonation | known not affected: 1 | 2026-04-30T16:03:15+00:00 | Vulnerability · Source |
| CVE-2026-7319 | redhat_vex | elinsky execution-system-mcp add_action Tool server.py _get_context_file_path path traversal | known not affected: 1 | 2026-04-30T14:47:51+00:00 | Vulnerability · Source |
| CVE-2026-7306 | redhat_vex | Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded key | known not affected: 1 | 2026-04-30T14:47:51+00:00 | Vulnerability · Source |
| CVE-2026-6644 | redhat_vex | A command injection vulnerability was found in the PPTP VPN Clients on the ADM | known not affected: 1 | 2026-04-30T14:47:50+00:00 | Vulnerability · Source |
| CVE-2026-42430 | redhat_vex | OpenClaw < 2026.4.8 - Strict Browser SSRF Bypass via Playwright Redirect Handling | known not affected: 1 | 2026-04-30T14:47:50+00:00 | Vulnerability · Source |
| CVE-2026-41914 | redhat_vex | OpenClaw < 2026.4.8 - Server-Side Request Forgery in QQ Bot Media Fetch Paths | known not affected: 1 | 2026-04-30T14:47:50+00:00 | Vulnerability · Source |
| CVE-2026-42644 | redhat_vex | WordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Exposure vulnerability | known not affected: 1 | 2026-04-30T14:47:50+00:00 | Vulnerability · Source |
| CVE-2026-3861 | redhat_vex | CVE-2026-3861 | known not affected: 1 | 2026-04-30T14:47:49+00:00 | Vulnerability · Source |
| CVE-2026-42423 | redhat_vex | OpenClaw < 2026.4.8 - strictInlineEval Approval Boundary Bypass via Approval-Timeout Fallback | known not affected: 1 | 2026-04-30T14:47:49+00:00 | Vulnerability · Source |
| CVE-2026-41400 | redhat_vex | OpenClaw < 2026.3.31 - Resource Consumption via Oversized WebSocket Frames in voice-call | known not affected: 1 | 2026-04-30T14:47:49+00:00 | Vulnerability · Source |
| CVE-2026-21422 | redhat_vex | CVE-2026-21422 | known not affected: 1 | 2026-04-30T14:47:49+00:00 | Vulnerability · Source |
| CVE-2026-41394 | redhat_vex | OpenClaw < 2026.3.31 - Unauthorized Operator Scope Access in Unauthenticated Plugin-Auth Routes | known not affected: 1 | 2026-04-30T14:47:49+00:00 | Vulnerability · Source |
| CVE-2026-41407 | redhat_vex | OpenClaw < 2026.4.2 - Timing Side Channel in Shared-Secret Comparison | known not affected: 1 | 2026-04-30T14:47:49+00:00 | Vulnerability · Source |
| CVE-2026-41387 | redhat_vex | OpenClaw < 2026.3.22 - Supply Chain Redirection via Incomplete Host Environment Sanitization | known not affected: 1 | 2026-04-30T14:47:49+00:00 | Vulnerability · Source |
| CVE-2025-50328 | redhat_vex | CVE-2025-50328 | known not affected: 1 | 2026-04-30T14:47:49+00:00 | Vulnerability · Source |
| CVE-2026-31580 | microsoft_vex | bcache: fix cached_dev.sb_bio use-after-free and crash | known affected: 1 known not affected: 2 | 2026-04-30T14:38:53+00:00 | Vulnerability · Source |
| CVE-2026-31477 | microsoft_vex | ksmbd: fix memory leaks and NULL deref in smb2_lock() | known not affected: 2 | 2026-04-30T14:38:48+00:00 | Vulnerability · Source |
| CVE-2026-5392 | microsoft_vex | wolfSSL heap OOB read in PKCS7 SignedData streaming | known not affected: 2 | 2026-04-30T14:38:10+00:00 | Vulnerability · Source |
| CVE-2026-5448 | microsoft_vex | 1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore | known not affected: 2 | 2026-04-30T14:38:05+00:00 | Vulnerability · Source |
| CVE-2026-35155 | redhat_vex | CVE-2026-35155 | known not affected: 1 | 2026-04-30T08:47:29+00:00 | Vulnerability · Source |
| CVE-2021-23239 | redhat_vex | sudo: possible directory existence test due to race condition in sudoedit | fixed: 13 known affected: 7 known not affected: 3 | 2026-04-30T04:07:14+00:00 | Vulnerability · Source |
| CVE-2021-23240 | redhat_vex | sudo: symbolic link attack in SELinux-enabled sudoedit | fixed: 13 known affected: 7 known not affected: 3 | 2026-04-30T04:07:04+00:00 | Vulnerability · Source |
| CVE-2020-10752 | redhat_vex | openshift/openshift-apiserver: oauthtokens leaked to logs on panic | known affected: 15 | 2026-04-30T04:07:04+00:00 | Vulnerability · Source |
| CVE-2020-36332 | redhat_vex | libwebp: excessive memory allocation when reading a file | fixed: 31 known affected: 12 known not affected: 8 | 2026-04-30T04:04:13+00:00 | Vulnerability · Source |
| CVE-2020-12413 | redhat_vex | nss: Information exposure when DH secret are reused across multiple TLS connections | known affected: 37 | 2026-04-30T04:03:50+00:00 | Vulnerability · Source |
| CVE-2021-38578 | redhat_vex | edk2: integer underflow in SmmEntryPoint function leads to potential SMM privilege escalation | fixed: 20 known affected: 6 | 2026-04-30T03:18:53+00:00 | Vulnerability · Source |
| CVE-2025-15610 | redhat_vex | CVE-2025-15610 | known not affected: 1 | 2026-04-30T02:47:48+00:00 | Vulnerability · Source |
| CVE-1999-0636 | suse_vex | SUSE CVE CVE-1999-0636 | No product status | 2026-04-30T02:47:39+00:00 | Vulnerability · Source |
| CVE-2003-0858 | suse_vex | SUSE CVE CVE-2003-0858 | No product status | 2026-04-30T02:47:37+00:00 | Vulnerability · Source |
| CVE-2004-0181 | suse_vex | SUSE CVE CVE-2004-0181 | No product status | 2026-04-30T02:47:35+00:00 | Vulnerability · Source |
| CVE-2004-1076 | suse_vex | SUSE CVE CVE-2004-1076 | No product status | 2026-04-30T02:47:33+00:00 | Vulnerability · Source |
| CVE-2005-1038 | suse_vex | SUSE CVE CVE-2005-1038 | No product status | 2026-04-30T02:47:30+00:00 | Vulnerability · Source |
| CVE-2005-1751 | suse_vex | SUSE CVE CVE-2005-1751 | No product status | 2026-04-30T02:47:28+00:00 | Vulnerability · Source |
| CVE-2005-1921 | suse_vex | SUSE CVE CVE-2005-1921 | No product status | 2026-04-30T02:47:27+00:00 | Vulnerability · Source |
| CVE-2005-2641 | suse_vex | SUSE CVE CVE-2005-2641 | No product status | 2026-04-30T02:47:25+00:00 | Vulnerability · Source |
| CVE-2005-3531 | suse_vex | SUSE CVE CVE-2005-3531 | No product status | 2026-04-30T02:47:22+00:00 | Vulnerability · Source |
| CVE-2005-4031 | suse_vex | SUSE CVE CVE-2005-4031 | No product status | 2026-04-30T02:47:18+00:00 | Vulnerability · Source |
| CVE-2005-4887 | suse_vex | SUSE CVE CVE-2005-4887 | No product status | 2026-04-30T02:47:16+00:00 | Vulnerability · Source |
| CVE-2006-0454 | suse_vex | SUSE CVE CVE-2006-0454 | No product status | 2026-04-30T02:47:14+00:00 | Vulnerability · Source |
| CVE-2006-0457 | suse_vex | SUSE CVE CVE-2006-0457 | No product status | 2026-04-30T02:47:13+00:00 | Vulnerability · Source |