VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
306105 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-31420 | microsoft_vex | bridge: mrp: reject zero test interval to avoid OOM panic | known affected: 1 known not affected: 1 | 2026-04-30T01:53:33+00:00 | Vulnerability · Source |
| CVE-2026-34477 | microsoft_vex | Apache Log4j Core: verifyHostName attribute silently ignored in TLS configuration, allowing hostname verification bypass | known not affected: 1 | 2026-04-30T01:53:25+00:00 | Vulnerability · Source |
| CVE-2026-31584 | microsoft_vex | media: mediatek: vcodec: fix use-after-free in encoder release path | known affected: 1 known not affected: 2 | 2026-04-30T01:53:23+00:00 | Vulnerability · Source |
| CVE-2026-31476 | microsoft_vex | ksmbd: do not expire session on binding failure | fixed: 1 known affected: 1 known not affected: 1 | 2026-04-30T01:53:14+00:00 | Vulnerability · Source |
| CVE-2026-31686 | microsoft_vex | mm/kasan: fix double free for kasan pXds | known affected: 1 known not affected: 1 | 2026-04-30T01:53:06+00:00 | Vulnerability · Source |
| CVE-2026-3298 | microsoft_vex | Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes | known not affected: 1 | 2026-04-30T01:52:58+00:00 | Vulnerability · Source |
| CVE-2026-41305 | microsoft_vex | PostCSS has XSS via Unescaped </style> in its CSS Stringify Output | known not affected: 1 | 2026-04-30T01:52:52+00:00 | Vulnerability · Source |
| CVE-2018-0734 | microsoft_vex | Timing attack against DSA | fixed: 1 known affected: 6 known not affected: 5 | 2026-04-30T01:52:46+00:00 | Vulnerability · Source |
| CVE-2018-0735 | microsoft_vex | Timing attack against ECDSA signature generation | known affected: 5 known not affected: 5 | 2026-04-30T01:52:26+00:00 | Vulnerability · Source |
| CVE-2026-7295 | redhat_vex | SourceCodester Pizzafy Ecommerce System ajax.php save_menu cross site scripting | known not affected: 1 | 2026-04-29T20:48:19+00:00 | Vulnerability · Source |
| CVE-2026-7297 | redhat_vex | SourceCodester Pizzafy Ecommerce System ajax.php save_user cross site scripting | known not affected: 1 | 2026-04-29T20:48:18+00:00 | Vulnerability · Source |
| CVE-2026-7264 | redhat_vex | SourceCodester Pizzafy Ecommerce System ajax.php get_cart_items sql injection | known not affected: 1 | 2026-04-29T20:48:17+00:00 | Vulnerability · Source |
| CVE-2026-41910 | redhat_vex | OpenClaw < 2026.4.8 - Missing Owner-Only Enforcement in /allowlist Cross-Channel Writes | known not affected: 1 | 2026-04-29T20:48:15+00:00 | Vulnerability · Source |
| CVE-2026-7316 | redhat_vex | eiliyaabedini aider-mcp code_with_ai aider_mcp.py command injection | known not affected: 1 | 2026-04-29T20:48:15+00:00 | Vulnerability · Source |
| CVE-2026-41916 | redhat_vex | OpenClaw < 2026.4.8 - Stale Authentication State via Config Reload | known not affected: 1 | 2026-04-29T20:48:15+00:00 | Vulnerability · Source |
| CVE-2026-7271 | redhat_vex | DV0x creative-ad-agent creative-ad-agent-server sdk-server.ts path traversal | known not affected: 1 | 2026-04-29T20:48:14+00:00 | Vulnerability · Source |
| CVE-2026-42420 | redhat_vex | OpenClaw < 2026.4.8 - Improper Base64 Decoding Size Validation | known not affected: 1 | 2026-04-29T20:48:13+00:00 | Vulnerability · Source |
| CVE-2026-41911 | redhat_vex | OpenClaw < 2026.4.8 - Workspace-Only Filesystem Policy Bypass via docx upload_file/upload_image | known not affected: 1 | 2026-04-29T20:48:13+00:00 | Vulnerability · Source |
| CVE-2026-7225 | redhat_vex | SourceCodester Pizzafy Ecommerce System ajax.php delete_menu sql injection | known not affected: 1 | 2026-04-29T20:48:13+00:00 | Vulnerability · Source |
| CVE-2026-6807 | redhat_vex | NSA GRASSMARLIN Improper Restriction of XML External Entity Reference | known not affected: 1 | 2026-04-29T20:48:13+00:00 | Vulnerability · Source |
| CVE-2026-42427 | redhat_vex | OpenClaw < 2026.4.8 - Remote Code Execution via Build Tool Environment Variable Injection | known not affected: 1 | 2026-04-29T20:48:13+00:00 | Vulnerability · Source |
| CVE-2026-41461 | redhat_vex | SocialEngine <= 7.8.0 Blind SSRF via /core/link/preview | known not affected: 1 | 2026-04-29T20:48:12+00:00 | Vulnerability · Source |
| CVE-2026-41391 | redhat_vex | OpenClaw < 2026.3.31 - Environment Variable Bypass in Package Index URL Handling | known not affected: 1 | 2026-04-29T20:48:10+00:00 | Vulnerability · Source |
| CVE-2026-41403 | redhat_vex | OpenClaw < 2026.3.31 - Access Control Bypass via Proxied Remote Request Misclassification | known not affected: 1 | 2026-04-29T20:48:10+00:00 | Vulnerability · Source |
| CVE-2026-41383 | redhat_vex | OpenClaw < 2026.4.2 - Arbitrary Remote Directory Deletion via Mis-scoped Mirror Mode Paths | known not affected: 1 | 2026-04-29T20:48:09+00:00 | Vulnerability · Source |
| CVE-2026-41377 | redhat_vex | OpenClaw < 2026.3.31 - Fail-Open Security Scan Bypass in Plugin Installation | known not affected: 1 | 2026-04-29T20:48:08+00:00 | Vulnerability · Source |
| CVE-2026-34262 | redhat_vex | Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer | known not affected: 1 | 2026-04-29T20:48:08+00:00 | Vulnerability · Source |
| CVE-2026-24231 | redhat_vex | CVE-2026-24231 | known not affected: 1 | 2026-04-29T20:48:07+00:00 | Vulnerability · Source |
| CVE-2026-7289 | redhat_vex | D-Link DIR-825M formWanConfigSetup sub_414BA8 buffer overflow | known not affected: 1 | 2026-04-29T20:48:06+00:00 | Vulnerability · Source |
| CVE-2026-6942 | redhat_vex | radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypass | known not affected: 1 | 2026-04-29T20:48:06+00:00 | Vulnerability · Source |
| CVE-2026-7241 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi setWiFiBasicCfg os command injection | known not affected: 1 | 2026-04-29T20:48:06+00:00 | Vulnerability · Source |
| CVE-2026-41460 | redhat_vex | SocialEngine <= 7.8.0 SQL Injection via activity/index/get-memberall | known not affected: 1 | 2026-04-29T20:48:05+00:00 | Vulnerability · Source |
| CVE-2026-42426 | redhat_vex | OpenClaw < 2026.4.8 - Improper Authorization in node.pair.approve via operator.write Scope | known not affected: 1 | 2026-04-29T20:48:05+00:00 | Vulnerability · Source |
| CVE-2026-41404 | redhat_vex | OpenClaw < 2026.3.31 - Operator Admin Privilege Escalation via Trusted-Proxy Authentication | known not affected: 1 | 2026-04-29T20:48:05+00:00 | Vulnerability · Source |
| CVE-2026-41396 | redhat_vex | OpenClaw < 2026.3.31 - Environment Variable Override of Plugin Trust Root | known not affected: 1 | 2026-04-29T20:48:04+00:00 | Vulnerability · Source |
| CVE-2026-41397 | redhat_vex | OpenClaw < 2026.3.31 - Sandbox Escape via Unrestricted File Sync and Symlink Traversal | known not affected: 1 | 2026-04-29T20:48:04+00:00 | Vulnerability · Source |
| CVE-2026-41390 | redhat_vex | OpenClaw < 2026.3.28 - Exec Allowlist Bypass via Unregistered /usr/bin/script Wrapper | known not affected: 1 | 2026-04-29T20:48:04+00:00 | Vulnerability · Source |
| CVE-2026-32688 | redhat_vex | Atom table exhaustion via HTTP/2 :scheme pseudo-header in plug_cowboy | known not affected: 1 | 2026-04-29T20:48:03+00:00 | Vulnerability · Source |
| CVE-2026-3893 | redhat_vex | Carlson Software VASCO-B GNSS Receiver Missing Authentication for Critical Function | known not affected: 1 | 2026-04-29T20:48:03+00:00 | Vulnerability · Source |
| CVE-2026-41384 | redhat_vex | OpenClaw < 2026.3.24 - Environment Variable Injection via Workspace Config in CLI Backend | known not affected: 1 | 2026-04-29T20:48:03+00:00 | Vulnerability · Source |
| CVE-2026-41378 | redhat_vex | OpenClaw < 2026.3.31 - Privilege Escalation to Remote Code Execution via Unrestricted node.event Agent Dispatch | known not affected: 1 | 2026-04-29T20:48:03+00:00 | Vulnerability · Source |
| CVE-2025-10549 | redhat_vex | DLL Hijacking in EfficientLab Controlio Leads to Local Privilege Escalation | known not affected: 1 | 2026-04-29T20:48:02+00:00 | Vulnerability · Source |
| CVE-2026-0919 | redhat_vex | Unauthenticated Denial of Service via Oversized URL in HTTP Parser on TP-Link Tapo C210, C220 & C520WS | known not affected: 1 | 2026-04-29T20:48:02+00:00 | Vulnerability · Source |
| CVE-2026-24178 | redhat_vex | CVE-2026-24178 | known not affected: 1 | 2026-04-29T20:48:02+00:00 | Vulnerability · Source |
| CVE-2026-24222 | redhat_vex | CVE-2026-24222 | known not affected: 1 | 2026-04-29T20:48:02+00:00 | Vulnerability · Source |
| CVE-2025-10539 | redhat_vex | Improper TLS Certificate Validation RCE via Malicious Update in DeskTime Time Tracking App | known not affected: 1 | 2026-04-29T20:48:02+00:00 | Vulnerability · Source |
| CVE-2026-24204 | redhat_vex | CVE-2026-24204 | known not affected: 1 | 2026-04-29T20:48:02+00:00 | Vulnerability · Source |
| CVE-2026-24186 | redhat_vex | CVE-2026-24186 | known not affected: 1 | 2026-04-29T20:48:02+00:00 | Vulnerability · Source |
| CVE-2016-10708 | redhat_vex | openssh: Out of sequence NEWKEYS message can allow remote attacker to cause denial of service | fixed: 456 known affected: 8 known not affected: 9 | 2026-04-29T18:32:41+00:00 | Vulnerability · Source |
| CVE-2020-35357 | redhat_vex | gsl: Stack buffer overflow in gsl_stats_quantile_from_sorted_data | known affected: 11 | 2026-04-29T18:28:54+00:00 | Vulnerability · Source |