VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297698 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-44750 | redhat_vex | Missing Authorization check in SAP MDG (Review Match Groups Application) | known not affected: 1 | 2026-06-10T02:59:20+00:00 | Vulnerability · Source |
| CVE-2026-44746 | redhat_vex | Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Servlet) | known not affected: 1 | 2026-06-10T02:59:19+00:00 | Vulnerability · Source |
| CVE-2026-44744 | redhat_vex | SQL Injection vulnerability in SAP S/4HANA | known not affected: 1 | 2026-06-10T02:59:19+00:00 | Vulnerability · Source |
| CVE-2026-34665 | redhat_vex | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) | known not affected: 1 | 2026-06-10T02:59:18+00:00 | Vulnerability · Source |
| CVE-2026-20245 | redhat_vex | Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability | known not affected: 1 | 2026-06-10T02:59:18+00:00 | Vulnerability · Source |
| CVE-2026-7556 | redhat_vex | FV Flowplayer Video Player <= 7.5.49.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Text | known not affected: 1 | 2026-06-10T02:59:18+00:00 | Vulnerability · Source |
| CVE-2026-44748 | redhat_vex | XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform | known not affected: 1 | 2026-06-10T02:59:17+00:00 | Vulnerability · Source |
| CVE-2026-44751 | redhat_vex | Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform | known not affected: 1 | 2026-06-10T02:59:17+00:00 | Vulnerability · Source |
| CVE-2026-10862 | redhat_vex | Accordions <= 2.3.23 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Field | known not affected: 1 | 2026-06-10T02:59:16+00:00 | Vulnerability · Source |
| CVE-2026-40128 | redhat_vex | Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container) | known not affected: 1 | 2026-06-10T02:59:16+00:00 | Vulnerability · Source |
| CVE-2026-27671 | redhat_vex | Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform | known not affected: 1 | 2026-06-10T02:59:16+00:00 | Vulnerability · Source |
| CVE-2026-24315 | redhat_vex | Path Traversal Vulnerability in SAP Fiori (launchpad) | known not affected: 1 | 2026-06-10T02:59:16+00:00 | Vulnerability · Source |
| CVE-2026-32759 | suse_vex | SUSE CVE CVE-2026-32759 | No product status | 2026-06-10T02:28:56+00:00 | Vulnerability · Source |
| CVE-2026-42224 | suse_vex | SUSE CVE CVE-2026-42224 | recommended: 1 | 2026-06-10T02:28:10+00:00 | Vulnerability · Source |
| CVE-2026-49762 | suse_vex | SUSE CVE CVE-2026-49762 | known affected: 1 | 2026-06-10T02:25:21+00:00 | Vulnerability · Source |
| CVE-2026-47344 | redhat_vex | TYPO3 HTML Sanitizer allows Cross-Site Scripting | known not affected: 1 | 2026-06-09T20:59:41+00:00 | Vulnerability · Source |
| CVE-2026-49756 | redhat_vex | Multipart form-data header injection in Req via unescaped name/filename/content_type | known not affected: 1 | 2026-06-09T20:59:41+00:00 | Vulnerability · Source |
| CVE-2025-31514 | redhat_vex | CVE-2025-31514 | known not affected: 1 | 2026-06-09T20:59:41+00:00 | Vulnerability · Source |
| CVE-2026-48488 | redhat_vex | phpMyFAQ has Weak Cryptography - SHA1 for Password Hashing | known not affected: 1 | 2026-06-09T20:59:41+00:00 | Vulnerability · Source |
| CVE-2026-34237 | redhat_vex | MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *) | known not affected: 1 | 2026-06-09T20:59:39+00:00 | Vulnerability · Source |
| CVE-2026-11533 | redhat_vex | imvks786 student_management_system Student Deletion Endpoint see.php improper authorization | known not affected: 1 | 2026-06-09T20:59:37+00:00 | Vulnerability · Source |
| CVE-2026-11534 | redhat_vex | imvks786 student_management_system add.php cross site scripting | known not affected: 1 | 2026-06-09T20:59:37+00:00 | Vulnerability · Source |
| CVE-2026-11532 | redhat_vex | imvks786 student_management_system Student Record add.php access control | known not affected: 1 | 2026-06-09T20:59:36+00:00 | Vulnerability · Source |
| CVE-2026-49141 | redhat_vex | WACRM Authorization Bypass via Automation Engine Endpoint | known not affected: 1 | 2026-06-09T20:59:35+00:00 | Vulnerability · Source |
| CVE-2026-47345 | redhat_vex | TYPO3 HTML Sanitizer allows Cross-Site Scripting | known not affected: 1 | 2026-06-09T20:59:34+00:00 | Vulnerability · Source |
| CVE-2026-46486 | redhat_vex | Mobile Verification Toolkit (MVT): Path Traversal via unsanitized File identifiers in iOS Backup processing | known not affected: 1 | 2026-06-09T20:59:33+00:00 | Vulnerability · Source |
| CVE-2026-45581 | redhat_vex | fabric-chaincode-java: TLS Private Key Password Disclosed in INFO Startup Logs in Chaincode-as-a-Service Mode | known not affected: 1 | 2026-06-09T20:59:33+00:00 | Vulnerability · Source |
| CVE-2026-11582 | redhat_vex | CodeAstro Student Attendance Management System index.php sql injection | known not affected: 1 | 2026-06-09T20:59:32+00:00 | Vulnerability · Source |
| CVE-2026-43966 | redhat_vex | HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2 | known not affected: 1 | 2026-06-09T20:59:32+00:00 | Vulnerability · Source |
| CVE-2025-21330 | redhat_vex | Windows Remote Desktop Services Denial of Service Vulnerability | known not affected: 1 | 2026-06-09T20:59:31+00:00 | Vulnerability · Source |
| CVE-2026-11531 | redhat_vex | imvks786 student_management_system Administrator Login Endpoint admin_login.php sql injection | known not affected: 1 | 2026-06-09T20:59:31+00:00 | Vulnerability · Source |
| CVE-2026-11552 | redhat_vex | SourceCodester Onlne Examination & Learning Management System import_users.php hard-coded password | known not affected: 1 | 2026-06-09T20:59:31+00:00 | Vulnerability · Source |
| CVE-2026-33840 | redhat_vex | Win32k Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-09T20:59:30+00:00 | Vulnerability · Source |
| CVE-2026-11429 | redhat_vex | Path Traversal in Altium Vault ScriptsController Allows Unauthenticated Remote Code Execution | known not affected: 1 | 2026-06-09T20:59:29+00:00 | Vulnerability · Source |
| CVE-2025-21370 | redhat_vex | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-09T20:59:29+00:00 | Vulnerability · Source |
| CVE-2026-24858 | redhat_vex | CVE-2026-24858 | known not affected: 1 | 2026-06-09T20:59:29+00:00 | Vulnerability · Source |
| CVE-2024-49132 | redhat_vex | Windows Remote Desktop Services Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-09T20:59:28+00:00 | Vulnerability · Source |
| CVE-2024-49075 | redhat_vex | Windows Remote Desktop Services Denial of Service Vulnerability | known not affected: 1 | 2026-06-09T20:59:27+00:00 | Vulnerability · Source |
| CVE-2024-43582 | redhat_vex | Remote Desktop Protocol Server Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-09T20:59:27+00:00 | Vulnerability · Source |
| CVE-2024-49123 | redhat_vex | Windows Remote Desktop Services Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-09T20:59:27+00:00 | Vulnerability · Source |
| CVE-2026-52778 | redhat_vex | YesWiki has Unsafe eval() in Formula Calculator - Remote Code Execution (RCE) & Denial of Service (DoS) | known not affected: 1 | 2026-06-09T20:59:26+00:00 | Vulnerability · Source |
| CVE-2026-8913 | redhat_vex | Command Injection in TP-Link's Archer MR600 WireGuard Client Configuration | known not affected: 1 | 2026-06-09T20:59:26+00:00 | Vulnerability · Source |
| CVE-2026-48507 | redhat_vex | Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users | known not affected: 1 | 2026-06-09T20:59:25+00:00 | Vulnerability · Source |
| CVE-2026-49755 | redhat_vex | Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies | known not affected: 1 | 2026-06-09T20:59:25+00:00 | Vulnerability · Source |
| CVE-2026-46657 | redhat_vex | Bludit's persistent authentication tokens not revoked upon account disablement | known not affected: 1 | 2026-06-09T20:59:24+00:00 | Vulnerability · Source |
| CVE-2026-46441 | redhat_vex | Flowise: Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource Reassignment | known not affected: 1 | 2026-06-09T20:59:24+00:00 | Vulnerability · Source |
| CVE-2026-46484 | redhat_vex | Headplane: Path Traversal + RBAC Bypass in renameNode allows authenticated OIDC users to expire or rename any node/user | known not affected: 1 | 2026-06-09T20:59:24+00:00 | Vulnerability · Source |
| CVE-2026-46490 | redhat_vex | samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML Assertions | known not affected: 1 | 2026-06-09T20:59:24+00:00 | Vulnerability · Source |
| CVE-2026-46480 | redhat_vex | Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover | known not affected: 1 | 2026-06-09T20:59:23+00:00 | Vulnerability · Source |
| CVE-2026-44541 | redhat_vex | Fides: DOM-based XSS vulnerability in fides.js via fides_description override | known not affected: 1 | 2026-06-09T20:59:23+00:00 | Vulnerability · Source |