VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297730 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-46486 | redhat_vex | Mobile Verification Toolkit (MVT): Path Traversal via unsanitized File identifiers in iOS Backup processing | known not affected: 1 | 2026-06-09T20:59:33+00:00 | Vulnerability · Source |
| CVE-2026-45581 | redhat_vex | fabric-chaincode-java: TLS Private Key Password Disclosed in INFO Startup Logs in Chaincode-as-a-Service Mode | known not affected: 1 | 2026-06-09T20:59:33+00:00 | Vulnerability · Source |
| CVE-2026-11582 | redhat_vex | CodeAstro Student Attendance Management System index.php sql injection | known not affected: 1 | 2026-06-09T20:59:32+00:00 | Vulnerability · Source |
| CVE-2026-43966 | redhat_vex | HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2 | known not affected: 1 | 2026-06-09T20:59:32+00:00 | Vulnerability · Source |
| CVE-2025-21330 | redhat_vex | Windows Remote Desktop Services Denial of Service Vulnerability | known not affected: 1 | 2026-06-09T20:59:31+00:00 | Vulnerability · Source |
| CVE-2026-11531 | redhat_vex | imvks786 student_management_system Administrator Login Endpoint admin_login.php sql injection | known not affected: 1 | 2026-06-09T20:59:31+00:00 | Vulnerability · Source |
| CVE-2026-11552 | redhat_vex | SourceCodester Onlne Examination & Learning Management System import_users.php hard-coded password | known not affected: 1 | 2026-06-09T20:59:31+00:00 | Vulnerability · Source |
| CVE-2026-33840 | redhat_vex | Win32k Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-09T20:59:30+00:00 | Vulnerability · Source |
| CVE-2026-11429 | redhat_vex | Path Traversal in Altium Vault ScriptsController Allows Unauthenticated Remote Code Execution | known not affected: 1 | 2026-06-09T20:59:29+00:00 | Vulnerability · Source |
| CVE-2025-21370 | redhat_vex | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-09T20:59:29+00:00 | Vulnerability · Source |
| CVE-2026-24858 | redhat_vex | CVE-2026-24858 | known not affected: 1 | 2026-06-09T20:59:29+00:00 | Vulnerability · Source |
| CVE-2024-49132 | redhat_vex | Windows Remote Desktop Services Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-09T20:59:28+00:00 | Vulnerability · Source |
| CVE-2024-49075 | redhat_vex | Windows Remote Desktop Services Denial of Service Vulnerability | known not affected: 1 | 2026-06-09T20:59:27+00:00 | Vulnerability · Source |
| CVE-2024-43582 | redhat_vex | Remote Desktop Protocol Server Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-09T20:59:27+00:00 | Vulnerability · Source |
| CVE-2024-49123 | redhat_vex | Windows Remote Desktop Services Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-09T20:59:27+00:00 | Vulnerability · Source |
| CVE-2026-52778 | redhat_vex | YesWiki has Unsafe eval() in Formula Calculator - Remote Code Execution (RCE) & Denial of Service (DoS) | known not affected: 1 | 2026-06-09T20:59:26+00:00 | Vulnerability · Source |
| CVE-2026-8913 | redhat_vex | Command Injection in TP-Link's Archer MR600 WireGuard Client Configuration | known not affected: 1 | 2026-06-09T20:59:26+00:00 | Vulnerability · Source |
| CVE-2026-48507 | redhat_vex | Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users | known not affected: 1 | 2026-06-09T20:59:25+00:00 | Vulnerability · Source |
| CVE-2026-49755 | redhat_vex | Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies | known not affected: 1 | 2026-06-09T20:59:25+00:00 | Vulnerability · Source |
| CVE-2026-46657 | redhat_vex | Bludit's persistent authentication tokens not revoked upon account disablement | known not affected: 1 | 2026-06-09T20:59:24+00:00 | Vulnerability · Source |
| CVE-2026-46441 | redhat_vex | Flowise: Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource Reassignment | known not affected: 1 | 2026-06-09T20:59:24+00:00 | Vulnerability · Source |
| CVE-2026-46484 | redhat_vex | Headplane: Path Traversal + RBAC Bypass in renameNode allows authenticated OIDC users to expire or rename any node/user | known not affected: 1 | 2026-06-09T20:59:24+00:00 | Vulnerability · Source |
| CVE-2026-46490 | redhat_vex | samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML Assertions | known not affected: 1 | 2026-06-09T20:59:24+00:00 | Vulnerability · Source |
| CVE-2026-46480 | redhat_vex | Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover | known not affected: 1 | 2026-06-09T20:59:23+00:00 | Vulnerability · Source |
| CVE-2026-44541 | redhat_vex | Fides: DOM-based XSS vulnerability in fides.js via fides_description override | known not affected: 1 | 2026-06-09T20:59:23+00:00 | Vulnerability · Source |
| CVE-2026-46481 | redhat_vex | OpenMetadata: TEST_CONNECTION workflow leaks ingestion-bot JWT and database password to regular users | known not affected: 1 | 2026-06-09T20:59:23+00:00 | Vulnerability · Source |
| CVE-2026-46479 | redhat_vex | Flowise: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover | known not affected: 1 | 2026-06-09T20:59:23+00:00 | Vulnerability · Source |
| CVE-2026-46477 | redhat_vex | Flowise: Dataset create+update mass-assignment allows cross-workspace dataset takeover | known not affected: 1 | 2026-06-09T20:59:22+00:00 | Vulnerability · Source |
| CVE-2026-46478 | redhat_vex | Flowise: DatasetRow create+update mass-assignment allows cross-workspace row takeover | known not affected: 1 | 2026-06-09T20:59:22+00:00 | Vulnerability · Source |
| CVE-2026-46476 | redhat_vex | Flowise: CustomTemplate create+update mass-assignment allows cross-workspace template takeover | known not affected: 1 | 2026-06-09T20:59:22+00:00 | Vulnerability · Source |
| CVE-2026-46475 | redhat_vex | Flowise: Assistant create+update mass-assignment allows cross-workspace assistant takeover | known not affected: 1 | 2026-06-09T20:59:21+00:00 | Vulnerability · Source |
| CVE-2026-46443 | redhat_vex | Flowise: Credential Data Leak | known not affected: 1 | 2026-06-09T20:59:21+00:00 | Vulnerability · Source |
| CVE-2026-46444 | redhat_vex | Flowise: Vector Store No Permission Checks | known not affected: 1 | 2026-06-09T20:59:21+00:00 | Vulnerability · Source |
| CVE-2026-46442 | redhat_vex | Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape | known not affected: 1 | 2026-06-09T20:59:20+00:00 | Vulnerability · Source |
| CVE-2026-46440 | redhat_vex | Flowise: Basic Auth Credentials Exposed via API | known not affected: 1 | 2026-06-09T20:59:20+00:00 | Vulnerability · Source |
| CVE-2026-42863 | redhat_vex | Flowise: Mass Assignment in Chatflow Update Endpoint Allows Cross-Workspace AgentFlow Reassignment | known not affected: 1 | 2026-06-09T20:59:20+00:00 | Vulnerability · Source |
| CVE-2026-41448 | redhat_vex | AdGuard Home Authentication Bypass via Path Traversal in Admin-Token Cookie | known not affected: 1 | 2026-06-09T20:59:19+00:00 | Vulnerability · Source |
| CVE-2026-39910 | redhat_vex | STACKIT IaaS API Privilege Escalation via Service Account Attachment | known not affected: 1 | 2026-06-09T20:59:19+00:00 | Vulnerability · Source |
| CVE-2026-42861 | redhat_vex | Flowise: Mass Assignment in Variable Update Endpoint Allows Cross-Workspace Resource Reassignment | known not affected: 1 | 2026-06-09T20:59:19+00:00 | Vulnerability · Source |
| CVE-2026-40519 | redhat_vex | Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins() | known not affected: 1 | 2026-06-09T20:59:19+00:00 | Vulnerability · Source |
| CVE-2026-42862 | redhat_vex | Flowise: Mass Assignment in Tool Update Endpoint Allows Cross-Workspace Resource Reassignment | known not affected: 1 | 2026-06-09T20:59:19+00:00 | Vulnerability · Source |
| CVE-2026-25856 | redhat_vex | OpenBullet2 0.3.2 Authenticated RCE via Job Configuration Interface | known not affected: 1 | 2026-06-09T20:59:18+00:00 | Vulnerability · Source |
| CVE-2026-25855 | redhat_vex | OpenBullet2 0.3.2 Authenticated RCE via FileProxySource Script Upload | known not affected: 1 | 2026-06-09T20:59:18+00:00 | Vulnerability · Source |
| CVE-2026-25559 | redhat_vex | OpenBullet2 0.3.2 Path Traversal via Wordlist Endpoint | known not affected: 1 | 2026-06-09T20:59:18+00:00 | Vulnerability · Source |
| CVE-2026-39908 | redhat_vex | OpenBullet2 0.3.2 NTLMv2 Hash Disclosure via UNC Path Proxy Source | known not affected: 1 | 2026-06-09T20:59:18+00:00 | Vulnerability · Source |
| CVE-2026-11556 | redhat_vex | Tenda F451 Web Management WriteFacMac formWriteFacMac os command injection | known not affected: 1 | 2026-06-09T20:59:17+00:00 | Vulnerability · Source |
| CVE-2026-25555 | redhat_vex | OpenBullet2 0.3.2 Authentication Bypass via X-Api-Key Header | known not affected: 1 | 2026-06-09T20:59:17+00:00 | Vulnerability · Source |
| CVE-2026-11557 | redhat_vex | Tenda F451 Web Management Natlimit fromNatlimit stack-based overflow | known not affected: 1 | 2026-06-09T20:59:17+00:00 | Vulnerability · Source |
| CVE-2026-11553 | redhat_vex | Tenda HG7HG9/HG10 formPPPEdit stack-based overflow | known not affected: 1 | 2026-06-09T20:59:17+00:00 | Vulnerability · Source |
| CVE-2026-10544 | redhat_vex | CVE-2026-10544 | known not affected: 1 | 2026-06-09T20:59:16+00:00 | Vulnerability · Source |