VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297729 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-46493 | redhat_vex | haxtheweb/haxcms-php uses insecure method for generating salt | known not affected: 1 | 2026-06-07T00:43:06+00:00 | Vulnerability · Source |
| CVE-2026-46400 | redhat_vex | HAXCMS PHP has a File Upload Validation Bypass | known not affected: 1 | 2026-06-07T00:43:06+00:00 | Vulnerability · Source |
| CVE-2026-46398 | redhat_vex | HAX CMS Missing Secure Flag on Cookie | known not affected: 1 | 2026-06-07T00:43:06+00:00 | Vulnerability · Source |
| CVE-2026-11419 | redhat_vex | Path Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File Write | known not affected: 1 | 2026-06-07T00:43:06+00:00 | Vulnerability · Source |
| CVE-2026-11416 | redhat_vex | MoviePilot Path Traversal via Cloud Storage Download Handlers | known not affected: 1 | 2026-06-07T00:43:06+00:00 | Vulnerability · Source |
| CVE-2026-11414 | redhat_vex | Unauthenticated File Exfiltration in Altium Enterprise Server Vault Service via Hard-coded Cryptographic Key and Path Traversal | known not affected: 1 | 2026-06-07T00:43:05+00:00 | Vulnerability · Source |
| CVE-2026-46396 | redhat_vex | HAX CMS has a stored XSS via <iframe> that allows access to sensitive client-side data and account takeover | known not affected: 1 | 2026-06-07T00:43:04+00:00 | Vulnerability · Source |
| CVE-2026-46496 | redhat_vex | HAX CMS: Stored XSS via '<video-player>' component allows arbitrary JavaScript execution and token theft | known not affected: 1 | 2026-06-07T00:43:04+00:00 | Vulnerability · Source |
| CVE-2026-44681 | redhat_vex | Authlib: Open Redirect in Authlib OIDC Implicit/Hybrid Authorization | known not affected: 1 | 2026-06-07T00:43:04+00:00 | Vulnerability · Source |
| CVE-2026-11362 | redhat_vex | DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags | known not affected: 1 | 2026-06-06T18:43:46+00:00 | Vulnerability · Source |
| CVE-2026-11341 | redhat_vex | D-Link DWR-M920 formIMEISetup sub_412DA0 os command injection | known not affected: 1 | 2026-06-06T18:43:46+00:00 | Vulnerability · Source |
| CVE-2026-9270 | redhat_vex | DataDog::DogStatsd versions through 0.07 for Perl allow metric injections | known not affected: 1 | 2026-06-06T18:43:46+00:00 | Vulnerability · Source |
| CVE-2026-11339 | redhat_vex | D-Link DWR-M920 formUSSDSetup sub_41CF20 command injection | known not affected: 1 | 2026-06-06T18:43:45+00:00 | Vulnerability · Source |
| CVE-2026-11338 | redhat_vex | SourceCodester Ship Ferry Ticket Reservation System manage_user cross site scripting | known not affected: 1 | 2026-06-06T18:43:45+00:00 | Vulnerability · Source |
| CVE-2026-11337 | redhat_vex | tittuvarghese CollegeManagementSystem fetch.php cross site scripting | known not affected: 1 | 2026-06-06T18:43:44+00:00 | Vulnerability · Source |
| CVE-2026-11336 | redhat_vex | tittuvarghese CollegeManagementSystem Admin admin_page.php improper authorization | known not affected: 1 | 2026-06-06T18:43:43+00:00 | Vulnerability · Source |
| CVE-2026-11335 | redhat_vex | tittuvarghese CollegeManagementSystem login-form.php session_start session fixiation | known not affected: 1 | 2026-06-06T18:43:43+00:00 | Vulnerability · Source |
| CVE-2026-11333 | redhat_vex | tittuvarghese CollegeManagementSystem Student Data Upload Endpoint upload_student_data.php unrestricted upload | known not affected: 1 | 2026-06-06T18:43:42+00:00 | Vulnerability · Source |
| CVE-2026-11330 | redhat_vex | thedotmack claude-mem Observation Content Hash store.ts computeObservationContentHash weak hash | known not affected: 1 | 2026-06-06T18:43:41+00:00 | Vulnerability · Source |
| CVE-2026-48926 | redhat_vex | CVE-2026-48926 | known not affected: 1 | 2026-06-06T18:43:41+00:00 | Vulnerability · Source |
| CVE-2026-46390 | redhat_vex | HAX CMS has Unauthenticated Git Access via User-Controlled Key | known not affected: 1 | 2026-06-06T18:43:40+00:00 | Vulnerability · Source |
| CVE-2026-7473 | redhat_vex | Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass | known not affected: 1 | 2026-06-06T18:43:40+00:00 | Vulnerability · Source |
| CVE-2026-50232 | redhat_vex | Lyrion Music Server 9.2.0 Stored XSS via Metadata Tags | known not affected: 1 | 2026-06-06T18:43:40+00:00 | Vulnerability · Source |
| CVE-2026-50235 | redhat_vex | Lyrion Music Server 9.2.0 Reflected XSS via search Parameters | known not affected: 1 | 2026-06-06T18:43:39+00:00 | Vulnerability · Source |
| CVE-2026-11344 | redhat_vex | code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload | known not affected: 1 | 2026-06-06T18:43:38+00:00 | Vulnerability · Source |
| CVE-2026-50233 | redhat_vex | Lyrion Music Server 9.2.0 Arbitrary Directory Listing | known not affected: 1 | 2026-06-06T18:43:38+00:00 | Vulnerability · Source |
| CVE-2026-50231 | redhat_vex | Lyrion Music Server 9.2.0 Unauthenticated Stored XSS via server.log | known not affected: 1 | 2026-06-06T18:43:37+00:00 | Vulnerability · Source |
| CVE-2026-50230 | redhat_vex | Lyrion Music Server 9.2.0 Reflected XSS via server.log | known not affected: 1 | 2026-06-06T18:43:36+00:00 | Vulnerability · Source |
| CVE-2026-11334 | redhat_vex | tittuvarghese CollegeManagementSystem fetch.php sql injection | known not affected: 1 | 2026-06-06T18:43:35+00:00 | Vulnerability · Source |
| CVE-2026-11342 | redhat_vex | code-projects Hotel and Tourism Reservation System details.php sql injection | known not affected: 1 | 2026-06-06T18:43:35+00:00 | Vulnerability · Source |
| CVE-2026-5415 | redhat_vex | WP Captcha PRO <= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link | known not affected: 1 | 2026-06-06T18:43:30+00:00 | Vulnerability · Source |
| CVE-2026-46393 | redhat_vex | HAXcms createSite SSRF Enables Arbitrary File Read | known not affected: 1 | 2026-06-06T18:43:29+00:00 | Vulnerability · Source |
| CVE-2026-5411 | redhat_vex | WP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload | known not affected: 1 | 2026-06-06T18:43:29+00:00 | Vulnerability · Source |
| CVE-2026-46511 | redhat_vex | HAXcms: Mass Token Exfiltration and Cross-Tenant Hijack | known not affected: 1 | 2026-06-06T18:43:28+00:00 | Vulnerability · Source |
| CVE-2026-46399 | redhat_vex | Authenticated Remote Code Execution via File Overwrite | known not affected: 1 | 2026-06-06T18:43:28+00:00 | Vulnerability · Source |
| CVE-2026-46394 | redhat_vex | HAX CMS Vulnerable to Command Injection using Git.php | known not affected: 1 | 2026-06-06T18:43:27+00:00 | Vulnerability · Source |
| CVE-2026-46395 | redhat_vex | HAX CMS Vulnerable to Private Key Disclosure via Broken HMAC Implementation | known not affected: 1 | 2026-06-06T18:43:27+00:00 | Vulnerability · Source |
| CVE-2026-46392 | redhat_vex | HAX CMS PHP Has a Stored XSS via Case-Sensitivity Mismatch in HTML Upload Validation | known not affected: 1 | 2026-06-06T18:43:27+00:00 | Vulnerability · Source |
| CVE-2026-46389 | redhat_vex | UDS Identity Config has a client authentication bypass in `ClientIdAndKubernetesSecretAuthenticator` | known not affected: 1 | 2026-06-06T18:43:26+00:00 | Vulnerability · Source |
| CVE-2026-46391 | redhat_vex | HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis | known not affected: 1 | 2026-06-06T18:43:26+00:00 | Vulnerability · Source |
| CVE-2026-10580 | redhat_vex | Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API | known not affected: 1 | 2026-06-06T18:43:26+00:00 | Vulnerability · Source |
| CVE-2026-8714 | redhat_vex | Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS | known not affected: 1 | 2026-06-06T18:43:25+00:00 | Vulnerability · Source |
| CVE-2026-50733 | redhat_vex | Markdown Preview Enhanced Arbitrary Code Execution via WaveDrom eval() | known not affected: 1 | 2026-06-06T18:43:24+00:00 | Vulnerability · Source |
| CVE-2026-50234 | redhat_vex | Lyrion Music Server 9.2.0 Path Traversal File Read | known not affected: 1 | 2026-06-06T18:43:23+00:00 | Vulnerability · Source |
| CVE-2026-49493 | redhat_vex | Markdown Preview Enhanced Arbitrary Code Execution via Bitfield interpretJS() | known not affected: 1 | 2026-06-06T18:43:23+00:00 | Vulnerability · Source |
| CVE-2026-49492 | redhat_vex | Markdown Preview Enhanced OS Command Injection in External File and Link Opening | known not affected: 1 | 2026-06-06T18:43:20+00:00 | Vulnerability · Source |
| CVE-2026-45750 | redhat_vex | Termix Vulnerable to Arbitrary Command Execution in File Manager | known not affected: 1 | 2026-06-06T18:43:19+00:00 | Vulnerability · Source |
| CVE-2026-45748 | redhat_vex | Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection | known not affected: 1 | 2026-06-06T18:43:18+00:00 | Vulnerability · Source |
| CVE-2026-45749 | redhat_vex | Termix's TOTP two-factor authentication can be disabled or bypassed using only the account password | known not affected: 1 | 2026-06-06T18:43:18+00:00 | Vulnerability · Source |
| CVE-2026-45745 | redhat_vex | Termix has improper certificate validation in Electron desktop client that enables MITM credential/token theft | known not affected: 1 | 2026-06-06T18:43:17+00:00 | Vulnerability · Source |