VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297730 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-43975 | redhat_vex | Apache Wicket: Possible malicious path traversal in FolderUploadsFileManager | known not affected: 1 | 2026-06-05T19:50:57+00:00 | Vulnerability · Source |
| CVE-2026-25110 | redhat_vex | Sensors_medical_sensor has a NULL pointer dereference vulnerability | known not affected: 1 | 2026-06-05T19:50:57+00:00 | Vulnerability · Source |
| CVE-2026-25199 | redhat_vex | Apache CloudStack: Proxmox Extension Allows Unauthorized Cross-Tenant Instance Access | known not affected: 1 | 2026-06-05T19:50:56+00:00 | Vulnerability · Source |
| CVE-2026-43680 | redhat_vex | CVE-2026-43680 | known not affected: 1 | 2026-06-05T19:50:56+00:00 | Vulnerability · Source |
| CVE-2026-25219 | redhat_vex | Apache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access | known not affected: 1 | 2026-06-05T19:50:56+00:00 | Vulnerability · Source |
| CVE-2026-43659 | redhat_vex | CVE-2026-43659 | known not affected: 1 | 2026-06-05T19:50:55+00:00 | Vulnerability · Source |
| CVE-2026-43930 | redhat_vex | Parse Server: MFA SMS one-time password accepted twice under concurrent login | known not affected: 1 | 2026-06-05T19:50:55+00:00 | Vulnerability · Source |
| CVE-2026-43646 | redhat_vex | Apache Wicket: crafted URLs can bypass PackageResourceGuard | known not affected: 1 | 2026-06-05T19:50:54+00:00 | Vulnerability · Source |
| CVE-2026-43826 | redhat_vex | Apache Airflow Providers OpenSearch: OpenSearch task-log handler leaks credentials embedded in the host URL | known not affected: 1 | 2026-06-05T19:50:54+00:00 | Vulnerability · Source |
| CVE-2026-43661 | redhat_vex | CVE-2026-43661 | known not affected: 1 | 2026-06-05T19:50:53+00:00 | Vulnerability · Source |
| CVE-2026-43529 | redhat_vex | OpenClaw < 2026.4.10 - Time-of-Check-Time-of-Use (TOCTOU) Race Condition in exec Script Preflight Validator | known not affected: 1 | 2026-06-05T19:50:53+00:00 | Vulnerability · Source |
| CVE-2026-43685 | redhat_vex | CVE-2026-43685 | known not affected: 1 | 2026-06-05T19:50:51+00:00 | Vulnerability · Source |
| CVE-2026-7581 | redhat_vex | alexta69 MeTube CORS Policy main.py on_prepare cross-domain policy | known not affected: 1 | 2026-06-05T19:50:50+00:00 | Vulnerability · Source |
| CVE-2026-7743 | redhat_vex | CodeAstro Online Classroom studentdetails sql injection | known not affected: 1 | 2026-06-05T19:50:49+00:00 | Vulnerability · Source |
| CVE-2026-7266 | redhat_vex | SourceCodester Pizzafy Ecommerce System ajax.php save_order sql injection | known not affected: 1 | 2026-06-05T19:50:48+00:00 | Vulnerability · Source |
| CVE-2026-7293 | redhat_vex | SourceCodester Pizzafy Ecommerce System ajax.php delete_category sql injection | known not affected: 1 | 2026-06-05T19:50:48+00:00 | Vulnerability · Source |
| CVE-2026-7086 | redhat_vex | HBAI-Ltd Toonflow-app Storyboard Export replaceUrl.ts updateStoryboardUrl path traversal | known not affected: 1 | 2026-06-05T19:50:48+00:00 | Vulnerability · Source |
| CVE-2026-7095 | redhat_vex | code-projects Employee Management System edit.php cross site scripting | known not affected: 1 | 2026-06-05T19:50:47+00:00 | Vulnerability · Source |
| CVE-2026-7716 | redhat_vex | code-projects Gym Management System In PHP/Windows NT index.php sql injection | known not affected: 1 | 2026-06-05T19:50:47+00:00 | Vulnerability · Source |
| CVE-2026-7392 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System ajax.php delete_supplier sql injection | known not affected: 1 | 2026-06-05T19:50:46+00:00 | Vulnerability · Source |
| CVE-2026-7510 | redhat_vex | OWAP DefectDojo Benchmark/Engagement/Product/Survey authorization | known not affected: 1 | 2026-06-05T19:50:46+00:00 | Vulnerability · Source |
| CVE-2026-7303 | redhat_vex | Xuxueli xxl-job Execution Log JobLogController.java logDetailCat resource injection | known not affected: 1 | 2026-06-05T19:50:46+00:00 | Vulnerability · Source |
| CVE-2026-7222 | redhat_vex | code-projects Coaching Management System Complaint Form complaint.php cross site scripting | known not affected: 1 | 2026-06-05T19:50:46+00:00 | Vulnerability · Source |
| CVE-2026-7886 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to IDOR in AddMessage/UpdateMessage via attachments[] parameter | known not affected: 1 | 2026-06-05T19:50:46+00:00 | Vulnerability · Source |
| CVE-2026-7150 | redhat_vex | dh1011 auto-favicon MCP Tool server.py generate_favicon_from_url server-side request forgery | known not affected: 1 | 2026-06-05T19:50:45+00:00 | Vulnerability · Source |
| CVE-2026-7114 | redhat_vex | code-projects Employee Management System edit.php sql injection | known not affected: 1 | 2026-06-05T19:50:45+00:00 | Vulnerability · Source |
| CVE-2026-7730 | redhat_vex | privsim mcp-test-runner MCP index.ts child_process.spawn os command injection | known not affected: 1 | 2026-06-05T19:50:44+00:00 | Vulnerability · Source |
| CVE-2026-7091 | redhat_vex | code-projects Invoice System in Laravel User Management user improper authorization | known not affected: 1 | 2026-06-05T19:50:44+00:00 | Vulnerability · Source |
| CVE-2026-7325 | redhat_vex | CVE-2026-7325 | known not affected: 1 | 2026-06-05T19:50:44+00:00 | Vulnerability · Source |
| CVE-2026-7721 | redhat_vex | Totolink WA300 cstecgi.cgi NTPSyncWithHost command injection | known not affected: 1 | 2026-06-05T19:50:44+00:00 | Vulnerability · Source |
| CVE-2026-7200 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting | known not affected: 1 | 2026-06-05T19:50:43+00:00 | Vulnerability · Source |
| CVE-2026-7118 | redhat_vex | code-projects Employee Management System cancel.php sql injection | known not affected: 1 | 2026-06-05T19:50:43+00:00 | Vulnerability · Source |
| CVE-2026-7882 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to CSRF via the DeleteFile controller | known not affected: 1 | 2026-06-05T19:50:42+00:00 | Vulnerability · Source |
| CVE-2026-7846 | redhat_vex | chatchat-space Langchain-Chatchat OpenAI-Compatible File Upload API openai_routes.py files toctou | known not affected: 1 | 2026-06-05T19:50:42+00:00 | Vulnerability · Source |
| CVE-2026-7729 | redhat_vex | pixelsock directus-mcp MCP index.ts validateUrl server-side request forgery | known not affected: 1 | 2026-06-05T19:50:42+00:00 | Vulnerability · Source |
| CVE-2026-7084 | redhat_vex | HBAI-Ltd Toonflow-app getCodeByLink Endpoint getCodeByLink.ts fetch server-side request forgery | known not affected: 1 | 2026-06-05T19:50:41+00:00 | Vulnerability · Source |
| CVE-2026-7408 | redhat_vex | SourceCodester Pizzafy Ecommerce System ajax.php save_menu sql injection | known not affected: 1 | 2026-06-05T19:50:40+00:00 | Vulnerability · Source |
| CVE-2026-7282 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System ajax.php delete_expired sql injection | known not affected: 1 | 2026-06-05T19:50:40+00:00 | Vulnerability · Source |
| CVE-2026-7129 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting | known not affected: 1 | 2026-06-05T19:50:39+00:00 | Vulnerability · Source |
| CVE-2026-7822 | redhat_vex | itsourcecode Courier Management System print_pdets.php sql injection | known not affected: 1 | 2026-06-05T19:50:38+00:00 | Vulnerability · Source |
| CVE-2026-7741 | redhat_vex | CodeAstro Online Classroom studentlogin sql injection | known not affected: 1 | 2026-06-05T19:50:38+00:00 | Vulnerability · Source |
| CVE-2026-7705 | redhat_vex | JD Cloud JDCOS Service jdcap set_iptv_info command injection | known not affected: 1 | 2026-06-05T19:50:38+00:00 | Vulnerability · Source |
| CVE-2026-7471 | redhat_vex | Server-Side Request Forgery (SSRF) in GitLab | known not affected: 1 | 2026-06-05T19:50:37+00:00 | Vulnerability · Source |
| CVE-2026-7390 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System index.php customer cross site scripting | known not affected: 1 | 2026-06-05T19:50:37+00:00 | Vulnerability · Source |
| CVE-2026-7587 | redhat_vex | Open5GS AMF nsmf-handler.c amf_nsmf_pdusession_handle_update_sm_context denial of service | known not affected: 1 | 2026-06-05T19:50:37+00:00 | Vulnerability · Source |
| CVE-2026-7318 | redhat_vex | elie mcp-project research_server.py search_papers path traversal | known not affected: 1 | 2026-06-05T19:50:36+00:00 | Vulnerability · Source |
| CVE-2026-7596 | redhat_vex | nextlevelbuilder ui-ux-pro-max-skill Slide Generator generate-slide.py data.get cross site scripting | known not affected: 1 | 2026-06-05T19:50:36+00:00 | Vulnerability · Source |
| CVE-2026-7093 | redhat_vex | code-projects Invoice System in Laravel Invoice Endpoint invoice improper authorization | known not affected: 1 | 2026-06-05T19:50:36+00:00 | Vulnerability · Source |
| CVE-2026-7291 | redhat_vex | o2oa URL Fetching FileAction.java FileAction server-side request forgery | known not affected: 1 | 2026-06-05T19:50:36+00:00 | Vulnerability · Source |
| CVE-2026-7103 | redhat_vex | code-projects Chat System MD5 Hash update_user.php weak hash | known not affected: 1 | 2026-06-05T19:50:35+00:00 | Vulnerability · Source |