VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297749 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-45250 | redhat_vex | Stack buffer overflow via setcred(2) | known not affected: 1 | 2026-06-05T19:47:31+00:00 | Vulnerability · Source |
| CVE-2026-45244 | redhat_vex | Summarize < 0.15.1 Unapproved Browser Automation Execution | known not affected: 1 | 2026-06-05T19:47:31+00:00 | Vulnerability · Source |
| CVE-2026-45362 | redhat_vex | CVE-2026-45362 | known not affected: 1 | 2026-06-05T19:47:31+00:00 | Vulnerability · Source |
| CVE-2026-45266 | redhat_vex | Nextcloud: Unauthorized force-mute from missing permission check when using internal signaling | known not affected: 1 | 2026-06-05T19:47:31+00:00 | Vulnerability · Source |
| CVE-2026-45154 | redhat_vex | Nextcloud: Improper Access Control in Collectives | known not affected: 1 | 2026-06-05T19:47:31+00:00 | Vulnerability · Source |
| CVE-2026-45739 | redhat_vex | Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs | known not affected: 1 | 2026-06-05T19:47:30+00:00 | Vulnerability · Source |
| CVE-2026-45403 | redhat_vex | AnythingLLM: filesystem-copy-file follows nested symlinks and copies files from outside the allowed directory | known not affected: 1 | 2026-06-05T19:47:30+00:00 | Vulnerability · Source |
| CVE-2026-45254 | redhat_vex | Incorrect libcap_net limitation list manipulation | known not affected: 1 | 2026-06-05T19:47:30+00:00 | Vulnerability · Source |
| CVE-2026-45159 | redhat_vex | Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner | known not affected: 1 | 2026-06-05T19:47:26+00:00 | Vulnerability · Source |
| CVE-2026-45180 | redhat_vex | Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids | known not affected: 1 | 2026-06-05T19:47:25+00:00 | Vulnerability · Source |
| CVE-2026-45252 | redhat_vex | Heap overflow in FUSE_LISTXATTR | known not affected: 1 | 2026-06-05T19:47:24+00:00 | Vulnerability · Source |
| CVE-2026-45179 | redhat_vex | Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user IP addresses | known not affected: 1 | 2026-06-05T19:47:24+00:00 | Vulnerability · Source |
| CVE-2026-45278 | redhat_vex | Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypass | known not affected: 1 | 2026-06-05T19:47:23+00:00 | Vulnerability · Source |
| CVE-2026-45760 | redhat_vex | Apache Camel K: Camel K Cross-Namespace Build Deputy Attack | known not affected: 1 | 2026-06-05T19:47:22+00:00 | Vulnerability · Source |
| CVE-2026-45683 | redhat_vex | OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure | known not affected: 1 | 2026-06-05T19:47:22+00:00 | Vulnerability · Source |
| CVE-2026-6618 | redhat_vex | langgenius dify ApiBasedToolSchemaParser parser.py parse_openai_plugin_json_to_tool_bundle server-side request forgery | known not affected: 1 | 2026-06-05T19:47:21+00:00 | Vulnerability · Source |
| CVE-2026-6636 | redhat_vex | p2r3 convert API buildCache.js Bun.serve path traversal | known not affected: 1 | 2026-06-05T19:47:20+00:00 | Vulnerability · Source |
| CVE-2026-6159 | redhat_vex | code-projects Simple ChatBox Endpoint insert.php cross site scripting | known not affected: 1 | 2026-06-05T19:47:20+00:00 | Vulnerability · Source |
| CVE-2026-6609 | redhat_vex | liangliangyy DjangoBlog views.py form_valid improper authorization | known not affected: 1 | 2026-06-05T19:47:19+00:00 | Vulnerability · Source |
| CVE-2026-6591 | redhat_vex | ComfyUI LoadImage Node folder_paths.py folder_paths.get_annotated_filepath path traversal | known not affected: 1 | 2026-06-05T19:47:19+00:00 | Vulnerability · Source |
| CVE-2026-6034 | redhat_vex | code-projects Vehicle Showroom Management System ProfitAndLossReport.php cross site scripting | known not affected: 1 | 2026-06-05T19:47:18+00:00 | Vulnerability · Source |
| CVE-2026-6610 | redhat_vex | liangliangyy DjangoBlog Setting settings.py hard-coded credentials | known not affected: 1 | 2026-06-05T19:47:18+00:00 | Vulnerability · Source |
| CVE-2026-6878 | redhat_vex | ByteDance verl grader.py math_equal sandbox | known not affected: 1 | 2026-06-05T19:47:18+00:00 | Vulnerability · Source |
| CVE-2026-6007 | redhat_vex | itsourcecode Construction Management System del.php sql injection | known not affected: 1 | 2026-06-05T19:47:17+00:00 | Vulnerability · Source |
| CVE-2026-6599 | redhat_vex | langflow-ai langflow Model Context Protocol Configuration API mcp_projects.py install_mcp_config injection | known not affected: 1 | 2026-06-05T19:47:16+00:00 | Vulnerability · Source |
| CVE-2026-6601 | redhat_vex | Lagom WHMCS Template Datatables resource consumption | known not affected: 1 | 2026-06-05T19:47:16+00:00 | Vulnerability · Source |
| CVE-2026-6614 | redhat_vex | TransformerOptimus SuperAGI project.py get_projects_organisation authorization | known not affected: 1 | 2026-06-05T19:47:15+00:00 | Vulnerability · Source |
| CVE-2026-6487 | redhat_vex | Qihui jtbc5 CMS Code Endpoint manage.php path traversal | known not affected: 1 | 2026-06-05T19:47:14+00:00 | Vulnerability · Source |
| CVE-2026-6650 | redhat_vex | Z-BlogPHP ZBA File app_upload.php UnPack unrestricted upload | known not affected: 1 | 2026-06-05T19:47:14+00:00 | Vulnerability · Source |
| CVE-2026-6416 | redhat_vex | Tanium addressed an uncontrolled resource consumption vulnerability in Interact. | known not affected: 1 | 2026-06-05T19:47:14+00:00 | Vulnerability · Source |
| CVE-2026-6649 | redhat_vex | Qibo CMS headers server-side request forgery | known not affected: 1 | 2026-06-05T19:47:13+00:00 | Vulnerability · Source |
| CVE-2026-6883 | redhat_vex | Missing Authorization in GitLab | known not affected: 1 | 2026-06-05T19:47:12+00:00 | Vulnerability · Source |
| CVE-2026-6030 | redhat_vex | itsourcecode Construction Management System del1.php sql injection | known not affected: 1 | 2026-06-05T19:47:12+00:00 | Vulnerability · Source |
| CVE-2026-6586 | redhat_vex | TransformerOptimus SuperAGI Budget Endpoint budget.py update_budget authorization | known not affected: 1 | 2026-06-05T19:47:12+00:00 | Vulnerability · Source |
| CVE-2026-6379 | redhat_vex | WP Photo Album Plus < 9.1.11.001 - Unauthenticated SQL Injection via 'wppa-supersearch' Parameter | known not affected: 1 | 2026-06-05T19:47:11+00:00 | Vulnerability · Source |
| CVE-2026-6496 | redhat_vex | prasathmani TinyFileManager POST Parameter filemanager.php path traversal | known not affected: 1 | 2026-06-05T19:47:11+00:00 | Vulnerability · Source |
| CVE-2026-6355 | redhat_vex | CVE-2026-6355 | known not affected: 1 | 2026-06-05T19:47:11+00:00 | Vulnerability · Source |
| CVE-2026-6874 | redhat_vex | ericc-ch copilot-api Header token dns rebinding | known not affected: 1 | 2026-06-05T19:47:11+00:00 | Vulnerability · Source |
| CVE-2026-6634 | redhat_vex | usememos UpdateInstanceSetting App.tsx memos_access_token improper authorization | known not affected: 1 | 2026-06-05T19:47:10+00:00 | Vulnerability · Source |
| CVE-2026-6597 | redhat_vex | langflow-ai langflow Flow Using API core.py has_api_terms credentials storage | known not affected: 1 | 2026-06-05T19:47:10+00:00 | Vulnerability · Source |
| CVE-2026-6652 | redhat_vex | Pagekit CMS StringStorage Template PhpEngine.php evaluate eval injection | known not affected: 1 | 2026-06-05T19:47:09+00:00 | Vulnerability · Source |
| CVE-2026-6616 | redhat_vex | TransformerOptimus SuperAGI WebScraperTool webpage_extractor.py extract_with_lxml server-side request forgery | known not affected: 1 | 2026-06-05T19:47:09+00:00 | Vulnerability · Source |
| CVE-2026-6184 | redhat_vex | code-projects Simple Content Management System welcome.php cross site scripting | known not affected: 1 | 2026-06-05T19:47:09+00:00 | Vulnerability · Source |
| CVE-2026-6489 | redhat_vex | QueryMine sms Background Management addteacher.php unrestricted upload | known not affected: 1 | 2026-06-05T19:47:09+00:00 | Vulnerability · Source |
| CVE-2026-6005 | redhat_vex | code-projects Patient Record Management System hematology_print.php sql injection | known not affected: 1 | 2026-06-05T19:47:08+00:00 | Vulnerability · Source |
| CVE-2026-6333 | redhat_vex | SSRF via Host Header Spoofing in Custom Slash Commands | known not affected: 1 | 2026-06-05T19:47:07+00:00 | Vulnerability · Source |
| CVE-2026-6216 | redhat_vex | DbGate SVG Icon String FontIcon.svelte cross site scripting | known not affected: 1 | 2026-06-05T19:47:07+00:00 | Vulnerability · Source |
| CVE-2026-6612 | redhat_vex | TransformerOptimus SuperAGI Agent Execution Endpoint agent_execution.py update_agent_execution authorization | known not affected: 1 | 2026-06-05T19:47:07+00:00 | Vulnerability · Source |
| CVE-2026-6799 | redhat_vex | Comfast CF-N1-S Endpoint mbox-config command injection | known not affected: 1 | 2026-06-05T19:47:06+00:00 | Vulnerability · Source |
| CVE-2026-6386 | redhat_vex | Missing large page handling in pmap_pkru_update_range() | known not affected: 1 | 2026-06-05T19:47:06+00:00 | Vulnerability · Source |