VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297749 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-6162 | redhat_vex | PHPGurukul Company Visitor Management System bwdates-reports-details.php cross site scripting | known not affected: 1 | 2026-06-05T19:47:06+00:00 | Vulnerability · Source |
| CVE-2026-6584 | redhat_vex | TransformerOptimus SuperAGI User Update Endpoint user.py update_user authorization | known not affected: 1 | 2026-06-05T19:47:05+00:00 | Vulnerability · Source |
| CVE-2026-6737 | redhat_vex | CVE-2026-6737 | known not affected: 1 | 2026-06-05T19:47:05+00:00 | Vulnerability · Source |
| CVE-2026-6626 | redhat_vex | Cockpit-HQ Cockpit Asset Handler/Aggregate data query logic injection | known not affected: 1 | 2026-06-05T19:47:04+00:00 | Vulnerability · Source |
| CVE-2026-6743 | redhat_vex | WebSystems WebTOTUM Calendar cross site scripting | known not affected: 1 | 2026-06-05T19:47:04+00:00 | Vulnerability · Source |
| CVE-2026-6593 | redhat_vex | ComfyUI View Endpoint server.py cross site scripting | known not affected: 1 | 2026-06-05T19:47:04+00:00 | Vulnerability · Source |
| CVE-2026-6365 | redhat_vex | Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001 | known not affected: 1 | 2026-06-05T19:47:03+00:00 | Vulnerability · Source |
| CVE-2026-6617 | redhat_vex | langgenius dify ApiToolManageService api_tools_manage_service.py get_api_tool_provider_remote_schema server-side request forgery | known not affected: 1 | 2026-06-05T19:47:02+00:00 | Vulnerability · Source |
| CVE-2026-6923 | redhat_vex | Nuvoton - CWE-1300: Improper Protection of Physical Side Channels | known not affected: 1 | 2026-06-05T19:47:02+00:00 | Vulnerability · Source |
| CVE-2026-6356 | redhat_vex | CVE-2026-6356 | known not affected: 1 | 2026-06-05T19:47:01+00:00 | Vulnerability · Source |
| CVE-2026-6590 | redhat_vex | ComfyUI Model Preview Endpoint model_manager.py get_model_preview path traversal | known not affected: 1 | 2026-06-05T19:47:01+00:00 | Vulnerability · Source |
| CVE-2026-6095 | redhat_vex | Orejime - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-032 | known not affected: 1 | 2026-06-05T19:47:01+00:00 | Vulnerability · Source |
| CVE-2026-6499 | redhat_vex | CVE-2026-6499 | known not affected: 1 | 2026-06-05T19:47:00+00:00 | Vulnerability · Source |
| CVE-2026-6392 | redhat_vex | Tanium addressed an information disclosure vulnerability in Threat Response. | known not affected: 1 | 2026-06-05T19:47:00+00:00 | Vulnerability · Source |
| CVE-2026-6600 | redhat_vex | langflow-ai langflow Frontend React Component Rendering edit-message.tsx cross site scripting | known not affected: 1 | 2026-06-05T19:46:59+00:00 | Vulnerability · Source |
| CVE-2026-6598 | redhat_vex | langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in file | known not affected: 1 | 2026-06-05T19:46:59+00:00 | Vulnerability · Source |
| CVE-2026-6006 | redhat_vex | code-projects Patient Record Management System edit_hpatient.php sql injection | known not affected: 1 | 2026-06-05T19:46:59+00:00 | Vulnerability · Source |
| CVE-2026-6033 | redhat_vex | CodeAstro Online Classroom updatedetailsfromstudent.php sql injection | known not affected: 1 | 2026-06-05T19:46:59+00:00 | Vulnerability · Source |
| CVE-2026-6622 | redhat_vex | BichitroGan ISP Billing Software Customer edit cross site scripting | known not affected: 1 | 2026-06-05T19:46:58+00:00 | Vulnerability · Source |
| CVE-2026-6334 | redhat_vex | OAuth authorization code client binding not enforced during token redemption in Mattermost | known not affected: 1 | 2026-06-05T19:46:58+00:00 | Vulnerability · Source |
| CVE-2026-6589 | redhat_vex | ComfyUI server.py create_origin_only_middleware cross-site request forgery | known not affected: 1 | 2026-06-05T19:46:58+00:00 | Vulnerability · Source |
| CVE-2026-6613 | redhat_vex | TransformerOptimus SuperAGI agent.py get_schedule_data authorization | known not affected: 1 | 2026-06-05T19:46:57+00:00 | Vulnerability · Source |
| CVE-2026-6011 | redhat_vex | OpenClaw assertPublicHostname web-fetch.ts server-side request forgery | known not affected: 1 | 2026-06-05T19:46:57+00:00 | Vulnerability · Source |
| CVE-2026-6433 | redhat_vex | Custom CSS JS PHP <= 2.0.7 - Unauthenticated SQL Injection to RCE | known not affected: 1 | 2026-06-05T19:46:57+00:00 | Vulnerability · Source |
| CVE-2026-6190 | redhat_vex | itsourcecode Construction Management System employees.php sql injection | known not affected: 1 | 2026-06-05T19:46:57+00:00 | Vulnerability · Source |
| CVE-2026-6648 | redhat_vex | Qibo CMS Internal Message cross site scripting | known not affected: 1 | 2026-06-05T19:46:57+00:00 | Vulnerability · Source |
| CVE-2026-6495 | redhat_vex | Ajax Load More < 7.8.4 - Reflected XSS | known not affected: 1 | 2026-06-05T19:46:56+00:00 | Vulnerability · Source |
| CVE-2026-6486 | redhat_vex | classroombookings User Display Name layout.php read cross site scripting | known not affected: 1 | 2026-06-05T19:46:56+00:00 | Vulnerability · Source |
| CVE-2026-6585 | redhat_vex | TransformerOptimus SuperAGI Organisation Update Endpoint organisation.py update_organisation authorization | known not affected: 1 | 2026-06-05T19:46:55+00:00 | Vulnerability · Source |
| CVE-2026-6408 | redhat_vex | Tanium addressed an information disclosure vulnerability in Tanium Server. | known not affected: 1 | 2026-06-05T19:46:55+00:00 | Vulnerability · Source |
| CVE-2026-6202 | redhat_vex | code-projects Easy Blog Site post.php sql injection | known not affected: 1 | 2026-06-05T19:46:55+00:00 | Vulnerability · Source |
| CVE-2026-6624 | redhat_vex | BichitroGan ISP Billing Software Pool List add cross site scripting | known not affected: 1 | 2026-06-05T19:46:55+00:00 | Vulnerability · Source |
| CVE-2026-6057 | redhat_vex | Unauthenticated Path Traversal in FalkorDB Browser Leads to Remote Code Execution | known not affected: 1 | 2026-06-05T19:46:54+00:00 | Vulnerability · Source |
| CVE-2026-6633 | redhat_vex | Yifang CMS Extended Management L_rbac_admin.php store cross site scripting | known not affected: 1 | 2026-06-05T19:46:54+00:00 | Vulnerability · Source |
| CVE-2026-6381 | redhat_vex | WP Maps < 4.9.3 - Subscriber+ Local File Inclusion | known not affected: 1 | 2026-06-05T19:46:54+00:00 | Vulnerability · Source |
| CVE-2026-6497 | redhat_vex | prasathmani TinyFileManager File Upload filemanager.php server-side request forgery | known not affected: 1 | 2026-06-05T19:46:53+00:00 | Vulnerability · Source |
| CVE-2026-6035 | redhat_vex | code-projects Vehicle Showroom Management System ServiceAndSalesReport.php cross site scripting | known not affected: 1 | 2026-06-05T19:46:52+00:00 | Vulnerability · Source |
| CVE-2026-6651 | redhat_vex | erponline.xyz ERP Online Inventory Edit Item cross site scripting | known not affected: 1 | 2026-06-05T19:46:52+00:00 | Vulnerability · Source |
| CVE-2026-6220 | redhat_vex | HummerRisk Video File Download URL ServerService.java ServerService.addServer server-side request forgery | known not affected: 1 | 2026-06-05T19:46:50+00:00 | Vulnerability · Source |
| CVE-2026-6620 | redhat_vex | SonicCloudOrg sonic-server File Upload Endpoint FileTool.java upload path traversal | known not affected: 1 | 2026-06-05T19:46:49+00:00 | Vulnerability · Source |
| CVE-2026-6578 | redhat_vex | liangliangyy DjangoBlog Setting settings.py hard-coded credentials | known not affected: 1 | 2026-06-05T19:46:49+00:00 | Vulnerability · Source |
| CVE-2026-6143 | redhat_vex | farion1231 cc-switch ProxyServer server.rs cross-domain policy | known not affected: 1 | 2026-06-05T19:46:49+00:00 | Vulnerability · Source |
| CVE-2026-6611 | redhat_vex | liangliangyy DjangoBlog File Upload Endpoint settings.py hard-coded key | known not affected: 1 | 2026-06-05T19:46:48+00:00 | Vulnerability · Source |
| CVE-2026-6268 | redhat_vex | EventPress < 22.2 – Reflected Cross-Site Scripting | known not affected: 1 | 2026-06-05T19:46:48+00:00 | Vulnerability · Source |
| CVE-2026-6215 | redhat_vex | DbGate REST/GraphQL openApiDriver.ts apiServerUrl1 server-side request forgery | known not affected: 1 | 2026-06-05T19:46:48+00:00 | Vulnerability · Source |
| CVE-2026-6000 | redhat_vex | code-projects Online Library Management System SQL Database Backup File library.sql information disclosure | known not affected: 1 | 2026-06-05T19:46:47+00:00 | Vulnerability · Source |
| CVE-2026-6592 | redhat_vex | ComfyUI userdata Endpoint user_manager.py getuserdata cross site scripting | known not affected: 1 | 2026-06-05T19:46:47+00:00 | Vulnerability · Source |
| CVE-2026-33446 | redhat_vex | Buffer overflow in client authentication prior to version 14.50 | known not affected: 1 | 2026-06-05T19:46:47+00:00 | Vulnerability · Source |
| CVE-2026-6619 | redhat_vex | langgenius dify ImagePreview image-preview.tsx openInNewTab cross site scripting | known not affected: 1 | 2026-06-05T19:46:46+00:00 | Vulnerability · Source |
| CVE-2026-6871 | redhat_vex | Obfuscate - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-033 | known not affected: 1 | 2026-06-05T19:46:46+00:00 | Vulnerability · Source |