VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297756 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-44367 | redhat_vex | Klaw: user lockout due to case sensitivity inconsistency | known not affected: 1 | 2026-06-05T19:44:02+00:00 | Vulnerability · Source |
| CVE-2026-44459 | redhat_vex | Hono: Improper validation of NumericDate claims (exp, nbf, iat) in JWT verify() | known not affected: 1 | 2026-06-05T19:44:01+00:00 | Vulnerability · Source |
| CVE-2026-44589 | redhat_vex | nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect) | known not affected: 1 | 2026-06-05T19:44:00+00:00 | Vulnerability · Source |
| CVE-2026-44923 | redhat_vex | CVE-2026-44923 | known not affected: 1 | 2026-06-05T19:44:00+00:00 | Vulnerability · Source |
| CVE-2026-8274 | redhat_vex | npitre cramfs-tools Directory cramfsck.c do_directory path traversal | known not affected: 1 | 2026-06-05T19:43:59+00:00 | Vulnerability · Source |
| CVE-2026-44428 | redhat_vex | MCP Registry: GitHub OIDC tokens replayable across registry deployments due to shared audience | known not affected: 1 | 2026-06-05T19:43:59+00:00 | Vulnerability · Source |
| CVE-2026-8256 | redhat_vex | Devs Palace ERP Online mr-save cross site scripting | known not affected: 1 | 2026-06-05T19:43:58+00:00 | Vulnerability · Source |
| CVE-2026-8292 | redhat_vex | Open5GS NRF conv.c yuarel_parse denial of service | known not affected: 1 | 2026-06-05T19:43:57+00:00 | Vulnerability · Source |
| CVE-2026-8427 | redhat_vex | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file removeFavoriteFolder($id) | known not affected: 1 | 2026-06-05T19:43:57+00:00 | Vulnerability · Source |
| CVE-2026-8454 | redhat_vex | Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files | known not affected: 1 | 2026-06-05T19:43:57+00:00 | Vulnerability · Source |
| CVE-2026-8139 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName | known not affected: 1 | 2026-06-05T19:43:55+00:00 | Vulnerability · Source |
| CVE-2026-8346 | redhat_vex | D-Link DIR-816 portForward command injection | known not affected: 1 | 2026-06-05T19:43:55+00:00 | Vulnerability · Source |
| CVE-2026-8265 | redhat_vex | Tenda AC6 httpd getLogFile get_log_file os command injection | known not affected: 1 | 2026-06-05T19:43:54+00:00 | Vulnerability · Source |
| CVE-2026-8706 | redhat_vex | Sensitive user data could be leaked to other applications through Reader mode | known not affected: 1 | 2026-06-05T19:43:53+00:00 | Vulnerability · Source |
| CVE-2026-8148 | redhat_vex | CVE-2026-8148 | known not affected: 1 | 2026-06-05T19:43:52+00:00 | Vulnerability · Source |
| CVE-2026-8669 | redhat_vex | Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files | known not affected: 1 | 2026-06-05T19:43:52+00:00 | Vulnerability · Source |
| CVE-2026-8786 | redhat_vex | Tencent WeKnora Config API Endpoint initialization.go getKnowledgeBaseForInitialization authorization | known not affected: 1 | 2026-06-05T19:43:52+00:00 | Vulnerability · Source |
| CVE-2026-8409 | redhat_vex | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/delete | known not affected: 1 | 2026-06-05T19:43:52+00:00 | Vulnerability · Source |
| CVE-2026-8410 | redhat_vex | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/bulk/delete | known not affected: 1 | 2026-06-05T19:43:51+00:00 | Vulnerability · Source |
| CVE-2026-8320 | redhat_vex | jishenghua jshERP updatePlatformConfigByKey Endpoint UserService.java getUserByWeixinCode server-side request forgery | known not affected: 1 | 2026-06-05T19:43:50+00:00 | Vulnerability · Source |
| CVE-2026-8777 | redhat_vex | Edimax BR-6428NS POST Request formStaDrvSetup command injection | known not affected: 1 | 2026-06-05T19:43:50+00:00 | Vulnerability · Source |
| CVE-2026-8500 | redhat_vex | Web::Passwd versions through 0.03 for Perl is vulnerable to RCE | known not affected: 1 | 2026-06-05T19:43:50+00:00 | Vulnerability · Source |
| CVE-2026-8270 | redhat_vex | Open5GS SMF ogs_nas_parse_qos_rules denial of service | known not affected: 1 | 2026-06-05T19:43:48+00:00 | Vulnerability · Source |
| CVE-2026-8432 | redhat_vex | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file star() | known not affected: 1 | 2026-06-05T19:43:48+00:00 | Vulnerability · Source |
| CVE-2026-8117 | redhat_vex | SourceCodester Pizzafy Ecommerce System index.php cross site scripting | known not affected: 1 | 2026-06-05T19:43:48+00:00 | Vulnerability · Source |
| CVE-2026-8876 | redhat_vex | CVE-2026-8876 | known not affected: 1 | 2026-06-05T19:43:48+00:00 | Vulnerability · Source |
| CVE-2026-8612 | redhat_vex | WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution | known not affected: 1 | 2026-06-05T19:43:47+00:00 | Vulnerability · Source |
| CVE-2026-8414 | redhat_vex | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/event/duplicate | known not affected: 1 | 2026-06-05T19:43:46+00:00 | Vulnerability · Source |
| CVE-2026-8889 | redhat_vex | CVE-2026-8889 | known not affected: 1 | 2026-06-05T19:43:46+00:00 | Vulnerability · Source |
| CVE-2026-8252 | redhat_vex | Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer dereference | known not affected: 1 | 2026-06-05T19:43:45+00:00 | Vulnerability · Source |
| CVE-2026-8782 | redhat_vex | omec-project amf NGAP Message handler.go null pointer dereference | known not affected: 1 | 2026-06-05T19:43:44+00:00 | Vulnerability · Source |
| CVE-2026-8081 | redhat_vex | router-for-me CLIProxyAPI api_tools.go server-side request forgery | known not affected: 1 | 2026-06-05T19:43:44+00:00 | Vulnerability · Source |
| CVE-2026-8269 | redhat_vex | Open5GS SMF smf_nsmf_handle_create_sm_context denial of service | known not affected: 1 | 2026-06-05T19:43:43+00:00 | Vulnerability · Source |
| CVE-2026-8773 | redhat_vex | linlinjava litemall Database Setting DbUtil.java load argument injection | known not affected: 1 | 2026-06-05T19:43:42+00:00 | Vulnerability · Source |
| CVE-2026-8584 | redhat_vex | CVE-2026-8584 | known not affected: 1 | 2026-06-05T19:43:42+00:00 | Vulnerability · Source |
| CVE-2026-8416 | redhat_vex | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file addFavoriteFolder($id) | known not affected: 1 | 2026-06-05T19:43:41+00:00 | Vulnerability · Source |
| CVE-2026-8290 | redhat_vex | Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service | known not affected: 1 | 2026-06-05T19:43:41+00:00 | Vulnerability · Source |
| CVE-2026-8353 | redhat_vex | Concrete CMS version 9.0 to 9.5.0 is vulnerable to Stored XSS via page name in atomik theme | known not affected: 1 | 2026-06-05T19:43:41+00:00 | Vulnerability · Source |
| CVE-2026-8560 | redhat_vex | CVE-2026-8560 | known not affected: 1 | 2026-06-05T19:43:40+00:00 | Vulnerability · Source |
| CVE-2026-8434 | redhat_vex | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescanMultiple() | known not affected: 1 | 2026-06-05T19:43:39+00:00 | Vulnerability · Source |
| CVE-2026-8263 | redhat_vex | Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection | known not affected: 1 | 2026-06-05T19:43:37+00:00 | Vulnerability · Source |
| CVE-2026-8496 | redhat_vex | A cross-site scripting (XSS) vulnerability in Alinto SOGo, version 5.12.7 | known not affected: 1 | 2026-06-05T19:43:36+00:00 | Vulnerability · Source |
| CVE-2026-8766 | redhat_vex | Kilo-Org kilocode Environment Variable config.ts load information disclosure | known not affected: 1 | 2026-06-05T19:43:35+00:00 | Vulnerability · Source |
| CVE-2026-8784 | redhat_vex | npitre cramfs-tools cramfsck.c change_file_status symlink | known not affected: 1 | 2026-06-05T19:43:34+00:00 | Vulnerability · Source |
| CVE-2026-8874 | redhat_vex | CVE-2026-8874 | known not affected: 1 | 2026-06-05T19:43:33+00:00 | Vulnerability · Source |
| CVE-2026-8250 | redhat_vex | Open5GS SMF n4-build.c smf_n4_build_qos_flow_to_modify_list denial of service | known not affected: 1 | 2026-06-05T19:43:32+00:00 | Vulnerability · Source |
| CVE-2026-8412 | redhat_vex | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/cache | known not affected: 1 | 2026-06-05T19:43:31+00:00 | Vulnerability · Source |
| CVE-2026-8124 | redhat_vex | GPAC box_code_base.c sidx_box_read allocation of resources | known not affected: 1 | 2026-06-05T19:43:31+00:00 | Vulnerability · Source |
| CVE-2026-8878 | redhat_vex | CVE-2026-8878 | known not affected: 1 | 2026-06-05T19:43:31+00:00 | Vulnerability · Source |
| CVE-2026-8142 | redhat_vex | CVE-2026-8142 | known not affected: 1 | 2026-06-05T19:43:30+00:00 | Vulnerability · Source |