VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297756 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-8340 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to CSRF via Backend\File::approveVersion | known not affected: 1 | 2026-06-05T19:43:29+00:00 | Vulnerability · Source |
| CVE-2026-8779 | redhat_vex | omec-project amf handler.go NGSetupRequest memory corruption | known not affected: 1 | 2026-06-05T19:43:29+00:00 | Vulnerability · Source |
| CVE-2026-8780 | redhat_vex | omec-project amf NGAP Message dispatcher.go memory corruption | known not affected: 1 | 2026-06-05T19:43:27+00:00 | Vulnerability · Source |
| CVE-2026-8249 | redhat_vex | Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service | known not affected: 1 | 2026-06-05T19:43:27+00:00 | Vulnerability · Source |
| CVE-2026-8267 | redhat_vex | Open5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of service | known not affected: 1 | 2026-06-05T19:43:25+00:00 | Vulnerability · Source |
| CVE-2026-8492 | redhat_vex | Translate Drupal with GTranslate - Less critical - DOM clobbering / link manipulation - SA-CONTRIB-2026-035 | known not affected: 1 | 2026-06-05T19:43:24+00:00 | Vulnerability · Source |
| CVE-2026-8276 | redhat_vex | bettercap MySQL Server mysql_server.go integer coercion | known not affected: 1 | 2026-06-05T19:43:24+00:00 | Vulnerability · Source |
| CVE-2026-8345 | redhat_vex | D-Link DIR-816 singlePortForward sub_445E7C command injection | known not affected: 1 | 2026-06-05T19:43:22+00:00 | Vulnerability · Source |
| CVE-2026-8507 | redhat_vex | Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws | known not affected: 1 | 2026-06-05T19:43:22+00:00 | Vulnerability · Source |
| CVE-2026-8435 | redhat_vex | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file approveVersion() | known not affected: 1 | 2026-06-05T19:43:21+00:00 | Vulnerability · Source |
| CVE-2026-8264 | redhat_vex | Tenda AC6 httpd WifiApScan formWifiApScan os command injection | known not affected: 1 | 2026-06-05T19:43:21+00:00 | Vulnerability · Source |
| CVE-2026-8291 | redhat_vex | Open5GS NRF nnrf-handler.c ogs_nnrf_nfm_handle_nf_profile denial of service | known not affected: 1 | 2026-06-05T19:43:20+00:00 | Vulnerability · Source |
| CVE-2026-8255 | redhat_vex | Devs Palace ERP Online add_new_customer cross site scripting | known not affected: 1 | 2026-06-05T19:43:19+00:00 | Vulnerability · Source |
| CVE-2026-8121 | redhat_vex | Open5GS NSSF conv.c ogs_sbi_parse_plmn_list denial of service | known not affected: 1 | 2026-06-05T19:43:18+00:00 | Vulnerability · Source |
| CVE-2026-8767 | redhat_vex | vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection | known not affected: 1 | 2026-06-05T19:43:17+00:00 | Vulnerability · Source |
| CVE-2026-8879 | redhat_vex | CVE-2026-8879 | known not affected: 1 | 2026-06-05T19:43:15+00:00 | Vulnerability · Source |
| CVE-2026-8116 | redhat_vex | huangjunsen0406 xiaozhi-mcphub dxtController.ts path traversal | known not affected: 1 | 2026-06-05T19:43:14+00:00 | Vulnerability · Source |
| CVE-2026-8413 | redhat_vex | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/design | known not affected: 1 | 2026-06-05T19:43:14+00:00 | Vulnerability · Source |
| CVE-2026-8251 | redhat_vex | Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service | known not affected: 1 | 2026-06-05T19:43:12+00:00 | Vulnerability · Source |
| CVE-2026-8493 | redhat_vex | Colorbox Inline - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-036 | known not affected: 1 | 2026-06-05T19:43:11+00:00 | Vulnerability · Source |
| CVE-2026-8259 | redhat_vex | Tenda AC6 httpd telnet os command injection | known not affected: 1 | 2026-06-05T19:43:11+00:00 | Vulnerability · Source |
| CVE-2026-8097 | redhat_vex | CodeAstro Online Classroom askquery.php sql injection | known not affected: 1 | 2026-06-05T19:43:11+00:00 | Vulnerability · Source |
| CVE-2026-8349 | redhat_vex | omec-project amf NGAP Message memory corruption | known not affected: 1 | 2026-06-05T19:43:09+00:00 | Vulnerability · Source |
| CVE-2026-8772 | redhat_vex | linlinjava litemall Admin Endpoint sql injection | known not affected: 1 | 2026-06-05T19:43:09+00:00 | Vulnerability · Source |
| CVE-2026-8268 | redhat_vex | Open5GS SMF OpenAPI_list_create denial of service | known not affected: 1 | 2026-06-05T19:43:08+00:00 | Vulnerability · Source |
| CVE-2026-8721 | redhat_vex | Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs | known not affected: 1 | 2026-06-05T19:43:07+00:00 | Vulnerability · Source |
| CVE-2026-8781 | redhat_vex | omec-project amf handler.go RANConfiguration null pointer dereference | known not affected: 1 | 2026-06-05T19:43:07+00:00 | Vulnerability · Source |
| CVE-2026-8028 | redhat_vex | FlowiseAI Flowise Endpoint account.service.ts verify information disclosure | known not affected: 1 | 2026-06-05T19:43:07+00:00 | Vulnerability · Source |
| CVE-2026-8262 | redhat_vex | Devs Palace ERP Online chart-save cross site scripting | known not affected: 1 | 2026-06-05T19:43:05+00:00 | Vulnerability · Source |
| CVE-2026-8127 | redhat_vex | eladmin Users API Endpoint UserController.java checkLevel access control | known not affected: 1 | 2026-06-05T19:43:04+00:00 | Vulnerability · Source |
| CVE-2026-8253 | redhat_vex | Devs Palace ERP Online purchase_save cross site scripting | known not affected: 1 | 2026-06-05T19:43:02+00:00 | Vulnerability · Source |
| CVE-2026-8415 | redhat_vex | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/express/association/reorder | known not affected: 1 | 2026-06-05T19:43:02+00:00 | Vulnerability · Source |
| CVE-2026-8136 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System index.php users cross site scripting | known not affected: 1 | 2026-06-05T19:43:01+00:00 | Vulnerability · Source |
| CVE-2026-8433 | redhat_vex | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescan() | known not affected: 1 | 2026-06-05T19:43:01+00:00 | Vulnerability · Source |
| CVE-2026-8271 | redhat_vex | D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command injection | known not affected: 1 | 2026-06-05T19:43:01+00:00 | Vulnerability · Source |
| CVE-2026-8495 | redhat_vex | Date iCal - Critical - Information disclosure - SA-CONTRIB-2026-037 | known not affected: 1 | 2026-06-05T19:42:59+00:00 | Vulnerability · Source |
| CVE-2026-8774 | redhat_vex | Edimax BR-6228NC POST Request mp command injection | known not affected: 1 | 2026-06-05T19:42:58+00:00 | Vulnerability · Source |
| CVE-2026-8477 | redhat_vex | CVE-2026-8477 | known not affected: 1 | 2026-06-05T19:42:57+00:00 | Vulnerability · Source |
| CVE-2026-8765 | redhat_vex | Kilo-Org kilocode File Diff API Endpoint worktree-diff.ts Bun.file path traversal | known not affected: 1 | 2026-06-05T19:42:56+00:00 | Vulnerability · Source |
| CVE-2026-8288 | redhat_vex | Open5GS SMF gsm-handler.c denial of service | known not affected: 1 | 2026-06-05T19:42:56+00:00 | Vulnerability · Source |
| CVE-2026-8783 | redhat_vex | omec-project amf dispatcher.go UERadioCapabilityCheckResponse null pointer dereference | known not affected: 1 | 2026-06-05T19:42:54+00:00 | Vulnerability · Source |
| CVE-2026-8501 | redhat_vex | CVE-2026-8501 | known not affected: 1 | 2026-06-05T19:42:53+00:00 | Vulnerability · Source |
| CVE-2026-8123 | redhat_vex | Open5GS NSSF message.c ogs_sbi_discovery_option_add_snssais denial of service | known not affected: 1 | 2026-06-05T19:42:52+00:00 | Vulnerability · Source |
| CVE-2026-8411 | redhat_vex | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/delete | known not affected: 1 | 2026-06-05T19:42:52+00:00 | Vulnerability · Source |
| CVE-2026-8114 | redhat_vex | JeecgBoot JSON Object loadTreeData sql injection | known not affected: 1 | 2026-06-05T19:42:51+00:00 | Vulnerability · Source |
| CVE-2026-8293 | redhat_vex | Really Simple Security < 9.5.10.1 - Authentication Bypass via Two-Factor OTP Skip | known not affected: 1 | 2026-06-05T19:42:50+00:00 | Vulnerability · Source |
| CVE-2026-8491 | redhat_vex | Node View Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-034 | known not affected: 1 | 2026-06-05T19:42:49+00:00 | Vulnerability · Source |
| CVE-2026-8275 | redhat_vex | bettercap zerogod IPP Service zerogod_ipp_primitives.go ippReadChunkedBody integer coercion | known not affected: 1 | 2026-06-05T19:42:49+00:00 | Vulnerability · Source |
| CVE-2026-8086 | redhat_vex | OSGeo gdal SWapi.c SWnentries heap-based overflow | known not affected: 1 | 2026-06-05T19:42:48+00:00 | Vulnerability · Source |
| CVE-2026-8347 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to IDOR + wrong-authorization-level in Express association Reorder dialog | known not affected: 1 | 2026-06-05T19:42:47+00:00 | Vulnerability · Source |