VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297761 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-7220 | redhat_vex | jackwrichards FastlyMCP fastly_cli Tool fastly-mcp.mjs os command injection | known not affected: 1 | 2026-06-05T19:39:33+00:00 | Vulnerability · Source |
| CVE-2026-7398 | redhat_vex | florensiawidjaja BioinfoMCP Upload Endpoint app.py upload path traversal | known not affected: 1 | 2026-06-05T19:39:33+00:00 | Vulnerability · Source |
| CVE-2026-7299 | redhat_vex | CVE-2026-7299 | known not affected: 1 | 2026-06-05T19:39:32+00:00 | Vulnerability · Source |
| CVE-2026-7659 | redhat_vex | Advanced Social Media Icons <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'social' Shortcode | known not affected: 1 | 2026-06-05T19:39:31+00:00 | Vulnerability · Source |
| CVE-2026-7785 | redhat_vex | A-G-U-P-T-A wireshark-mcp pyshark_mcp.py quick_capture os command injection | known not affected: 1 | 2026-06-05T19:39:31+00:00 | Vulnerability · Source |
| CVE-2026-7310 | redhat_vex | CVE-2026-7310 | known not affected: 1 | 2026-06-05T19:39:31+00:00 | Vulnerability · Source |
| CVE-2026-7389 | redhat_vex | EyouCMS common.php GetSortData sql injection | known not affected: 1 | 2026-06-05T19:39:30+00:00 | Vulnerability · Source |
| CVE-2026-7211 | redhat_vex | dvladimirov MCP Git Search API mcp_server.py GitSearchRequest command injection | known not affected: 1 | 2026-06-05T19:39:30+00:00 | Vulnerability · Source |
| CVE-2026-7130 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection | known not affected: 1 | 2026-06-05T19:39:30+00:00 | Vulnerability · Source |
| CVE-2026-7798 | redhat_vex | FluentCRM <= 2.9.87 - Unauthenticated Blind Server-Side Request Forgery via 'SubscribeURL' Parameter | known not affected: 1 | 2026-06-05T19:39:29+00:00 | Vulnerability · Source |
| CVE-2026-7879 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to File Download Authorization Bypass in submit_password() | known not affected: 1 | 2026-06-05T19:39:29+00:00 | Vulnerability · Source |
| CVE-2026-7431 | redhat_vex | CVE-2026-7431 | known not affected: 1 | 2026-06-05T19:39:28+00:00 | Vulnerability · Source |
| CVE-2026-7404 | redhat_vex | getsimpletool mcpo-simple-server base_manager.py delete_shared_prompt path traversal | known not affected: 1 | 2026-06-05T19:39:28+00:00 | Vulnerability · Source |
| CVE-2026-7071 | redhat_vex | CodeAstro Online Job Portal user-cvs file information disclosure | known not affected: 1 | 2026-06-05T19:39:27+00:00 | Vulnerability · Source |
| CVE-2026-7314 | redhat_vex | eiceblue spire-doc-mcp-server base.py get_doc_path path traversal | known not affected: 1 | 2026-06-05T19:39:27+00:00 | Vulnerability · Source |
| CVE-2026-7710 | redhat_vex | YunaiV yudao-cloud Ruoyi-Vue-Pro JwtAuthenticationTokenFilter.java doFilterInternal improper authentication | known not affected: 1 | 2026-06-05T19:39:27+00:00 | Vulnerability · Source |
| CVE-2026-7215 | redhat_vex | egtai gmx-vmd-mcp VMD Launch mcp_server.py launch_vmd_gui_tool command injection | known not affected: 1 | 2026-06-05T19:39:26+00:00 | Vulnerability · Source |
| CVE-2026-7088 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection | known not affected: 1 | 2026-06-05T19:39:26+00:00 | Vulnerability · Source |
| CVE-2026-7439 | redhat_vex | AgentFlow Local Web API Content-Type Validation Bypass | known not affected: 1 | 2026-06-05T19:39:26+00:00 | Vulnerability · Source |
| CVE-2026-7475 | redhat_vex | Sky Addons <= 3.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Script | known not affected: 1 | 2026-06-05T19:39:24+00:00 | Vulnerability · Source |
| CVE-2026-7178 | redhat_vex | ChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgery | known not affected: 1 | 2026-06-05T19:39:24+00:00 | Vulnerability · Source |
| CVE-2026-7493 | redhat_vex | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.11.5 - Unauthenticated Denial of Service | known not affected: 1 | 2026-06-05T19:39:23+00:00 | Vulnerability · Source |
| CVE-2026-7619 | redhat_vex | Charitable <= 1.8.10.4 - Authenticated (Custom+) SQL Injection via 's' Search Parameter | known not affected: 1 | 2026-06-05T19:39:23+00:00 | Vulnerability · Source |
| CVE-2026-7457 | redhat_vex | LatePoint <= 5.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Customer Cabinet Profile Update | known not affected: 1 | 2026-06-05T19:39:23+00:00 | Vulnerability · Source |
| CVE-2026-7076 | redhat_vex | itsourcecode Courier Management System edit_branch.php sql injection | known not affected: 1 | 2026-06-05T19:39:21+00:00 | Vulnerability · Source |
| CVE-2026-7727 | redhat_vex | Shandong Hoteam Software PDM Product Data Management System DataService GetQueryMachineGridOnePageData sql injection | known not affected: 1 | 2026-06-05T19:39:21+00:00 | Vulnerability · Source |
| CVE-2026-7832 | redhat_vex | IObit Advanced SystemCare Service ASC.exe symlink | known not affected: 1 | 2026-06-05T19:39:21+00:00 | Vulnerability · Source |
| CVE-2026-7472 | redhat_vex | Read More & Accordion <= 3.5.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter | known not affected: 1 | 2026-06-05T19:39:20+00:00 | Vulnerability · Source |
| CVE-2026-7094 | redhat_vex | ShadowCloneLabs GlutamateMCPServers puppeteer_navigate index.ts server-side request forgery | known not affected: 1 | 2026-06-05T19:39:20+00:00 | Vulnerability · Source |
| CVE-2026-7733 | redhat_vex | funadmin Frontend Chunked Upload Endpoint UploadService.php chunkUpload unrestricted upload | known not affected: 1 | 2026-06-05T19:39:19+00:00 | Vulnerability · Source |
| CVE-2026-7058 | redhat_vex | 666ghj MiroFish Inter-Process Communication simulation_ipc.py SimulationIPCClient.send_command command injection | known not affected: 1 | 2026-06-05T19:39:19+00:00 | Vulnerability · Source |
| CVE-2026-7616 | redhat_vex | Zawgyi Embed <= 2.1.1 - Cross-Site Request Forgery via 'zawgyi_forceCSS' Parameter | known not affected: 1 | 2026-06-05T19:39:19+00:00 | Vulnerability · Source |
| CVE-2026-7562 | redhat_vex | WP-Redirection <= 1.0.3 - Cross-Site Request Forgery to Settings Update | known not affected: 1 | 2026-06-05T19:39:18+00:00 | Vulnerability · Source |
| CVE-2026-7526 | redhat_vex | PDF Embedder <= 4.9.3 - Authenticated (Contributor+) Information Exposure via Block Editor Page | known not affected: 1 | 2026-06-05T19:39:18+00:00 | Vulnerability · Source |
| CVE-2026-7588 | redhat_vex | ggerve coding-standards-mcp server.py get_best_practices path traversal | known not affected: 1 | 2026-06-05T19:39:18+00:00 | Vulnerability · Source |
| CVE-2026-7131 | redhat_vex | code-projects Online Lot Reservation System loginuser.php sql injection | known not affected: 1 | 2026-06-05T19:39:17+00:00 | Vulnerability · Source |
| CVE-2026-7050 | redhat_vex | Forms Rb <= 1.1.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via 'form_id' Parameter | known not affected: 1 | 2026-06-05T19:39:17+00:00 | Vulnerability · Source |
| CVE-2026-7221 | redhat_vex | TencentCloudBase CloudBase-MCP open-url API Endpoint interactive-server.ts openUrl server-side request forgery | known not affected: 1 | 2026-06-05T19:39:16+00:00 | Vulnerability · Source |
| CVE-2026-7711 | redhat_vex | MindsDB Engine proc_wrapper.py exec unrestricted upload | known not affected: 1 | 2026-06-05T19:39:15+00:00 | Vulnerability · Source |
| CVE-2026-7315 | redhat_vex | eiceblue spire-pdf-mcp-server PDF File server.py get_pdf_path path traversal | known not affected: 1 | 2026-06-05T19:39:14+00:00 | Vulnerability · Source |
| CVE-2026-7234 | redhat_vex | BrowserOperator browser-operator-core server.js startsWith path traversal | known not affected: 1 | 2026-06-05T19:39:14+00:00 | Vulnerability · Source |
| CVE-2026-7621 | redhat_vex | SMTP2GO for WordPress <= 1.16.0 - Missing Authorization to Authenticated (Subscriber+) Log Read/Truncate | known not affected: 1 | 2026-06-05T19:39:13+00:00 | Vulnerability · Source |
| CVE-2026-7216 | redhat_vex | donchelo processing-claude-mcp-bridge create_sketch Tool processing_server.py path traversal | known not affected: 1 | 2026-06-05T19:39:13+00:00 | Vulnerability · Source |
| CVE-2026-7063 | redhat_vex | code-projects Employee Management System Endpoint eprocess.php sql injection | known not affected: 1 | 2026-06-05T19:39:12+00:00 | Vulnerability · Source |
| CVE-2026-7423 | redhat_vex | Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP | known not affected: 1 | 2026-06-05T19:39:12+00:00 | Vulnerability · Source |
| CVE-2026-7386 | redhat_vex | fatbobman mail-mcp-bridge mail_mcp_server.py path traversal | known not affected: 1 | 2026-06-05T19:39:11+00:00 | Vulnerability · Source |
| CVE-2026-7126 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection | known not affected: 1 | 2026-06-05T19:39:11+00:00 | Vulnerability · Source |
| CVE-2026-7533 | redhat_vex | Easy Digital Downloads <= 3.6.7 - Cross-Site Request Forgery to Payment Account Hijacking via 'square_tokens' Parameter | known not affected: 1 | 2026-06-05T19:39:10+00:00 | Vulnerability · Source |
| CVE-2026-7614 | redhat_vex | Old Posts Highlighter <= 1.0.3 - Cross-Site Request Forgery to Settings Update | known not affected: 1 | 2026-06-05T19:39:10+00:00 | Vulnerability · Source |
| CVE-2026-7425 | redhat_vex | Out-of-Bounds Read in Router Advertisement Option Parser in FreeRTOS-Plus-TCP | known not affected: 1 | 2026-06-05T19:39:10+00:00 | Vulnerability · Source |