VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297761 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-7881 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to IDOR in the Express Entry Detail block | known not affected: 1 | 2026-06-05T19:39:10+00:00 | Vulnerability · Source |
| CVE-2026-7272 | redhat_vex | WilliamCloudQi matlab-mcp-server MCP index.ts execute_matlab_code path traversal | known not affected: 1 | 2026-06-05T19:39:09+00:00 | Vulnerability · Source |
| CVE-2026-7416 | redhat_vex | PolarVista xcode-mcp-server MCP index.ts run_tests os command injection | known not affected: 1 | 2026-06-05T19:39:09+00:00 | Vulnerability · Source |
| CVE-2026-7650 | redhat_vex | E2Pdf – Export Pdf Tool for WordPress <= 1.32.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:39:09+00:00 | Vulnerability · Source |
| CVE-2026-7506 | redhat_vex | SourceCodester Hotel Management System check sql injection | known not affected: 1 | 2026-06-05T19:39:08+00:00 | Vulnerability · Source |
| CVE-2026-7074 | redhat_vex | itsourcecode Construction Management System execute1.php sql injection | known not affected: 1 | 2026-06-05T19:39:08+00:00 | Vulnerability · Source |
| CVE-2026-7128 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection | known not affected: 1 | 2026-06-05T19:39:08+00:00 | Vulnerability · Source |
| CVE-2026-7065 | redhat_vex | BidingCC BuildingAI Remote Upload API file-storage.service.ts uploadRemoteFile server-side request forgery | known not affected: 1 | 2026-06-05T19:39:07+00:00 | Vulnerability · Source |
| CVE-2026-7227 | redhat_vex | SourceCodester Pizzafy Ecommerce System ajax.php login sql injection | known not affected: 1 | 2026-06-05T19:39:06+00:00 | Vulnerability · Source |
| CVE-2026-7146 | redhat_vex | AlejandroArciniegas mcp-data-vis HTTP Request server.js axios server-side request forgery | known not affected: 1 | 2026-06-05T19:39:05+00:00 | Vulnerability · Source |
| CVE-2026-7308 | redhat_vex | Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via HTML Browse Page | known not affected: 1 | 2026-06-05T19:39:05+00:00 | Vulnerability · Source |
| CVE-2026-7199 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection | known not affected: 1 | 2026-06-05T19:39:04+00:00 | Vulnerability · Source |
| CVE-2026-7784 | redhat_vex | RTGS2017 NagaAgent Skills Endpoint extensions.py path traversal | known not affected: 1 | 2026-06-05T19:39:04+00:00 | Vulnerability · Source |
| CVE-2026-7379 | redhat_vex | Missing Release of Memory after Effective Lifetime in Wireshark | known not affected: 1 | 2026-06-05T19:39:03+00:00 | Vulnerability · Source |
| CVE-2026-7214 | redhat_vex | eghuzefa engineer-your-data server.py file_inf path traversal | known not affected: 1 | 2026-06-05T19:39:03+00:00 | Vulnerability · Source |
| CVE-2026-7070 | redhat_vex | code-projects Inventory Management System Login sql injection | known not affected: 1 | 2026-06-05T19:39:03+00:00 | Vulnerability · Source |
| CVE-2026-7788 | redhat_vex | Axle-Bucamp MCP-Docusaurus document.py get_content path traversal | known not affected: 1 | 2026-06-05T19:39:02+00:00 | Vulnerability · Source |
| CVE-2026-7430 | redhat_vex | Post Snippets <= 4.0.19 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import | known not affected: 1 | 2026-06-05T19:39:02+00:00 | Vulnerability · Source |
| CVE-2026-7421 | redhat_vex | Passeum Ticketing <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'shop_name' Setting | known not affected: 1 | 2026-06-05T19:39:01+00:00 | Vulnerability · Source |
| CVE-2026-7061 | redhat_vex | Toowiredd chatgpt-mcp-server MCP/HTTP docker.service.ts os command injection | known not affected: 1 | 2026-06-05T19:39:01+00:00 | Vulnerability · Source |
| CVE-2026-7223 | redhat_vex | BigSweetPotatoStudio HyperChat AI Proxy Middleware aiProxyMiddleware.mts fetch server-side request forgery | known not affected: 1 | 2026-06-05T19:39:01+00:00 | Vulnerability · Source |
| CVE-2026-7205 | redhat_vex | duartium papers-mcp-server main.py search_papers path traversal | known not affected: 1 | 2026-06-05T19:39:01+00:00 | Vulnerability · Source |
| CVE-2026-7249 | redhat_vex | Location Weather <= 3.0.2 - Missing Authorization to Authenticated (Contributor+) Block Settings Modification and Cache Purging | known not affected: 1 | 2026-06-05T19:39:00+00:00 | Vulnerability · Source |
| CVE-2026-7384 | redhat_vex | ezequiroga mcp-bases research_server.py search_papers path traversal | known not affected: 1 | 2026-06-05T19:39:00+00:00 | Vulnerability · Source |
| CVE-2026-7177 | redhat_vex | ChatGPTNextWeb NextChat route.ts proxyHandler server-side request forgery | known not affected: 1 | 2026-06-05T19:38:59+00:00 | Vulnerability · Source |
| CVE-2026-7159 | redhat_vex | douinc mkdocs-mcp-plugin server.py list_documents path traversal | known not affected: 1 | 2026-06-05T19:38:59+00:00 | Vulnerability · Source |
| CVE-2026-7555 | redhat_vex | itsourcecode Electronic Judging System login.php sql injection | known not affected: 1 | 2026-06-05T19:38:59+00:00 | Vulnerability · Source |
| CVE-2026-7618 | redhat_vex | EnvíaloSimple: Email Marketing y Newsletters <= 2.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter | known not affected: 1 | 2026-06-05T19:38:59+00:00 | Vulnerability · Source |
| CVE-2026-7519 | redhat_vex | Fujian Apex LiveBOS Endpoint UploadImage.do path traversal | known not affected: 1 | 2026-06-05T19:38:59+00:00 | Vulnerability · Source |
| CVE-2026-7636 | redhat_vex | Slider by Soliloquy <= 2.8.1 - Authenticated (Subscriber+) Information Disclosure via REST API Endpoint | known not affected: 1 | 2026-06-05T19:38:59+00:00 | Vulnerability · Source |
| CVE-2026-7573 | redhat_vex | GetUserRoles API endpoint allows any authenticated user to enumerate ACL policies across all organizations | known not affected: 1 | 2026-06-05T19:38:58+00:00 | Vulnerability · Source |
| CVE-2026-34626 | redhat_vex | Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321) | known not affected: 1 | 2026-06-05T19:38:58+00:00 | Vulnerability · Source |
| CVE-2026-34860 | redhat_vex | CVE-2026-34860 | known not affected: 1 | 2026-06-05T19:38:58+00:00 | Vulnerability · Source |
| CVE-2026-34068 | redhat_vex | nimiq-transaction: UpdateValidator transactions allows voting key change without proof-of-knowledge | known not affected: 1 | 2026-06-05T19:38:58+00:00 | Vulnerability · Source |
| CVE-2026-34284 | redhat_vex | CVE-2026-34284 | known not affected: 1 | 2026-06-05T19:38:57+00:00 | Vulnerability · Source |
| CVE-2026-34257 | redhat_vex | Open Redirect vulnerability in SAP NetWeaver Application Server ABAP | known not affected: 1 | 2026-06-05T19:38:57+00:00 | Vulnerability · Source |
| CVE-2026-34662 | redhat_vex | Illustrator | NULL Pointer Dereference (CWE-476) | known not affected: 1 | 2026-06-05T19:38:57+00:00 | Vulnerability · Source |
| CVE-2026-34266 | redhat_vex | CVE-2026-34266 | known not affected: 1 | 2026-06-05T19:38:57+00:00 | Vulnerability · Source |
| CVE-2026-34859 | redhat_vex | CVE-2026-34859 | known not affected: 1 | 2026-06-05T19:38:56+00:00 | Vulnerability · Source |
| CVE-2026-34600 | redhat_vex | Joplin Server delta API returns note content after share access is revoked | known not affected: 1 | 2026-06-05T19:38:54+00:00 | Vulnerability · Source |
| CVE-2026-34307 | redhat_vex | CVE-2026-34307 | known not affected: 1 | 2026-06-05T19:38:53+00:00 | Vulnerability · Source |
| CVE-2026-34321 | redhat_vex | CVE-2026-34321 | known not affected: 1 | 2026-06-05T19:38:53+00:00 | Vulnerability · Source |
| CVE-2026-34213 | redhat_vex | Docmost has cross-page attachment overwrite via flawed attachmentId overwrite validation | known not affected: 1 | 2026-06-05T19:38:51+00:00 | Vulnerability · Source |
| CVE-2026-34244 | redhat_vex | Weblate: SSRF via Project-Level Machinery Configuration | known not affected: 1 | 2026-06-05T19:38:51+00:00 | Vulnerability · Source |
| CVE-2026-34325 | redhat_vex | CVE-2026-34325 | known not affected: 1 | 2026-06-05T19:38:50+00:00 | Vulnerability · Source |
| CVE-2026-34899 | redhat_vex | WordPress LTL Freight Quotes – Worldwide Express Edition plugin <= 5.2.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:38:50+00:00 | Vulnerability · Source |
| CVE-2026-34460 | redhat_vex | NamelessMC: OAuth callback `state` is not validated, allowing login CSRF / session swapping | known not affected: 1 | 2026-06-05T19:38:49+00:00 | Vulnerability · Source |
| CVE-2026-34019 | redhat_vex | BIG-IP BFD vulnerability | known not affected: 1 | 2026-06-05T19:38:49+00:00 | Vulnerability · Source |
| CVE-2026-34064 | redhat_vex | nimiq-account: Vesting insufficient funds error can panic | known not affected: 1 | 2026-06-05T19:38:49+00:00 | Vulnerability · Source |
| CVE-2026-34082 | redhat_vex | Dify has IDOR in deleting someone else's chat conversation | known not affected: 1 | 2026-06-05T19:38:48+00:00 | Vulnerability · Source |