VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-1630 | redhat_vex | Reflected XSS in WEBCON BPS | known not affected: 1 | 2026-06-05T19:34:21+00:00 | Vulnerability · Source |
| CVE-2026-1274 | redhat_vex | IBM Guardium Data Protection is affected by multiple vulnerabilities | known not affected: 1 | 2026-06-05T19:34:20+00:00 | Vulnerability · Source |
| CVE-2026-1450 | redhat_vex | rognone <= 0.6.2 - Reflected Cross-Site Scripting via 'mode' Parameter | known not affected: 1 | 2026-06-05T19:34:20+00:00 | Vulnerability · Source |
| CVE-2026-10718 | redhat_vex | Open Seachest/Seachest NVMe Trim (Deallocate) Vulnerability | known not affected: 1 | 2026-06-05T19:34:19+00:00 | Vulnerability · Source |
| CVE-2026-1184 | redhat_vex | Deserialization of Untrusted Data in GitLab | known not affected: 1 | 2026-06-05T19:34:19+00:00 | Vulnerability · Source |
| CVE-2026-1607 | redhat_vex | Surbma | Booking.com <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | known not affected: 1 | 2026-06-05T19:34:19+00:00 | Vulnerability · Source |
| CVE-2026-10606 | redhat_vex | DedeCMS Feedback feedback.php TrimMsg sql injection | known not affected: 1 | 2026-06-05T19:34:18+00:00 | Vulnerability · Source |
| CVE-2026-10282 | redhat_vex | Bottelet DaybydayCRM DocumentsController.php view improper authorization | known not affected: 1 | 2026-06-05T19:34:18+00:00 | Vulnerability · Source |
| CVE-2026-10057 | redhat_vex | ITP Technology｜ITS Intelligent SCADA System - Stored Cross-Site Scripting | known not affected: 1 | 2026-06-05T19:34:17+00:00 | Vulnerability · Source |
| CVE-2026-10075 | redhat_vex | Interinfo｜DreamMaker - Path Traversal | known not affected: 1 | 2026-06-05T19:34:17+00:00 | Vulnerability · Source |
| CVE-2026-10219 | redhat_vex | nextlevelbuilder GoClaw write_file Tool fsbridge.go FsBridge.WriteFile os command injection | known not affected: 1 | 2026-06-05T19:34:17+00:00 | Vulnerability · Source |
| CVE-2026-10255 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System ShowForm.php sell_statement access control | known not affected: 1 | 2026-06-05T19:34:17+00:00 | Vulnerability · Source |
| CVE-2026-10619 | redhat_vex | sayan365 student-management-system improper authentication | known not affected: 1 | 2026-06-05T19:34:16+00:00 | Vulnerability · Source |
| CVE-2026-10039 | redhat_vex | Frontend Admin by DynamiApps <= 3.28.28 - Authenticated (Administrator+) SQL Injection via 'order' Parameter | known not affected: 1 | 2026-06-05T19:34:16+00:00 | Vulnerability · Source |
| CVE-2026-10260 | redhat_vex | CodeAstro Online Job Portal delete-jobs.php sql injection | known not affected: 1 | 2026-06-05T19:34:15+00:00 | Vulnerability · Source |
| CVE-2026-10620 | redhat_vex | code-projects Student Admission System index.php sql injection | known not affected: 1 | 2026-06-05T19:34:15+00:00 | Vulnerability · Source |
| CVE-2026-10224 | redhat_vex | NousResearch hermes-agent Webhook Endpoint feishu.py _handle_webhook_request resource consumption | known not affected: 1 | 2026-06-05T19:34:15+00:00 | Vulnerability · Source |
| CVE-2026-10288 | redhat_vex | code-projects Hotel and Tourism Reservation System Admin Login login.php password_verify improper authentication | known not affected: 1 | 2026-06-05T19:34:14+00:00 | Vulnerability · Source |
| CVE-2026-10864 | redhat_vex | MISP Dashboard widget field selection may expose restricted user and organisation data | known not affected: 1 | 2026-06-05T19:34:14+00:00 | Vulnerability · Source |
| CVE-2026-10253 | redhat_vex | itsourcecode Online House Rental System manage_payment.php sql injection | known not affected: 1 | 2026-06-05T19:34:13+00:00 | Vulnerability · Source |
| CVE-2026-10855 | redhat_vex | MISP Event template importer authorization bypass | known not affected: 1 | 2026-06-05T19:34:12+00:00 | Vulnerability · Source |
| CVE-2026-10280 | redhat_vex | horizon921 mcpilot MCP API Call Endpoint route.ts server-side request forgery | known not affected: 1 | 2026-06-05T19:34:12+00:00 | Vulnerability · Source |
| CVE-2026-10549 | redhat_vex | Privilege escalation in Yandex Database | known not affected: 1 | 2026-06-05T19:34:12+00:00 | Vulnerability · Source |
| CVE-2026-10262 | redhat_vex | code-projects Real State Services Login loginuser.php sql injection | known not affected: 1 | 2026-06-05T19:34:11+00:00 | Vulnerability · Source |
| CVE-2026-10856 | redhat_vex | Open redirect in MISP dashboard button widget URL handling | known not affected: 1 | 2026-06-05T19:34:09+00:00 | Vulnerability · Source |
| CVE-2026-10068 | redhat_vex | Shibby Tomato SUBSCRIBE Call miniupnpd send server-side request forgery | known not affected: 1 | 2026-06-05T19:34:09+00:00 | Vulnerability · Source |
| CVE-2026-10617 | redhat_vex | nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication | known not affected: 1 | 2026-06-05T19:34:09+00:00 | Vulnerability · Source |
| CVE-2026-10236 | redhat_vex | SourceCodester Water Billing Management System User Management Endpoint Users.php save improper authorization | known not affected: 1 | 2026-06-05T19:34:08+00:00 | Vulnerability · Source |
| CVE-2026-10694 | redhat_vex | SourceCodester Online Food Ordering System index.php include file inclusion | known not affected: 1 | 2026-06-05T19:34:08+00:00 | Vulnerability · Source |
| CVE-2026-10074 | redhat_vex | Interinfo｜DreamMaker - Arbitrary File Read | known not affected: 1 | 2026-06-05T19:34:08+00:00 | Vulnerability · Source |
| CVE-2026-10290 | redhat_vex | code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection | known not affected: 1 | 2026-06-05T19:34:07+00:00 | Vulnerability · Source |
| CVE-2026-10272 | redhat_vex | a4m4 Student-Management-System deleteform.php improper authorization | known not affected: 1 | 2026-06-05T19:34:07+00:00 | Vulnerability · Source |
| CVE-2026-10254 | redhat_vex | SourceCodester Pet Grooming Management Software admin file information disclosure | known not affected: 1 | 2026-06-05T19:34:06+00:00 | Vulnerability · Source |
| CVE-2026-10704 | redhat_vex | SourceCodester Pizzafy E-Commerce System Administrative Control Panel admin_class_novo.php login sql injection | known not affected: 1 | 2026-06-05T19:34:06+00:00 | Vulnerability · Source |
| CVE-2026-10281 | redhat_vex | Enderfga claw-orchestrator API Endpoint embedded-server.ts EmbeddedServer missing authentication | known not affected: 1 | 2026-06-05T19:34:06+00:00 | Vulnerability · Source |
| CVE-2026-10771 | redhat_vex | crmeb crmeb_java base64 Qrcode Endpoint RestTemplateUtil.java RestTemplate.getForEntity server-side request forgery | known not affected: 1 | 2026-06-05T19:34:06+00:00 | Vulnerability · Source |
| CVE-2026-10861 | redhat_vex | MISP post-login open redirect via pre_login_requested_url | known not affected: 1 | 2026-06-05T19:34:05+00:00 | Vulnerability · Source |
| CVE-2026-10249 | redhat_vex | itsourcecode Online Blood Bank Management System viewrequest.php sql injection | known not affected: 1 | 2026-06-05T19:34:05+00:00 | Vulnerability · Source |
| CVE-2026-10777 | redhat_vex | ealpha072 Student-Management-System Administrative Backend config.php improper authentication | known not affected: 1 | 2026-06-05T19:34:04+00:00 | Vulnerability · Source |
| CVE-2026-10070 | redhat_vex | macrozheng mall Super Admin Password update improper authorization | known not affected: 1 | 2026-06-05T19:34:04+00:00 | Vulnerability · Source |
| CVE-2026-10285 | redhat_vex | DevaslanPHP project-management Ticket KanbanScrumHelper.php recordUpdated improper authorization | known not affected: 1 | 2026-06-05T19:34:04+00:00 | Vulnerability · Source |
| CVE-2026-10250 | redhat_vex | itsourcecode Online Blood Bank Management System campsdetails.php sql injection | known not affected: 1 | 2026-06-05T19:34:04+00:00 | Vulnerability · Source |
| CVE-2026-10100 | redhat_vex | Simple Custom Login Page <= 1.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting | known not affected: 1 | 2026-06-05T19:34:03+00:00 | Vulnerability · Source |
| CVE-2026-10854 | redhat_vex | Unauthorized exposure of private galaxies in MISP event template creation | known not affected: 1 | 2026-06-05T19:34:03+00:00 | Vulnerability · Source |
| CVE-2026-10243 | redhat_vex | code-projects Smart Parking System Admin Endpoint missing authentication | known not affected: 1 | 2026-06-05T19:34:02+00:00 | Vulnerability · Source |
| CVE-2026-10269 | redhat_vex | decolua 9router HTTP Header dashboardGuard.js isAuthenticated improper authorization | known not affected: 1 | 2026-06-05T19:34:02+00:00 | Vulnerability · Source |
| CVE-2026-10225 | redhat_vex | raisulislamg4 student_management_system_by_php Login login_check.php sql injection | known not affected: 1 | 2026-06-05T19:34:02+00:00 | Vulnerability · Source |
| CVE-2026-10863 | redhat_vex | MISP User-controlled order parameter in correlations over-correlation endpoint | known not affected: 1 | 2026-06-05T19:34:02+00:00 | Vulnerability · Source |
| CVE-2026-10261 | redhat_vex | CodeAstro Online Job Portal application_status.php sql injection | known not affected: 1 | 2026-06-05T19:34:02+00:00 | Vulnerability · Source |
| CVE-2026-10283 | redhat_vex | Bottelet DaybydayCRM Setting missing authentication | known not affected: 1 | 2026-06-05T19:34:01+00:00 | Vulnerability · Source |