VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-6816 | redhat_vex | TFA Basic Plugins - Access Bypass | known not affected: 1 | 2026-06-05T19:32:46+00:00 | Vulnerability · Source |
| CVE-2026-6339 | redhat_vex | Missing request origin validation on burn-on-read reveal endpoint | known not affected: 1 | 2026-06-05T19:32:46+00:00 | Vulnerability · Source |
| CVE-2026-6492 | redhat_vex | arnobt78 Hotel Booking Management System Health Check Endpoint detailed information disclosure | known not affected: 1 | 2026-06-05T19:32:46+00:00 | Vulnerability · Source |
| CVE-2026-6393 | redhat_vex | BetterDocs <= 4.3.11 - Missing Authorization to Authenticated (Subscriber+) Unauthorized AI API Usage | known not affected: 1 | 2026-06-05T19:32:45+00:00 | Vulnerability · Source |
| CVE-2026-6294 | redhat_vex | Google PageRank Display <= 1.4 - Cross-Site Request Forgery to Settings Update via Settings Page | known not affected: 1 | 2026-06-05T19:32:45+00:00 | Vulnerability · Source |
| CVE-2026-6582 | redhat_vex | TransformerOptimus SuperAGI Vector Database Management Endpoint vector_dbs.py get_vector_db_details missing authentication | known not affected: 1 | 2026-06-05T19:32:44+00:00 | Vulnerability · Source |
| CVE-2026-6672 | redhat_vex | Affiliate Program Suite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via slicewp_affiliate_url Shortcode | known not affected: 1 | 2026-06-05T19:32:44+00:00 | Vulnerability · Source |
| CVE-2026-6142 | redhat_vex | tushar-2223 Hotel Management System roomdelete.php sql injection | known not affected: 1 | 2026-06-05T19:32:44+00:00 | Vulnerability · Source |
| CVE-2026-6663 | redhat_vex | GWD Connect <= 2.9 - Unauthenticated Limited Code Execution via update_agent | known not affected: 1 | 2026-06-05T19:32:44+00:00 | Vulnerability · Source |
| CVE-2026-6708 | redhat_vex | HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary Classroom Deletion via 'id' Parameter | known not affected: 1 | 2026-06-05T19:32:44+00:00 | Vulnerability · Source |
| CVE-2026-6959 | redhat_vex | Nomad vulnerable to arbitrary file read/write on client host through symlink attack | known not affected: 1 | 2026-06-05T19:32:43+00:00 | Vulnerability · Source |
| CVE-2026-6214 | redhat_vex | Forminator Forms <= 1.53.0 - Missing Authorization to Authenticated (Subscriber+) Scheduled Form Submission Export via forminator_export_entries Action on wp_loaded Hook | known not affected: 1 | 2026-06-05T19:32:42+00:00 | Vulnerability · Source |
| CVE-2026-6151 | redhat_vex | code-projects Vehicle Showroom Management System PaymentStatusFunction.php sql injection | known not affected: 1 | 2026-06-05T19:32:42+00:00 | Vulnerability · Source |
| CVE-2026-6052 | redhat_vex | IBM® Db2® is vulnerable to running out of memory when executing certain queries with MDC tables | known not affected: 1 | 2026-06-05T19:32:42+00:00 | Vulnerability · Source |
| CVE-2026-6797 | redhat_vex | Sanluan PublicCMS DocToHtmlUtils.java ZipSecureFile.setMinflateRatio resource consumption | known not affected: 1 | 2026-06-05T19:32:41+00:00 | Vulnerability · Source |
| CVE-2026-6515 | redhat_vex | Insufficient Session Expiration in GitLab | known not affected: 1 | 2026-06-05T19:32:40+00:00 | Vulnerability · Source |
| CVE-2026-6700 | redhat_vex | DX Sources <= 2.0.1 - Cross-Site Request Forgery to Settings Update | known not affected: 1 | 2026-06-05T19:32:40+00:00 | Vulnerability · Source |
| CVE-2026-6421 | redhat_vex | Mobatek MobaXterm Home Edition msimg32.dll uncontrolled search path | known not affected: 1 | 2026-06-05T19:32:39+00:00 | Vulnerability · Source |
| CVE-2026-6452 | redhat_vex | Bigfishgames Syndicate <= 1.2 - Cross-Site Request Forgery to Settings Reset and Update | known not affected: 1 | 2026-06-05T19:32:38+00:00 | Vulnerability · Source |
| CVE-2026-6340 | redhat_vex | Memory Exhaustion via Malicious 7zip File Upload | known not affected: 1 | 2026-06-05T19:32:38+00:00 | Vulnerability · Source |
| CVE-2026-6605 | redhat_vex | modelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgery | known not affected: 1 | 2026-06-05T19:32:38+00:00 | Vulnerability · Source |
| CVE-2026-6344 | redhat_vex | Fluent Forms <= 6.2.1 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal in Email Attachment | known not affected: 1 | 2026-06-05T19:32:37+00:00 | Vulnerability · Source |
| CVE-2026-6218 | redhat_vex | aandrew-me ytDownloader Error Details Panel createTextNode cross site scripting | known not affected: 1 | 2026-06-05T19:32:37+00:00 | Vulnerability · Source |
| CVE-2026-6038 | redhat_vex | code-projects Vehicle Showroom Management System RegisterCustomerFunction.php sql injection | known not affected: 1 | 2026-06-05T19:32:36+00:00 | Vulnerability · Source |
| CVE-2026-6236 | redhat_vex | Posts map <= 0.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'name' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:32:36+00:00 | Vulnerability · Source |
| CVE-2026-6830 | redhat_vex | Nesquena Hermes WebUI Environment Variable Credential Leakage via Profile Switch | known not affected: 1 | 2026-06-05T19:32:36+00:00 | Vulnerability · Source |
| CVE-2026-6551 | redhat_vex | Timeline Blocks for Gutenberg <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute | known not affected: 1 | 2026-06-05T19:32:35+00:00 | Vulnerability · Source |
| CVE-2026-6713 | redhat_vex | Incorrect Authorization in GitLab | known not affected: 1 | 2026-06-05T19:32:35+00:00 | Vulnerability · Source |
| CVE-2026-6164 | redhat_vex | code-projects Lost and Found Thing Management addcat.php sql injection | known not affected: 1 | 2026-06-05T19:32:34+00:00 | Vulnerability · Source |
| CVE-2026-6623 | redhat_vex | BichitroGan ISP Billing Software Profile users-view cross site scripting | known not affected: 1 | 2026-06-05T19:32:33+00:00 | Vulnerability · Source |
| CVE-2026-6542 | redhat_vex | Monitor API allows cross-user read of transaction logs and deletion of build data via flow_id | known not affected: 1 | 2026-06-05T19:32:32+00:00 | Vulnerability · Source |
| CVE-2026-6829 | redhat_vex | nesquena hermes-webui Arbitrary Workspace Directory Access | known not affected: 1 | 2026-06-05T19:32:32+00:00 | Vulnerability · Source |
| CVE-2026-6595 | redhat_vex | ProjectsAndPrograms School Management System HTTP GET Parameter buslocation.php sql injection | known not affected: 1 | 2026-06-05T19:32:32+00:00 | Vulnerability · Source |
| CVE-2026-6397 | redhat_vex | Sticky <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'readmoretext' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:32:30+00:00 | Vulnerability · Source |
| CVE-2026-6577 | redhat_vex | liangliangyy DjangoBlog logtracks Endpoint views.py missing authentication | known not affected: 1 | 2026-06-05T19:32:30+00:00 | Vulnerability · Source |
| CVE-2026-6892 | redhat_vex | CVE-2026-6892 | known not affected: 1 | 2026-06-05T19:32:30+00:00 | Vulnerability · Source |
| CVE-2026-6948 | redhat_vex | Unbounded Memory Allocation in VQLResponse Result-Set Writer | known not affected: 1 | 2026-06-05T19:32:29+00:00 | Vulnerability · Source |
| CVE-2026-6670 | redhat_vex | Media Sync <= 1.4.9 - Authenticated (Author+) Path Traversal via 'sub_dir' and 'media_items' Parameters | known not affected: 1 | 2026-06-05T19:32:29+00:00 | Vulnerability · Source |
| CVE-2026-6913 | redhat_vex | Shortcodely <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'widget_area' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:32:29+00:00 | Vulnerability · Source |
| CVE-2026-6937 | redhat_vex | Appointment Booking Calendar <= 1.6.11.8 - Missing Authorization to Unauthenticated Arbitrary Modification via Bulk Appointments REST API Endpoint | known not affected: 1 | 2026-06-05T19:32:29+00:00 | Vulnerability · Source |
| CVE-2026-6391 | redhat_vex | Sentence To SEO (keywords, description and tags) <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Page Parameters | known not affected: 1 | 2026-06-05T19:32:28+00:00 | Vulnerability · Source |
| CVE-2026-6256 | redhat_vex | Credits Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:32:27+00:00 | Vulnerability · Source |
| CVE-2026-6418 | redhat_vex | PaperCut NG/MF: Path Traversal in Shared Account Synchronization | known not affected: 1 | 2026-06-05T19:32:27+00:00 | Vulnerability · Source |
| CVE-2026-6490 | redhat_vex | QueryMine sms GET Request Parameter deletecourse.php sql injection | known not affected: 1 | 2026-06-05T19:32:27+00:00 | Vulnerability · Source |
| CVE-2026-6058 | redhat_vex | CVE-2026-6058 | known not affected: 1 | 2026-06-05T19:32:26+00:00 | Vulnerability · Source |
| CVE-2026-6427 | redhat_vex | a3 Lazy Load <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Element | known not affected: 1 | 2026-06-05T19:32:26+00:00 | Vulnerability · Source |
| CVE-2026-6607 | redhat_vex | lm-sys fastchat Worker API Endpoint api_generate resource consumption | known not affected: 1 | 2026-06-05T19:32:26+00:00 | Vulnerability · Source |
| CVE-2026-6580 | redhat_vex | liangliangyy DjangoBlog Amap API Call views.py hard-coded key | known not affected: 1 | 2026-06-05T19:32:26+00:00 | Vulnerability · Source |
| CVE-2026-6805 | redhat_vex | Vulnerability on Cryptobox external sharing feature | known not affected: 1 | 2026-06-05T19:32:25+00:00 | Vulnerability · Source |
| CVE-2026-6166 | redhat_vex | code-projects Vehicle Showroom Management System UpdateVehicleFunction.php sql injection | known not affected: 1 | 2026-06-05T19:32:25+00:00 | Vulnerability · Source |