VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-6625 | redhat_vex | moxi624 Mogu Blog v2 Picture Storage Service LocalFileServiceImpl.java LocalFileServiceImpl.uploadPictureByUrl server-side request forgery | known not affected: 1 | 2026-06-05T19:32:25+00:00 | Vulnerability · Source |
| CVE-2026-6588 | redhat_vex | serge-chat serge Model API Endpoint model.py delete_model missing authentication | known not affected: 1 | 2026-06-05T19:32:24+00:00 | Vulnerability · Source |
| CVE-2026-6498 | redhat_vex | Five Star Restaurant Reservations <= 2.7.16 - Unauthenticated Payment Bypass via PHP Type Juggling in 'payment_id' Parameter | known not affected: 1 | 2026-06-05T19:32:24+00:00 | Vulnerability · Source |
| CVE-2026-6500 | redhat_vex | CVE-2026-6500 | known not affected: 1 | 2026-06-05T19:32:24+00:00 | Vulnerability · Source |
| CVE-2026-6579 | redhat_vex | liangliangyy DjangoBlog Clean Endpoint views.py missing authentication | known not affected: 1 | 2026-06-05T19:32:23+00:00 | Vulnerability · Source |
| CVE-2026-6696 | redhat_vex | Zingaya Click-to-Call <= 1.0 - Reflected Cross-Site Scripting via 'email' Parameter | known not affected: 1 | 2026-06-05T19:32:22+00:00 | Vulnerability · Source |
| CVE-2026-6401 | redhat_vex | Bottom Bar <= 0.1.7 - Cross-Site Request Forgery to Settings Update | known not affected: 1 | 2026-06-05T19:32:22+00:00 | Vulnerability · Source |
| CVE-2026-6041 | redhat_vex | Buzz Comments <= 0.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Custom Buzz Avatar' Setting | known not affected: 1 | 2026-06-05T19:32:21+00:00 | Vulnerability · Source |
| CVE-2026-6399 | redhat_vex | General Options <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ad_contact_number' Parameter | known not affected: 1 | 2026-06-05T19:32:21+00:00 | Vulnerability · Source |
| CVE-2026-6711 | redhat_vex | Website LLMs.txt <= 8.2.6 - Reflected Cross-Site Scripting | known not affected: 1 | 2026-06-05T19:32:20+00:00 | Vulnerability · Source |
| CVE-2026-6072 | redhat_vex | Oliver POS <= 2.4.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to 'OliverAuth' Header | known not affected: 1 | 2026-06-05T19:32:20+00:00 | Vulnerability · Source |
| CVE-2026-6036 | redhat_vex | code-projects Vehicle Showroom Management System VehicleDetailsFunction.php sql injection | known not affected: 1 | 2026-06-05T19:32:19+00:00 | Vulnerability · Source |
| CVE-2026-6810 | redhat_vex | Booking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover | known not affected: 1 | 2026-06-05T19:32:19+00:00 | Vulnerability · Source |
| CVE-2026-6252 | redhat_vex | Meta Field Block <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tagName' Block Attribute | known not affected: 1 | 2026-06-05T19:32:19+00:00 | Vulnerability · Source |
| CVE-2026-6225 | redhat_vex | Taskbuilder – Project Management & Task Management Tool With Kanban Board <= 5.0.6 - Authenticated (Subscriber+) Time-Based Blind SQL Injection via 'project_search' Parameter | known not affected: 1 | 2026-06-05T19:32:18+00:00 | Vulnerability · Source |
| CVE-2026-6702 | redhat_vex | Publish 2 Ping.fm <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'wpPingPingKey' Parameter | known not affected: 1 | 2026-06-05T19:32:17+00:00 | Vulnerability · Source |
| CVE-2026-6063 | redhat_vex | Authorization Bypass Through User-Controlled Key in GitLab | known not affected: 1 | 2026-06-05T19:32:17+00:00 | Vulnerability · Source |
| CVE-2026-6621 | redhat_vex | 1024bit extend-deep index.js prototype pollution | known not affected: 1 | 2026-06-05T19:32:17+00:00 | Vulnerability · Source |
| CVE-2026-6180 | redhat_vex | PaperCut MF: Card truncation on HP readers | known not affected: 1 | 2026-06-05T19:32:16+00:00 | Vulnerability · Source |
| CVE-2026-6504 | redhat_vex | Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter | known not affected: 1 | 2026-06-05T19:32:15+00:00 | Vulnerability · Source |
| CVE-2026-6342 | redhat_vex | Group prefix matching bypass for subscriptions | known not affected: 1 | 2026-06-05T19:32:15+00:00 | Vulnerability · Source |
| CVE-2026-6629 | redhat_vex | Metasoft 美特软件 MetaCRM Interface sql.jsp Statement.executeUpdate sql injection | known not affected: 1 | 2026-06-05T19:32:14+00:00 | Vulnerability · Source |
| CVE-2026-6441 | redhat_vex | Canto <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Setting Modification | known not affected: 1 | 2026-06-05T19:32:14+00:00 | Vulnerability · Source |
| CVE-2026-6405 | redhat_vex | Anomify AI <= 0.3.6 - Cross-Site Request Forgery | known not affected: 1 | 2026-06-05T19:32:14+00:00 | Vulnerability · Source |
| CVE-2026-6603 | redhat_vex | modelscope agentscope _python.py execute_shell_command code injection | known not affected: 1 | 2026-06-05T19:32:14+00:00 | Vulnerability · Source |
| CVE-2026-6863 | redhat_vex | HTTP Filestore Endpoints Misapply Permissions Across Organizations | known not affected: 1 | 2026-06-05T19:32:12+00:00 | Vulnerability · Source |
| CVE-2026-6287 | redhat_vex | ShopLentor - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Product Grid 'blockUniqId' Block Attribute | known not affected: 1 | 2026-06-05T19:32:11+00:00 | Vulnerability · Source |
| CVE-2026-6962 | redhat_vex | Cost of Goods: Product Cost & Profit Calculator for WooCommerce <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | known not affected: 1 | 2026-06-05T19:32:11+00:00 | Vulnerability · Source |
| CVE-2026-6809 | redhat_vex | Social Post Embed <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Threads Embed | known not affected: 1 | 2026-06-05T19:32:10+00:00 | Vulnerability · Source |
| CVE-2026-6674 | redhat_vex | Plugin: CMS für Motorrad Werkstätten <= 1.0.0 - Authenticated (Subscriber+) SQL Injection via 'arttype' Parameter | known not affected: 1 | 2026-06-05T19:32:09+00:00 | Vulnerability · Source |
| CVE-2026-6728 | redhat_vex | Slider Revolution <= 7.0.9 - Unauthenticated Sensitive Information Exposure via 'sliders/stream' | known not affected: 1 | 2026-06-05T19:32:09+00:00 | Vulnerability · Source |
| CVE-2026-6566 | redhat_vex | Photo Gallery, Sliders, Proofing and Themes <= 4.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Image Deletion via REST API | known not affected: 1 | 2026-06-05T19:32:09+00:00 | Vulnerability · Source |
| CVE-2026-6539 | redhat_vex | Notepad++ 8.9.3 Format String Injection via nativeLang.xml | known not affected: 1 | 2026-06-05T19:32:08+00:00 | Vulnerability · Source |
| CVE-2026-6179 | redhat_vex | Stored Cross Site Scripting in NightWolf Penetration Testing Platform | known not affected: 1 | 2026-06-05T19:32:07+00:00 | Vulnerability · Source |
| CVE-2026-6395 | redhat_vex | Word 2 Cash <= 0.9.2 - Cross-Site Request Forgeryto Stored Cross-Site Scripting via Settings Page | known not affected: 1 | 2026-06-05T19:32:06+00:00 | Vulnerability · Source |
| CVE-2026-6608 | redhat_vex | lm-sys fastchat Arena Side-by-Side View add_text control flow | known not affected: 1 | 2026-06-05T19:32:05+00:00 | Vulnerability · Source |
| CVE-2026-6662 | redhat_vex | ericc-ch copilot-api Token Endpoint server.ts cors cross-domain policy | known not affected: 1 | 2026-06-05T19:32:05+00:00 | Vulnerability · Source |
| CVE-2026-6149 | redhat_vex | code-projects Vehicle Showroom Management System BookVehicleFunction.php sql injection | known not affected: 1 | 2026-06-05T19:32:05+00:00 | Vulnerability · Source |
| CVE-2026-6725 | redhat_vex | WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute | known not affected: 1 | 2026-06-05T19:32:04+00:00 | Vulnerability · Source |
| CVE-2026-6932 | redhat_vex | Woo Commerce Minimum Weight <= 3.0.1 - Cross-Site Request Forgery via Settings Update Form | known not affected: 1 | 2026-06-05T19:32:04+00:00 | Vulnerability · Source |
| CVE-2026-6167 | redhat_vex | code-projects Faculty Management System subject-print.php sql injection | known not affected: 1 | 2026-06-05T19:32:04+00:00 | Vulnerability · Source |
| CVE-2026-6275 | redhat_vex | StatCounter <= 2.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via Author Nickname | known not affected: 1 | 2026-06-05T19:32:03+00:00 | Vulnerability · Source |
| CVE-2026-6060 | redhat_vex | Possible DoS via SQL Box | known not affected: 1 | 2026-06-05T19:32:02+00:00 | Vulnerability · Source |
| CVE-2026-6635 | redhat_vex | rowboatlabs rowboat tools_webhook app.py tool_call improper authentication | known not affected: 1 | 2026-06-05T19:32:02+00:00 | Vulnerability · Source |
| CVE-2026-6222 | redhat_vex | Forminator Forms <= 1.51.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'forminator_action' Parameter | known not affected: 1 | 2026-06-05T19:32:01+00:00 | Vulnerability · Source |
| CVE-2026-6051 | redhat_vex | IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a small statement heap | known not affected: 1 | 2026-06-05T19:32:00+00:00 | Vulnerability · Source |
| CVE-2026-6024 | redhat_vex | Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal | known not affected: 1 | 2026-06-05T19:32:00+00:00 | Vulnerability · Source |
| CVE-2026-6796 | redhat_vex | Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in file | known not affected: 1 | 2026-06-05T19:31:59+00:00 | Vulnerability · Source |
| CVE-2026-6501 | redhat_vex | CVE-2026-6501 | known not affected: 1 | 2026-06-05T19:31:59+00:00 | Vulnerability · Source |
| CVE-2026-6451 | redhat_vex | CMS für Motorrad Werkstätten <= 1.0.0 - Cross-Site Request Forgery | known not affected: 1 | 2026-06-05T19:31:58+00:00 | Vulnerability · Source |