VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-6635 | redhat_vex | rowboatlabs rowboat tools_webhook app.py tool_call improper authentication | known not affected: 1 | 2026-06-05T19:32:02+00:00 | Vulnerability · Source |
| CVE-2026-6222 | redhat_vex | Forminator Forms <= 1.51.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'forminator_action' Parameter | known not affected: 1 | 2026-06-05T19:32:01+00:00 | Vulnerability · Source |
| CVE-2026-6051 | redhat_vex | IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a small statement heap | known not affected: 1 | 2026-06-05T19:32:00+00:00 | Vulnerability · Source |
| CVE-2026-6024 | redhat_vex | Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal | known not affected: 1 | 2026-06-05T19:32:00+00:00 | Vulnerability · Source |
| CVE-2026-6796 | redhat_vex | Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in file | known not affected: 1 | 2026-06-05T19:31:59+00:00 | Vulnerability · Source |
| CVE-2026-6501 | redhat_vex | CVE-2026-6501 | known not affected: 1 | 2026-06-05T19:31:59+00:00 | Vulnerability · Source |
| CVE-2026-6451 | redhat_vex | CMS für Motorrad Werkstätten <= 1.0.0 - Cross-Site Request Forgery | known not affected: 1 | 2026-06-05T19:31:58+00:00 | Vulnerability · Source |
| CVE-2026-6262 | redhat_vex | Betheme <= 28.4 - Authenticated (Contributor+) Arbitrary File Deletion via 'mfn-icon-upload' | known not affected: 1 | 2026-06-05T19:31:58+00:00 | Vulnerability · Source |
| CVE-2026-6343 | redhat_vex | Mattermost Playbooks Plugin fails to enforce view permissions in list endpoints, allowing unauthorized access to public playbooks | known not affected: 1 | 2026-06-05T19:31:58+00:00 | Vulnerability · Source |
| CVE-2026-6703 | redhat_vex | Responsive Blocks <= 2.2.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via AJAX Actions | known not affected: 1 | 2026-06-05T19:31:57+00:00 | Vulnerability · Source |
| CVE-2026-6145 | redhat_vex | User Registration & Membership <= 5.1.5 - Unauthenticated Missing Authorization to Admin Approval Bypass via 'action' Parameter | known not affected: 1 | 2026-06-05T19:31:57+00:00 | Vulnerability · Source |
| CVE-2026-6127 | redhat_vex | Elementor Website Builder <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API | known not affected: 1 | 2026-06-05T19:31:56+00:00 | Vulnerability · Source |
| CVE-2026-6604 | redhat_vex | modelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgery | known not affected: 1 | 2026-06-05T19:31:56+00:00 | Vulnerability · Source |
| CVE-2026-6415 | redhat_vex | Advanced Custom Fields: Font Awesome Field <= 5.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via JSON Field | known not affected: 1 | 2026-06-05T19:31:56+00:00 | Vulnerability · Source |
| CVE-2026-6550 | redhat_vex | Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python | known not affected: 1 | 2026-06-05T19:31:55+00:00 | Vulnerability · Source |
| CVE-2026-6891 | redhat_vex | CVE-2026-6891 | known not affected: 1 | 2026-06-05T19:31:54+00:00 | Vulnerability · Source |
| CVE-2026-6936 | redhat_vex | IBM i is Affected by a Denial of Service Vulnerability [] | known not affected: 1 | 2026-06-05T19:31:54+00:00 | Vulnerability · Source |
| CVE-2026-6712 | redhat_vex | Website LLMs.txt <= 8.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting | known not affected: 1 | 2026-06-05T19:31:54+00:00 | Vulnerability · Source |
| CVE-2026-6396 | redhat_vex | Fast & Fancy Filter – 3F <= 1.2.2 - Cross-Site Request Forgery to Settings Modification via fff_save_settins AJAX Action | known not affected: 1 | 2026-06-05T19:31:54+00:00 | Vulnerability · Source |
| CVE-2026-6594 | redhat_vex | brikcss merge prototype pollution | known not affected: 1 | 2026-06-05T19:31:53+00:00 | Vulnerability · Source |
| CVE-2026-6675 | redhat_vex | Responsive Blocks <= 2.2.0 - Unauthenticated Open Email Relay via REST API 'email_to' Parameter | known not affected: 1 | 2026-06-05T19:31:52+00:00 | Vulnerability · Source |
| CVE-2026-6729 | redhat_vex | HKUDS OpenHarness Session Key Collision Privilege Escalation | known not affected: 1 | 2026-06-05T19:31:52+00:00 | Vulnerability · Source |
| CVE-2026-6369 | redhat_vex | Exposed Session Token in canonical-livepatch client snap | known not affected: 1 | 2026-06-05T19:31:51+00:00 | Vulnerability · Source |
| CVE-2026-6864 | redhat_vex | CBX 5 Star Rating & Review <= 1.0.7 - Reflected Cross-Site Scripting via 'page' Parameter | known not affected: 1 | 2026-06-05T19:31:51+00:00 | Vulnerability · Source |
| CVE-2026-6189 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection | known not affected: 1 | 2026-06-05T19:31:50+00:00 | Vulnerability · Source |
| CVE-2026-6549 | redhat_vex | Logo Manager For Enamad <= 0.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:31:50+00:00 | Vulnerability · Source |
| CVE-2026-6813 | redhat_vex | Continually <= 4.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'continually_embed_code' Parameter | known not affected: 1 | 2026-06-05T19:31:49+00:00 | Vulnerability · Source |
| CVE-2026-6828 | redhat_vex | Fluent Forms <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'permission_message' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:31:49+00:00 | Vulnerability · Source |
| CVE-2026-6909 | redhat_vex | Reflected XSS in ATutor | known not affected: 1 | 2026-06-05T19:31:49+00:00 | Vulnerability · Source |
| CVE-2026-6246 | redhat_vex | Simple Random Posts Shortcode <= 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'container_right_width' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:31:48+00:00 | Vulnerability · Source |
| CVE-2026-6606 | redhat_vex | modelscope agentscope _agent_base.py _process_audio_block server-side request forgery | known not affected: 1 | 2026-06-05T19:31:47+00:00 | Vulnerability · Source |
| CVE-2026-6345 | redhat_vex | Prevent password disclosure and force reset during Slack import | known not affected: 1 | 2026-06-05T19:31:47+00:00 | Vulnerability · Source |
| CVE-2026-6840 | redhat_vex | CVE-2026-6840 | known not affected: 1 | 2026-06-05T19:31:47+00:00 | Vulnerability · Source |
| CVE-2026-6183 | redhat_vex | code-projects Simple Content Management System index.php sql injection | known not affected: 1 | 2026-06-05T19:31:46+00:00 | Vulnerability · Source |
| CVE-2026-6237 | redhat_vex | Quick Table <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:31:46+00:00 | Vulnerability · Source |
| CVE-2026-6615 | redhat_vex | TransformerOptimus SuperAGI Multipart Upload resources.py upload path traversal | known not affected: 1 | 2026-06-05T19:31:46+00:00 | Vulnerability · Source |
| CVE-2026-6174 | redhat_vex | CC Child Pages <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'more' Parameter | known not affected: 1 | 2026-06-05T19:31:45+00:00 | Vulnerability · Source |
| CVE-2026-6004 | redhat_vex | code-projects Simple IT Discussion Forum delete-category.php sql injection | known not affected: 1 | 2026-06-05T19:31:44+00:00 | Vulnerability · Source |
| CVE-2026-6400 | redhat_vex | Child Height Predictor by Ostheimer <= 1.3 - Cross-Site Request Forgery to Settings Update via Plugin Settings Form | known not affected: 1 | 2026-06-05T19:31:44+00:00 | Vulnerability · Source |
| CVE-2026-6417 | redhat_vex | GLS Shipping for WooCommerce <= 1.4.0 - Reflected Cross-Site Scripting via 'failed_orders' | known not affected: 1 | 2026-06-05T19:31:44+00:00 | Vulnerability · Source |
| CVE-2026-6093 | redhat_vex | Corteza 2024.9.8 - SQL Injection in MSSQL JSON-path meta filter via incorrect T-SQL string escaping | known not affected: 1 | 2026-06-05T19:31:44+00:00 | Vulnerability · Source |
| CVE-2026-6956 | redhat_vex | Reflected XSS in ATutor | known not affected: 1 | 2026-06-05T19:31:44+00:00 | Vulnerability · Source |
| CVE-2026-6839 | redhat_vex | CVE-2026-6839 | known not affected: 1 | 2026-06-05T19:31:43+00:00 | Vulnerability · Source |
| CVE-2026-6938 | redhat_vex | IBM® Db2® is vulnerable to authorization bypass when uploading to a remote object storage path with a special query | known not affected: 1 | 2026-06-05T19:31:42+00:00 | Vulnerability · Source |
| CVE-2026-6596 | redhat_vex | langflow-ai langflow API Endpoint endpoints.py create_upload_file unrestricted upload | known not affected: 1 | 2026-06-05T19:31:42+00:00 | Vulnerability · Source |
| CVE-2026-6206 | redhat_vex | MW WP Form <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'post_id' Query Parameter | known not affected: 1 | 2026-06-05T19:31:41+00:00 | Vulnerability · Source |
| CVE-2026-6224 | redhat_vex | nocobase plugin-workflow-javascript Vm.js createSafeConsole sandbox | known not affected: 1 | 2026-06-05T19:31:41+00:00 | Vulnerability · Source |
| CVE-2026-6031 | redhat_vex | code-projects Simple IT Discussion Forum add-category-function.php sql injection | known not affected: 1 | 2026-06-05T19:31:41+00:00 | Vulnerability · Source |
| CVE-2026-6602 | redhat_vex | rickxy Hospital Management System his_admin_account.php unrestricted upload | known not affected: 1 | 2026-06-05T19:31:40+00:00 | Vulnerability · Source |
| CVE-2026-6130 | redhat_vex | chatboxai chatbox Model Context Protocol Server Management System ipc-stdio-transport.ts StdioClientTransport os command injection | known not affected: 1 | 2026-06-05T19:31:40+00:00 | Vulnerability · Source |