VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-6152 | redhat_vex | code-projects Vehicle Showroom Management System StaffAddingFunction.php sql injection | known not affected: 1 | 2026-06-05T19:31:37+00:00 | Vulnerability · Source |
| CVE-2026-6394 | redhat_vex | Nexa Blocks <= 1.1.1 - Unauthenticated Blind Server-Side Request Forgery via 'demo_json_file' Parameter | known not affected: 1 | 2026-06-05T19:31:36+00:00 | Vulnerability · Source |
| CVE-2026-6835 | redhat_vex | aEnrich｜a+HCM - Arbitrary File Upload | known not affected: 1 | 2026-06-05T19:31:36+00:00 | Vulnerability · Source |
| CVE-2026-6332 | redhat_vex | Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC | known not affected: 1 | 2026-06-05T19:31:36+00:00 | Vulnerability · Source |
| CVE-2026-6565 | redhat_vex | Style Kits – Advanced Theme Styles for Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Kit Title | known not affected: 1 | 2026-06-05T19:31:35+00:00 | Vulnerability · Source |
| CVE-2026-6709 | redhat_vex | Coinbase Commerce for Contact Form 7 <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) API Key Modification via 'cccf7_api_key' Parameter | known not affected: 1 | 2026-06-05T19:31:35+00:00 | Vulnerability · Source |
| CVE-2026-6736 | redhat_vex | Authentication bypass vulnerability in GitHub Enterprise Server allowed creation of local user accounts bypassing the configured external identity provider | known not affected: 1 | 2026-06-05T19:31:35+00:00 | Vulnerability · Source |
| CVE-2026-6826 | redhat_vex | Concrete 9.5.0 and below has file usage disclosure via missing permission check in Usage controller | known not affected: 1 | 2026-06-05T19:31:35+00:00 | Vulnerability · Source |
| CVE-2026-33384 | redhat_vex | Session Fixation in QuickCMS | known not affected: 1 | 2026-06-05T19:31:34+00:00 | Vulnerability · Source |
| CVE-2026-33214 | redhat_vex | Weblate has improper access control for the translation memory API | known not affected: 1 | 2026-06-05T19:31:34+00:00 | Vulnerability · Source |
| CVE-2026-6808 | redhat_vex | Pricing Tables for WP <= 1.1.0 - Reflected Cross-Site Scripting via 'page' Parameter | known not affected: 1 | 2026-06-05T19:31:34+00:00 | Vulnerability · Source |
| CVE-2026-6646 | redhat_vex | The7 <= 14.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 'link' Parameter | known not affected: 1 | 2026-06-05T19:31:34+00:00 | Vulnerability · Source |
| CVE-2026-33052 | redhat_vex | MantisBT: Authorization Bypass in Global Profile Creation | known not affected: 1 | 2026-06-05T19:31:32+00:00 | Vulnerability · Source |
| CVE-2026-33740 | redhat_vex | EspoCRM: Email importEml can import and delete another user's attachment by raw fileId | known not affected: 1 | 2026-06-05T19:31:31+00:00 | Vulnerability · Source |
| CVE-2026-33452 | redhat_vex | Buffer overflow in Windows clients prior to 14.50 | known not affected: 1 | 2026-06-05T19:31:31+00:00 | Vulnerability · Source |
| CVE-2026-33146 | redhat_vex | Docmost's Public Share Search Exposes Metadata of Restricted Children | known not affected: 1 | 2026-06-05T19:31:31+00:00 | Vulnerability · Source |
| CVE-2026-33892 | redhat_vex | CVE-2026-33892 | known not affected: 1 | 2026-06-05T19:31:30+00:00 | Vulnerability · Source |
| CVE-2026-33234 | redhat_vex | AutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP server | known not affected: 1 | 2026-06-05T19:31:29+00:00 | Vulnerability · Source |
| CVE-2026-33889 | redhat_vex | ApostropheCMS: Stored XSS via CSS Custom Property Injection in `@apostrophecms/color-field` Escaping Style Tag Context | known not affected: 1 | 2026-06-05T19:31:28+00:00 | Vulnerability · Source |
| CVE-2026-33467 | redhat_vex | Improper Verification of Cryptographic Signature in Elastic Package Registry Leading to Package Integrity Bypass | known not affected: 1 | 2026-06-05T19:31:28+00:00 | Vulnerability · Source |
| CVE-2026-33584 | redhat_vex | Arqit SKA-Platform Enables Access to Debug Information | known not affected: 1 | 2026-06-05T19:31:27+00:00 | Vulnerability · Source |
| CVE-2026-33458 | redhat_vex | Server-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information Disclosure | known not affected: 1 | 2026-06-05T19:31:26+00:00 | Vulnerability · Source |
| CVE-2026-33566 | redhat_vex | CVE-2026-33566 | known not affected: 1 | 2026-06-05T19:31:26+00:00 | Vulnerability · Source |
| CVE-2026-33657 | redhat_vex | EspoCRM: Stored HTML injection in email notifications about stream notes via unescaped post field | known not affected: 1 | 2026-06-05T19:31:25+00:00 | Vulnerability · Source |
| CVE-2026-33514 | redhat_vex | Discourse: Information Disclosure in Form Template API Due to Missing Authorization | known not affected: 1 | 2026-06-05T19:31:25+00:00 | Vulnerability · Source |
| CVE-2026-33774 | redhat_vex | Junos OS: MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effect | known not affected: 1 | 2026-06-05T19:31:24+00:00 | Vulnerability · Source |
| CVE-2026-33378 | redhat_vex | Grafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro | known not affected: 1 | 2026-06-05T19:31:24+00:00 | Vulnerability · Source |
| CVE-2026-33273 | redhat_vex | CVE-2026-33273 | known not affected: 1 | 2026-06-05T19:31:23+00:00 | Vulnerability · Source |
| CVE-2026-33093 | redhat_vex | Anviz Products Missing Authorization | known not affected: 1 | 2026-06-05T19:31:23+00:00 | Vulnerability · Source |
| CVE-2026-33570 | redhat_vex | Subnet Solutions PowerSYSTEM Center Incorrect Authorization | known not affected: 1 | 2026-06-05T19:31:22+00:00 | Vulnerability · Source |
| CVE-2025-4378 | redhat_vex | Hardcoded Credentials in Ataturk University's ATA-AOF Mobile Application | known not affected: 1 | 2026-06-05T19:31:21+00:00 | Vulnerability · Source |
| CVE-2025-4738 | redhat_vex | Authenticated SQLi in Yirmibes Software's MY ERP | known not affected: 1 | 2026-06-05T19:31:21+00:00 | Vulnerability · Source |
| CVE-2025-4383 | redhat_vex | Authentication Bypass in Art-In Systems' Wi-Fi Cloud Hotspot | known not affected: 1 | 2026-06-05T19:31:20+00:00 | Vulnerability · Source |
| CVE-2025-4688 | redhat_vex | SQLi in BGS Interactive's SINAV.LINK Exam Result Module | known not affected: 1 | 2026-06-05T19:31:18+00:00 | Vulnerability · Source |
| CVE-2025-4822 | redhat_vex | SQLi in Bayraktar Solar Energies' ScadaWatt Otopilot | known not affected: 1 | 2026-06-05T19:31:18+00:00 | Vulnerability · Source |
| CVE-2025-4285 | redhat_vex | SQLi in Rolantis Information Technologies' Agentis | known not affected: 1 | 2026-06-05T19:31:17+00:00 | Vulnerability · Source |
| CVE-2025-4129 | redhat_vex | IDOR in PAVO Inc.'s PAVO Pay | known not affected: 1 | 2026-06-05T19:31:16+00:00 | Vulnerability · Source |
| CVE-2025-4040 | redhat_vex | IDOR in Turpak's Automatic Station Monitoring System | known not affected: 1 | 2026-06-05T19:31:16+00:00 | Vulnerability · Source |
| CVE-2025-4130 | redhat_vex | Hardcoded Credentials in PAVO Inc.'s PAVO Pay | known not affected: 1 | 2026-06-05T19:31:15+00:00 | Vulnerability · Source |
| CVE-2025-4686 | redhat_vex | Time-Based Blind SQLi in Kodmatic Computer's Online Exam and Assessment | known not affected: 1 | 2026-06-05T19:31:14+00:00 | Vulnerability · Source |
| CVE-2025-13477 | redhat_vex | OTP Bypass in Digital Operation Services' WifiBurada | known not affected: 1 | 2026-06-05T19:31:14+00:00 | Vulnerability · Source |
| CVE-2025-4320 | redhat_vex | Information Disclosure in Birebirsoft's Sufirmam | known not affected: 1 | 2026-06-05T19:31:14+00:00 | Vulnerability · Source |
| CVE-2025-4764 | redhat_vex | SQLi in Aida Computer's Hotspot | known not affected: 1 | 2026-06-05T19:31:14+00:00 | Vulnerability · Source |
| CVE-2025-4784 | redhat_vex | SQLi in Moderec's Tourtella | known not affected: 1 | 2026-06-05T19:31:14+00:00 | Vulnerability · Source |
| CVE-2025-4319 | redhat_vex | Improper Access Control in Birebirsoft's Sufirmam | known not affected: 1 | 2026-06-05T19:31:14+00:00 | Vulnerability · Source |
| CVE-2025-13392 | redhat_vex | CVE-2025-13392 | known not affected: 1 | 2026-06-05T19:31:13+00:00 | Vulnerability · Source |
| CVE-2025-62628 | redhat_vex | CVE-2025-62628 | known not affected: 1 | 2026-06-05T19:31:13+00:00 | Vulnerability · Source |
| CVE-2025-13826 | redhat_vex | Incorrect input validation on the Zervit portable HTTP/Web server | known not affected: 1 | 2026-06-05T19:31:13+00:00 | Vulnerability · Source |
| CVE-2025-13479 | redhat_vex | IDOR in PosCube's QR Menu | known not affected: 1 | 2026-06-05T19:31:12+00:00 | Vulnerability · Source |
| CVE-2025-13926 | redhat_vex | Contemporary Controls BASC 20T Reliance on Untrusted Inputs in a Security Decision | known not affected: 1 | 2026-06-05T19:31:12+00:00 | Vulnerability · Source |