VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297862 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-40182 | redhat_vex | OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies | known not affected: 1 | 2026-06-05T19:27:11+00:00 | Vulnerability · Source |
| CVE-2026-40713 | redhat_vex | CVE-2026-40713 | known not affected: 1 | 2026-06-05T19:27:10+00:00 | Vulnerability · Source |
| CVE-2026-40137 | redhat_vex | Cross-Site Scripting (XSS) vulnerability in Business Server Pages Application (TAF_APPLAUNCHER) | known not affected: 1 | 2026-06-05T19:27:10+00:00 | Vulnerability · Source |
| CVE-2026-40425 | redhat_vex | MacGregor Voyage Data Recorder (VDR) G4e Files or Directories Accessible to External Parties | known not affected: 1 | 2026-06-05T19:27:10+00:00 | Vulnerability · Source |
| CVE-2026-40874 | redhat_vex | mailcow: dockerized missing authorization on Forwarding Hosts delete action | known not affected: 1 | 2026-06-05T19:27:09+00:00 | Vulnerability · Source |
| CVE-2026-40907 | redhat_vex | WWBN AVideo has IDOR in Live Restreams list.json.php that Exposes Other Users' Stream Keys and OAuth Tokens | known not affected: 1 | 2026-06-05T19:27:08+00:00 | Vulnerability · Source |
| CVE-2026-40102 | redhat_vex | Plane: ORM Field Reference Injection via `segment` Parameter in Saved Analytics | known not affected: 1 | 2026-06-05T19:27:08+00:00 | Vulnerability · Source |
| CVE-2026-40300 | redhat_vex | Zulip: Message edit history visible in "moves only" policy through /api/v1/messages/{id}/history | known not affected: 1 | 2026-06-05T19:27:07+00:00 | Vulnerability · Source |
| CVE-2026-40883 | redhat_vex | goshs: CSRF in state-changing GET routes enables authenticated file deletion and directory creation | known not affected: 1 | 2026-06-05T19:27:06+00:00 | Vulnerability · Source |
| CVE-2026-40928 | redhat_vex | AVideo: Missing CSRF Protection on State-Changing JSON Endpoints Enables Forced Comment Creation, Vote Manipulation, and Category Asset Deletion | known not affected: 1 | 2026-06-05T19:27:05+00:00 | Vulnerability · Source |
| CVE-2026-40592 | redhat_vex | FreeScout's cross-user undo reply allows mailbox peers to recall another agent's outbound reply | known not affected: 1 | 2026-06-05T19:27:04+00:00 | Vulnerability · Source |
| CVE-2026-40295 | redhat_vex | Devise: Open Redirect via Unvalidated `request.referrer` in Timeoutable Session Timeout Handler | known not affected: 1 | 2026-06-05T19:27:03+00:00 | Vulnerability · Source |
| CVE-2026-40826 | redhat_vex | Authenticated SQLi in dsgvo_contracts view | known not affected: 1 | 2026-06-05T19:27:02+00:00 | Vulnerability · Source |
| CVE-2026-40314 | redhat_vex | NamelessMC: Reactions on private or blocking profile posts can be read and modified without proper authorization | known not affected: 1 | 2026-06-05T19:27:02+00:00 | Vulnerability · Source |
| CVE-2026-40547 | redhat_vex | Path Traversal in SOPlanning | known not affected: 1 | 2026-06-05T19:27:01+00:00 | Vulnerability · Source |
| CVE-2026-40565 | redhat_vex | FreeScout has Stored XSS / CSS Injection via linkify() — Unescaped URL in Anchor href | known not affected: 1 | 2026-06-05T19:27:01+00:00 | Vulnerability · Source |
| CVE-2026-40529 | redhat_vex | CVE-2026-40529 | known not affected: 1 | 2026-06-05T19:27:00+00:00 | Vulnerability · Source |
| CVE-2026-40431 | redhat_vex | SenseLive X3050 Cleartext transmission of sensitive information | known not affected: 1 | 2026-06-05T19:26:59+00:00 | Vulnerability · Source |
| CVE-2026-40255 | redhat_vex | @adonisjs/http-server has an Open Redirect vulnerability | known not affected: 1 | 2026-06-05T19:26:58+00:00 | Vulnerability · Source |
| CVE-2026-40888 | redhat_vex | Frappe HR vulnerable to Improper Access Control | known not affected: 1 | 2026-06-05T19:26:57+00:00 | Vulnerability · Source |
| CVE-2026-40134 | redhat_vex | Missing Authorization Check in SAP Incentive and Commission Management | known not affected: 1 | 2026-06-05T19:26:57+00:00 | Vulnerability · Source |
| CVE-2026-40552 | redhat_vex | Remote Code Execution in mpGabinet | known not affected: 1 | 2026-06-05T19:26:54+00:00 | Vulnerability · Source |
| CVE-2026-40004 | redhat_vex | openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartview | known not affected: 1 | 2026-06-05T19:26:54+00:00 | Vulnerability · Source |
| CVE-2024-57699 | redhat_vex | json-smart: Potential DoS via stack exhaustion (incomplete fix for CVE-2023-1370) | fixed: 31 known affected: 10 known not affected: 15 | 2026-06-05T19:26:53+00:00 | Vulnerability · Source |
| CVE-2026-40435 | redhat_vex | BIG-IP httpd access control vulnerability | known not affected: 1 | 2026-06-05T19:26:53+00:00 | Vulnerability · Source |
| CVE-2026-40570 | redhat_vex | FreeScout's Missing Authorization in load_customer_info Allows Any Authenticated User to Access Full Customer PII | known not affected: 1 | 2026-06-05T19:26:52+00:00 | Vulnerability · Source |
| CVE-2026-40822 | redhat_vex | Authenticated SQLi in DevSerialReset function | known not affected: 1 | 2026-06-05T19:26:51+00:00 | Vulnerability · Source |
| CVE-2026-40129 | redhat_vex | Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform | known not affected: 1 | 2026-06-05T19:26:51+00:00 | Vulnerability · Source |
| CVE-2026-40587 | redhat_vex | blueprintUE: Active Sessions Are Not Invalidated After Password Change or Reset | known not affected: 1 | 2026-06-05T19:26:50+00:00 | Vulnerability · Source |
| CVE-2026-40929 | redhat_vex | WWBN AVideo's missing CSRF protection in objects/commentDelete.json.php enables mass comment deletion against moderators and content creators | known not affected: 1 | 2026-06-05T19:26:50+00:00 | Vulnerability · Source |
| CVE-2026-40590 | redhat_vex | FreeScout's Customer AJAX Create Modifies Hidden Existing Customer | known not affected: 1 | 2026-06-05T19:26:49+00:00 | Vulnerability · Source |
| CVE-2026-40608 | redhat_vex | Next AI Draw.io: Unbounded HTTP Body — Denial of Service | known not affected: 1 | 2026-06-05T19:26:48+00:00 | Vulnerability · Source |
| CVE-2026-40446 | redhat_vex | CVE-2026-40446 | known not affected: 1 | 2026-06-05T19:26:48+00:00 | Vulnerability · Source |
| CVE-2026-40545 | redhat_vex | Reflected XSS in SOPlanning | known not affected: 1 | 2026-06-05T19:26:46+00:00 | Vulnerability · Source |
| CVE-2026-40086 | redhat_vex | Rembg has a Path Traversal via Custom Model Loading | known not affected: 1 | 2026-06-05T19:26:46+00:00 | Vulnerability · Source |
| CVE-2026-40132 | redhat_vex | Missing Authorization Check in SAP Strategic Enterprise Management (BSP application Balanced Scorecard Wizard) | known not affected: 1 | 2026-06-05T19:26:45+00:00 | Vulnerability · Source |
| CVE-2026-40949 | redhat_vex | Buffer overflow in Windows clients prior to 14.50 | known not affected: 1 | 2026-06-05T19:26:44+00:00 | Vulnerability · Source |
| CVE-2026-40598 | redhat_vex | MantisBT has Potential Referer-Based Reflected HTML Injection / XSS in Tag Update Page | known not affected: 1 | 2026-06-05T19:26:44+00:00 | Vulnerability · Source |
| CVE-2026-40105 | redhat_vex | XWiki has Reflected Cross-Site Scripting (XSS) in its page history compare functionality | known not affected: 1 | 2026-06-05T19:26:43+00:00 | Vulnerability · Source |
| CVE-2026-40136 | redhat_vex | Denial of service (DoS) in SAP Financial Consolidation | known not affected: 1 | 2026-06-05T19:26:43+00:00 | Vulnerability · Source |
| CVE-2026-40451 | redhat_vex | CVE-2026-40451 | known not affected: 1 | 2026-06-05T19:26:42+00:00 | Vulnerability · Source |
| CVE-2026-40343 | redhat_vex | free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creation | known not affected: 1 | 2026-06-05T19:26:42+00:00 | Vulnerability · Source |
| CVE-2026-40550 | redhat_vex | Privilege Escalation in mpGabinet | known not affected: 1 | 2026-06-05T19:26:41+00:00 | Vulnerability · Source |
| CVE-2026-40910 | redhat_vex | frp: Authentication bypass in frp HTTP vhost routing when routeByHTTPUser is used for access control | known not affected: 1 | 2026-06-05T19:26:41+00:00 | Vulnerability · Source |
| CVE-2026-40118 | redhat_vex | CVE-2026-40118 | known not affected: 1 | 2026-06-05T19:26:41+00:00 | Vulnerability · Source |
| CVE-2026-40703 | redhat_vex | BIG-IP Configuration utility CSRF vulnerability | known not affected: 1 | 2026-06-05T19:26:39+00:00 | Vulnerability · Source |
| CVE-2026-40549 | redhat_vex | Cross-Site Request Forgery in SOPlanning | known not affected: 1 | 2026-06-05T19:26:36+00:00 | Vulnerability · Source |
| CVE-2026-40927 | redhat_vex | Docmost: XSS in Comments with JavaScript URI | known not affected: 1 | 2026-06-05T19:26:36+00:00 | Vulnerability · Source |
| CVE-2026-40567 | redhat_vex | FreeScout has HTML Injection in Outgoing Emails via Unsanitized Customer Name in Signature Variables | known not affected: 1 | 2026-06-05T19:26:36+00:00 | Vulnerability · Source |
| CVE-2026-40002 | redhat_vex | ZTE Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. | known not affected: 1 | 2026-06-05T19:26:35+00:00 | Vulnerability · Source |