VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297893 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-40565 | redhat_vex | FreeScout has Stored XSS / CSS Injection via linkify() — Unescaped URL in Anchor href | known not affected: 1 | 2026-06-05T19:27:01+00:00 | Vulnerability · Source |
| CVE-2026-40529 | redhat_vex | CVE-2026-40529 | known not affected: 1 | 2026-06-05T19:27:00+00:00 | Vulnerability · Source |
| CVE-2026-40431 | redhat_vex | SenseLive X3050 Cleartext transmission of sensitive information | known not affected: 1 | 2026-06-05T19:26:59+00:00 | Vulnerability · Source |
| CVE-2026-40255 | redhat_vex | @adonisjs/http-server has an Open Redirect vulnerability | known not affected: 1 | 2026-06-05T19:26:58+00:00 | Vulnerability · Source |
| CVE-2026-40888 | redhat_vex | Frappe HR vulnerable to Improper Access Control | known not affected: 1 | 2026-06-05T19:26:57+00:00 | Vulnerability · Source |
| CVE-2026-40134 | redhat_vex | Missing Authorization Check in SAP Incentive and Commission Management | known not affected: 1 | 2026-06-05T19:26:57+00:00 | Vulnerability · Source |
| CVE-2026-40552 | redhat_vex | Remote Code Execution in mpGabinet | known not affected: 1 | 2026-06-05T19:26:54+00:00 | Vulnerability · Source |
| CVE-2026-40004 | redhat_vex | openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartview | known not affected: 1 | 2026-06-05T19:26:54+00:00 | Vulnerability · Source |
| CVE-2024-57699 | redhat_vex | json-smart: Potential DoS via stack exhaustion (incomplete fix for CVE-2023-1370) | fixed: 31 known affected: 10 known not affected: 15 | 2026-06-05T19:26:53+00:00 | Vulnerability · Source |
| CVE-2026-40435 | redhat_vex | BIG-IP httpd access control vulnerability | known not affected: 1 | 2026-06-05T19:26:53+00:00 | Vulnerability · Source |
| CVE-2026-40570 | redhat_vex | FreeScout's Missing Authorization in load_customer_info Allows Any Authenticated User to Access Full Customer PII | known not affected: 1 | 2026-06-05T19:26:52+00:00 | Vulnerability · Source |
| CVE-2026-40822 | redhat_vex | Authenticated SQLi in DevSerialReset function | known not affected: 1 | 2026-06-05T19:26:51+00:00 | Vulnerability · Source |
| CVE-2026-40129 | redhat_vex | Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform | known not affected: 1 | 2026-06-05T19:26:51+00:00 | Vulnerability · Source |
| CVE-2026-40587 | redhat_vex | blueprintUE: Active Sessions Are Not Invalidated After Password Change or Reset | known not affected: 1 | 2026-06-05T19:26:50+00:00 | Vulnerability · Source |
| CVE-2026-40929 | redhat_vex | WWBN AVideo's missing CSRF protection in objects/commentDelete.json.php enables mass comment deletion against moderators and content creators | known not affected: 1 | 2026-06-05T19:26:50+00:00 | Vulnerability · Source |
| CVE-2026-40590 | redhat_vex | FreeScout's Customer AJAX Create Modifies Hidden Existing Customer | known not affected: 1 | 2026-06-05T19:26:49+00:00 | Vulnerability · Source |
| CVE-2026-40608 | redhat_vex | Next AI Draw.io: Unbounded HTTP Body — Denial of Service | known not affected: 1 | 2026-06-05T19:26:48+00:00 | Vulnerability · Source |
| CVE-2026-40446 | redhat_vex | CVE-2026-40446 | known not affected: 1 | 2026-06-05T19:26:48+00:00 | Vulnerability · Source |
| CVE-2026-40545 | redhat_vex | Reflected XSS in SOPlanning | known not affected: 1 | 2026-06-05T19:26:46+00:00 | Vulnerability · Source |
| CVE-2026-40086 | redhat_vex | Rembg has a Path Traversal via Custom Model Loading | known not affected: 1 | 2026-06-05T19:26:46+00:00 | Vulnerability · Source |
| CVE-2026-40132 | redhat_vex | Missing Authorization Check in SAP Strategic Enterprise Management (BSP application Balanced Scorecard Wizard) | known not affected: 1 | 2026-06-05T19:26:45+00:00 | Vulnerability · Source |
| CVE-2026-40949 | redhat_vex | Buffer overflow in Windows clients prior to 14.50 | known not affected: 1 | 2026-06-05T19:26:44+00:00 | Vulnerability · Source |
| CVE-2026-40598 | redhat_vex | MantisBT has Potential Referer-Based Reflected HTML Injection / XSS in Tag Update Page | known not affected: 1 | 2026-06-05T19:26:44+00:00 | Vulnerability · Source |
| CVE-2026-40105 | redhat_vex | XWiki has Reflected Cross-Site Scripting (XSS) in its page history compare functionality | known not affected: 1 | 2026-06-05T19:26:43+00:00 | Vulnerability · Source |
| CVE-2026-40136 | redhat_vex | Denial of service (DoS) in SAP Financial Consolidation | known not affected: 1 | 2026-06-05T19:26:43+00:00 | Vulnerability · Source |
| CVE-2026-40451 | redhat_vex | CVE-2026-40451 | known not affected: 1 | 2026-06-05T19:26:42+00:00 | Vulnerability · Source |
| CVE-2026-40343 | redhat_vex | free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creation | known not affected: 1 | 2026-06-05T19:26:42+00:00 | Vulnerability · Source |
| CVE-2026-40550 | redhat_vex | Privilege Escalation in mpGabinet | known not affected: 1 | 2026-06-05T19:26:41+00:00 | Vulnerability · Source |
| CVE-2026-40910 | redhat_vex | frp: Authentication bypass in frp HTTP vhost routing when routeByHTTPUser is used for access control | known not affected: 1 | 2026-06-05T19:26:41+00:00 | Vulnerability · Source |
| CVE-2026-40118 | redhat_vex | CVE-2026-40118 | known not affected: 1 | 2026-06-05T19:26:41+00:00 | Vulnerability · Source |
| CVE-2026-40703 | redhat_vex | BIG-IP Configuration utility CSRF vulnerability | known not affected: 1 | 2026-06-05T19:26:39+00:00 | Vulnerability · Source |
| CVE-2026-40549 | redhat_vex | Cross-Site Request Forgery in SOPlanning | known not affected: 1 | 2026-06-05T19:26:36+00:00 | Vulnerability · Source |
| CVE-2026-40927 | redhat_vex | Docmost: XSS in Comments with JavaScript URI | known not affected: 1 | 2026-06-05T19:26:36+00:00 | Vulnerability · Source |
| CVE-2026-40567 | redhat_vex | FreeScout has HTML Injection in Outgoing Emails via Unsanitized Customer Name in Signature Variables | known not affected: 1 | 2026-06-05T19:26:36+00:00 | Vulnerability · Source |
| CVE-2026-40002 | redhat_vex | ZTE Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. | known not affected: 1 | 2026-06-05T19:26:35+00:00 | Vulnerability · Source |
| CVE-2026-40594 | redhat_vex | pyLoad: Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Global State Race Condition) | known not affected: 1 | 2026-06-05T19:26:35+00:00 | Vulnerability · Source |
| CVE-2026-40891 | redhat_vex | OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling | known not affected: 1 | 2026-06-05T19:26:34+00:00 | Vulnerability · Source |
| CVE-2026-48225 | redhat_vex | Open ISES Tickets < 3.44.2 Reflected XSS via landb.php _type Parameter | known not affected: 1 | 2026-06-05T19:26:33+00:00 | Vulnerability · Source |
| CVE-2026-40495 | redhat_vex | FOSSBilling version exposed via asset cache buster | known not affected: 1 | 2026-06-05T19:26:33+00:00 | Vulnerability · Source |
| CVE-2026-48900 | redhat_vex | Joomla! Core - [20260516] - Incorrect Access Control in com_scheduler | known not affected: 1 | 2026-06-05T19:26:32+00:00 | Vulnerability · Source |
| CVE-2026-48243 | redhat_vex | Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php | known not affected: 1 | 2026-06-05T19:26:32+00:00 | Vulnerability · Source |
| CVE-2026-48216 | redhat_vex | Open ISES Tickets < 3.44.2 Reflected XSS via db_loader.php Multiple POST Parameters | known not affected: 1 | 2026-06-05T19:26:31+00:00 | Vulnerability · Source |
| CVE-2026-48221 | redhat_vex | Open ISES Tickets < 3.44.2 Reflected XSS via ics205a.php frm_add_str Parameter | known not affected: 1 | 2026-06-05T19:26:31+00:00 | Vulnerability · Source |
| CVE-2026-48971 | redhat_vex | WordPress Product Import Export for WooCommerce plugin <= 2.5.6 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:26:31+00:00 | Vulnerability · Source |
| CVE-2026-48148 | redhat_vex | Budibase: Unvalidated VectorDB Host Parameter Enables SSRF | known not affected: 1 | 2026-06-05T19:26:30+00:00 | Vulnerability · Source |
| CVE-2026-48555 | redhat_vex | Spatie Laravel Media Library < 11.23.0 SSRF via addMediaFromUrl() | known not affected: 1 | 2026-06-05T19:26:29+00:00 | Vulnerability · Source |
| CVE-2026-48229 | redhat_vex | Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id Parameter | known not affected: 1 | 2026-06-05T19:26:29+00:00 | Vulnerability · Source |
| CVE-2026-48223 | redhat_vex | Open ISES Tickets < 3.44.2 Reflected XSS via ics213rr.php frm_add_str Parameter | known not affected: 1 | 2026-06-05T19:26:27+00:00 | Vulnerability · Source |
| CVE-2026-48214 | redhat_vex | Open ISES Tickets < 3.44.2 Reflected XSS via add_nm.php ticket_id Parameter | known not affected: 1 | 2026-06-05T19:26:26+00:00 | Vulnerability · Source |
| CVE-2026-48968 | redhat_vex | WordPress Master Slider plugin <= 3.10.8 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:26:26+00:00 | Vulnerability · Source |