VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298383 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-6550 | redhat_vex | Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python | known not affected: 1 | 2026-06-05T19:31:55+00:00 | Vulnerability · Source |
| CVE-2026-6891 | redhat_vex | CVE-2026-6891 | known not affected: 1 | 2026-06-05T19:31:54+00:00 | Vulnerability · Source |
| CVE-2026-6936 | redhat_vex | IBM i is Affected by a Denial of Service Vulnerability [] | known not affected: 1 | 2026-06-05T19:31:54+00:00 | Vulnerability · Source |
| CVE-2026-6712 | redhat_vex | Website LLMs.txt <= 8.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting | known not affected: 1 | 2026-06-05T19:31:54+00:00 | Vulnerability · Source |
| CVE-2026-6396 | redhat_vex | Fast & Fancy Filter – 3F <= 1.2.2 - Cross-Site Request Forgery to Settings Modification via fff_save_settins AJAX Action | known not affected: 1 | 2026-06-05T19:31:54+00:00 | Vulnerability · Source |
| CVE-2026-6594 | redhat_vex | brikcss merge prototype pollution | known not affected: 1 | 2026-06-05T19:31:53+00:00 | Vulnerability · Source |
| CVE-2026-6675 | redhat_vex | Responsive Blocks <= 2.2.0 - Unauthenticated Open Email Relay via REST API 'email_to' Parameter | known not affected: 1 | 2026-06-05T19:31:52+00:00 | Vulnerability · Source |
| CVE-2026-6729 | redhat_vex | HKUDS OpenHarness Session Key Collision Privilege Escalation | known not affected: 1 | 2026-06-05T19:31:52+00:00 | Vulnerability · Source |
| CVE-2026-6369 | redhat_vex | Exposed Session Token in canonical-livepatch client snap | known not affected: 1 | 2026-06-05T19:31:51+00:00 | Vulnerability · Source |
| CVE-2026-6864 | redhat_vex | CBX 5 Star Rating & Review <= 1.0.7 - Reflected Cross-Site Scripting via 'page' Parameter | known not affected: 1 | 2026-06-05T19:31:51+00:00 | Vulnerability · Source |
| CVE-2026-6189 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection | known not affected: 1 | 2026-06-05T19:31:50+00:00 | Vulnerability · Source |
| CVE-2026-6549 | redhat_vex | Logo Manager For Enamad <= 0.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:31:50+00:00 | Vulnerability · Source |
| CVE-2026-6813 | redhat_vex | Continually <= 4.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'continually_embed_code' Parameter | known not affected: 1 | 2026-06-05T19:31:49+00:00 | Vulnerability · Source |
| CVE-2026-6828 | redhat_vex | Fluent Forms <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'permission_message' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:31:49+00:00 | Vulnerability · Source |
| CVE-2026-6909 | redhat_vex | Reflected XSS in ATutor | known not affected: 1 | 2026-06-05T19:31:49+00:00 | Vulnerability · Source |
| CVE-2026-6246 | redhat_vex | Simple Random Posts Shortcode <= 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'container_right_width' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:31:48+00:00 | Vulnerability · Source |
| CVE-2026-6606 | redhat_vex | modelscope agentscope _agent_base.py _process_audio_block server-side request forgery | known not affected: 1 | 2026-06-05T19:31:47+00:00 | Vulnerability · Source |
| CVE-2026-6345 | redhat_vex | Prevent password disclosure and force reset during Slack import | known not affected: 1 | 2026-06-05T19:31:47+00:00 | Vulnerability · Source |
| CVE-2026-6840 | redhat_vex | CVE-2026-6840 | known not affected: 1 | 2026-06-05T19:31:47+00:00 | Vulnerability · Source |
| CVE-2026-6183 | redhat_vex | code-projects Simple Content Management System index.php sql injection | known not affected: 1 | 2026-06-05T19:31:46+00:00 | Vulnerability · Source |
| CVE-2026-6237 | redhat_vex | Quick Table <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:31:46+00:00 | Vulnerability · Source |
| CVE-2026-6615 | redhat_vex | TransformerOptimus SuperAGI Multipart Upload resources.py upload path traversal | known not affected: 1 | 2026-06-05T19:31:46+00:00 | Vulnerability · Source |
| CVE-2026-6174 | redhat_vex | CC Child Pages <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'more' Parameter | known not affected: 1 | 2026-06-05T19:31:45+00:00 | Vulnerability · Source |
| CVE-2026-6004 | redhat_vex | code-projects Simple IT Discussion Forum delete-category.php sql injection | known not affected: 1 | 2026-06-05T19:31:44+00:00 | Vulnerability · Source |
| CVE-2026-6400 | redhat_vex | Child Height Predictor by Ostheimer <= 1.3 - Cross-Site Request Forgery to Settings Update via Plugin Settings Form | known not affected: 1 | 2026-06-05T19:31:44+00:00 | Vulnerability · Source |
| CVE-2026-6417 | redhat_vex | GLS Shipping for WooCommerce <= 1.4.0 - Reflected Cross-Site Scripting via 'failed_orders' | known not affected: 1 | 2026-06-05T19:31:44+00:00 | Vulnerability · Source |
| CVE-2026-6093 | redhat_vex | Corteza 2024.9.8 - SQL Injection in MSSQL JSON-path meta filter via incorrect T-SQL string escaping | known not affected: 1 | 2026-06-05T19:31:44+00:00 | Vulnerability · Source |
| CVE-2026-6956 | redhat_vex | Reflected XSS in ATutor | known not affected: 1 | 2026-06-05T19:31:44+00:00 | Vulnerability · Source |
| CVE-2026-6839 | redhat_vex | CVE-2026-6839 | known not affected: 1 | 2026-06-05T19:31:43+00:00 | Vulnerability · Source |
| CVE-2026-6938 | redhat_vex | IBM® Db2® is vulnerable to authorization bypass when uploading to a remote object storage path with a special query | known not affected: 1 | 2026-06-05T19:31:42+00:00 | Vulnerability · Source |
| CVE-2026-6596 | redhat_vex | langflow-ai langflow API Endpoint endpoints.py create_upload_file unrestricted upload | known not affected: 1 | 2026-06-05T19:31:42+00:00 | Vulnerability · Source |
| CVE-2026-6206 | redhat_vex | MW WP Form <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'post_id' Query Parameter | known not affected: 1 | 2026-06-05T19:31:41+00:00 | Vulnerability · Source |
| CVE-2026-6224 | redhat_vex | nocobase plugin-workflow-javascript Vm.js createSafeConsole sandbox | known not affected: 1 | 2026-06-05T19:31:41+00:00 | Vulnerability · Source |
| CVE-2026-6031 | redhat_vex | code-projects Simple IT Discussion Forum add-category-function.php sql injection | known not affected: 1 | 2026-06-05T19:31:41+00:00 | Vulnerability · Source |
| CVE-2026-6602 | redhat_vex | rickxy Hospital Management System his_admin_account.php unrestricted upload | known not affected: 1 | 2026-06-05T19:31:40+00:00 | Vulnerability · Source |
| CVE-2026-6130 | redhat_vex | chatboxai chatbox Model Context Protocol Server Management System ipc-stdio-transport.ts StdioClientTransport os command injection | known not affected: 1 | 2026-06-05T19:31:40+00:00 | Vulnerability · Source |
| CVE-2026-6404 | redhat_vex | Anomify AI <= 0.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'anomify_api_key' Parameter | known not affected: 1 | 2026-06-05T19:31:40+00:00 | Vulnerability · Source |
| CVE-2026-6965 | redhat_vex | Tutor LMS <= 3.9.9 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Post Deletion via 'course' GET Parameter | known not affected: 1 | 2026-06-05T19:31:40+00:00 | Vulnerability · Source |
| CVE-2026-6161 | redhat_vex | code-projects Simple ChatBox Endpoint insert.php sql injection | known not affected: 1 | 2026-06-05T19:31:39+00:00 | Vulnerability · Source |
| CVE-2026-6701 | redhat_vex | addfreespace <= 0.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Page | known not affected: 1 | 2026-06-05T19:31:39+00:00 | Vulnerability · Source |
| CVE-2026-6800 | redhat_vex | FastBots <= 1.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings | known not affected: 1 | 2026-06-05T19:31:38+00:00 | Vulnerability · Source |
| CVE-2026-6341 | redhat_vex | Incomplete group locking implementation | known not affected: 1 | 2026-06-05T19:31:38+00:00 | Vulnerability · Source |
| CVE-2026-6008 | redhat_vex | IDOR in Im Park's DijiDemi | known not affected: 1 | 2026-06-05T19:31:38+00:00 | Vulnerability · Source |
| CVE-2026-6152 | redhat_vex | code-projects Vehicle Showroom Management System StaffAddingFunction.php sql injection | known not affected: 1 | 2026-06-05T19:31:37+00:00 | Vulnerability · Source |
| CVE-2026-6394 | redhat_vex | Nexa Blocks <= 1.1.1 - Unauthenticated Blind Server-Side Request Forgery via 'demo_json_file' Parameter | known not affected: 1 | 2026-06-05T19:31:36+00:00 | Vulnerability · Source |
| CVE-2026-6835 | redhat_vex | aEnrich｜a+HCM - Arbitrary File Upload | known not affected: 1 | 2026-06-05T19:31:36+00:00 | Vulnerability · Source |
| CVE-2026-6332 | redhat_vex | Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC | known not affected: 1 | 2026-06-05T19:31:36+00:00 | Vulnerability · Source |
| CVE-2026-6565 | redhat_vex | Style Kits – Advanced Theme Styles for Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Kit Title | known not affected: 1 | 2026-06-05T19:31:35+00:00 | Vulnerability · Source |
| CVE-2026-6709 | redhat_vex | Coinbase Commerce for Contact Form 7 <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) API Key Modification via 'cccf7_api_key' Parameter | known not affected: 1 | 2026-06-05T19:31:35+00:00 | Vulnerability · Source |
| CVE-2026-6736 | redhat_vex | Authentication bypass vulnerability in GitHub Enterprise Server allowed creation of local user accounts bypassing the configured external identity provider | known not affected: 1 | 2026-06-05T19:31:35+00:00 | Vulnerability · Source |