VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298279 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-40889 | redhat_vex | Frappe HR has Improper Access Control on Files | known not affected: 1 | 2026-06-05T19:27:31+00:00 | Vulnerability · Source |
| CVE-2026-40117 | redhat_vex | PraisonAIAgents Affected by Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate | known not affected: 1 | 2026-06-05T19:27:31+00:00 | Vulnerability · Source |
| CVE-2026-40094 | redhat_vex | nimiq-blockchain: network-libp2p untrusted peer can crash address book via empty peer contact addresses | known not affected: 1 | 2026-06-05T19:27:29+00:00 | Vulnerability · Source |
| CVE-2026-40544 | redhat_vex | Stored XSS in SOPlanning | known not affected: 1 | 2026-06-05T19:27:29+00:00 | Vulnerability · Source |
| CVE-2026-40229 | redhat_vex | Helpy 2.8.0 - Stored XSS in post author display via PostsHelper | known not affected: 1 | 2026-06-05T19:27:29+00:00 | Vulnerability · Source |
| CVE-2026-40571 | redhat_vex | NamelessMC: Reactions on private or blocking profile posts can be modified without proper authorization | known not affected: 1 | 2026-06-05T19:27:28+00:00 | Vulnerability · Source |
| CVE-2026-40894 | redhat_vex | OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers | known not affected: 1 | 2026-06-05T19:27:27+00:00 | Vulnerability · Source |
| CVE-2026-40302 | redhat_vex | zrok has reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering | known not affected: 1 | 2026-06-05T19:27:25+00:00 | Vulnerability · Source |
| CVE-2026-40939 | redhat_vex | DSF: Missing Session Timeout for OIDC Sessions | known not affected: 1 | 2026-06-05T19:27:25+00:00 | Vulnerability · Source |
| CVE-2026-40966 | redhat_vex | VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration | known not affected: 1 | 2026-06-05T19:27:24+00:00 | Vulnerability · Source |
| CVE-2026-40212 | redhat_vex | CVE-2026-40212 | known not affected: 1 | 2026-06-05T19:27:23+00:00 | Vulnerability · Source |
| CVE-2026-40230 | redhat_vex | Helpy 2.8.0 - Stored XSS in knowledgebase Doc body rendering | known not affected: 1 | 2026-06-05T19:27:22+00:00 | Vulnerability · Source |
| CVE-2026-40942 | redhat_vex | DSF: Inverted Time Comparison in OIDC JWKS and Token Cache | known not affected: 1 | 2026-06-05T19:27:21+00:00 | Vulnerability · Source |
| CVE-2026-40384 | redhat_vex | Joomla! Core - [20260510] - Path traversal in com_media webservice endpoint | known not affected: 1 | 2026-06-05T19:27:21+00:00 | Vulnerability · Source |
| CVE-2026-40951 | redhat_vex | Memory corruption in Secure Access Windows clients prior to 14.50 | known not affected: 1 | 2026-06-05T19:27:20+00:00 | Vulnerability · Source |
| CVE-2026-40096 | redhat_vex | immich: Open Redirect via Shared Album name | known not affected: 1 | 2026-06-05T19:27:18+00:00 | Vulnerability · Source |
| CVE-2026-40896 | redhat_vex | OpenProject has Cross-Project Meeting Agenda Item Injection via Unscoped Section Lookup | known not affected: 1 | 2026-06-05T19:27:17+00:00 | Vulnerability · Source |
| CVE-2026-40304 | redhat_vex | zrok's broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend records | known not affected: 1 | 2026-06-05T19:27:17+00:00 | Vulnerability · Source |
| CVE-2026-40151 | redhat_vex | PraisonAI Affected by Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS | known not affected: 1 | 2026-06-05T19:27:16+00:00 | Vulnerability · Source |
| CVE-2026-40214 | redhat_vex | CVE-2026-40214 | known not affected: 1 | 2026-06-05T19:27:15+00:00 | Vulnerability · Source |
| CVE-2026-40133 | redhat_vex | Missing Authorization check in SAP S/4HANA Condition Maintenance | known not affected: 1 | 2026-06-05T19:27:15+00:00 | Vulnerability · Source |
| CVE-2026-40968 | redhat_vex | Spring gRPC SecurityContext leaks across requests on authorization failure | known not affected: 1 | 2026-06-05T19:27:14+00:00 | Vulnerability · Source |
| CVE-2026-40605 | redhat_vex | Tautulli Vulnerable to Authenticated Path Traversal in Cache Deletion API | known not affected: 1 | 2026-06-05T19:27:13+00:00 | Vulnerability · Source |
| CVE-2026-40821 | redhat_vex | Authenticated SQLi in getAccountByID function | known not affected: 1 | 2026-06-05T19:27:12+00:00 | Vulnerability · Source |
| CVE-2026-40182 | redhat_vex | OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies | known not affected: 1 | 2026-06-05T19:27:11+00:00 | Vulnerability · Source |
| CVE-2026-40713 | redhat_vex | CVE-2026-40713 | known not affected: 1 | 2026-06-05T19:27:10+00:00 | Vulnerability · Source |
| CVE-2026-40137 | redhat_vex | Cross-Site Scripting (XSS) vulnerability in Business Server Pages Application (TAF_APPLAUNCHER) | known not affected: 1 | 2026-06-05T19:27:10+00:00 | Vulnerability · Source |
| CVE-2026-40425 | redhat_vex | MacGregor Voyage Data Recorder (VDR) G4e Files or Directories Accessible to External Parties | known not affected: 1 | 2026-06-05T19:27:10+00:00 | Vulnerability · Source |
| CVE-2026-40874 | redhat_vex | mailcow: dockerized missing authorization on Forwarding Hosts delete action | known not affected: 1 | 2026-06-05T19:27:09+00:00 | Vulnerability · Source |
| CVE-2026-40907 | redhat_vex | WWBN AVideo has IDOR in Live Restreams list.json.php that Exposes Other Users' Stream Keys and OAuth Tokens | known not affected: 1 | 2026-06-05T19:27:08+00:00 | Vulnerability · Source |
| CVE-2026-40102 | redhat_vex | Plane: ORM Field Reference Injection via `segment` Parameter in Saved Analytics | known not affected: 1 | 2026-06-05T19:27:08+00:00 | Vulnerability · Source |
| CVE-2026-40300 | redhat_vex | Zulip: Message edit history visible in "moves only" policy through /api/v1/messages/{id}/history | known not affected: 1 | 2026-06-05T19:27:07+00:00 | Vulnerability · Source |
| CVE-2026-40883 | redhat_vex | goshs: CSRF in state-changing GET routes enables authenticated file deletion and directory creation | known not affected: 1 | 2026-06-05T19:27:06+00:00 | Vulnerability · Source |
| CVE-2026-40928 | redhat_vex | AVideo: Missing CSRF Protection on State-Changing JSON Endpoints Enables Forced Comment Creation, Vote Manipulation, and Category Asset Deletion | known not affected: 1 | 2026-06-05T19:27:05+00:00 | Vulnerability · Source |
| CVE-2026-40592 | redhat_vex | FreeScout's cross-user undo reply allows mailbox peers to recall another agent's outbound reply | known not affected: 1 | 2026-06-05T19:27:04+00:00 | Vulnerability · Source |
| CVE-2026-40295 | redhat_vex | Devise: Open Redirect via Unvalidated `request.referrer` in Timeoutable Session Timeout Handler | known not affected: 1 | 2026-06-05T19:27:03+00:00 | Vulnerability · Source |
| CVE-2026-40826 | redhat_vex | Authenticated SQLi in dsgvo_contracts view | known not affected: 1 | 2026-06-05T19:27:02+00:00 | Vulnerability · Source |
| CVE-2026-40314 | redhat_vex | NamelessMC: Reactions on private or blocking profile posts can be read and modified without proper authorization | known not affected: 1 | 2026-06-05T19:27:02+00:00 | Vulnerability · Source |
| CVE-2026-40547 | redhat_vex | Path Traversal in SOPlanning | known not affected: 1 | 2026-06-05T19:27:01+00:00 | Vulnerability · Source |
| CVE-2026-40565 | redhat_vex | FreeScout has Stored XSS / CSS Injection via linkify() — Unescaped URL in Anchor href | known not affected: 1 | 2026-06-05T19:27:01+00:00 | Vulnerability · Source |
| CVE-2026-40529 | redhat_vex | CVE-2026-40529 | known not affected: 1 | 2026-06-05T19:27:00+00:00 | Vulnerability · Source |
| CVE-2026-40431 | redhat_vex | SenseLive X3050 Cleartext transmission of sensitive information | known not affected: 1 | 2026-06-05T19:26:59+00:00 | Vulnerability · Source |
| CVE-2026-40255 | redhat_vex | @adonisjs/http-server has an Open Redirect vulnerability | known not affected: 1 | 2026-06-05T19:26:58+00:00 | Vulnerability · Source |
| CVE-2026-40888 | redhat_vex | Frappe HR vulnerable to Improper Access Control | known not affected: 1 | 2026-06-05T19:26:57+00:00 | Vulnerability · Source |
| CVE-2026-40134 | redhat_vex | Missing Authorization Check in SAP Incentive and Commission Management | known not affected: 1 | 2026-06-05T19:26:57+00:00 | Vulnerability · Source |
| CVE-2026-40552 | redhat_vex | Remote Code Execution in mpGabinet | known not affected: 1 | 2026-06-05T19:26:54+00:00 | Vulnerability · Source |
| CVE-2026-40004 | redhat_vex | openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartview | known not affected: 1 | 2026-06-05T19:26:54+00:00 | Vulnerability · Source |
| CVE-2024-57699 | redhat_vex | json-smart: Potential DoS via stack exhaustion (incomplete fix for CVE-2023-1370) | fixed: 31 known affected: 10 known not affected: 15 | 2026-06-05T19:26:53+00:00 | Vulnerability · Source |
| CVE-2026-40435 | redhat_vex | BIG-IP httpd access control vulnerability | known not affected: 1 | 2026-06-05T19:26:53+00:00 | Vulnerability · Source |
| CVE-2026-40570 | redhat_vex | FreeScout's Missing Authorization in load_customer_info Allows Any Authenticated User to Access Full Customer PII | known not affected: 1 | 2026-06-05T19:26:52+00:00 | Vulnerability · Source |