VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298227 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-39345 | redhat_vex | OrangeHRM Affected by Arbitrary File Read via Path Traversal in Email Template Loader | known not affected: 1 | 2026-06-05T19:25:56+00:00 | Vulnerability · Source |
| CVE-2026-39381 | redhat_vex | Parse Server's Endpoint `/sessions/me` bypasses `_Session` `protectedFields` | known not affected: 1 | 2026-06-05T19:25:56+00:00 | Vulnerability · Source |
| CVE-2026-39309 | redhat_vex | Trilium Notes: macOS TCC Bypass via Prompt Spoofing | known not affected: 1 | 2026-06-05T19:25:56+00:00 | Vulnerability · Source |
| CVE-2026-39840 | redhat_vex | CSS injection in multiple Cargo display formats | known not affected: 1 | 2026-06-05T19:25:55+00:00 | Vulnerability · Source |
| CVE-2026-39374 | redhat_vex | Plane IDOR: Cross-Project Issue Date Modification via Bulk Update Endpoint | known not affected: 1 | 2026-06-05T19:25:55+00:00 | Vulnerability · Source |
| CVE-2026-39642 | redhat_vex | WordPress Nyla theme <= 1.7 - Arbitrary Shortcode Execution vulnerability | known not affected: 1 | 2026-06-05T19:25:55+00:00 | Vulnerability · Source |
| CVE-2026-39321 | redhat_vex | Parse Server has a login timing side-channel reveals user existence | known not affected: 1 | 2026-06-05T19:25:54+00:00 | Vulnerability · Source |
| CVE-2026-39851 | redhat_vex | Saleor has a user enumeration vulnerability due to different error messages | known not affected: 1 | 2026-06-05T19:25:54+00:00 | Vulnerability · Source |
| CVE-2026-39411 | redhat_vex | LobeHub has an unauthenticated authentication bypass on `webapi` routes via forgeable `X-lobe-chat-auth` header | known not affected: 1 | 2026-06-05T19:25:54+00:00 | Vulnerability · Source |
| CVE-2026-39392 | redhat_vex | CI4MS has Stored XSS in Pages Content Due to Missing html_purify Sanitization | known not affected: 1 | 2026-06-05T19:25:53+00:00 | Vulnerability · Source |
| CVE-2026-39837 | redhat_vex | Stored XSS through the dynamic table format in Cargo | known not affected: 1 | 2026-06-05T19:25:52+00:00 | Vulnerability · Source |
| CVE-2026-39383 | redhat_vex | Gotenberg unauthenticated blind SSRF via unfiltered webhook URL | known not affected: 1 | 2026-06-05T19:25:52+00:00 | Vulnerability · Source |
| CVE-2026-39428 | redhat_vex | CubeCart: Stored Cross-Site Scripting (XSS) | known not affected: 1 | 2026-06-05T19:25:52+00:00 | Vulnerability · Source |
| CVE-2026-39864 | redhat_vex | Kamailio Auth: Processing Vulnerability For Additional Authenticated User Identity Checks | known not affected: 1 | 2026-06-05T19:25:51+00:00 | Vulnerability · Source |
| CVE-2026-39963 | redhat_vex | Serendipity: Host Header Injection enables authentication cookie scoping to an attacker-controlled domain | known not affected: 1 | 2026-06-05T19:25:51+00:00 | Vulnerability · Source |
| CVE-2026-39406 | redhat_vex | @hono/node-server has a middleware bypass via repeated slashes in serveStatic | known not affected: 1 | 2026-06-05T19:25:50+00:00 | Vulnerability · Source |
| CVE-2026-0814 | redhat_vex | Advanced CF7 DB <= 2.0.9 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export | known not affected: 1 | 2026-06-05T19:25:50+00:00 | Vulnerability · Source |
| CVE-2026-39415 | redhat_vex | Frappe Learning Management System has Client-Side Manipulation of Quiz Scores | known not affected: 1 | 2026-06-05T19:25:50+00:00 | Vulnerability · Source |
| CVE-2026-39811 | redhat_vex | CVE-2026-39811 | known not affected: 1 | 2026-06-05T19:25:50+00:00 | Vulnerability · Source |
| CVE-2026-0258 | redhat_vex | PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching | known not affected: 1 | 2026-06-05T19:25:49+00:00 | Vulnerability · Source |
| CVE-2026-0256 | redhat_vex | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface | known not affected: 1 | 2026-06-05T19:25:49+00:00 | Vulnerability · Source |
| CVE-2026-0971 | redhat_vex | GoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeout | known not affected: 1 | 2026-06-05T19:25:48+00:00 | Vulnerability · Source |
| CVE-2026-0427 | redhat_vex | CVE-2026-0427 | known not affected: 1 | 2026-06-05T19:25:48+00:00 | Vulnerability · Source |
| CVE-2026-0247 | redhat_vex | Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities | known not affected: 1 | 2026-06-05T19:25:47+00:00 | Vulnerability · Source |
| CVE-2026-0827 | redhat_vex | CVE-2026-0827 | known not affected: 1 | 2026-06-05T19:25:46+00:00 | Vulnerability · Source |
| CVE-2026-0209 | redhat_vex | CVE-2026-0209 | known not affected: 1 | 2026-06-05T19:25:45+00:00 | Vulnerability · Source |
| CVE-2026-0261 | redhat_vex | PAN-OS: Authenticated Admin Command Injection Vulnerability | known not affected: 1 | 2026-06-05T19:25:45+00:00 | Vulnerability · Source |
| CVE-2026-0393 | redhat_vex | CODESYS Visualization - Insufficiently Protected Credentials | known not affected: 1 | 2026-06-05T19:25:44+00:00 | Vulnerability · Source |
| CVE-2026-0245 | redhat_vex | Prisma Access Agent: Information Disclosure Vulnerabilities | known not affected: 1 | 2026-06-05T19:25:44+00:00 | Vulnerability · Source |
| CVE-2026-0250 | redhat_vex | GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway | known not affected: 1 | 2026-06-05T19:25:43+00:00 | Vulnerability · Source |
| CVE-2026-0241 | redhat_vex | Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities | known not affected: 1 | 2026-06-05T19:25:42+00:00 | Vulnerability · Source |
| CVE-2026-0232 | redhat_vex | Cortex XDR Agent: Local Administrator can disable the agent on Windows | known not affected: 1 | 2026-06-05T19:25:42+00:00 | Vulnerability · Source |
| CVE-2026-0246 | redhat_vex | Prisma Access Agent: Local Privilege Escalation Vulnerability | known not affected: 1 | 2026-06-05T19:25:41+00:00 | Vulnerability · Source |
| CVE-2026-0857 | redhat_vex | CVE-2026-0857 | known not affected: 1 | 2026-06-05T19:25:41+00:00 | Vulnerability · Source |
| CVE-2026-0264 | redhat_vex | PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution | known not affected: 1 | 2026-06-05T19:25:41+00:00 | Vulnerability · Source |
| CVE-2026-0502 | redhat_vex | Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform | known not affected: 1 | 2026-06-05T19:25:41+00:00 | Vulnerability · Source |
| CVE-2026-0259 | redhat_vex | WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B) | known not affected: 1 | 2026-06-05T19:25:40+00:00 | Vulnerability · Source |
| CVE-2026-0718 | redhat_vex | Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.5 - Missing Authorization to Limited Post Meta Modification | known not affected: 1 | 2026-06-05T19:25:40+00:00 | Vulnerability · Source |
| CVE-2026-0512 | redhat_vex | Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog) | known not affected: 1 | 2026-06-05T19:25:39+00:00 | Vulnerability · Source |
| CVE-2026-0251 | redhat_vex | GlobalProtect App: Local Privilege Escalation Vulnerabilities | known not affected: 1 | 2026-06-05T19:25:39+00:00 | Vulnerability · Source |
| CVE-2026-0244 | redhat_vex | Prisma SD-WAN: Improper Certificate Validation Vulnerability | known not affected: 1 | 2026-06-05T19:25:38+00:00 | Vulnerability · Source |
| CVE-2026-0262 | redhat_vex | PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing | known not affected: 1 | 2026-06-05T19:25:38+00:00 | Vulnerability · Source |
| CVE-2026-26204 | redhat_vex | Wazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertData | known not affected: 1 | 2026-06-05T19:25:38+00:00 | Vulnerability · Source |
| CVE-2026-0811 | redhat_vex | Advanced CF7 DB <= 2.0.9 - Cross-Site Request Forgery to Form Entry Deletion | known not affected: 1 | 2026-06-05T19:25:37+00:00 | Vulnerability · Source |
| CVE-2026-26067 | redhat_vex | October: Safe Mode Bypass via CSS Preprocessor Compilers | known not affected: 1 | 2026-06-05T19:25:36+00:00 | Vulnerability · Source |
| CVE-2026-0248 | redhat_vex | Prisma Access Agent: Improper Certificate Validation Vulnerability | known not affected: 1 | 2026-06-05T19:25:36+00:00 | Vulnerability · Source |
| CVE-2026-0239 | redhat_vex | Chronosphere Chronocollector Information Disclosure Vulnerability | known not affected: 1 | 2026-06-05T19:25:36+00:00 | Vulnerability · Source |
| CVE-2026-26274 | redhat_vex | October: Safe Mode Bypass via Twig Database Write Operations | known not affected: 1 | 2026-06-05T19:25:35+00:00 | Vulnerability · Source |
| CVE-2026-26291 | redhat_vex | CVE-2026-26291 | known not affected: 1 | 2026-06-05T19:25:34+00:00 | Vulnerability · Source |
| CVE-2026-26206 | redhat_vex | Wazuh: API brute-force protection bypass via race condition in login attempt tracking | known not affected: 1 | 2026-06-05T19:25:34+00:00 | Vulnerability · Source |