VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298384 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-7330 | redhat_vex | Auto Affiliate Links <= 6.8.8 - Unauthenticated Stored Cross-Site Scripting via 'url' Parameter | known not affected: 1 | 2026-06-05T19:22:49+00:00 | Vulnerability · Source |
| CVE-2026-7428 | redhat_vex | Insecure default administrative credentials in AlloyDB for PostgreSQL | known not affected: 1 | 2026-06-05T19:22:49+00:00 | Vulnerability · Source |
| CVE-2026-7851 | redhat_vex | D-Link DI-8100 yyxz.asp sprintf stack-based overflow | known not affected: 1 | 2026-06-05T19:22:48+00:00 | Vulnerability · Source |
| CVE-2026-7284 | redhat_vex | Easy Elements for Elementor <= 1.4.4 - Unauthenticated Privilege Escalation via easyel_handle_register | known not affected: 1 | 2026-06-05T19:22:48+00:00 | Vulnerability · Source |
| CVE-2026-7635 | redhat_vex | coreActivity: Activity Logging for WordPress <= 3.0 - Unauthenticated PHP Object Injection via 'user_agent' Log Meta Field | known not affected: 1 | 2026-06-05T19:22:47+00:00 | Vulnerability · Source |
| CVE-2026-7770 | redhat_vex | IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator | known not affected: 1 | 2026-06-05T19:22:47+00:00 | Vulnerability · Source |
| CVE-2026-7802 | redhat_vex | Frontend Admin by DynamiApps <= 3.29.2 - Missing Authorization to Authenticated (Subscriber+) Account Takeover via 'user_id' URL Query Parameter | known not affected: 1 | 2026-06-05T19:22:47+00:00 | Vulnerability · Source |
| CVE-2026-7419 | redhat_vex | UTT HiPER 1250GW formTaskEdit_ap strcpy buffer overflow | known not affected: 1 | 2026-06-05T19:22:47+00:00 | Vulnerability · Source |
| CVE-2026-7204 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi setPptpServerCfg os command injection | known not affected: 1 | 2026-06-05T19:22:46+00:00 | Vulnerability · Source |
| CVE-2026-7420 | redhat_vex | UTT HiPER 1250GW ConfigAdvideo strcpy buffer overflow | known not affected: 1 | 2026-06-05T19:22:46+00:00 | Vulnerability · Source |
| CVE-2026-7136 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi setDmzCfg os command injection | known not affected: 1 | 2026-06-05T19:22:45+00:00 | Vulnerability · Source |
| CVE-2026-7424 | redhat_vex | Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP | known not affected: 1 | 2026-06-05T19:22:44+00:00 | Vulnerability · Source |
| CVE-2026-7460 | redhat_vex | mailcow-dockerized 2026-03b - Stored XSS in Queue Manager via unescaped | known not affected: 1 | 2026-06-05T19:22:44+00:00 | Vulnerability · Source |
| CVE-2026-7244 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi setWiFiEasyGuestCfg os command injection | known not affected: 1 | 2026-06-05T19:22:43+00:00 | Vulnerability · Source |
| CVE-2026-7280 | redhat_vex | eMPIA Technology｜AVACAST - Unquoted Service Path | known not affected: 1 | 2026-06-05T19:22:43+00:00 | Vulnerability · Source |
| CVE-2026-7613 | redhat_vex | Cost of Goods by PixelYourSite <= 1.2.12 - Unauthenticated Stored Cross-Site Scripting via Cost of Goods Import | known not affected: 1 | 2026-06-05T19:22:42+00:00 | Vulnerability · Source |
| CVE-2026-7451 | redhat_vex | TIF File Parsing Out-of-Bounds Write in Autodesk 3ds Max | known not affected: 1 | 2026-06-05T19:22:42+00:00 | Vulnerability · Source |
| CVE-2026-7415 | redhat_vex | Open MQTT orchestration without read/write ACLs in Yarbo robot firmware | known not affected: 1 | 2026-06-05T19:22:42+00:00 | Vulnerability · Source |
| CVE-2026-7154 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi setAdvancedInfoShow os command injection | known not affected: 1 | 2026-06-05T19:22:41+00:00 | Vulnerability · Source |
| CVE-2026-7101 | redhat_vex | Tenda F456 httpd WrlclientSet fromWrlclientSet buffer overflow | known not affected: 1 | 2026-06-05T19:22:41+00:00 | Vulnerability · Source |
| CVE-2026-7099 | redhat_vex | Tenda F456 httpd QuickIndex formQuickIndex buffer overflow | known not affected: 1 | 2026-06-05T19:22:40+00:00 | Vulnerability · Source |
| CVE-2026-7747 | redhat_vex | Totolink N300RH Parameter cstecgi.cgi loginauth buffer overflow | known not affected: 1 | 2026-06-05T19:22:40+00:00 | Vulnerability · Source |
| CVE-2026-7855 | redhat_vex | D-Link DI-8100 HTTP Request tggl.asp tggl_asp buffer overflow | known not affected: 1 | 2026-06-05T19:22:40+00:00 | Vulnerability · Source |
| CVE-2026-7891 | redhat_vex | CVE-2026-7891 | known not affected: 1 | 2026-06-05T19:22:40+00:00 | Vulnerability · Source |
| CVE-2026-7279 | redhat_vex | eMPIA Technology｜AVACAST - DLL Hijacking | known not affected: 1 | 2026-06-05T19:22:39+00:00 | Vulnerability · Source |
| CVE-2026-7198 | redhat_vex | CWE-284: Improper Access Control in web services in Progress Sitefinity | known not affected: 1 | 2026-06-05T19:22:39+00:00 | Vulnerability · Source |
| CVE-2026-7480 | redhat_vex | CVE-2026-7480 | known not affected: 1 | 2026-06-05T19:22:38+00:00 | Vulnerability · Source |
| CVE-2026-7567 | redhat_vex | Temporary Login <= 1.0.0 - Authentication Bypass to Account Takeover | known not affected: 1 | 2026-06-05T19:22:38+00:00 | Vulnerability · Source |
| CVE-2026-7138 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi setNtpCfg os command injection | known not affected: 1 | 2026-06-05T19:22:37+00:00 | Vulnerability · Source |
| CVE-2026-7121 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi setWizardCfg os command injection | known not affected: 1 | 2026-06-05T19:22:37+00:00 | Vulnerability · Source |
| CVE-2026-7156 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi CsteSystem os command injection | known not affected: 1 | 2026-06-05T19:22:37+00:00 | Vulnerability · Source |
| CVE-2026-7749 | redhat_vex | Totolink N300RH POST Request cstecgi.cgi setWanConfig buffer overflow | known not affected: 1 | 2026-06-05T19:22:36+00:00 | Vulnerability · Source |
| CVE-2026-7857 | redhat_vex | D-Link DI-8100 CGI user_group.asp sprintf buffer overflow | known not affected: 1 | 2026-06-05T19:22:36+00:00 | Vulnerability · Source |
| CVE-2026-7776 | redhat_vex | Boundary Workers Vulnerable to Denial of Service During TLS Handshake | known not affected: 1 | 2026-06-05T19:22:36+00:00 | Vulnerability · Source |
| CVE-2026-7125 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi setWiFiEasyCfg os command injection | known not affected: 1 | 2026-06-05T19:22:35+00:00 | Vulnerability · Source |
| CVE-2026-7080 | redhat_vex | Tenda F456 httpd PPTPUserSetting fromPPTPUserSetting buffer overflow | known not affected: 1 | 2026-06-05T19:22:35+00:00 | Vulnerability · Source |
| CVE-2026-7512 | redhat_vex | UTT HiPER 1200GW formUser strcpy buffer overflow | known not affected: 1 | 2026-06-05T19:22:34+00:00 | Vulnerability · Source |
| CVE-2026-7152 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi setTelnetCfg os command injection | known not affected: 1 | 2026-06-05T19:22:34+00:00 | Vulnerability · Source |
| CVE-2026-7422 | redhat_vex | MAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet Processing | known not affected: 1 | 2026-06-05T19:22:34+00:00 | Vulnerability · Source |
| CVE-2026-7242 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi setOpenVpnClientCfg os command injection | known not affected: 1 | 2026-06-05T19:22:34+00:00 | Vulnerability · Source |
| CVE-2026-7053 | redhat_vex | Tenda F456 httpd L7Prot frmL7ProtForm buffer overflow | known not affected: 1 | 2026-06-05T19:22:33+00:00 | Vulnerability · Source |
| CVE-2026-7332 | redhat_vex | LatePoint <= 5.5.0 - Unauthenticated Stored Cross-Site Scripting via 'booking_form_page_url' Parameter | known not affected: 1 | 2026-06-05T19:22:33+00:00 | Vulnerability · Source |
| CVE-2026-7888 | redhat_vex | Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize() calls in the Workflow, Form block, and File/Set components that lack the allowed_classes restriction. | known not affected: 1 | 2026-06-05T19:22:33+00:00 | Vulnerability · Source |
| CVE-2026-7079 | redhat_vex | Tenda F456 httpd AdvSetWan fromAdvSetWan buffer overflow | known not affected: 1 | 2026-06-05T19:22:32+00:00 | Vulnerability · Source |
| CVE-2026-7853 | redhat_vex | D-Link DI-8100 HTTP auto_reboot.asp sprintf buffer overflow | known not affected: 1 | 2026-06-05T19:22:32+00:00 | Vulnerability · Source |
| CVE-2026-7637 | redhat_vex | Boost <= 2.0.3 - Unauthenticated PHP Object Injection via STYXKEY-BOOST_USER_LOCATION Cookie | known not affected: 1 | 2026-06-05T19:22:32+00:00 | Vulnerability · Source |
| CVE-2026-7858 | redhat_vex | Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x | known not affected: 1 | 2026-06-05T19:22:31+00:00 | Vulnerability · Source |
| CVE-2026-7634 | redhat_vex | SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header | known not affected: 1 | 2026-06-05T19:22:31+00:00 | Vulnerability · Source |
| CVE-2026-7466 | redhat_vex | AgentFlow Arbitrary Python Pipeline Execution via pipeline_path | known not affected: 1 | 2026-06-05T19:22:31+00:00 | Vulnerability · Source |
| CVE-2026-7538 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi vulnerability os command injection | known not affected: 1 | 2026-06-05T19:22:31+00:00 | Vulnerability · Source |