VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298613 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-3599 | redhat_vex | Riaxe Product Customizer <= 2.1.2 - Unauthenticated SQL Injection via 'options' Parameter Keys in product_data | known not affected: 1 | 2026-06-05T19:21:31+00:00 | Vulnerability · Source |
| CVE-2026-3614 | redhat_vex | AcyMailing 9.11.0 - 10.8.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation | known not affected: 1 | 2026-06-05T19:21:31+00:00 | Vulnerability · Source |
| CVE-2026-3357 | redhat_vex | IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file | known not affected: 1 | 2026-06-05T19:21:31+00:00 | Vulnerability · Source |
| CVE-2026-3290 | redhat_vex | Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values | known not affected: 1 | 2026-06-05T19:21:30+00:00 | Vulnerability · Source |
| CVE-2026-3623 | redhat_vex | Vulnerabilities exists in IBM Netezza Performance Server Replication Services | known not affected: 1 | 2026-06-05T19:21:29+00:00 | Vulnerability · Source |
| CVE-2026-3461 | redhat_vex | Visa Acceptance Solutions <= 2.1.0 - Unauthenticated Authentication Bypass via Billing Email | known not affected: 1 | 2026-06-05T19:21:29+00:00 | Vulnerability · Source |
| CVE-2026-3425 | redhat_vex | RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Local File Inclusion via 'path' | known not affected: 1 | 2026-06-05T19:21:29+00:00 | Vulnerability · Source |
| CVE-2026-30811 | redhat_vex | Missing Authorization in Configuration Ajax Endpoint leads to Information Disclosure | known not affected: 1 | 2026-06-05T19:21:28+00:00 | Vulnerability · Source |
| CVE-2026-3199 | redhat_vex | Nexus Repository 3 - Authenticated Remote Code Execution via Task Property Injection | known not affected: 1 | 2026-06-05T19:21:28+00:00 | Vulnerability · Source |
| CVE-2026-30806 | redhat_vex | OS Command Injection in Network Report leads to Remote Code Execution | known not affected: 1 | 2026-06-05T19:21:27+00:00 | Vulnerability · Source |
| CVE-2026-3892 | redhat_vex | Motors – Car Dealer, Classifieds & Listing <= 1.4.107 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_dealer_logo_path' Parameter | known not affected: 1 | 2026-06-05T19:21:27+00:00 | Vulnerability · Source |
| CVE-2026-30808 | redhat_vex | Session Fixation in Authentication leads to Session Hijacking | known not affected: 1 | 2026-06-05T19:21:26+00:00 | Vulnerability · Source |
| CVE-2026-30950 | redhat_vex | AutoGPT has Authenticated Session Hijacking via IDOR | known not affected: 1 | 2026-06-05T19:21:26+00:00 | Vulnerability · Source |
| CVE-2026-30804 | redhat_vex | Unrestricted File Upload in Extension Uploader leads to Remote Code Execution | known not affected: 1 | 2026-06-05T19:21:26+00:00 | Vulnerability · Source |
| CVE-2026-30893 | redhat_vex | Wazuh cluster sync path traversal in decompress_files() enables arbitrary file write and code execution from authenticated cluster peer | known not affected: 1 | 2026-06-05T19:21:25+00:00 | Vulnerability · Source |
| CVE-2026-30813 | redhat_vex | SQL Injection in Module Search leads to Database Compromise | known not affected: 1 | 2026-06-05T19:21:25+00:00 | Vulnerability · Source |
| CVE-2026-38528 | redhat_vex | CVE-2026-38528 | known not affected: 1 | 2026-06-05T19:21:24+00:00 | Vulnerability · Source |
| CVE-2026-30809 | redhat_vex | OS Command Injection in WebServerModuleDebug via Blacklist Bypass leads to Remote Code Execution | known not affected: 1 | 2026-06-05T19:21:24+00:00 | Vulnerability · Source |
| CVE-2026-30810 | redhat_vex | Server-Side Request Forgery in API Checker leads to Privilege Escalation | known not affected: 1 | 2026-06-05T19:21:24+00:00 | Vulnerability · Source |
| CVE-2026-47114 | redhat_vex | IINA < 1.4.3 Command Execution via iina://open URL Scheme | known not affected: 1 | 2026-06-05T19:21:24+00:00 | Vulnerability · Source |
| CVE-2026-30805 | redhat_vex | Insecure Default Initialization in API Authentication leads to Authentication Bypass | known not affected: 1 | 2026-06-05T19:21:24+00:00 | Vulnerability · Source |
| CVE-2026-30807 | redhat_vex | Cross-Site Request Forgery on Extension Pages | known not affected: 1 | 2026-06-05T19:21:24+00:00 | Vulnerability · Source |
| CVE-2026-38530 | redhat_vex | CVE-2026-38530 | known not affected: 1 | 2026-06-05T19:21:23+00:00 | Vulnerability · Source |
| CVE-2026-38532 | redhat_vex | CVE-2026-38532 | known not affected: 1 | 2026-06-05T19:21:23+00:00 | Vulnerability · Source |
| CVE-2026-38527 | redhat_vex | CVE-2026-38527 | known not affected: 1 | 2026-06-05T19:21:23+00:00 | Vulnerability · Source |
| CVE-2026-38526 | redhat_vex | CVE-2026-38526 | known not affected: 1 | 2026-06-05T19:21:22+00:00 | Vulnerability · Source |
| CVE-2026-38529 | redhat_vex | CVE-2026-38529 | known not affected: 1 | 2026-06-05T19:21:22+00:00 | Vulnerability · Source |
| CVE-2026-47314 | redhat_vex | CVE-2026-47314 | known not affected: 1 | 2026-06-05T19:21:22+00:00 | Vulnerability · Source |
| CVE-2026-47266 | redhat_vex | Formie: Unauthenticated front-end submission editing can overwrite existing submissions | known not affected: 1 | 2026-06-05T19:21:21+00:00 | Vulnerability · Source |
| CVE-2026-47356 | redhat_vex | CVE-2026-47356 | known not affected: 1 | 2026-06-05T19:21:20+00:00 | Vulnerability · Source |
| CVE-2026-47107 | redhat_vex | Windmill < 1.703.2 Incorrect Default Permissions in nsjail Configuration | known not affected: 1 | 2026-06-05T19:21:20+00:00 | Vulnerability · Source |
| CVE-2026-47161 | redhat_vex | RELATE Vulnerable to Remote Code Execution (RCE) via Insecure Celery Pickle Deserialization | known not affected: 1 | 2026-06-05T19:21:19+00:00 | Vulnerability · Source |
| CVE-2026-47358 | redhat_vex | CVE-2026-47358 | known not affected: 1 | 2026-06-05T19:21:19+00:00 | Vulnerability · Source |
| CVE-2026-47310 | redhat_vex | CVE-2026-47310 | known not affected: 1 | 2026-06-05T19:21:19+00:00 | Vulnerability · Source |
| CVE-2026-47333 | redhat_vex | Out-of-bounds read in Ubuntu Linux AppArmor notification handling | known not affected: 1 | 2026-06-05T19:21:18+00:00 | Vulnerability · Source |
| CVE-2026-47331 | redhat_vex | Use-after-free in Ubuntu Linux AppArmor notification handling | known not affected: 1 | 2026-06-05T19:21:18+00:00 | Vulnerability · Source |
| CVE-2026-47117 | redhat_vex | OpenMed < 1.5.2 Remote Code Execution via PII Model Loading | known not affected: 1 | 2026-06-05T19:21:18+00:00 | Vulnerability · Source |
| CVE-2026-47357 | redhat_vex | CVE-2026-47357 | known not affected: 1 | 2026-06-05T19:21:17+00:00 | Vulnerability · Source |
| CVE-2026-47100 | redhat_vex | Funnel Builder for WooCommerce Checkout < 3.15.0.3 Missing Authorization via AJAX | known not affected: 1 | 2026-06-05T19:21:17+00:00 | Vulnerability · Source |
| CVE-2026-47269 | redhat_vex | pam_usb: deny_remote feature incorrectly classifies IPv4-mapped IPv6 remote connections as local | known not affected: 1 | 2026-06-05T19:21:16+00:00 | Vulnerability · Source |
| CVE-2026-47696 | redhat_vex | WWBN AVideo: Authenticated wallet credit bypass in AuthorizeNet processPayment endpoint | known not affected: 1 | 2026-06-05T19:21:16+00:00 | Vulnerability · Source |
| CVE-2026-47311 | redhat_vex | CVE-2026-47311 | known not affected: 1 | 2026-06-05T19:21:16+00:00 | Vulnerability · Source |
| CVE-2026-47272 | redhat_vex | pam_usb: OTP pad authentication bypass via missing system pad check and uninitialized RNG buffer | known not affected: 1 | 2026-06-05T19:21:14+00:00 | Vulnerability · Source |
| CVE-2026-47744 | redhat_vex | Shopper: Authorization bypass and RBAC privilege escalation in team settings | known not affected: 1 | 2026-06-05T19:21:14+00:00 | Vulnerability · Source |
| CVE-2026-47074 | redhat_vex | ex_aws_sns SigningCertURL not validated in verify_message/1 | known not affected: 1 | 2026-06-05T19:21:14+00:00 | Vulnerability · Source |
| CVE-2026-47201 | redhat_vex | authentik: XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user | known not affected: 1 | 2026-06-05T19:21:14+00:00 | Vulnerability · Source |
| CVE-2026-29002 | redhat_vex | CouchCMS Privilege Escalation via f_k_levels_list Parameter | known not affected: 1 | 2026-06-05T19:21:13+00:00 | Vulnerability · Source |
| CVE-2026-29200 | redhat_vex | CVE-2026-29200 | known not affected: 1 | 2026-06-05T19:21:13+00:00 | Vulnerability · Source |
| CVE-2026-29090 | redhat_vex | Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata database | known not affected: 1 | 2026-06-05T19:21:12+00:00 | Vulnerability · Source |
| CVE-2026-29080 | redhat_vex | Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search API | known not affected: 1 | 2026-06-05T19:21:12+00:00 | Vulnerability · Source |