VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298615 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-32272 | redhat_vex | Craft Commerce: Blind SQL Injection via hasVariant/hasProduct | known not affected: 1 | 2026-06-05T19:20:00+00:00 | Vulnerability · Source |
| CVE-2026-32999 | redhat_vex | CVE-2026-32999 | known not affected: 1 | 2026-06-05T19:20:00+00:00 | Vulnerability · Source |
| CVE-2026-32649 | redhat_vex | Milesight Cameras OS Command Injection | known not affected: 1 | 2026-06-05T19:20:00+00:00 | Vulnerability · Source |
| CVE-2026-32650 | redhat_vex | Anviz CrossChex Standard Algorithm Downgrade | known not affected: 1 | 2026-06-05T19:20:00+00:00 | Vulnerability · Source |
| CVE-2026-32991 | redhat_vex | CVE-2026-32991 | known not affected: 1 | 2026-06-05T19:20:00+00:00 | Vulnerability · Source |
| CVE-2026-32955 | redhat_vex | CVE-2026-32955 | known not affected: 1 | 2026-06-05T19:19:59+00:00 | Vulnerability · Source |
| CVE-2026-32658 | redhat_vex | CVE-2026-32658 | known not affected: 1 | 2026-06-05T19:19:59+00:00 | Vulnerability · Source |
| CVE-2026-32661 | redhat_vex | CVE-2026-32661 | known not affected: 1 | 2026-06-05T19:19:58+00:00 | Vulnerability · Source |
| CVE-2026-32625 | redhat_vex | LibreChat Exfiltrates Server Secrets via MCP Server URL Injection | known not affected: 1 | 2026-06-05T19:19:57+00:00 | Vulnerability · Source |
| CVE-2026-32643 | redhat_vex | BIG-IP and BIG-IQ privilege escalation vulnerability | known not affected: 1 | 2026-06-05T19:19:56+00:00 | Vulnerability · Source |
| CVE-2026-32148 | redhat_vex | Lockfile checksums not verified in Hex allows dependency integrity bypass | known not affected: 1 | 2026-06-05T19:19:56+00:00 | Vulnerability · Source |
| CVE-2026-32311 | redhat_vex | Command Injection and Docker container escape allows root on host machine | known not affected: 1 | 2026-06-05T19:19:55+00:00 | Vulnerability · Source |
| CVE-2026-32324 | redhat_vex | Anviz CX7 Firmware Use of Hard-coded Cryptographic Key | known not affected: 1 | 2026-06-05T19:19:54+00:00 | Vulnerability · Source |
| CVE-2026-32993 | redhat_vex | CVE-2026-32993 | known not affected: 1 | 2026-06-05T19:19:54+00:00 | Vulnerability · Source |
| CVE-2026-32135 | redhat_vex | NanoMQ has Heap Buffer Overflow in URI Parameter Parsing | known not affected: 1 | 2026-06-05T19:19:54+00:00 | Vulnerability · Source |
| CVE-2026-32863 | redhat_vex | Out-of-Bounds Read in sentry_transaction_context_set_operation() | known not affected: 1 | 2026-06-05T19:19:54+00:00 | Vulnerability · Source |
| CVE-2026-50213 | redhat_vex | Bulk User Private Data Harvesting | known not affected: 1 | 2026-06-05T19:19:53+00:00 | Vulnerability · Source |
| CVE-2026-50211 | redhat_vex | Exposed Factory Testing App Boundaries | known not affected: 1 | 2026-06-05T19:19:53+00:00 | Vulnerability · Source |
| CVE-2026-50206 | redhat_vex | VPN Command Injection Vulnerability | known not affected: 1 | 2026-06-05T19:19:53+00:00 | Vulnerability · Source |
| CVE-2026-50033 | redhat_vex | CVE-2026-50033 | known not affected: 1 | 2026-06-05T19:19:53+00:00 | Vulnerability · Source |
| CVE-2026-50214 | redhat_vex | Shared Secret Quota Inflation | known not affected: 1 | 2026-06-05T19:19:52+00:00 | Vulnerability · Source |
| CVE-2026-50208 | redhat_vex | Permissive TrustAllCerts TLS Verification | known not affected: 1 | 2026-06-05T19:19:52+00:00 | Vulnerability · Source |
| CVE-2026-50207 | redhat_vex | Local Modem Manipulation via Binder Interfaces | known not affected: 1 | 2026-06-05T19:19:51+00:00 | Vulnerability · Source |
| CVE-2026-50212 | redhat_vex | Arbitrary Remote Device Unbinding | known not affected: 1 | 2026-06-05T19:19:51+00:00 | Vulnerability · Source |
| CVE-2026-50209 | redhat_vex | MDM Server Registration Overriding | known not affected: 1 | 2026-06-05T19:19:51+00:00 | Vulnerability · Source |
| CVE-2026-50205 | redhat_vex | Plaintext Log Credential Leakage | known not affected: 1 | 2026-06-05T19:19:51+00:00 | Vulnerability · Source |
| CVE-2026-50225 | redhat_vex | Account Creation Exhaustion | known not affected: 1 | 2026-06-05T19:19:51+00:00 | Vulnerability · Source |
| CVE-2026-5844 | redhat_vex | D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection | known not affected: 1 | 2026-06-05T19:19:50+00:00 | Vulnerability · Source |
| CVE-2026-5781 | redhat_vex | Multiple vulnerabilities in MphRx's Minerva | known not affected: 1 | 2026-06-05T19:19:49+00:00 | Vulnerability · Source |
| CVE-2026-5943 | redhat_vex | Foxit PDF Editor/Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-05T19:19:49+00:00 | Vulnerability · Source |
| CVE-2026-5385 | redhat_vex | GLPI 11.0.0 - Stored XSS in knowledge base | known not affected: 1 | 2026-06-05T19:19:49+00:00 | Vulnerability · Source |
| CVE-2026-5853 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi setIpv6LanCfg os command injection | known not affected: 1 | 2026-06-05T19:19:48+00:00 | Vulnerability · Source |
| CVE-2026-5798 | redhat_vex | Unsafe Object Reference (IDOR) vulnerability in Stel Order | known not affected: 1 | 2026-06-05T19:19:47+00:00 | Vulnerability · Source |
| CVE-2026-5710 | redhat_vex | Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.6 - Unauthenticated Limited Arbitrary File Read via mfile Field | known not affected: 1 | 2026-06-05T19:19:47+00:00 | Vulnerability · Source |
| CVE-2026-5804 | redhat_vex | CVE-2026-5804 | known not affected: 1 | 2026-06-05T19:19:47+00:00 | Vulnerability · Source |
| CVE-2026-5264 | redhat_vex | DTLS 1.3 ACK heap buffer overflow | known not affected: 1 | 2026-06-05T19:19:46+00:00 | Vulnerability · Source |
| CVE-2026-5228 | redhat_vex | Improper Access Control in Kurt Software Studio's WriteUp Mobile App | known not affected: 1 | 2026-06-05T19:19:46+00:00 | Vulnerability · Source |
| CVE-2026-5921 | redhat_vex | Server-Side Request Forgery in GitHub Enterprise Server allowed extraction of sensitive environment variables via timing side-channel attack | known not affected: 1 | 2026-06-05T19:19:46+00:00 | Vulnerability · Source |
| CVE-2026-5750 | redhat_vex | Insecure direct object reference (IDOR) vulnerability in Fullstep | known not affected: 1 | 2026-06-05T19:19:45+00:00 | Vulnerability · Source |
| CVE-2026-5192 | redhat_vex | Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.52.1 - Unauthenticated Arbitrary File Read via 'upload-1[file][file_path]' | known not affected: 1 | 2026-06-05T19:19:45+00:00 | Vulnerability · Source |
| CVE-2026-5965 | redhat_vex | NewSoft｜NewSoftOA - OS Command Injection | known not affected: 1 | 2026-06-05T19:19:44+00:00 | Vulnerability · Source |
| CVE-2026-5749 | redhat_vex | Inadequate access control vulnerability in Fullstep | known not affected: 1 | 2026-06-05T19:19:44+00:00 | Vulnerability · Source |
| CVE-2026-5301 | redhat_vex | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in coolercontrol-ui | known not affected: 1 | 2026-06-05T19:19:44+00:00 | Vulnerability · Source |
| CVE-2026-5785 | redhat_vex | SQL Injection | known not affected: 1 | 2026-06-05T19:19:44+00:00 | Vulnerability · Source |
| CVE-2026-5992 | redhat_vex | Tenda F451 P2pListFilter fromP2pListFilter stack-based overflow | known not affected: 1 | 2026-06-05T19:19:44+00:00 | Vulnerability · Source |
| CVE-2026-5941 | redhat_vex | Foxit PDF Editor/Reader AcroForm Signature Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-05T19:19:43+00:00 | Vulnerability · Source |
| CVE-2026-5851 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi setUPnPCfg os command injection | known not affected: 1 | 2026-06-05T19:19:43+00:00 | Vulnerability · Source |
| CVE-2026-5617 | redhat_vex | Login as User <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation via 'oclaup_original_admin' Cookie | known not affected: 1 | 2026-06-05T19:19:43+00:00 | Vulnerability · Source |
| CVE-2026-5464 | redhat_vex | ExactMetrics <= 9.1.2 - Authenticated (Editor+) Arbitrary Plugin Installation/Activation via exactmetrics_connect_process | known not affected: 1 | 2026-06-05T19:19:43+00:00 | Vulnerability · Source |
| CVE-2026-5994 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi setTelnetCfg os command injection | known not affected: 1 | 2026-06-05T19:19:42+00:00 | Vulnerability · Source |