VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298615 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-5967 | redhat_vex | TeamT5｜ThreatSonar Anti-Ransomware - Privilege Escalation | known not affected: 1 | 2026-06-05T19:19:42+00:00 | Vulnerability · Source |
| CVE-2026-5477 | redhat_vex | Prefix-substitution forgery via integer overflow in wolfCrypt CMAC | known not affected: 1 | 2026-06-05T19:19:42+00:00 | Vulnerability · Source |
| CVE-2026-5787 | redhat_vex | CVE-2026-5787 | known not affected: 1 | 2026-06-05T19:19:41+00:00 | Vulnerability · Source |
| CVE-2026-5231 | redhat_vex | WP Statistics <= 14.16.4 - Unauthenticated Stored Cross-Site Scripting via 'utm_source' Parameter | known not affected: 1 | 2026-06-05T19:19:41+00:00 | Vulnerability · Source |
| CVE-2026-5262 | redhat_vex | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | known not affected: 1 | 2026-06-05T19:19:41+00:00 | Vulnerability · Source |
| CVE-2026-5208 | redhat_vex | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in coolercontrold | known not affected: 1 | 2026-06-05T19:19:41+00:00 | Vulnerability · Source |
| CVE-2026-5712 | redhat_vex | IdentityIQ Role Editor Incorrect Authorization Vulnerability | known not affected: 1 | 2026-06-05T19:19:40+00:00 | Vulnerability · Source |
| CVE-2026-5073 | redhat_vex | ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection via 'order' Parameter | known not affected: 1 | 2026-06-05T19:19:40+00:00 | Vulnerability · Source |
| CVE-2026-5127 | redhat_vex | User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Object Injection | known not affected: 1 | 2026-06-05T19:19:40+00:00 | Vulnerability · Source |
| CVE-2026-5118 | redhat_vex | Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role' | known not affected: 1 | 2026-06-05T19:19:39+00:00 | Vulnerability · Source |
| CVE-2026-5990 | redhat_vex | Tenda F451 SafeEmailFilter fromSafeEmailFilter stack-based overflow | known not affected: 1 | 2026-06-05T19:19:39+00:00 | Vulnerability · Source |
| CVE-2026-5989 | redhat_vex | Tenda F451 RouteStatic fromRouteStatic stack-based overflow | known not affected: 1 | 2026-06-05T19:19:39+00:00 | Vulnerability · Source |
| CVE-2026-5780 | redhat_vex | Multiple vulnerabilities in MphRx's Minerva | known not affected: 1 | 2026-06-05T19:19:38+00:00 | Vulnerability · Source |
| CVE-2026-5936 | redhat_vex | Server-Side Request Forgery (SSRF) via URL Parameter in Foxit PDF Services API | known not affected: 1 | 2026-06-05T19:19:38+00:00 | Vulnerability · Source |
| CVE-2026-5779 | redhat_vex | Multiple vulnerabilities in MphRx's Minerva | known not affected: 1 | 2026-06-05T19:19:37+00:00 | Vulnerability · Source |
| CVE-2026-5200 | redhat_vex | AcyMailing <= 10.8.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'acymailing_router' | known not affected: 1 | 2026-06-05T19:19:37+00:00 | Vulnerability · Source |
| CVE-2026-5396 | redhat_vex | Fluent Forms <= 6.1.21 - Authenticated (Subscriber+) Authorization Bypass via 'form_id' Parameter | known not affected: 1 | 2026-06-05T19:19:37+00:00 | Vulnerability · Source |
| CVE-2026-5387 | redhat_vex | AVEVA Pipeline Simulation Missing Authorization | known not affected: 1 | 2026-06-05T19:19:36+00:00 | Vulnerability · Source |
| CVE-2026-5189 | redhat_vex | Nexus Repository 3 - Hardcoded Credential in Internal Database Component | known not affected: 1 | 2026-06-05T19:19:36+00:00 | Vulnerability · Source |
| CVE-2026-5783 | redhat_vex | Reflected XSS in Beyaz Computer's CityPLus | known not affected: 1 | 2026-06-05T19:19:36+00:00 | Vulnerability · Source |
| CVE-2026-5963 | redhat_vex | Digiwin｜EasyFlow .NET - SQL Injection | known not affected: 1 | 2026-06-05T19:19:36+00:00 | Vulnerability · Source |
| CVE-2026-5816 | redhat_vex | Improper Resolution of Path Equivalence in GitLab | known not affected: 1 | 2026-06-05T19:19:35+00:00 | Vulnerability · Source |
| CVE-2026-5852 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi setIptvCfg os command injection | known not affected: 1 | 2026-06-05T19:19:35+00:00 | Vulnerability · Source |
| CVE-2026-5726 | redhat_vex | ASDA-Soft Stack-based Buffer Overflow Vulnerability | known not affected: 1 | 2026-06-05T19:19:34+00:00 | Vulnerability · Source |
| CVE-2026-5740 | redhat_vex | Unauthenticated WebSocket binary frame causes denial of service in Mattermost Server | known not affected: 1 | 2026-06-05T19:19:34+00:00 | Vulnerability · Source |
| CVE-2026-5627 | redhat_vex | Path Traversal in mintplex-labs/anything-llm | known not affected: 1 | 2026-06-05T19:19:34+00:00 | Vulnerability · Source |
| CVE-2026-5371 | redhat_vex | MonsterInsights <= 10.1.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure And Plugin Integration Reset | known not affected: 1 | 2026-06-05T19:19:33+00:00 | Vulnerability · Source |
| CVE-2026-5995 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi setMiniuiHomeInfoShow os command injection | known not affected: 1 | 2026-06-05T19:19:33+00:00 | Vulnerability · Source |
| CVE-2026-5788 | redhat_vex | CVE-2026-5788 | known not affected: 1 | 2026-06-05T19:19:33+00:00 | Vulnerability · Source |
| CVE-2026-5412 | redhat_vex | Juju CloudSpec API could leak senstive information | known not affected: 1 | 2026-06-05T19:19:33+00:00 | Vulnerability · Source |
| CVE-2026-5830 | redhat_vex | Tenda AC15 SysToolChangePwd websGetVar stack-based overflow | known not affected: 1 | 2026-06-05T19:19:32+00:00 | Vulnerability · Source |
| CVE-2026-5722 | redhat_vex | MoreConvert Pro <= 1.9.14 - Authentication Bypass via Waitlist Guest Verification Token Reuse | known not affected: 1 | 2026-06-05T19:19:32+00:00 | Vulnerability · Source |
| CVE-2026-5173 | redhat_vex | Exposed Dangerous Method or Function in GitLab | known not affected: 1 | 2026-06-05T19:19:32+00:00 | Vulnerability · Source |
| CVE-2026-5982 | redhat_vex | D-Link DIR-605L POST Request formAdvNetwork buffer overflow | known not affected: 1 | 2026-06-05T19:19:31+00:00 | Vulnerability · Source |
| CVE-2026-5784 | redhat_vex | Stored XSS in DivvyDrive Information Technologies' DivvyDrive | known not affected: 1 | 2026-06-05T19:19:31+00:00 | Vulnerability · Source |
| CVE-2026-5029 | redhat_vex | RCE in Code Runner MCP Server | known not affected: 1 | 2026-06-05T19:19:31+00:00 | Vulnerability · Source |
| CVE-2026-5263 | redhat_vex | URI nameConstraints not enforced in ConfirmNameConstraints() | known not affected: 1 | 2026-06-05T19:19:31+00:00 | Vulnerability · Source |
| CVE-2026-5964 | redhat_vex | Digiwin｜EasyFlow .NET - SQL Injection | known not affected: 1 | 2026-06-05T19:19:31+00:00 | Vulnerability · Source |
| CVE-2026-5229 | redhat_vex | Receive Notifications After Form Submitting – Form Notify for Any Forms <= 1.1.10 - Unauthenticated Authentication Bypass via LINE OAuth Callback | known not affected: 1 | 2026-06-05T19:19:31+00:00 | Vulnerability · Source |
| CVE-2026-5397 | redhat_vex | Vulnerability Related to an Uncontrolled Search Path Element in a UPS Management Application | known not affected: 1 | 2026-06-05T19:19:30+00:00 | Vulnerability · Source |
| CVE-2026-5478 | redhat_vex | Everest Forms <= 3.4.4 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter | known not affected: 1 | 2026-06-05T19:19:29+00:00 | Vulnerability · Source |
| CVE-2026-5694 | redhat_vex | Quick Interest Slider <= 3.1.5 - Unauthenticated Stored Cross-Site Scripting | known not affected: 1 | 2026-06-05T19:19:28+00:00 | Vulnerability · Source |
| CVE-2026-5076 | redhat_vex | ARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation | known not affected: 1 | 2026-06-05T19:19:27+00:00 | Vulnerability · Source |
| CVE-2026-5652 | redhat_vex | Authorization Bypass Through User-Controlled Key in Crafty Controller | known not affected: 1 | 2026-06-05T19:19:27+00:00 | Vulnerability · Source |
| CVE-2026-5373 | redhat_vex | runZero Platform superuser privilege escalation | known not affected: 1 | 2026-06-05T19:19:26+00:00 | Vulnerability · Source |
| CVE-2026-5940 | redhat_vex | Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-05T19:19:26+00:00 | Vulnerability · Source |
| CVE-2026-5845 | redhat_vex | Improper authorization fallback allows scoped user-to-server token installation escape in GitHub Enterprise Server | known not affected: 1 | 2026-06-05T19:19:26+00:00 | Vulnerability · Source |
| CVE-2026-5786 | redhat_vex | CVE-2026-5786 | known not affected: 1 | 2026-06-05T19:19:25+00:00 | Vulnerability · Source |
| CVE-2026-5364 | redhat_vex | Drag and Drop File Upload for Contact Form 7 <= 1.1.3 - Unauthenticated Arbitrary File Upload via sanitize_file_name Bypass | known not affected: 1 | 2026-06-05T19:19:25+00:00 | Vulnerability · Source |
| CVE-2026-5966 | redhat_vex | TeamT5｜ThreatSonar Anti-Ransomware - Arbitrary File Deletion | known not affected: 1 | 2026-06-05T19:19:25+00:00 | Vulnerability · Source |