VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298615 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-5984 | redhat_vex | D-Link DIR-605L POST Request formSetLog buffer overflow | known not affected: 1 | 2026-06-05T19:19:25+00:00 | Vulnerability · Source |
| CVE-2026-5979 | redhat_vex | D-Link DIR-605L POST Request formVirtualServ buffer overflow | known not affected: 1 | 2026-06-05T19:19:24+00:00 | Vulnerability · Source |
| CVE-2026-5050 | redhat_vex | Payment Gateway for Redsys & WooCommerce Lite <= 7.0.0 - Improper Verification of Cryptographic Signature to Unauthenticated Payment Status Manipulation | known not affected: 1 | 2026-06-05T19:19:24+00:00 | Vulnerability · Source |
| CVE-2026-5500 | redhat_vex | Improper Validation of AES-GCM Authentication Tag Length in PKCS#7 Envelope Allows Authentication Bypass | known not affected: 1 | 2026-06-05T19:19:24+00:00 | Vulnerability · Source |
| CVE-2026-5768 | redhat_vex | Fourth Frontier Frontier X Mobile Application, Frontier X2 Missing Authentication for Critical Function | known not affected: 1 | 2026-06-05T19:19:24+00:00 | Vulnerability · Source |
| CVE-2026-5997 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi setLoginPasswordCfg os command injection | known not affected: 1 | 2026-06-05T19:19:24+00:00 | Vulnerability · Source |
| CVE-2026-5975 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi setDmzCfg os command injection | known not affected: 1 | 2026-06-05T19:19:23+00:00 | Vulnerability · Source |
| CVE-2026-5777 | redhat_vex | Security Misconfiguration Vulnerability in Atom 3x Projector | known not affected: 1 | 2026-06-05T19:19:23+00:00 | Vulnerability · Source |
| CVE-2026-5854 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi setWiFiEasyCfg os command injection | known not affected: 1 | 2026-06-05T19:19:22+00:00 | Vulnerability · Source |
| CVE-2026-5980 | redhat_vex | D-Link DIR-605L POST Request formSetMACFilter buffer overflow | known not affected: 1 | 2026-06-05T19:19:22+00:00 | Vulnerability · Source |
| CVE-2026-5386 | redhat_vex | KMW CCTV Security Cameras Unverified Password Change | known not affected: 1 | 2026-06-05T19:19:22+00:00 | Vulnerability · Source |
| CVE-2026-5935 | redhat_vex | TSSC/IMC is vulnerable to OS Command Injection | known not affected: 1 | 2026-06-05T19:19:21+00:00 | Vulnerability · Source |
| CVE-2026-49134 | redhat_vex | CodexBar < 0.32.0 Privilege Escalation via CLI Installer Temp File | known not affected: 1 | 2026-06-05T19:19:21+00:00 | Vulnerability · Source |
| CVE-2026-5100 | redhat_vex | AWP Classifieds <= 4.4.5 - Unauthenticated SQL Injection via 'regions' | known not affected: 1 | 2026-06-05T19:19:21+00:00 | Vulnerability · Source |
| CVE-2026-49143 | redhat_vex | BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handler | known not affected: 1 | 2026-06-05T19:19:21+00:00 | Vulnerability · Source |
| CVE-2026-5395 | redhat_vex | Fluent Forms <= 6.2.0 - Authenticated (Subscriber+) Authorization Bypass via 'table' Parameter | known not affected: 1 | 2026-06-05T19:19:21+00:00 | Vulnerability · Source |
| CVE-2026-49187 | redhat_vex | Hard-coded APK Resource Credentials & Scepters | known not affected: 1 | 2026-06-05T19:19:20+00:00 | Vulnerability · Source |
| CVE-2026-49448 | redhat_vex | authentik: SourceStage bypass via empty POST | known not affected: 1 | 2026-06-05T19:19:20+00:00 | Vulnerability · Source |
| CVE-2026-49367 | redhat_vex | CVE-2026-49367 | known not affected: 1 | 2026-06-05T19:19:20+00:00 | Vulnerability · Source |
| CVE-2026-49196 | redhat_vex | Predator Connect W6x: Web Interface Command Injection | known not affected: 1 | 2026-06-05T19:19:19+00:00 | Vulnerability · Source |
| CVE-2026-49754 | redhat_vex | HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulation | known not affected: 1 | 2026-06-05T19:19:19+00:00 | Vulnerability · Source |
| CVE-2026-49202 | redhat_vex | Unverified Meeting Recording Endpoints & Permissive CORS | known not affected: 1 | 2026-06-05T19:19:18+00:00 | Vulnerability · Source |
| CVE-2026-49103 | redhat_vex | CVE-2026-49103 | known not affected: 1 | 2026-06-05T19:19:18+00:00 | Vulnerability · Source |
| CVE-2026-49372 | redhat_vex | CVE-2026-49372 | known not affected: 1 | 2026-06-05T19:19:18+00:00 | Vulnerability · Source |
| CVE-2026-49237 | redhat_vex | Local Privilege Escalation in Canonical Multipass | known not affected: 1 | 2026-06-05T19:19:18+00:00 | Vulnerability · Source |
| CVE-2026-49185 | redhat_vex | Instruction Injection via FieldX MDM | known not affected: 1 | 2026-06-05T19:19:17+00:00 | Vulnerability · Source |
| CVE-2026-49194 | redhat_vex | SCREEN_CLICK Authentication Bypass | known not affected: 1 | 2026-06-05T19:19:16+00:00 | Vulnerability · Source |
| CVE-2026-49374 | redhat_vex | CVE-2026-49374 | known not affected: 1 | 2026-06-05T19:19:15+00:00 | Vulnerability · Source |
| CVE-2026-49491 | redhat_vex | Pixa Bank 2.0 SQL Injection via agence-ajax.php API | known not affected: 1 | 2026-06-05T19:19:15+00:00 | Vulnerability · Source |
| CVE-2026-49189 | redhat_vex | Broadcast Receiver Privilege Escalation | known not affected: 1 | 2026-06-05T19:19:14+00:00 | Vulnerability · Source |
| CVE-2026-49002 | redhat_vex | Broken Access Control Vulnerabily in ZTE ZXUniPOS NDS-LTE product | known not affected: 1 | 2026-06-05T19:19:14+00:00 | Vulnerability · Source |
| CVE-2026-49198 | redhat_vex | Predator Connect W6x: MQTT Broker Access Control | known not affected: 1 | 2026-06-05T19:19:13+00:00 | Vulnerability · Source |
| CVE-2026-49200 | redhat_vex | Acer Wave 7 router: Broken Access Control | known not affected: 1 | 2026-06-05T19:19:13+00:00 | Vulnerability · Source |
| CVE-2026-49195 | redhat_vex | Predator Connect W6x: unauthenticated Debug Service | known not affected: 1 | 2026-06-05T19:19:12+00:00 | Vulnerability · Source |
| CVE-2026-49190 | redhat_vex | Missing Per-Instruction Authorization Checks | known not affected: 1 | 2026-06-05T19:19:12+00:00 | Vulnerability · Source |
| CVE-2026-49199 | redhat_vex | Predator Connect W6x: RCE via MQTT | known not affected: 1 | 2026-06-05T19:19:11+00:00 | Vulnerability · Source |
| CVE-2026-49201 | redhat_vex | Acer Wave 7 router: Hardcoded Cryptographic Key | known not affected: 1 | 2026-06-05T19:19:11+00:00 | Vulnerability · Source |
| CVE-2026-49771 | redhat_vex | WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:19:11+00:00 | Vulnerability · Source |
| CVE-2026-49366 | redhat_vex | CVE-2026-49366 | known not affected: 1 | 2026-06-05T19:19:11+00:00 | Vulnerability · Source |
| CVE-2026-49191 | redhat_vex | Exposed Hard-coded M3WebServer Backend API Key | known not affected: 1 | 2026-06-05T19:19:10+00:00 | Vulnerability · Source |
| CVE-2026-49371 | redhat_vex | CVE-2026-49371 | known not affected: 1 | 2026-06-05T19:19:10+00:00 | Vulnerability · Source |
| CVE-2026-49128 | redhat_vex | Music Player Daemon < 0.24.11 Path Traversal via LocalStorage URI Handling | known not affected: 1 | 2026-06-05T19:19:09+00:00 | Vulnerability · Source |
| CVE-2026-49443 | redhat_vex | authentik: `UserSourceConnection.user` and `GroupSourceConnection.group` are changeable through the API | known not affected: 1 | 2026-06-05T19:19:09+00:00 | Vulnerability · Source |
| CVE-2026-49203 | redhat_vex | Unauthenticated eSIM Configuration Manipulation | known not affected: 1 | 2026-06-05T19:19:09+00:00 | Vulnerability · Source |
| CVE-2026-49014 | redhat_vex | CVE-2026-49014 | known not affected: 1 | 2026-06-05T19:19:08+00:00 | Vulnerability · Source |
| CVE-2026-49197 | redhat_vex | Predator Connect W6x: Improper Authentication | known not affected: 1 | 2026-06-05T19:19:07+00:00 | Vulnerability · Source |
| CVE-2026-49373 | redhat_vex | CVE-2026-49373 | known not affected: 1 | 2026-06-05T19:19:07+00:00 | Vulnerability · Source |
| CVE-2026-49238 | redhat_vex | SFTP Server VM Escape in Canonical Multipass | known not affected: 1 | 2026-06-05T19:19:07+00:00 | Vulnerability · Source |
| CVE-2026-49193 | redhat_vex | Publicly Readable AWS S3 Telemetry Buckets | known not affected: 1 | 2026-06-05T19:19:07+00:00 | Vulnerability · Source |
| CVE-2026-49368 | redhat_vex | CVE-2026-49368 | known not affected: 1 | 2026-06-05T19:19:06+00:00 | Vulnerability · Source |