VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298629 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-27304 | redhat_vex | ColdFusion | Improper Input Validation (CWE-20) | known not affected: 1 | 2026-06-05T19:18:30+00:00 | Vulnerability · Source |
| CVE-2026-27681 | redhat_vex | SQL Injection vulnerability in SAP Business Planning and Consolidation and SAP Business Warehouse | known not affected: 1 | 2026-06-05T19:18:29+00:00 | Vulnerability · Source |
| CVE-2026-27294 | redhat_vex | Adobe Framemaker | Out-of-bounds Read (CWE-125) | known not affected: 1 | 2026-06-05T19:18:29+00:00 | Vulnerability · Source |
| CVE-2026-27788 | redhat_vex | CVE-2026-27788 | known not affected: 1 | 2026-06-05T19:18:29+00:00 | Vulnerability · Source |
| CVE-2026-27843 | redhat_vex | SenseLive X3050 Missing authentication for critical function | known not affected: 1 | 2026-06-05T19:18:28+00:00 | Vulnerability · Source |
| CVE-2026-27306 | redhat_vex | ColdFusion | Improper Input Validation (CWE-20) | known not affected: 1 | 2026-06-05T19:18:27+00:00 | Vulnerability · Source |
| CVE-2026-27287 | redhat_vex | InCopy | Out-of-bounds Read (CWE-125) | known not affected: 1 | 2026-06-05T19:18:26+00:00 | Vulnerability · Source |
| CVE-2026-27296 | redhat_vex | Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191) | known not affected: 1 | 2026-06-05T19:18:26+00:00 | Vulnerability · Source |
| CVE-2026-27311 | redhat_vex | Bridge | Heap-based Buffer Overflow (CWE-122) | known not affected: 1 | 2026-06-05T19:18:25+00:00 | Vulnerability · Source |
| CVE-2026-27292 | redhat_vex | Adobe Framemaker | Use After Free (CWE-416) | known not affected: 1 | 2026-06-05T19:18:24+00:00 | Vulnerability · Source |
| CVE-2026-27238 | redhat_vex | InDesign Desktop | Heap-based Buffer Overflow (CWE-122) | known not affected: 1 | 2026-06-05T19:18:24+00:00 | Vulnerability · Source |
| CVE-2026-27283 | redhat_vex | InDesign Desktop | Use After Free (CWE-416) | known not affected: 1 | 2026-06-05T19:18:23+00:00 | Vulnerability · Source |
| CVE-2026-27841 | redhat_vex | SenseLive X3050 Cross-Site request forgery | known not affected: 1 | 2026-06-05T19:18:23+00:00 | Vulnerability · Source |
| CVE-2026-45714 | redhat_vex | CubeCart: Server-Side Template Injection (SSTI) in Smarty Templates leading to RCE | known not affected: 1 | 2026-06-05T19:18:22+00:00 | Vulnerability · Source |
| CVE-2026-45633 | redhat_vex | Dokploy: Command Injection in /docker-container-logs Endpoint | known not affected: 1 | 2026-06-05T19:18:22+00:00 | Vulnerability · Source |
| CVE-2026-45668 | redhat_vex | Trilium Notes : Note Import to RCE via #docName Path Traversal (Safe Import Enabled) | known not affected: 1 | 2026-06-05T19:18:22+00:00 | Vulnerability · Source |
| CVE-2026-45206 | redhat_vex | CVE-2026-45206 | known not affected: 1 | 2026-06-05T19:18:22+00:00 | Vulnerability · Source |
| CVE-2026-45615 | redhat_vex | mouse07410/asn1c: 1-byte Heap Out-of-Bounds Read in `INTEGER_decode_oer` via Malformed OER Payload | known not affected: 1 | 2026-06-05T19:18:22+00:00 | Vulnerability · Source |
| CVE-2026-45004 | redhat_vex | OpenClaw < 2026.4.23 - Arbitrary Code Execution via setup-api.js in Current Working Directory | known not affected: 1 | 2026-06-05T19:18:21+00:00 | Vulnerability · Source |
| CVE-2026-45242 | redhat_vex | Summarize < 0.15.1 Path Traversal via slidesDir Parameter | known not affected: 1 | 2026-06-05T19:18:21+00:00 | Vulnerability · Source |
| CVE-2026-45017 | redhat_vex | Python Liquid: Absolute paths escape filesystem loader search path | known not affected: 1 | 2026-06-05T19:18:21+00:00 | Vulnerability · Source |
| CVE-2026-45431 | redhat_vex | Command Injection Vulnerability in GX Earth ONT Models | known not affected: 1 | 2026-06-05T19:18:21+00:00 | Vulnerability · Source |
| CVE-2026-45152 | redhat_vex | uniget: Command Injection in tool.Check Leading to Arbitrary Code Execution | known not affected: 1 | 2026-06-05T19:18:21+00:00 | Vulnerability · Source |
| CVE-2026-45211 | redhat_vex | WordPress APIExperts Square for WooCommerce plugin <= 4.7.1 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:18:21+00:00 | Vulnerability · Source |
| CVE-2026-45578 | redhat_vex | WWBN AVideo Live: OS command injection in on_publish.php execAsync via unescaped m3u8 URL | known not affected: 1 | 2026-06-05T19:18:21+00:00 | Vulnerability · Source |
| CVE-2026-45350 | redhat_vex | Open WebUI: Chat completion API allows tool restrictions to be bypassed | known not affected: 1 | 2026-06-05T19:18:21+00:00 | Vulnerability · Source |
| CVE-2026-45400 | redhat_vex | Open WebUI: Server-Side Request Forgery (SSRF) bypass in `validate_url` | known not affected: 1 | 2026-06-05T19:18:21+00:00 | Vulnerability · Source |
| CVE-2026-45800 | redhat_vex | Vvveb: Authenticated SQL injection in /user/orders via order_by and direction | known not affected: 1 | 2026-06-05T19:18:20+00:00 | Vulnerability · Source |
| CVE-2026-45044 | redhat_vex | RustFS: Authentication bypass in /profile/cpu and /profile/memory allows unauthenticated access to profiling handlers | known not affected: 1 | 2026-06-05T19:18:19+00:00 | Vulnerability · Source |
| CVE-2026-45628 | redhat_vex | Dokploy: Command Injection via Unescaped Branch Fields in Deployment Pipeline | known not affected: 1 | 2026-06-05T19:18:17+00:00 | Vulnerability · Source |
| CVE-2026-45727 | redhat_vex | CloakBrowser: Unauthenticated path traversal via fingerprint parameter in cloakserve leads to arbitrary directory deletion | known not affected: 1 | 2026-06-05T19:18:16+00:00 | Vulnerability · Source |
| CVE-2026-45088 | redhat_vex | Dalfox: Unauthenticated Arbitrary File Read with Out-of-Band Exfiltration via `custom-payload-file` in Dalfox Server Mode | known not affected: 1 | 2026-06-05T19:18:16+00:00 | Vulnerability · Source |
| CVE-2026-45574 | redhat_vex | epa4all-client: TLS Certificate Validation Disabled in Production | known not affected: 1 | 2026-06-05T19:18:14+00:00 | Vulnerability · Source |
| CVE-2026-45370 | redhat_vex | python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection | known not affected: 1 | 2026-06-05T19:18:13+00:00 | Vulnerability · Source |
| CVE-2026-45091 | redhat_vex | sealed-env: TOTP secret embedded in unseal token payload (enterprise mode) | known not affected: 1 | 2026-06-05T19:18:13+00:00 | Vulnerability · Source |
| CVE-2026-45055 | redhat_vex | CubeCart: Pre-Authenticated Password Reset Link Poisoning via HTTP Host Header | known not affected: 1 | 2026-06-05T19:18:13+00:00 | Vulnerability · Source |
| CVE-2026-45037 | redhat_vex | Tabby: Unsafe protocol handler execution via terminal linkifier allows arbitrary OS protocol invocation | known not affected: 1 | 2026-06-05T19:18:12+00:00 | Vulnerability · Source |
| CVE-2026-45132 | redhat_vex | CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handling | known not affected: 1 | 2026-06-05T19:18:12+00:00 | Vulnerability · Source |
| CVE-2026-45721 | redhat_vex | Algernon: handler.lua discovery walks parent directories above the server root | known not affected: 1 | 2026-06-05T19:18:12+00:00 | Vulnerability · Source |
| CVE-2026-45433 | redhat_vex | Hardcoded Cryptographic Key Vulnerability in GX Earth ONT Models | known not affected: 1 | 2026-06-05T19:18:12+00:00 | Vulnerability · Source |
| CVE-2026-45208 | redhat_vex | CVE-2026-45208 | known not affected: 1 | 2026-06-05T19:18:11+00:00 | Vulnerability · Source |
| CVE-2026-45082 | redhat_vex | Karakeep has a SSRF Protection Bypass via Redirect Handling | known not affected: 1 | 2026-06-05T19:18:11+00:00 | Vulnerability · Source |
| CVE-2026-45338 | redhat_vex | Open WebUI: SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py) | known not affected: 1 | 2026-06-05T19:18:11+00:00 | Vulnerability · Source |
| CVE-2026-45226 | redhat_vex | Heym < 0.0.21 Authorization Bypass in Workflow Execution | known not affected: 1 | 2026-06-05T19:18:10+00:00 | Vulnerability · Source |
| CVE-2026-45213 | redhat_vex | WordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:18:10+00:00 | Vulnerability · Source |
| CVE-2026-45033 | redhat_vex | GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor | known not affected: 1 | 2026-06-05T19:18:09+00:00 | Vulnerability · Source |
| CVE-2026-45042 | redhat_vex | RustFS: UploadPartCopy Does Not Enforce Destination Bucket Policy on Copy Source | known not affected: 1 | 2026-06-05T19:18:09+00:00 | Vulnerability · Source |
| CVE-2026-45006 | redhat_vex | OpenClaw < 2026.4.23 - Unsafe Config Mutation via Gateway Tool Denylist Bypass | known not affected: 1 | 2026-06-05T19:18:08+00:00 | Vulnerability · Source |
| CVE-2026-45545 | redhat_vex | Nextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution | known not affected: 1 | 2026-06-05T19:18:08+00:00 | Vulnerability · Source |
| CVE-2026-45047 | redhat_vex | bird-lg-go: Fatal Out-of-Memory (OOM) Denial of Service via Unbounded JSON Decoding | known not affected: 1 | 2026-06-05T19:18:07+00:00 | Vulnerability · Source |