VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298629 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-6968 | redhat_vex | Multiple Path Traversal Variants in awslabs/tough | known not affected: 1 | 2026-06-05T19:17:51+00:00 | Vulnerability · Source |
| CVE-2026-6403 | redhat_vex | Quick Playground <= 1.3.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'stylesheet' Parameter | known not affected: 1 | 2026-06-05T19:17:50+00:00 | Vulnerability · Source |
| CVE-2026-6788 | redhat_vex | Uncontrolled search path in PluginLauncher allows SYSTEM code execution in WatchGuard Agent | known not affected: 1 | 2026-06-05T19:17:50+00:00 | Vulnerability · Source |
| CVE-2026-6025 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi setSyslogCfg os command injection | known not affected: 1 | 2026-06-05T19:17:48+00:00 | Vulnerability · Source |
| CVE-2026-6290 | redhat_vex | Velociraptor Query() Plugin Misapplies Permissions To Orgs | known not affected: 1 | 2026-06-05T19:17:47+00:00 | Vulnerability · Source |
| CVE-2026-6272 | redhat_vex | CVE-2026-6272 | known not affected: 1 | 2026-06-05T19:17:46+00:00 | Vulnerability · Source |
| CVE-2026-6137 | redhat_vex | Tenda F451 AdvSetWan fromAdvSetWan stack-based overflow | known not affected: 1 | 2026-06-05T19:17:46+00:00 | Vulnerability · Source |
| CVE-2026-6157 | redhat_vex | Totolink A800R app.so setAppEasyWizardConfig buffer overflow | known not affected: 1 | 2026-06-05T19:17:46+00:00 | Vulnerability · Source |
| CVE-2026-6632 | redhat_vex | Tenda F451 httpd SafeClientFilter fromSafeClientFilter buffer overflow | known not affected: 1 | 2026-06-05T19:17:45+00:00 | Vulnerability · Source |
| CVE-2026-6281 | redhat_vex | CVE-2026-6281 | known not affected: 1 | 2026-06-05T19:17:45+00:00 | Vulnerability · Source |
| CVE-2026-6227 | redhat_vex | BackWPup <= 5.6.6 - Authenticated (Administrator+) Local File Inclusion via 'block_name' Parameter | known not affected: 1 | 2026-06-05T19:17:44+00:00 | Vulnerability · Source |
| CVE-2026-6506 | redhat_vex | InfusedWoo Pro <= 5.1.2 - Authenticated (Subscriber+) Missing Authorization to Privilege Escalation via Arbitrary User Meta Update | known not affected: 1 | 2026-06-05T19:17:44+00:00 | Vulnerability · Source |
| CVE-2026-6029 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injection | known not affected: 1 | 2026-06-05T19:17:44+00:00 | Vulnerability · Source |
| CVE-2026-6012 | redhat_vex | D-Link DIR-513 POST Request formSetPassword buffer overflow | known not affected: 1 | 2026-06-05T19:17:44+00:00 | Vulnerability · Source |
| CVE-2026-6199 | redhat_vex | Tenda F456 qossetting fromqossetting stack-based overflow | known not affected: 1 | 2026-06-05T19:17:43+00:00 | Vulnerability · Source |
| CVE-2026-6508 | redhat_vex | RCE in TUBITAK BILGEM's Liderahenk | known not affected: 1 | 2026-06-05T19:17:43+00:00 | Vulnerability · Source |
| CVE-2026-6865 | redhat_vex | Improper Limitation of a Pathname to a Restricted Directory Vulnerability on Multiple Products | known not affected: 1 | 2026-06-05T19:17:43+00:00 | Vulnerability · Source |
| CVE-2026-6553 | redhat_vex | TYPO3 CMS Stores Cleartext Password in User Settings Module | known not affected: 1 | 2026-06-05T19:17:43+00:00 | Vulnerability · Source |
| CVE-2026-6823 | redhat_vex | HKUDS OpenHarness Insecure Default Remote Channel Allowlist | known not affected: 1 | 2026-06-05T19:17:42+00:00 | Vulnerability · Source |
| CVE-2026-6346 | redhat_vex | Sensitive credentials exposed in plaintext in Mattermost support packets | known not affected: 1 | 2026-06-05T19:17:42+00:00 | Vulnerability · Source |
| CVE-2026-6265 | redhat_vex | Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2 | known not affected: 1 | 2026-06-05T19:17:42+00:00 | Vulnerability · Source |
| CVE-2026-6643 | redhat_vex | A stack-based buffer overflow vulnerability in the VPN Clients on the ADM | known not affected: 1 | 2026-06-05T19:17:41+00:00 | Vulnerability · Source |
| CVE-2026-6885 | redhat_vex | BorG Technology Corporation｜Borg SPM 2007 - Arbitrary File Upload | known not affected: 1 | 2026-06-05T19:17:41+00:00 | Vulnerability · Source |
| CVE-2026-6966 | redhat_vex | Signature Threshold Bypass in awslabs/tough Delegated Roles | known not affected: 1 | 2026-06-05T19:17:40+00:00 | Vulnerability · Source |
| CVE-2026-6328 | redhat_vex | XQUIC Improper STREAM Frame Validation in Initial/Handshake Packets | known not affected: 1 | 2026-06-05T19:17:40+00:00 | Vulnerability · Source |
| CVE-2026-6409 | redhat_vex | Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input | known not affected: 1 | 2026-06-05T19:17:40+00:00 | Vulnerability · Source |
| CVE-2026-6014 | redhat_vex | D-Link DIR-513 POST Request formAdvanceSetup buffer overflow | known not affected: 1 | 2026-06-05T19:17:39+00:00 | Vulnerability · Source |
| CVE-2026-6795 | redhat_vex | Open Redirect in DivvyDrive Information Technologies' DivvyDrive | known not affected: 1 | 2026-06-05T19:17:38+00:00 | Vulnerability · Source |
| CVE-2026-6140 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection | known not affected: 1 | 2026-06-05T19:17:38+00:00 | Vulnerability · Source |
| CVE-2026-6957 | redhat_vex | Path traversal in Mattermost Legal Hold plugin via unsanitized file name from federated peer allows arbitrary file write. | known not affected: 1 | 2026-06-05T19:17:37+00:00 | Vulnerability · Source |
| CVE-2026-6630 | redhat_vex | Tenda F451 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow | known not affected: 1 | 2026-06-05T19:17:37+00:00 | Vulnerability · Source |
| CVE-2026-6197 | redhat_vex | Tenda F456 AdvSetWrlsafeset formWrlsafeset stack-based overflow | known not affected: 1 | 2026-06-05T19:17:37+00:00 | Vulnerability · Source |
| CVE-2026-6692 | redhat_vex | Slider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber+) Arbitrary File Upload via _get_media_url | known not affected: 1 | 2026-06-05T19:17:36+00:00 | Vulnerability · Source |
| CVE-2026-6135 | redhat_vex | Tenda F451 SetIpBind fromSetIpBind stack-based overflow | known not affected: 1 | 2026-06-05T19:17:36+00:00 | Vulnerability · Source |
| CVE-2026-6351 | redhat_vex | Openfind｜MailGates/MailAudit - CRLF Injection | known not affected: 1 | 2026-06-05T19:17:36+00:00 | Vulnerability · Source |
| CVE-2026-6270 | redhat_vex | @fastify/middie vulnerable to middleware authentication bypass in child plugin scopes | known not affected: 1 | 2026-06-05T19:17:36+00:00 | Vulnerability · Source |
| CVE-2026-6720 | redhat_vex | Calicoctl leaks cluster credentials to stderr when verbose logging is enabled | known not affected: 1 | 2026-06-05T19:17:35+00:00 | Vulnerability · Source |
| CVE-2026-6009 | redhat_vex | Jaspersoft Library Deserialisation Vulnerability | known not affected: 1 | 2026-06-05T19:17:35+00:00 | Vulnerability · Source |
| CVE-2026-6261 | redhat_vex | Betheme <= 28.4 - Authenticated (Author+) Arbitrary File Upload to Remote Code Execution via Icon Pack Upload | known not affected: 1 | 2026-06-05T19:17:35+00:00 | Vulnerability · Source |
| CVE-2026-6001 | redhat_vex | IDOR in Abis Technology's BAPSİS | known not affected: 1 | 2026-06-05T19:17:34+00:00 | Vulnerability · Source |
| CVE-2026-6455 | redhat_vex | WP Contact Form 7 DB Handler <= 3.0 - Cross-Site Request Forgery to Arbitrary File Deletion via 'contact_form' Parameter | known not affected: 1 | 2026-06-05T19:17:33+00:00 | Vulnerability · Source |
| CVE-2026-6824 | redhat_vex | CP Plus 8 Ch. Network Video Recorder Cross-site Scripting | known not affected: 1 | 2026-06-05T19:17:33+00:00 | Vulnerability · Source |
| CVE-2026-6347 | redhat_vex | Mattermost Calls plugin exposes TURN server credentials in plaintext in support packets | known not affected: 1 | 2026-06-05T19:17:33+00:00 | Vulnerability · Source |
| CVE-2026-6581 | redhat_vex | H3C Magic B1 aspForm SetMobileAPInfoById buffer overflow | known not affected: 1 | 2026-06-05T19:17:33+00:00 | Vulnerability · Source |
| CVE-2026-6914 | redhat_vex | MD5 checksum creation may cause availability loss | known not affected: 1 | 2026-06-05T19:17:32+00:00 | Vulnerability · Source |
| CVE-2026-6833 | redhat_vex | aEnrich｜a+HRD - SQL Injection | known not affected: 1 | 2026-06-05T19:17:32+00:00 | Vulnerability · Source |
| CVE-2026-6510 | redhat_vex | InfusedWoo Pro <= 5.1.2 - Unauthenticated Missing Authorization to Privilege Escalation via 'iwar_save_recipe' | known not affected: 1 | 2026-06-05T19:17:32+00:00 | Vulnerability · Source |
| CVE-2026-6194 | redhat_vex | Totolink A3002MU HTTP Request formWlanSetup sub_410188 stack-based overflow | known not affected: 1 | 2026-06-05T19:17:32+00:00 | Vulnerability · Source |
| CVE-2026-6132 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi setLedCfg os command injection | known not affected: 1 | 2026-06-05T19:17:31+00:00 | Vulnerability · Source |
| CVE-2026-6204 | redhat_vex | CVE-2026-6204 | known not affected: 1 | 2026-06-05T19:17:31+00:00 | Vulnerability · Source |