VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298629 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-6411 | redhat_vex | MAXHUB Pivot Client Application Use of a Broken or Risky Cryptographic Algorithm | known not affected: 1 | 2026-06-05T19:17:30+00:00 | Vulnerability · Source |
| CVE-2026-6886 | redhat_vex | BorG Technology Corporation｜Borg SPM 2007 - Authentication Bypass | known not affected: 1 | 2026-06-05T19:17:30+00:00 | Vulnerability · Source |
| CVE-2026-6967 | redhat_vex | Missing Delegated Metadata Validation in awslabs/tough | known not affected: 1 | 2026-06-05T19:17:30+00:00 | Vulnerability · Source |
| CVE-2026-6787 | redhat_vex | Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process | known not affected: 1 | 2026-06-05T19:17:29+00:00 | Vulnerability · Source |
| CVE-2026-6028 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi setPptpServerCfg os command injection | known not affected: 1 | 2026-06-05T19:17:28+00:00 | Vulnerability · Source |
| CVE-2026-6741 | redhat_vex | LatePoint <= 5.4.1 - Authenticated (Agent+) Privilege Escalation to Administrator via 'connect-customer-to-wp-user' Ability | known not affected: 1 | 2026-06-05T19:17:28+00:00 | Vulnerability · Source |
| CVE-2026-6226 | redhat_vex | Frontend Admin by DynamiApps <= 3.29.2 - Unauthenticated Privilege Escalation via Form Configuration Injection | known not affected: 1 | 2026-06-05T19:17:28+00:00 | Vulnerability · Source |
| CVE-2026-6442 | redhat_vex | Improper Command Detection Logic Allows RCE in Cortex Code Command-Line Interface | known not affected: 1 | 2026-06-05T19:17:27+00:00 | Vulnerability · Source |
| CVE-2026-6406 | redhat_vex | Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag | known not affected: 1 | 2026-06-05T19:17:27+00:00 | Vulnerability · Source |
| CVE-2026-6271 | redhat_vex | Career Section <= 1.7 - Unauthenticated Arbitrary File Upload | known not affected: 1 | 2026-06-05T19:17:26+00:00 | Vulnerability · Source |
| CVE-2026-6154 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi setWizardCfg os command injection | known not affected: 1 | 2026-06-05T19:17:26+00:00 | Vulnerability · Source |
| CVE-2026-6631 | redhat_vex | Tenda F451 httpd webExcptypemanFilter fromwebExcptypemanFilter buffer overflow | known not affected: 1 | 2026-06-05T19:17:26+00:00 | Vulnerability · Source |
| CVE-2026-6002 | redhat_vex | HTML Injection in DivvyDrive Information Technologies' DivvyDrive | known not affected: 1 | 2026-06-05T19:17:25+00:00 | Vulnerability · Source |
| CVE-2026-6819 | redhat_vex | HKUDS OpenHarness Plugin Management Command Exposure | known not affected: 1 | 2026-06-05T19:17:25+00:00 | Vulnerability · Source |
| CVE-2026-6514 | redhat_vex | InfusedWoo Pro <= 5.1.2 - Unauthenticated Arbitrary File Read via 'url' Parameter | known not affected: 1 | 2026-06-05T19:17:25+00:00 | Vulnerability · Source |
| CVE-2026-6903 | redhat_vex | Path Traversal Vulnerability in LabOne User Interface | known not affected: 1 | 2026-06-05T19:17:24+00:00 | Vulnerability · Source |
| CVE-2026-6228 | redhat_vex | Frontend Admin by DynamiApps <= 3.28.36 - Unauthenticated Privilege Escalation via Edit User Form | known not affected: 1 | 2026-06-05T19:17:24+00:00 | Vulnerability · Source |
| CVE-2026-6066 | redhat_vex | Unencrypted Client‑Server Communication in ConnectWise Automate™ Solution Center | known not affected: 1 | 2026-06-05T19:17:24+00:00 | Vulnerability · Source |
| CVE-2026-6279 | redhat_vex | Avada (Fusion) Builder <= 3.15.2 - Unauthenticated Remote Code Execution via PHP Function Injection via 'render_logics' Shortcode Attribute via Widget AJAX Handler | known not affected: 1 | 2026-06-05T19:17:24+00:00 | Vulnerability · Source |
| CVE-2026-6282 | redhat_vex | CVE-2026-6282 | known not affected: 1 | 2026-06-05T19:17:24+00:00 | Vulnerability · Source |
| CVE-2026-6156 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi setIpQosRules os command injection | known not affected: 1 | 2026-06-05T19:17:23+00:00 | Vulnerability · Source |
| CVE-2026-6075 | redhat_vex | Media Library Assistant <= 3.35 - Cross-Site Request Forgery via Bulk Action Form | known not affected: 1 | 2026-06-05T19:17:23+00:00 | Vulnerability · Source |
| CVE-2026-6138 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection | known not affected: 1 | 2026-06-05T19:17:22+00:00 | Vulnerability · Source |
| CVE-2026-6912 | redhat_vex | Privilege Escalation via Self-Writable Cognito Custom Attribute in AWS Ops Wheel | known not affected: 1 | 2026-06-05T19:17:22+00:00 | Vulnerability · Source |
| CVE-2026-6022 | redhat_vex | Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX | known not affected: 1 | 2026-06-05T19:17:22+00:00 | Vulnerability · Source |
| CVE-2026-6389 | redhat_vex | IBM Turbonomic Prometurbo agent used by IBM Turbonomic Application Resource Management is affected by a single vulnerability | known not affected: 1 | 2026-06-05T19:17:22+00:00 | Vulnerability · Source |
| CVE-2026-6866 | redhat_vex | Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server | known not affected: 1 | 2026-06-05T19:17:21+00:00 | Vulnerability · Source |
| CVE-2026-6947 | redhat_vex | D-Link｜DWM-222W USB Wi-Fi Adapter - Brute-Force Protection Bypass | known not affected: 1 | 2026-06-05T19:17:21+00:00 | Vulnerability · Source |
| CVE-2026-6376 | redhat_vex | Missing authentication for critical function in SpiceJet Online Booking System | known not affected: 1 | 2026-06-05T19:17:20+00:00 | Vulnerability · Source |
| CVE-2026-6013 | redhat_vex | D-Link DIR-513 POST Request formSetRoute buffer overflow | known not affected: 1 | 2026-06-05T19:17:20+00:00 | Vulnerability · Source |
| CVE-2026-6929 | redhat_vex | JoomSport <= 5.7.7 - Unauthenticated SQL Injection via 'sortf' Parameter | known not affected: 1 | 2026-06-05T19:17:20+00:00 | Vulnerability · Source |
| CVE-2026-6026 | redhat_vex | Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injection | known not affected: 1 | 2026-06-05T19:17:20+00:00 | Vulnerability · Source |
| CVE-2026-6350 | redhat_vex | Openfind｜MailGates/MailAudit - Stack-based Buffer Overflow | known not affected: 1 | 2026-06-05T19:17:19+00:00 | Vulnerability · Source |
| CVE-2026-6512 | redhat_vex | InfusedWoo Pro <= 5.1.2 - Unauthenticated Missing Authorization to Arbitrary Post Deletion via Multiple Parameters | known not affected: 1 | 2026-06-05T19:17:18+00:00 | Vulnerability · Source |
| CVE-2026-6888 | redhat_vex | SQL Injection Vulnerability | known not affected: 1 | 2026-06-05T19:17:17+00:00 | Vulnerability · Source |
| CVE-2026-6970 | redhat_vex | authd Denial of Service and Local Privilege Escalation | known not affected: 1 | 2026-06-05T19:17:17+00:00 | Vulnerability · Source |
| CVE-2026-6169 | redhat_vex | affiliate-toolkit <= 3.8.5 - Authenticated (Editor+) Remote Code Execution | known not affected: 1 | 2026-06-05T19:17:16+00:00 | Vulnerability · Source |
| CVE-2026-33618 | redhat_vex | Chamilo LMS Affected by Remote Code Execution via eval() in Platform Settings | known not affected: 1 | 2026-06-05T19:17:15+00:00 | Vulnerability · Source |
| CVE-2026-33078 | redhat_vex | Roxy-WI has SQL Injection in haproxy_section_save Endpoint via Unsanitized server_ip Parameter | known not affected: 1 | 2026-06-05T19:17:15+00:00 | Vulnerability · Source |
| CVE-2026-33357 | redhat_vex | Meari OpenAPI device status IDOR | known not affected: 1 | 2026-06-05T19:17:15+00:00 | Vulnerability · Source |
| CVE-2026-33317 | redhat_vex | OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure | known not affected: 1 | 2026-06-05T19:17:14+00:00 | Vulnerability · Source |
| CVE-2026-33362 | redhat_vex | Meari SDK hardcoded cryptographic keys | known not affected: 1 | 2026-06-05T19:17:14+00:00 | Vulnerability · Source |
| CVE-2026-33076 | redhat_vex | Roxy-WI vulnerable to path traversal and arbitrary file writing | known not affected: 1 | 2026-06-05T19:17:14+00:00 | Vulnerability · Source |
| CVE-2026-33807 | redhat_vex | @fastify/express vulnerable to middleware path doubling causing authentication bypass in child plugin scopes | known not affected: 1 | 2026-06-05T19:17:14+00:00 | Vulnerability · Source |
| CVE-2026-33083 | redhat_vex | DataEase has SQL Injection in Order By Clause | known not affected: 1 | 2026-06-05T19:17:14+00:00 | Vulnerability · Source |
| CVE-2026-33232 | redhat_vex | AutoGPT: Unauthenticated DoS via Disk Space Exhaustion | known not affected: 1 | 2026-06-05T19:17:14+00:00 | Vulnerability · Source |
| CVE-2026-33667 | redhat_vex | OpenProject: 2FA OTP Verification Missing Rate Limiting | known not affected: 1 | 2026-06-05T19:17:13+00:00 | Vulnerability · Source |
| CVE-2026-33694 | redhat_vex | Junction File Manipulation | known not affected: 1 | 2026-06-05T19:17:13+00:00 | Vulnerability · Source |
| CVE-2026-33715 | redhat_vex | Chamilo LMS has Unauthenticated SSRF and Open Email Relay via install.ajax.php test_mailer action | known not affected: 1 | 2026-06-05T19:17:12+00:00 | Vulnerability · Source |
| CVE-2026-33588 | redhat_vex | Arbitrary File Write Through Path Traversal | known not affected: 1 | 2026-06-05T19:17:12+00:00 | Vulnerability · Source |