VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298629 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-33733 | redhat_vex | EspoCRM has Admin TemplateManager path traversal that allows arbitrary file read write and delete | known not affected: 1 | 2026-06-05T19:17:12+00:00 | Vulnerability · Source |
| CVE-2026-33608 | redhat_vex | Incomplete domain name sanitization during | known not affected: 1 | 2026-06-05T19:17:12+00:00 | Vulnerability · Source |
| CVE-2026-33432 | redhat_vex | Roxy-WI has Pre-Authentication LDAP Injection that Leads to Authentication Bypass | known not affected: 1 | 2026-06-05T19:17:11+00:00 | Vulnerability · Source |
| CVE-2026-33324 | redhat_vex | SQLBot prompt injection allows arbitrary SQL execution and remote code execution | known not affected: 1 | 2026-06-05T19:17:11+00:00 | Vulnerability · Source |
| CVE-2026-33122 | redhat_vex | DataEase has SQL Injection via Datasource Management | known not affected: 1 | 2026-06-05T19:17:11+00:00 | Vulnerability · Source |
| CVE-2026-33656 | redhat_vex | EspoCRM vulnerable to authenticated RCE via Formula with path traversal in attachment `sourceId`, exploitable by admin user | known not affected: 1 | 2026-06-05T19:17:10+00:00 | Vulnerability · Source |
| CVE-2026-33359 | redhat_vex | Meari unauthenticated alert image access in cloud object storage | known not affected: 1 | 2026-06-05T19:17:10+00:00 | Vulnerability · Source |
| CVE-2026-33356 | redhat_vex | Meari MQTT broker missing per-device subscribe ACL | known not affected: 1 | 2026-06-05T19:17:09+00:00 | Vulnerability · Source |
| CVE-2026-33662 | redhat_vex | OP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode() | known not affected: 1 | 2026-06-05T19:17:09+00:00 | Vulnerability · Source |
| CVE-2026-33778 | redhat_vex | Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashes | known not affected: 1 | 2026-06-05T19:17:07+00:00 | Vulnerability · Source |
| CVE-2026-33392 | redhat_vex | CVE-2026-33392 | known not affected: 1 | 2026-06-05T19:17:07+00:00 | Vulnerability · Source |
| CVE-2026-33208 | redhat_vex | Roxy-WI Vulnerable to Authenticated Remote Code Execution via OS Command Injection in find-in-config Endpoint | known not affected: 1 | 2026-06-05T19:17:06+00:00 | Vulnerability · Source |
| CVE-2026-33082 | redhat_vex | DataEase: SQL Injection in v2 Dataset Export | known not affected: 1 | 2026-06-05T19:17:06+00:00 | Vulnerability · Source |
| CVE-2026-33589 | redhat_vex | Arbitrary File Read via Local File Inclusion (LFI) | known not affected: 1 | 2026-06-05T19:17:06+00:00 | Vulnerability · Source |
| CVE-2026-33361 | redhat_vex | Meari weak XOR obfuscation | known not affected: 1 | 2026-06-05T19:17:05+00:00 | Vulnerability · Source |
| CVE-2026-33712 | redhat_vex | TypeBot: Unauthenticated SSRF via isolated-vm fetch in preview chat endpoint bypasses SSRF controls | known not affected: 1 | 2026-06-05T19:17:05+00:00 | Vulnerability · Source |
| CVE-2026-33435 | redhat_vex | Weblate: Remote code execution during backup restoration | known not affected: 1 | 2026-06-05T19:17:04+00:00 | Vulnerability · Source |
| CVE-2026-33756 | redhat_vex | Saleor Affected by Denial of Service via Unbounded GraphQL Query Batching | known not affected: 1 | 2026-06-05T19:17:04+00:00 | Vulnerability · Source |
| CVE-2026-33804 | redhat_vex | @fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option | known not affected: 1 | 2026-06-05T19:17:04+00:00 | Vulnerability · Source |
| CVE-2026-33398 | redhat_vex | Authenticated users can read hidden forum posts through `/forum/get_quotes` | known not affected: 1 | 2026-06-05T19:17:03+00:00 | Vulnerability · Source |
| CVE-2026-33893 | redhat_vex | CVE-2026-33893 | known not affected: 1 | 2026-06-05T19:17:03+00:00 | Vulnerability · Source |
| CVE-2026-33121 | redhat_vex | DataEase has SQL Injection via Datasource Save Flow | known not affected: 1 | 2026-06-05T19:17:03+00:00 | Vulnerability · Source |
| CVE-2026-33350 | redhat_vex | LORIS has a SQL injection in MRI feedback popup | known not affected: 1 | 2026-06-05T19:17:02+00:00 | Vulnerability · Source |
| CVE-2026-33031 | redhat_vex | Nginx-UI: Disabled users retain full API access through previously issued bearer tokens | known not affected: 1 | 2026-06-05T19:17:02+00:00 | Vulnerability · Source |
| CVE-2026-33587 | redhat_vex | Remote Code Execution (RCE) via Server-Side Template Injection (SSTI) | known not affected: 1 | 2026-06-05T19:17:02+00:00 | Vulnerability · Source |
| CVE-2026-33233 | redhat_vex | AutoGPT Platform: Remote Code Execution via Unsafe Pickle Deserialization of Redis Cache Entries | known not affected: 1 | 2026-06-05T19:17:02+00:00 | Vulnerability · Source |
| CVE-2026-33277 | redhat_vex | CVE-2026-33277 | known not affected: 1 | 2026-06-05T19:17:01+00:00 | Vulnerability · Source |
| CVE-2026-33439 | redhat_vex | Pre-Authentication Remote Code Execution via `jato.clientSession` Deserialization in OpenAM | known not affected: 1 | 2026-06-05T19:17:01+00:00 | Vulnerability · Source |
| CVE-2026-33583 | redhat_vex | Arqit SKA-Platform Vulnerable to Key Exposure | known not affected: 1 | 2026-06-05T19:17:00+00:00 | Vulnerability · Source |
| CVE-2026-33790 | redhat_vex | Junos OS: SRX Series: In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe process to crash and restart. | known not affected: 1 | 2026-06-05T19:17:00+00:00 | Vulnerability · Source |
| CVE-2026-33781 | redhat_vex | Junos OS: EX Series, QFX Series: In a VXLAN scenario when specific control protocol packets are received, memory leaks and eventually no traffic is passed | known not affected: 1 | 2026-06-05T19:16:59+00:00 | Vulnerability · Source |
| CVE-2026-33862 | redhat_vex | CVE-2026-33862 | known not affected: 1 | 2026-06-05T19:16:59+00:00 | Vulnerability · Source |
| CVE-2026-33808 | redhat_vex | @fastify/express vulnerable to middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons) | known not affected: 1 | 2026-06-05T19:16:58+00:00 | Vulnerability · Source |
| CVE-2026-42564 | redhat_vex | jotty·page: Unauthenticated Path Traversal leads to sensitive file disclosure and session-token reuse impact | known not affected: 1 | 2026-06-05T19:16:58+00:00 | Vulnerability · Source |
| CVE-2026-42087 | redhat_vex | OpenC3 COSMOS: SQL Injection in QuestDB Time-Series Data Base | known not affected: 1 | 2026-06-05T19:16:57+00:00 | Vulnerability · Source |
| CVE-2026-42249 | redhat_vex | Remote Code Execution in Ollama via Update Mechanism | known not affected: 1 | 2026-06-05T19:16:57+00:00 | Vulnerability · Source |
| CVE-2026-42843 | redhat_vex | grav-plugin-api: Grav API Privilege Escalation to Super Admin | known not affected: 1 | 2026-06-05T19:16:56+00:00 | Vulnerability · Source |
| CVE-2026-42366 | redhat_vex | GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilities | known not affected: 1 | 2026-06-05T19:16:56+00:00 | Vulnerability · Source |
| CVE-2026-42762 | redhat_vex | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:16:55+00:00 | Vulnerability · Source |
| CVE-2026-42924 | redhat_vex | BIG-IP iControl SOAP vulnerability | known not affected: 1 | 2026-06-05T19:16:55+00:00 | Vulnerability · Source |
| CVE-2026-42681 | redhat_vex | WordPress e2pdf plugin <= 1.32.14 - Reflected Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:16:55+00:00 | Vulnerability · Source |
| CVE-2026-42555 | redhat_vex | Valtimo: SpEL injection via StandardEvaluationContext allows Remote Code Execution by admin users | known not affected: 1 | 2026-06-05T19:16:54+00:00 | Vulnerability · Source |
| CVE-2026-42753 | redhat_vex | WordPress WCFM Membership plugin <= 2.11.10 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:16:54+00:00 | Vulnerability · Source |
| CVE-2026-42591 | redhat_vex | Gotenberg: Server-Side Request Forgery (SSRF) in github.com/gotenberg/gotenberg/v8 | known not affected: 1 | 2026-06-05T19:16:54+00:00 | Vulnerability · Source |
| CVE-2026-42375 | redhat_vex | D-Link DIR-600L A1 Hardcoded Telnet Backdoor Credentials | known not affected: 1 | 2026-06-05T19:16:53+00:00 | Vulnerability · Source |
| CVE-2026-42096 | redhat_vex | Broken Access Control in Sparx Pro Cloud Server | known not affected: 1 | 2026-06-05T19:16:53+00:00 | Vulnerability · Source |
| CVE-2026-42672 | redhat_vex | WordPress WP Directory Kit plugin <= 1.5.1 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:16:53+00:00 | Vulnerability · Source |
| CVE-2026-42654 | redhat_vex | WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability | known not affected: 1 | 2026-06-05T19:16:52+00:00 | Vulnerability · Source |
| CVE-2026-42735 | redhat_vex | WordPress KiviCare plugin <= 4.3.0 - Broken Authentication vulnerability | known not affected: 1 | 2026-06-05T19:16:52+00:00 | Vulnerability · Source |
| CVE-2026-42214 | redhat_vex | Improper Control of Generation of Code ('Code Injection') in dail8859/NotepadNext | known not affected: 1 | 2026-06-05T19:16:52+00:00 | Vulnerability · Source |