VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298659 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-22314 | redhat_vex | CVE-2026-22314 | known not affected: 1 | 2026-06-05T19:14:22+00:00 | Vulnerability · Source |
| CVE-2026-22828 | redhat_vex | CVE-2026-22828 | known not affected: 1 | 2026-06-05T19:14:22+00:00 | Vulnerability · Source |
| CVE-2026-22925 | redhat_vex | CVE-2026-22925 | known not affected: 1 | 2026-06-05T19:14:22+00:00 | Vulnerability · Source |
| CVE-2026-22750 | redhat_vex | SSL bundle configuration silently bypassed in Spring Cloud Gateway | known not affected: 1 | 2026-06-05T19:14:21+00:00 | Vulnerability · Source |
| CVE-2026-22563 | redhat_vex | CVE-2026-22563 | known not affected: 1 | 2026-06-05T19:14:20+00:00 | Vulnerability · Source |
| CVE-2026-22666 | redhat_vex | Dolibarr ERP/CRM < 23.0.2 Authenticated RCE via dol_eval_standard() | known not affected: 1 | 2026-06-05T19:14:19+00:00 | Vulnerability · Source |
| CVE-2026-22011 | redhat_vex | CVE-2026-22011 | known not affected: 1 | 2026-06-05T19:14:18+00:00 | Vulnerability · Source |
| CVE-2026-40863 | redhat_vex | PhpSpreadsheet: CPU Denial of Service via Unbounded Row Index in SpreadsheetML XML Reader | known not affected: 1 | 2026-06-05T19:14:18+00:00 | Vulnerability · Source |
| CVE-2026-40827 | redhat_vex | Authenticated SQLi in _RemoveRequest function | known not affected: 1 | 2026-06-05T19:14:16+00:00 | Vulnerability · Source |
| CVE-2026-40926 | redhat_vex | WWBN AVideo Vulnerable to CSRF in Admin JSON Endpoints (Category CRUD, Plugin Update Script) | known not affected: 1 | 2026-06-05T19:14:16+00:00 | Vulnerability · Source |
| CVE-2026-40629 | redhat_vex | BIG-IP SSL/TLS vulnerability | known not affected: 1 | 2026-06-05T19:14:16+00:00 | Vulnerability · Source |
| CVE-2026-40287 | redhat_vex | PraisonAI has RCE via Automatic tools.py Import | known not affected: 1 | 2026-06-05T19:14:15+00:00 | Vulnerability · Source |
| CVE-2026-40845 | redhat_vex | Authenticated SQLi in devices_configuration view | known not affected: 1 | 2026-06-05T19:14:15+00:00 | Vulnerability · Source |
| CVE-2026-40818 | redhat_vex | Unauthenticated SQLi in _mb24confi_getDevice function function | known not affected: 1 | 2026-06-05T19:14:14+00:00 | Vulnerability · Source |
| CVE-2026-40836 | redhat_vex | Authenticated SQLi in inmessage model | known not affected: 1 | 2026-06-05T19:14:14+00:00 | Vulnerability · Source |
| CVE-2026-40458 | redhat_vex | Cross-Site Request Forgery in PAC4J | known not affected: 1 | 2026-06-05T19:14:14+00:00 | Vulnerability · Source |
| CVE-2026-40504 | redhat_vex | Creolabs Gravity < 0.9.6 Heap Buffer Overflow via gravity_vm_exec | known not affected: 1 | 2026-06-05T19:14:13+00:00 | Vulnerability · Source |
| CVE-2026-40900 | redhat_vex | DataEase has SQL Injection via Stacked Queries | known not affected: 1 | 2026-06-05T19:14:13+00:00 | Vulnerability · Source |
| CVE-2026-40423 | redhat_vex | BIG-IP SIP profile vulnerability | known not affected: 1 | 2026-06-05T19:14:13+00:00 | Vulnerability · Source |
| CVE-2026-40621 | redhat_vex | CVE-2026-40621 | known not affected: 1 | 2026-06-05T19:14:13+00:00 | Vulnerability · Source |
| CVE-2026-40108 | redhat_vex | GLPI Vulnerable to Stored XSS in ITIL Costs | known not affected: 1 | 2026-06-05T19:14:12+00:00 | Vulnerability · Source |
| CVE-2026-40027 | redhat_vex | ALEAPP NQ Vault Artifact Parser Path Traversal | known not affected: 1 | 2026-06-05T19:14:12+00:00 | Vulnerability · Source |
| CVE-2026-40162 | redhat_vex | Bugsink affected by authenticated arbitrary file write in artifactbundle/assemble | known not affected: 1 | 2026-06-05T19:14:12+00:00 | Vulnerability · Source |
| CVE-2026-40090 | redhat_vex | Zarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File Write | known not affected: 1 | 2026-06-05T19:14:11+00:00 | Vulnerability · Source |
| CVE-2026-40630 | redhat_vex | SenseLive X3050 Authentication bypass using an alternate path or channel | known not affected: 1 | 2026-06-05T19:14:10+00:00 | Vulnerability · Source |
| CVE-2026-40315 | redhat_vex | PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries | known not affected: 1 | 2026-06-05T19:14:10+00:00 | Vulnerability · Source |
| CVE-2026-40810 | redhat_vex | Unauthenticated SQLi in userinfo Endpoint | known not affected: 1 | 2026-06-05T19:14:10+00:00 | Vulnerability · Source |
| CVE-2026-40823 | redhat_vex | Authenticated SQLi in DevSerialReset function | known not affected: 1 | 2026-06-05T19:14:09+00:00 | Vulnerability · Source |
| CVE-2026-40498 | redhat_vex | FreeScout has Authentication Bypass and Information Disclosure in SystemController via /system/cron | known not affected: 1 | 2026-06-05T19:14:08+00:00 | Vulnerability · Source |
| CVE-2026-40904 | redhat_vex | Chartbrew: Incorrect Access Control in dataset and dataRequest routes via team-scoped permission checks | known not affected: 1 | 2026-06-05T19:14:08+00:00 | Vulnerability · Source |
| CVE-2026-40067 | redhat_vex | BIG-IP APM Vulnerability | known not affected: 1 | 2026-06-05T19:14:07+00:00 | Vulnerability · Source |
| CVE-2026-40247 | redhat_vex | free5gc UDR improper path validation allows unauthenticated access to Traffic Influence Subscriptions | known not affected: 1 | 2026-06-05T19:14:07+00:00 | Vulnerability · Source |
| CVE-2026-40814 | redhat_vex | Unauthenticated SQLi in _mb24confi_getTagAlarm function | known not affected: 1 | 2026-06-05T19:14:06+00:00 | Vulnerability · Source |
| CVE-2026-40841 | redhat_vex | Authenticated SQLi in getProjectTags function | known not affected: 1 | 2026-06-05T19:14:06+00:00 | Vulnerability · Source |
| CVE-2026-40472 | redhat_vex | Hackage package metadata stored XSS vulnerability | known not affected: 1 | 2026-06-05T19:14:06+00:00 | Vulnerability · Source |
| CVE-2026-40931 | redhat_vex | Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing | known not affected: 1 | 2026-06-05T19:14:05+00:00 | Vulnerability · Source |
| CVE-2026-40832 | redhat_vex | Authenticated SQLi in getDevicegroups function | known not affected: 1 | 2026-06-05T19:14:04+00:00 | Vulnerability · Source |
| CVE-2026-40715 | redhat_vex | CVE-2026-40715 | known not affected: 1 | 2026-06-05T19:14:04+00:00 | Vulnerability · Source |
| CVE-2026-40850 | redhat_vex | Unauthenticated SQLi in getAccountData function | known not affected: 1 | 2026-06-05T19:14:04+00:00 | Vulnerability · Source |
| CVE-2026-40436 | redhat_vex | ZTE ZXEDM iEMS product has a password reset vulnerability | known not affected: 1 | 2026-06-05T19:14:03+00:00 | Vulnerability · Source |
| CVE-2026-40876 | redhat_vex | SFTP root escape via prefix-based path validation in goshs | known not affected: 1 | 2026-06-05T19:14:02+00:00 | Vulnerability · Source |
| CVE-2026-40885 | redhat_vex | goshs: Public collaborator feed leaks .goshs ACL credentials and enables unauthorized access | known not affected: 1 | 2026-06-05T19:14:02+00:00 | Vulnerability · Source |
| CVE-2026-40050 | redhat_vex | CrowdStrike LogScale Unauthenticated Path Traversal | known not affected: 1 | 2026-06-05T19:14:02+00:00 | Vulnerability · Source |
| CVE-2026-40849 | redhat_vex | Authenticated SQLi in user_alarmprofile view | known not affected: 1 | 2026-06-05T19:14:01+00:00 | Vulnerability · Source |
| CVE-2026-40867 | redhat_vex | Horilla: Unauthorized Helpdesk Attachment Access via Attachment ID Manipulation | known not affected: 1 | 2026-06-05T19:14:00+00:00 | Vulnerability · Source |
| CVE-2026-40113 | redhat_vex | PraisonAI has an Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars | known not affected: 1 | 2026-06-05T19:14:00+00:00 | Vulnerability · Source |
| CVE-2026-40546 | redhat_vex | Multiple SQL Injections in SOPlanning | known not affected: 1 | 2026-06-05T19:14:00+00:00 | Vulnerability · Source |
| CVE-2026-40843 | redhat_vex | Authenticated SQLi in alarming view | known not affected: 1 | 2026-06-05T19:14:00+00:00 | Vulnerability · Source |
| CVE-2026-40780 | redhat_vex | WordPress BookIt plugin < 2.5.4.1 - Broken Authentication vulnerability | known not affected: 1 | 2026-06-05T19:13:59+00:00 | Vulnerability · Source |
| CVE-2026-40825 | redhat_vex | Authenticated SQLi in accountstatus view | known not affected: 1 | 2026-06-05T19:13:58+00:00 | Vulnerability · Source |