VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298659 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-40870 | redhat_vex | Decidim's comments API allows access to all commentable resources | known not affected: 1 | 2026-06-05T19:13:58+00:00 | Vulnerability · Source |
| CVE-2026-40636 | redhat_vex | CVE-2026-40636 | known not affected: 1 | 2026-06-05T19:13:58+00:00 | Vulnerability · Source |
| CVE-2026-40834 | redhat_vex | Authenticated SQLi in saveDashboardLayout function | known not affected: 1 | 2026-06-05T19:13:57+00:00 | Vulnerability · Source |
| CVE-2026-40591 | redhat_vex | FreeScout: Improper Authorization in Phone Conversation Creation Enables Cross-Mailbox Hidden Customer Modification | known not affected: 1 | 2026-06-05T19:13:56+00:00 | Vulnerability · Source |
| CVE-2026-40852 | redhat_vex | Command injection via malicious configuration | known not affected: 1 | 2026-06-05T19:13:56+00:00 | Vulnerability · Source |
| CVE-2026-40618 | redhat_vex | BIG-IP SSL/TLS vulnerability | known not affected: 1 | 2026-06-05T19:13:56+00:00 | Vulnerability · Source |
| CVE-2026-40933 | redhat_vex | Flowise: Authenticated RCE Via MCP Adapters | known not affected: 1 | 2026-06-05T19:13:55+00:00 | Vulnerability · Source |
| CVE-2026-40816 | redhat_vex | Unauthenticated SQLi in _mb24confi_getTagAlarm function | known not affected: 1 | 2026-06-05T19:13:55+00:00 | Vulnerability · Source |
| CVE-2026-40043 | redhat_vex | Pachno 1.0.6 Authentication Bypass via runSwitchUser() | known not affected: 1 | 2026-06-05T19:13:54+00:00 | Vulnerability · Source |
| CVE-2026-40797 | redhat_vex | WordPress WebinarIgnition plugin <= 4.08.253 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:13:54+00:00 | Vulnerability · Source |
| CVE-2026-40599 | redhat_vex | ClearanceKit: Ad-hoc signed binaries can spoof Apple process identities in the global allowlist | known not affected: 1 | 2026-06-05T19:13:54+00:00 | Vulnerability · Source |
| CVE-2026-40322 | redhat_vex | SiYuan: Mermaid `javascript:` Link Injection Leads to Stored XSS and Electron RCE | known not affected: 1 | 2026-06-05T19:13:54+00:00 | Vulnerability · Source |
| CVE-2026-40869 | redhat_vex | Decidim amendments can be accepted or rejected by anyone | known not affected: 1 | 2026-06-05T19:13:53+00:00 | Vulnerability · Source |
| CVE-2026-40520 | redhat_vex | FreePBX api module Command Injection via GraphQL | known not affected: 1 | 2026-06-05T19:13:53+00:00 | Vulnerability · Source |
| CVE-2026-40698 | redhat_vex | iControl REST and TMSH vulnerability | known not affected: 1 | 2026-06-05T19:13:52+00:00 | Vulnerability · Source |
| CVE-2026-40061 | redhat_vex | iControl REST and tmsh vulnerability | known not affected: 1 | 2026-06-05T19:13:52+00:00 | Vulnerability · Source |
| CVE-2026-40313 | redhat_vex | PraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential Persistence | known not affected: 1 | 2026-06-05T19:13:51+00:00 | Vulnerability · Source |
| CVE-2026-40502 | redhat_vex | OpenHarness Remote Administrative Command Injection via Gateway Handler | known not affected: 1 | 2026-06-05T19:13:51+00:00 | Vulnerability · Source |
| CVE-2026-40887 | redhat_vex | @vendure/core has a SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:13:50+00:00 | Vulnerability · Source |
| CVE-2026-40281 | redhat_vex | Gotenberg vulnerable to argument injection via newlines in ExifTool metadata values | known not affected: 1 | 2026-06-05T19:13:50+00:00 | Vulnerability · Source |
| CVE-2026-40331 | redhat_vex | Masa CMS unauthenticated SQL injection via altTable parameter in JSON API | known not affected: 1 | 2026-06-05T19:13:50+00:00 | Vulnerability · Source |
| CVE-2026-40245 | redhat_vex | Free5GC: UDR nudr-dr influenceData/subs-to-notify leaks SUPI in error response body without authentication | known not affected: 1 | 2026-06-05T19:13:49+00:00 | Vulnerability · Source |
| CVE-2026-40902 | redhat_vex | PhpSpreadsheet: CPU Denial of Service via Unbounded Row Number in XLSX Row Dimensions | known not affected: 1 | 2026-06-05T19:13:48+00:00 | Vulnerability · Source |
| CVE-2026-40911 | redhat_vex | WWBN AVideo YPTSocket WebSocket Broadcast Relay Leads to Unauthenticated Cross-User JavaScript Execution via Client-Side eval() Sinks | known not affected: 1 | 2026-06-05T19:13:48+00:00 | Vulnerability · Source |
| CVE-2026-40344 | redhat_vex | MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploads | known not affected: 1 | 2026-06-05T19:13:48+00:00 | Vulnerability · Source |
| CVE-2026-40461 | redhat_vex | Anviz Products Missing Authentication for Critical Function | known not affected: 1 | 2026-06-05T19:13:47+00:00 | Vulnerability · Source |
| CVE-2026-40623 | redhat_vex | SenseLive X3050 Missing Authorization | known not affected: 1 | 2026-06-05T19:13:46+00:00 | Vulnerability · Source |
| CVE-2026-40308 | redhat_vex | My Calendar: Unauthenticated Information Disclosure (IDOR) via Multisite switch_to_blog | known not affected: 1 | 2026-06-05T19:13:45+00:00 | Vulnerability · Source |
| CVE-2026-40830 | redhat_vex | Authenticated SQLi in UpdateParam function | known not affected: 1 | 2026-06-05T19:13:45+00:00 | Vulnerability · Source |
| CVE-2026-40470 | redhat_vex | Hackage package and doc upload stored XSS vulnerability | known not affected: 1 | 2026-06-05T19:13:44+00:00 | Vulnerability · Source |
| CVE-2026-40551 | redhat_vex | Use of Client-Side Authentication in mpGabinet | known not affected: 1 | 2026-06-05T19:13:44+00:00 | Vulnerability · Source |
| CVE-2026-40434 | redhat_vex | Anviz CrossChex Standard Improper Verification of Source of a Communication Channel | known not affected: 1 | 2026-06-05T19:13:44+00:00 | Vulnerability · Source |
| CVE-2026-40812 | redhat_vex | Unauthenticated SQLi in getLiveValues function | known not affected: 1 | 2026-06-05T19:13:44+00:00 | Vulnerability · Source |
| CVE-2026-40092 | redhat_vex | nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT | known not affected: 1 | 2026-06-05T19:13:43+00:00 | Vulnerability · Source |
| CVE-2026-40595 | redhat_vex | Chartbrew: Incorrect Access Control in public chart and export routes via missing onReport and SharePolicy checks | known not affected: 1 | 2026-06-05T19:13:43+00:00 | Vulnerability · Source |
| CVE-2026-40173 | redhat_vex | Dgraph: Unauthenticated pprof endpoint leaks admin auth token | known not affected: 1 | 2026-06-05T19:13:43+00:00 | Vulnerability · Source |
| CVE-2026-40964 | redhat_vex | CVE-2026-40964 | known not affected: 1 | 2026-06-05T19:13:43+00:00 | Vulnerability · Source |
| CVE-2026-40838 | redhat_vex | Authenticated SQLi in getDeviceScalings function | known not affected: 1 | 2026-06-05T19:13:42+00:00 | Vulnerability · Source |
| CVE-2026-40496 | redhat_vex | FreeScout has Predictable Attachment Token that Allows Unauthenticated Private File Download via Brute Force | known not affected: 1 | 2026-06-05T19:13:42+00:00 | Vulnerability · Source |
| CVE-2026-40829 | redhat_vex | Authenticated SQLi in UpdateParam function | known not affected: 1 | 2026-06-05T19:13:41+00:00 | Vulnerability · Source |
| CVE-2026-40289 | redhat_vex | PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions | known not affected: 1 | 2026-06-05T19:13:41+00:00 | Vulnerability · Source |
| CVE-2026-40937 | redhat_vex | RustFS missing admin authorization on notification target endpoints, which allows unauthenticated configuration of event webhooks | known not affected: 1 | 2026-06-05T19:13:41+00:00 | Vulnerability · Source |
| CVE-2026-40586 | redhat_vex | blueprintUE: Login Endpoint Has No Rate Limiting, Lockout, or Brute-Force Protection | known not affected: 1 | 2026-06-05T19:13:40+00:00 | Vulnerability · Source |
| CVE-2026-40865 | redhat_vex | Horilla: Insecure Direct Object Reference at `/employee/view-file/<int:id> | known not affected: 1 | 2026-06-05T19:13:40+00:00 | Vulnerability · Source |
| CVE-2026-40946 | redhat_vex | Oxia: OIDC token audience validation bypass via SkipClientIDCheck | known not affected: 1 | 2026-06-05T19:13:39+00:00 | Vulnerability · Source |
| CVE-2026-40847 | redhat_vex | Authenticated SQLi in system_tag view | known not affected: 1 | 2026-06-05T19:13:38+00:00 | Vulnerability · Source |
| CVE-2026-40568 | redhat_vex | FreeScout Vulnerable to XSS via Mailbox Signature Due to Incomplete HTML Sanitization | known not affected: 1 | 2026-06-05T19:13:38+00:00 | Vulnerability · Source |
| CVE-2026-40620 | redhat_vex | SenseLive X3050 Missing authentication for critical function | known not affected: 1 | 2026-06-05T19:13:37+00:00 | Vulnerability · Source |
| CVE-2026-40835 | redhat_vex | Authenticated SQLi in saveObjectFromData function | known not affected: 1 | 2026-06-05T19:13:37+00:00 | Vulnerability · Source |
| CVE-2026-40871 | redhat_vex | mailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via API | known not affected: 1 | 2026-06-05T19:13:36+00:00 | Vulnerability · Source |