VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298659 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-40817 | redhat_vex | Unauthenticated SQLi in getAlarmProfiles function | known not affected: 1 | 2026-06-05T19:13:36+00:00 | Vulnerability · Source |
| CVE-2026-40619 | redhat_vex | CVE-2026-40619 | known not affected: 1 | 2026-06-05T19:13:35+00:00 | Vulnerability · Source |
| CVE-2026-40583 | redhat_vex | UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt | known not affected: 1 | 2026-06-05T19:13:34+00:00 | Vulnerability · Source |
| CVE-2026-40925 | redhat_vex | WWBN AVideo has CSRF in configurationUpdate.json.php Enables Full Site Configuration Takeover Including Encoder URL and SMTP Credentials | known not affected: 1 | 2026-06-05T19:13:34+00:00 | Vulnerability · Source |
| CVE-2026-40088 | redhat_vex | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai | known not affected: 1 | 2026-06-05T19:13:34+00:00 | Vulnerability · Source |
| CVE-2026-40880 | redhat_vex | Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip Blocks | known not affected: 1 | 2026-06-05T19:13:34+00:00 | Vulnerability · Source |
| CVE-2026-40943 | redhat_vex | Oxia: Server crash via race condition in session heartbeat handling | known not affected: 1 | 2026-06-05T19:13:34+00:00 | Vulnerability · Source |
| CVE-2026-40844 | redhat_vex | Authenticated SQLi in dashboard view | known not affected: 1 | 2026-06-05T19:13:33+00:00 | Vulnerability · Source |
| CVE-2026-40978 | redhat_vex | CVE-2026-40978 | known not affected: 1 | 2026-06-05T19:13:32+00:00 | Vulnerability · Source |
| CVE-2026-40503 | redhat_vex | OpenHarness Path Traversal Information Disclosure via /memory show | known not affected: 1 | 2026-06-05T19:13:32+00:00 | Vulnerability · Source |
| CVE-2026-40107 | redhat_vex | SiYuan Affected by Zero-Click NTLM Hash Theft and Blind SSRF via Mermaid Diagram Rendering | known not affected: 1 | 2026-06-05T19:13:32+00:00 | Vulnerability · Source |
| CVE-2026-40062 | redhat_vex | CVE-2026-40062 | known not affected: 1 | 2026-06-05T19:13:32+00:00 | Vulnerability · Source |
| CVE-2026-40471 | redhat_vex | Hackage CSRF vulnerability | known not affected: 1 | 2026-06-05T19:13:31+00:00 | Vulnerability · Source |
| CVE-2026-40699 | redhat_vex | BIG-IP Configuration utility vulnerability | known not affected: 1 | 2026-06-05T19:13:31+00:00 | Vulnerability · Source |
| CVE-2026-40075 | redhat_vex | OpenMRS Core arbitrary file read via path traversal in ModuleResourcesServlet | known not affected: 1 | 2026-06-05T19:13:30+00:00 | Vulnerability · Source |
| CVE-2026-40831 | redhat_vex | Authenticated SQLi in Easy View | known not affected: 1 | 2026-06-05T19:13:30+00:00 | Vulnerability · Source |
| CVE-2026-40516 | redhat_vex | OpenHarness SSRF via web_fetch and web_search | known not affected: 1 | 2026-06-05T19:13:30+00:00 | Vulnerability · Source |
| CVE-2026-40291 | redhat_vex | Chamilo LMS has Privilege Escalation via API User Role Modification | known not affected: 1 | 2026-06-05T19:13:29+00:00 | Vulnerability · Source |
| CVE-2026-40813 | redhat_vex | Unauthenticated SQLi in getLiveValues | known not affected: 1 | 2026-06-05T19:13:29+00:00 | Vulnerability · Source |
| CVE-2026-40066 | redhat_vex | Anviz Products Download of Code Without Integrity Check | known not affected: 1 | 2026-06-05T19:13:28+00:00 | Vulnerability · Source |
| CVE-2026-40543 | redhat_vex | Missing Authorization in SOPlanning | known not affected: 1 | 2026-06-05T19:13:28+00:00 | Vulnerability · Source |
| CVE-2026-40462 | redhat_vex | iControl REST and tmsh vulnerability | known not affected: 1 | 2026-06-05T19:13:27+00:00 | Vulnerability · Source |
| CVE-2026-40569 | redhat_vex | FreeScout's Mass Assignment in Mailbox Connection Settings Enables Silent Email Exfiltration | known not affected: 1 | 2026-06-05T19:13:26+00:00 | Vulnerability · Source |
| CVE-2026-40903 | redhat_vex | Goshs - ArtiPACKED Vulnerability – GitHub Actions Credential Persistence | known not affected: 1 | 2026-06-05T19:13:26+00:00 | Vulnerability · Source |
| CVE-2026-40165 | redhat_vex | authentik: SAML NameID XML Comment Injection Enables Authentication Bypass via Identifier Truncation | known not affected: 1 | 2026-06-05T19:13:26+00:00 | Vulnerability · Source |
| CVE-2026-40840 | redhat_vex | Authenticated SQLi in VerifyCreateLicences function | known not affected: 1 | 2026-06-05T19:13:26+00:00 | Vulnerability · Source |
| CVE-2026-40866 | redhat_vex | Horilla: Unauthorized Document Overwrite via File Upload Endpoint | known not affected: 1 | 2026-06-05T19:13:25+00:00 | Vulnerability · Source |
| CVE-2026-40488 | redhat_vex | OpenMage LTS has Customer File Upload Extension Blocklist Bypass that Leads to Remote Code Execution | known not affected: 1 | 2026-06-05T19:13:24+00:00 | Vulnerability · Source |
| CVE-2026-40848 | redhat_vex | Authenticated SQLi in tag view | known not affected: 1 | 2026-06-05T19:13:24+00:00 | Vulnerability · Source |
| CVE-2026-40965 | redhat_vex | CVE-2026-40965 | known not affected: 1 | 2026-06-05T19:13:24+00:00 | Vulnerability · Source |
| CVE-2026-40497 | redhat_vex | FreeScout Vulnerable to CSS Injection via Stored Style Tag in Mailbox Signature (CSRF Token Exfiltration) | known not affected: 1 | 2026-06-05T19:13:23+00:00 | Vulnerability · Source |
| CVE-2026-40884 | redhat_vex | goshs: Empty-username SFTP password authentication bypass in goshs | known not affected: 1 | 2026-06-05T19:13:23+00:00 | Vulnerability · Source |
| CVE-2026-40839 | redhat_vex | Authenticated SQLi in getComponentScalings function | known not affected: 1 | 2026-06-05T19:13:22+00:00 | Vulnerability · Source |
| CVE-2026-40875 | redhat_vex | mailcow: dockerized vulnerable to stored XSS in user login history real_rip | known not affected: 1 | 2026-06-05T19:13:22+00:00 | Vulnerability · Source |
| CVE-2026-40851 | redhat_vex | Command injection via USB | known not affected: 1 | 2026-06-05T19:13:22+00:00 | Vulnerability · Source |
| CVE-2026-40596 | redhat_vex | MantisBT is vulnerable to XSS and potential account takeover via user font family preference update | known not affected: 1 | 2026-06-05T19:13:22+00:00 | Vulnerability · Source |
| CVE-2026-40893 | redhat_vex | Gotenberg: ExifTool Dangerous Tag Blocklist Bypass via Group-Prefixed Tag Names Allows Arbitrary File Rename and Move | known not affected: 1 | 2026-06-05T19:13:22+00:00 | Vulnerability · Source |
| CVE-2026-40833 | redhat_vex | Authenticated SQLi in saveDashboardLayout function | known not affected: 1 | 2026-06-05T19:13:21+00:00 | Vulnerability · Source |
| CVE-2026-40815 | redhat_vex | Unauthenticated SQLi in _mb24api_getUserAccount function | known not affected: 1 | 2026-06-05T19:13:21+00:00 | Vulnerability · Source |
| CVE-2026-40950 | redhat_vex | Buffer overflow in the Secure Access server prior to 14.50 | known not affected: 1 | 2026-06-05T19:13:20+00:00 | Vulnerability · Source |
| CVE-2026-40158 | redhat_vex | PraisonAI has Improper Control of Generation of Code ('Code Injection') and Protection Mechanism Failure in praisonai | known not affected: 1 | 2026-06-05T19:13:20+00:00 | Vulnerability · Source |
| CVE-2026-40518 | redhat_vex | ByteDance DeerFlow Path Traversal and Arbitrary File Write via Bootstrap Mode | known not affected: 1 | 2026-06-05T19:13:20+00:00 | Vulnerability · Source |
| CVE-2026-40842 | redhat_vex | Authenticated SQLi in getWidgetTags function | known not affected: 1 | 2026-06-05T19:13:19+00:00 | Vulnerability · Source |
| CVE-2026-40824 | redhat_vex | Authenticated SQLi in accountstatus view | known not affected: 1 | 2026-06-05T19:13:19+00:00 | Vulnerability · Source |
| CVE-2026-40905 | redhat_vex | LinkAce: Password Reset Poisoning via X-Forwarded-Host Header Injection Leading to Account Takeover | known not affected: 1 | 2026-06-05T19:13:19+00:00 | Vulnerability · Source |
| CVE-2026-40383 | redhat_vex | Joomla! Core - [20260509] - LFI in HTMLView layout parameter | known not affected: 1 | 2026-06-05T19:13:18+00:00 | Vulnerability · Source |
| CVE-2026-40068 | redhat_vex | Claude Code arbitrary code execution via git worktree commondir trust dialog bypass | known not affected: 1 | 2026-06-05T19:13:17+00:00 | Vulnerability · Source |
| CVE-2026-40316 | redhat_vex | OWASP BLT has RCE in Github Actions via untrusted Django model execution in workflow | known not affected: 1 | 2026-06-05T19:13:17+00:00 | Vulnerability · Source |
| CVE-2026-40213 | redhat_vex | CVE-2026-40213 | known not affected: 1 | 2026-06-05T19:13:16+00:00 | Vulnerability · Source |
| CVE-2026-40330 | redhat_vex | Masa CMS SQL injection via sortDirection parameter in beanFeed | known not affected: 1 | 2026-06-05T19:13:16+00:00 | Vulnerability · Source |