VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298659 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-39334 | redhat_vex | ChurchCRM has a Blind SQL injection in SettingsIndividual.php | known not affected: 1 | 2026-06-05T19:12:27+00:00 | Vulnerability · Source |
| CVE-2026-39550 | redhat_vex | WordPress Aperitif theme <= 1.6 - PHP Object Injection vulnerability | known not affected: 1 | 2026-06-05T19:12:26+00:00 | Vulnerability · Source |
| CVE-2026-39343 | redhat_vex | ChurchCRM has a SQL Injection in Event Type Editor (Admin) | known not affected: 1 | 2026-06-05T19:12:26+00:00 | Vulnerability · Source |
| CVE-2026-0539 | redhat_vex | Local Privilege Escalation in pcvisit service client | known not affected: 1 | 2026-06-05T19:12:25+00:00 | Vulnerability · Source |
| CVE-2026-0856 | redhat_vex | CVE-2026-0856 | known not affected: 1 | 2026-06-05T19:12:24+00:00 | Vulnerability · Source |
| CVE-2026-0207 | redhat_vex | Sensitive Information Logging Vulnerability in FlashBlade | known not affected: 1 | 2026-06-05T19:12:24+00:00 | Vulnerability · Source |
| CVE-2026-0072 | redhat_vex | CVE-2026-0072 | known not affected: 1 | 2026-06-05T19:12:24+00:00 | Vulnerability · Source |
| CVE-2026-0263 | redhat_vex | PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing | known not affected: 1 | 2026-06-05T19:12:23+00:00 | Vulnerability · Source |
| CVE-2026-0983 | redhat_vex | Denial of service vulnerability in M-Files Server | known not affected: 1 | 2026-06-05T19:12:23+00:00 | Vulnerability · Source |
| CVE-2026-0237 | redhat_vex | Prisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass | known not affected: 1 | 2026-06-05T19:12:22+00:00 | Vulnerability · Source |
| CVE-2026-0826 | redhat_vex | Poly Voice – Possible Remote Control of Certain Poly Devices | known not affected: 1 | 2026-06-05T19:12:22+00:00 | Vulnerability · Source |
| CVE-2026-0611 | redhat_vex | Spacelabs Healthcare Sentinel 10.5.x < 11.6.0 Unauthenticated RCE via .NET Remoting | known not affected: 1 | 2026-06-05T19:12:22+00:00 | Vulnerability · Source |
| CVE-2026-26083 | redhat_vex | CVE-2026-26083 | known not affected: 1 | 2026-06-05T19:12:22+00:00 | Vulnerability · Source |
| CVE-2026-26289 | redhat_vex | Subnet Solutions PowerSYSTEM Center Incorrect Authorization | known not affected: 1 | 2026-06-05T19:12:21+00:00 | Vulnerability · Source |
| CVE-2026-26210 | redhat_vex | KTransformers Unsafe Deserialization RCE via balance_serve | known not affected: 1 | 2026-06-05T19:12:20+00:00 | Vulnerability · Source |
| CVE-2026-26354 | redhat_vex | CVE-2026-26354 | known not affected: 1 | 2026-06-05T19:12:20+00:00 | Vulnerability · Source |
| CVE-2026-26062 | redhat_vex | Fleet server may terminate unexpectedly when handling certain gRPC requests | known not affected: 1 | 2026-06-05T19:12:20+00:00 | Vulnerability · Source |
| CVE-2026-44184 | redhat_vex | Cleanuparr: Reflective CORS combined with trusted-network auth allows cross-origin admin API reads | known not affected: 1 | 2026-06-05T19:12:19+00:00 | Vulnerability · Source |
| CVE-2026-44706 | redhat_vex | Chatwoot: SQL Injection in Conversation/Contact Filter API via Custom Attribute Values | known not affected: 1 | 2026-06-05T19:12:18+00:00 | Vulnerability · Source |
| CVE-2026-44364 | redhat_vex | misp-modules website - Missing CSRF protection in the website home blueprint | known not affected: 1 | 2026-06-05T19:12:17+00:00 | Vulnerability · Source |
| CVE-2026-44328 | redhat_vex | free5GC: SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating | known not affected: 1 | 2026-06-05T19:12:17+00:00 | Vulnerability · Source |
| CVE-2026-44643 | redhat_vex | Angular Expressions - Remote Code Execution using filters | known not affected: 1 | 2026-06-05T19:12:17+00:00 | Vulnerability · Source |
| CVE-2026-44418 | redhat_vex | Incomplete fix for CVE-2026-35184: SQL Injection in phili67/ecclesiacrm | known not affected: 1 | 2026-06-05T19:12:16+00:00 | Vulnerability · Source |
| CVE-2026-44850 | redhat_vex | Portainer: Bind-mount restriction bypass via HostConfig.Mounts | known not affected: 1 | 2026-06-05T19:12:16+00:00 | Vulnerability · Source |
| CVE-2026-44238 | redhat_vex | FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reports | known not affected: 1 | 2026-06-05T19:12:15+00:00 | Vulnerability · Source |
| CVE-2026-44849 | redhat_vex | Portainer: Endpoint security bypass via Swarm service create/update | known not affected: 1 | 2026-06-05T19:12:14+00:00 | Vulnerability · Source |
| CVE-2026-44212 | redhat_vex | PrestaShop: Stored XSS executable in customer service view | known not affected: 1 | 2026-06-05T19:12:14+00:00 | Vulnerability · Source |
| CVE-2026-44320 | redhat_vex | free5GC: NEF nnef-callback route group is unauthenticated; forged callback requests are accepted into the processing path | known not affected: 1 | 2026-06-05T19:12:14+00:00 | Vulnerability · Source |
| CVE-2026-44669 | redhat_vex | Faction: Stored XSS in Assessment Attachment Filename Preview Rendering | known not affected: 1 | 2026-06-05T19:12:13+00:00 | Vulnerability · Source |
| CVE-2026-44522 | redhat_vex | Note Mark: Arbitrary File Write via Path Traversal in Asset Names Leading to Remote Code Execution | known not affected: 1 | 2026-06-05T19:12:12+00:00 | Vulnerability · Source |
| CVE-2026-44612 | redhat_vex | CVE-2026-44612 | known not affected: 1 | 2026-06-05T19:12:12+00:00 | Vulnerability · Source |
| CVE-2026-44711 | redhat_vex | pam_usb: Symlink attacks on pad directory and pad files enable authentication bypass and root file corruption | known not affected: 1 | 2026-06-05T19:12:10+00:00 | Vulnerability · Source |
| CVE-2026-44315 | redhat_vex | free5GC: NEF 3gpp-pfd-management API is unauthenticated; forged bearer tokens can create, read, and delete PFD transactions | known not affected: 1 | 2026-06-05T19:12:10+00:00 | Vulnerability · Source |
| CVE-2026-44988 | redhat_vex | LibVNCClient Tight Gradient decoding allows malicious server-triggered heap/stack OOB writes | known not affected: 1 | 2026-06-05T19:12:10+00:00 | Vulnerability · Source |
| CVE-2026-44377 | redhat_vex | CubeCart: Server-Side Template Injection (SSTI) in Smarty Templates leading to RCE | known not affected: 1 | 2026-06-05T19:12:09+00:00 | Vulnerability · Source |
| CVE-2026-44971 | redhat_vex | GuardDog: Blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration | known not affected: 1 | 2026-06-05T19:12:08+00:00 | Vulnerability · Source |
| CVE-2026-44962 | redhat_vex | CVE-2026-44962 | known not affected: 1 | 2026-06-05T19:12:07+00:00 | Vulnerability · Source |
| CVE-2026-44881 | redhat_vex | Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update | known not affected: 1 | 2026-06-05T19:12:07+00:00 | Vulnerability · Source |
| CVE-2026-44449 | redhat_vex | Lumiverse: SMB `exists()` basename injection via smbclient `!cmd` escape | known not affected: 1 | 2026-06-05T19:12:07+00:00 | Vulnerability · Source |
| CVE-2026-44281 | redhat_vex | GLPI vulnerable to unauthorized reading of a specific asset object | known not affected: 1 | 2026-06-05T19:12:05+00:00 | Vulnerability · Source |
| CVE-2026-44548 | redhat_vex | ChurchCRM: CSRF via legacy GET-delete pages (FundRaiserDelete.php, PropertyTypeDelete.php, NoteDelete.php) | known not affected: 1 | 2026-06-05T19:12:05+00:00 | Vulnerability · Source |
| CVE-2026-44641 | redhat_vex | Microsoft APM: plugin.json component paths escape plugin root and copy arbitrary host files during install | known not affected: 1 | 2026-06-05T19:12:05+00:00 | Vulnerability · Source |
| CVE-2026-44326 | redhat_vex | free5GC: NEF 3gpp-traffic-influence API is unauthenticated; missing or forged bearer tokens can create, read, patch, and delete subscriptions | known not affected: 1 | 2026-06-05T19:12:04+00:00 | Vulnerability · Source |
| CVE-2026-44461 | redhat_vex | Zed: Remote Command Injection via Unquoted Environment Variable Keys (SSH / WSL Remote) | known not affected: 1 | 2026-06-05T19:12:04+00:00 | Vulnerability · Source |
| CVE-2026-44830 | redhat_vex | Empty API_TOKEN disables authentication on network-reachable HTTP/SSE transport | known not affected: 1 | 2026-06-05T19:12:03+00:00 | Vulnerability · Source |
| CVE-2026-44335 | redhat_vex | SSRF bypass in PraisonAI | known not affected: 1 | 2026-06-05T19:12:02+00:00 | Vulnerability · Source |
| CVE-2026-44470 | redhat_vex | Claude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService | known not affected: 1 | 2026-06-05T19:12:02+00:00 | Vulnerability · Source |
| CVE-2026-44650 | redhat_vex | SillyTavern: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | known not affected: 1 | 2026-06-05T19:12:02+00:00 | Vulnerability · Source |
| CVE-2026-44586 | redhat_vex | SiYuan: Bazaar marketplace renders unescaped package author metadata, allowing XSS and Electron code execution | known not affected: 1 | 2026-06-05T19:12:01+00:00 | Vulnerability · Source |
| CVE-2026-44469 | redhat_vex | Incorrect Default Permissions in CODESYS Development System | known not affected: 1 | 2026-06-05T19:12:00+00:00 | Vulnerability · Source |