VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298667 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-8827 | redhat_vex | SQL Injection in extension "Address List" (tt_address) | known not affected: 1 | 2026-06-05T19:11:04+00:00 | Vulnerability · Source |
| CVE-2026-8809 | redhat_vex | Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter | known not affected: 1 | 2026-06-05T19:11:03+00:00 | Vulnerability · Source |
| CVE-2026-8854 | redhat_vex | IBM HTTP Server is affected by multiple vulnerabilities | known not affected: 1 | 2026-06-05T19:11:03+00:00 | Vulnerability · Source |
| CVE-2026-8179 | redhat_vex | Multiple vulnerabilities in Aspera applications. | known not affected: 1 | 2026-06-05T19:11:01+00:00 | Vulnerability · Source |
| CVE-2026-8890 | redhat_vex | code100x Mobile API Authentication Bypass via Header Spoofing | known not affected: 1 | 2026-06-05T19:11:01+00:00 | Vulnerability · Source |
| CVE-2026-8197 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via OAuth integration name | known not affected: 1 | 2026-06-05T19:11:00+00:00 | Vulnerability · Source |
| CVE-2026-8137 | redhat_vex | Totolink X5000R formDdns sub_458E40 buffer overflow | known not affected: 1 | 2026-06-05T19:11:00+00:00 | Vulnerability · Source |
| CVE-2026-8359 | redhat_vex | Gladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoS | known not affected: 1 | 2026-06-05T19:11:00+00:00 | Vulnerability · Source |
| CVE-2026-8047 | redhat_vex | Out-of-bounds Write in CODESYS Control | known not affected: 1 | 2026-06-05T19:10:59+00:00 | Vulnerability · Source |
| CVE-2026-8362 | redhat_vex | Gladinet Triofox Stack-based Buffer Overflow in WOSDefaultHttpModule.dll | known not affected: 1 | 2026-06-05T19:10:59+00:00 | Vulnerability · Source |
| CVE-2026-8838 | redhat_vex | Remote Code Execution via eval() Injection in amazon-redshift-python-driver | known not affected: 1 | 2026-06-05T19:10:58+00:00 | Vulnerability · Source |
| CVE-2026-8676 | redhat_vex | CVE-2026-8676 | known not affected: 1 | 2026-06-05T19:10:58+00:00 | Vulnerability · Source |
| CVE-2026-8326 | redhat_vex | Remote Spark SparkView Path Traversal in RDP Drive Redirection leading to RCE | known not affected: 1 | 2026-06-05T19:10:58+00:00 | Vulnerability · Source |
| CVE-2026-8633 | redhat_vex | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins | known not affected: 1 | 2026-06-05T19:10:58+00:00 | Vulnerability · Source |
| CVE-2026-8111 | redhat_vex | CVE-2026-8111 | known not affected: 1 | 2026-06-05T19:10:58+00:00 | Vulnerability · Source |
| CVE-2026-8199 | redhat_vex | Post-auth memory exhaustion via bitwise match expressions | known not affected: 1 | 2026-06-05T19:10:57+00:00 | Vulnerability · Source |
| CVE-2026-8856 | redhat_vex | IBM HTTP Server is affected by multiple vulnerabilities | known not affected: 1 | 2026-06-05T19:10:57+00:00 | Vulnerability · Source |
| CVE-2026-8034 | redhat_vex | Server-side request forgery vulnerability in GitHub Enterprise Server notebook viewer via URL parser confusion | known not affected: 1 | 2026-06-05T19:10:57+00:00 | Vulnerability · Source |
| CVE-2026-8421 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to CSRF on install_package() with conditional token bypass leading to RCE | known not affected: 1 | 2026-06-05T19:10:56+00:00 | Vulnerability · Source |
| CVE-2026-8043 | redhat_vex | CVE-2026-8043 | known not affected: 1 | 2026-06-05T19:10:56+00:00 | Vulnerability · Source |
| CVE-2026-8843 | redhat_vex | Calling createIndex with certain index types can crash mongod | known not affected: 1 | 2026-06-05T19:10:55+00:00 | Vulnerability · Source |
| CVE-2026-8069 | redhat_vex | PredatorSense V3: Local Privilege Escalation (LPE) vulnerability | known not affected: 1 | 2026-06-05T19:10:55+00:00 | Vulnerability · Source |
| CVE-2026-8159 | redhat_vex | multiparty vulnerable to ReDoS via filename parsing | known not affected: 1 | 2026-06-05T19:10:55+00:00 | Vulnerability · Source |
| CVE-2026-8606 | redhat_vex | Server-Side Request Forgery in GitHub Enterprise Server via Advisory Package URL Endpoint | known not affected: 1 | 2026-06-05T19:10:54+00:00 | Vulnerability · Source |
| CVE-2026-8426 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to CSRF on prepare_remote_upgrade() leading to one-request RCE via package overwrite | known not affected: 1 | 2026-06-05T19:10:54+00:00 | Vulnerability · Source |
| CVE-2026-8654 | redhat_vex | CVE-2026-8654 | known not affected: 1 | 2026-06-05T19:10:54+00:00 | Vulnerability · Source |
| CVE-2026-8915 | redhat_vex | CVE-2026-8915 | known not affected: 1 | 2026-06-05T19:10:54+00:00 | Vulnerability · Source |
| CVE-2026-8363 | redhat_vex | Gladinet Triofox Stack-based Buffer Overflow in WOSDeviceDropFolder.dll | known not affected: 1 | 2026-06-05T19:10:54+00:00 | Vulnerability · Source |
| CVE-2026-8912 | redhat_vex | Contest Gallery <= 28.1.6 - Unauthenticated SQL Injection | known not affected: 1 | 2026-06-05T19:10:53+00:00 | Vulnerability · Source |
| CVE-2026-8138 | redhat_vex | Tenda CX12L SetPptpServerCfg” formSetPPTPServer stack-based overflow | known not affected: 1 | 2026-06-05T19:10:53+00:00 | Vulnerability · Source |
| CVE-2026-8686 | redhat_vex | DoS from MQTT v5.0 Deserialization Fault in core MQTT | known not affected: 1 | 2026-06-05T19:10:53+00:00 | Vulnerability · Source |
| CVE-2026-8813 | redhat_vex | CVE-2026-8813 | known not affected: 1 | 2026-06-05T19:10:53+00:00 | Vulnerability · Source |
| CVE-2026-8732 | redhat_vex | WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action | known not affected: 1 | 2026-06-05T19:10:52+00:00 | Vulnerability · Source |
| CVE-2026-8417 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to CSRF in do_update() in the package update controller | known not affected: 1 | 2026-06-05T19:10:51+00:00 | Vulnerability · Source |
| CVE-2026-8992 | redhat_vex | CVE-2026-8992 | known not affected: 1 | 2026-06-05T19:10:50+00:00 | Vulnerability · Source |
| CVE-2026-8602 | redhat_vex | Missing authentication for critical function in ScadaBR | known not affected: 1 | 2026-06-05T19:10:48+00:00 | Vulnerability · Source |
| CVE-2026-8206 | redhat_vex | Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password' | known not affected: 1 | 2026-06-05T19:10:48+00:00 | Vulnerability · Source |
| CVE-2026-8143 | redhat_vex | Booking Calendar – Event Calendar <= 2.1.6 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters | known not affected: 1 | 2026-06-05T19:10:47+00:00 | Vulnerability · Source |
| CVE-2026-8161 | redhat_vex | multiparty vulnerable to Denial of Service via Prototype Pollution leading to Uncaught Exception | known not affected: 1 | 2026-06-05T19:10:47+00:00 | Vulnerability · Source |
| CVE-2026-8620 | redhat_vex | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins | known not affected: 1 | 2026-06-05T19:10:46+00:00 | Vulnerability · Source |
| CVE-2026-8431 | redhat_vex | Ops Manager RCE via webhook body | known not affected: 1 | 2026-06-05T19:10:45+00:00 | Vulnerability · Source |
| CVE-2026-8134 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to Authenticated RCE via Composer customTemplate Path Traversal leading to PHP File Inclusion | known not affected: 1 | 2026-06-05T19:10:42+00:00 | Vulnerability · Source |
| CVE-2026-8350 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to missing authorization in the bulk_user_assignment.php which can lead to privilege escalation to Administrative Group | known not affected: 1 | 2026-06-05T19:10:42+00:00 | Vulnerability · Source |
| CVE-2026-8178 | redhat_vex | Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver | known not affected: 1 | 2026-06-05T19:10:40+00:00 | Vulnerability · Source |
| CVE-2026-8466 | redhat_vex | Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy | known not affected: 1 | 2026-06-05T19:10:40+00:00 | Vulnerability · Source |
| CVE-2026-8679 | redhat_vex | AudioIgniter Music Player <= 2.0.2 - Unauthenticated Insecure Direct Object Reference to 'audioigniter_playlist_id' Parameter | known not affected: 1 | 2026-06-05T19:10:40+00:00 | Vulnerability · Source |
| CVE-2026-8727 | redhat_vex | Remote Code Execution in extension "Site Crawler" (crawler) | known not affected: 1 | 2026-06-05T19:10:40+00:00 | Vulnerability · Source |
| CVE-2026-8835 | redhat_vex | IBM HTTP Server is affected by multiple vulnerabilities | known not affected: 1 | 2026-06-05T19:10:40+00:00 | Vulnerability · Source |
| CVE-2026-8697 | redhat_vex | Improper Authentication Rate Limiting on TP-Link's Archer C64 | known not affected: 1 | 2026-06-05T19:10:40+00:00 | Vulnerability · Source |
| CVE-2026-8181 | redhat_vex | Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover | known not affected: 1 | 2026-06-05T19:10:39+00:00 | Vulnerability · Source |