VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298667 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-8073 | redhat_vex | Kirki <= 6.0.6 - Unauthenticated Limited Arbitrary File Read and Deletion via downloadZIP | known not affected: 1 | 2026-06-05T19:10:38+00:00 | Vulnerability · Source |
| CVE-2026-8370 | redhat_vex | Automic Automation Agent Unix privilege escalation | known not affected: 1 | 2026-06-05T19:10:38+00:00 | Vulnerability · Source |
| CVE-2026-8037 | redhat_vex | OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF | known not affected: 1 | 2026-06-05T19:10:38+00:00 | Vulnerability · Source |
| CVE-2026-8604 | redhat_vex | Cross-Site request forgery (CSRF) in ScadaBR | known not affected: 1 | 2026-06-05T19:10:38+00:00 | Vulnerability · Source |
| CVE-2026-8361 | redhat_vex | Gladinet Triofox Path Traversal in WOSDefaultHttpModule.dll | known not affected: 1 | 2026-06-05T19:10:38+00:00 | Vulnerability · Source |
| CVE-2026-8046 | redhat_vex | Incorrect Authorization in CODESYS Control | known not affected: 1 | 2026-06-05T19:10:38+00:00 | Vulnerability · Source |
| CVE-2026-8936 | redhat_vex | Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM | known not affected: 1 | 2026-06-05T19:10:37+00:00 | Vulnerability · Source |
| CVE-2026-8110 | redhat_vex | CVE-2026-8110 | known not affected: 1 | 2026-06-05T19:10:37+00:00 | Vulnerability · Source |
| CVE-2026-8598 | redhat_vex | Unauthenticated Export Service in ZKTeco CCTV Cameras | known not affected: 1 | 2026-06-05T19:10:36+00:00 | Vulnerability · Source |
| CVE-2026-8994 | redhat_vex | Login with NEAR <= 0.3.3 - Authentication Bypass via 'account' Parameter | known not affected: 1 | 2026-06-05T19:10:36+00:00 | Vulnerability · Source |
| CVE-2026-8787 | redhat_vex | Firebase Support & Chat Management <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation | known not affected: 1 | 2026-06-05T19:10:36+00:00 | Vulnerability · Source |
| CVE-2026-8051 | redhat_vex | CVE-2026-8051 | known not affected: 1 | 2026-06-05T19:10:36+00:00 | Vulnerability · Source |
| CVE-2026-8851 | redhat_vex | SOGo < 5.12.8 SQL Injection via addUserInAcls endpoint | known not affected: 1 | 2026-06-05T19:10:35+00:00 | Vulnerability · Source |
| CVE-2026-8671 | redhat_vex | Log Files contain encrypted secrets | known not affected: 1 | 2026-06-05T19:10:34+00:00 | Vulnerability · Source |
| CVE-2026-8077 | redhat_vex | Weak credentials vulnerability in the CashDro 3 web administration panel | known not affected: 1 | 2026-06-05T19:10:34+00:00 | Vulnerability · Source |
| CVE-2026-8644 | redhat_vex | IBM WebSphere Application Server is affected by an identity spoofing vulnerability | known not affected: 1 | 2026-06-05T19:10:32+00:00 | Vulnerability · Source |
| CVE-2026-8428 | redhat_vex | CSRF token is not validated in the core CMS update controller for Concrete CMS 9.5.0 and below | known not affected: 1 | 2026-06-05T19:10:31+00:00 | Vulnerability · Source |
| CVE-2026-35517 | redhat_vex | Pi-hole FTL affected by Remote Code Execution (RCE) via dns.upstreams Newline Injection | known not affected: 1 | 2026-06-05T19:10:30+00:00 | Vulnerability · Source |
| CVE-2026-35580 | redhat_vex | Emissary has GitHub Actions Shell Injection via Workflow Inputs | known not affected: 1 | 2026-06-05T19:10:28+00:00 | Vulnerability · Source |
| CVE-2026-35229 | redhat_vex | CVE-2026-35229 | known not affected: 1 | 2026-06-05T19:10:28+00:00 | Vulnerability · Source |
| CVE-2026-35085 | redhat_vex | Stack buffer overflow in method gdv-serverconfig | known not affected: 1 | 2026-06-05T19:10:28+00:00 | Vulnerability · Source |
| CVE-2026-35553 | redhat_vex | CVE-2026-35553 | known not affected: 1 | 2026-06-05T19:10:28+00:00 | Vulnerability · Source |
| CVE-2026-35076 | redhat_vex | Arbitrary file delete vulnerability in method bac-scanresult | known not affected: 1 | 2026-06-05T19:10:28+00:00 | Vulnerability · Source |
| CVE-2026-35230 | redhat_vex | CVE-2026-35230 | known not affected: 1 | 2026-06-05T19:10:27+00:00 | Vulnerability · Source |
| CVE-2026-35489 | redhat_vex | Tandoor Recipes — `amount`/`unit` bypass serializer in `food/{id}/shopping/` | known not affected: 1 | 2026-06-05T19:10:27+00:00 | Vulnerability · Source |
| CVE-2026-35401 | redhat_vex | Saleor has a resource exhaustion vulnerability in GraphQL queries | known not affected: 1 | 2026-06-05T19:10:27+00:00 | Vulnerability · Source |
| CVE-2026-35090 | redhat_vex | Authentication Bypass in Slican telephone exchanges | known not affected: 1 | 2026-06-05T19:10:26+00:00 | Vulnerability · Source |
| CVE-2026-35081 | redhat_vex | Arbitrary process termination vulnerability in method ugw-logstop | known not affected: 1 | 2026-06-05T19:10:25+00:00 | Vulnerability · Source |
| CVE-2026-35621 | redhat_vex | OpenClaw < 2026.3.24 - Privilege Escalation via chat.send to Allowlist Persistence | known not affected: 1 | 2026-06-05T19:10:25+00:00 | Vulnerability · Source |
| CVE-2026-35225 | redhat_vex | Improper timeout handling in CODESYS EtherNetIP | known not affected: 1 | 2026-06-05T19:10:24+00:00 | Vulnerability · Source |
| CVE-2026-35485 | redhat_vex | text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication | known not affected: 1 | 2026-06-05T19:10:23+00:00 | Vulnerability · Source |
| CVE-2026-35089 | redhat_vex | Use of Weak Credentials in Slican telephone exchanges | known not affected: 1 | 2026-06-05T19:10:22+00:00 | Vulnerability · Source |
| CVE-2026-35575 | redhat_vex | ChurchCRM has Stored XSS in Group Name | known not affected: 1 | 2026-06-05T19:10:20+00:00 | Vulnerability · Source |
| CVE-2026-35674 | redhat_vex | OpenClaw < 2026.5.18 - Scope Bypass via Inherited chat.send Route | known not affected: 1 | 2026-06-05T19:10:19+00:00 | Vulnerability · Source |
| CVE-2026-35506 | redhat_vex | CVE-2026-35506 | known not affected: 1 | 2026-06-05T19:10:19+00:00 | Vulnerability · Source |
| CVE-2026-35638 | redhat_vex | OpenClaw < 2026.3.22 - Privilege Escalation via Self-Declared Scopes in Trusted-Proxy Control UI | known not affected: 1 | 2026-06-05T19:10:18+00:00 | Vulnerability · Source |
| CVE-2026-35476 | redhat_vex | InvenTree Affected by Privilege Escalation via API | known not affected: 1 | 2026-06-05T19:10:18+00:00 | Vulnerability · Source |
| CVE-2026-35533 | redhat_vex | mise has a local settings bypass config trust checks | known not affected: 1 | 2026-06-05T19:10:17+00:00 | Vulnerability · Source |
| CVE-2026-35478 | redhat_vex | InvenTree has Arbitrary API Token Creation | known not affected: 1 | 2026-06-05T19:10:17+00:00 | Vulnerability · Source |
| CVE-2026-35650 | redhat_vex | OpenClaw < 2026.3.22 - Environment Variable Override Bypass via Inconsistent Sanitization | known not affected: 1 | 2026-06-05T19:10:17+00:00 | Vulnerability · Source |
| CVE-2026-35083 | redhat_vex | Stack buffer overflow in method bac-deviceobject | known not affected: 1 | 2026-06-05T19:10:16+00:00 | Vulnerability · Source |
| CVE-2026-35568 | redhat_vex | MCP Java-SDK has a DNS Rebinding Vulnerability | known not affected: 1 | 2026-06-05T19:10:15+00:00 | Vulnerability · Source |
| CVE-2026-35245 | redhat_vex | CVE-2026-35245 | known not affected: 1 | 2026-06-05T19:10:15+00:00 | Vulnerability · Source |
| CVE-2026-35595 | redhat_vex | Vikunja Affected by Privilege Escalation via Project Reparenting | known not affected: 1 | 2026-06-05T19:10:14+00:00 | Vulnerability · Source |
| CVE-2026-35676 | redhat_vex | phpMyFAQ - Unauthenticated Password Reset via User Password Update Endpoint | known not affected: 1 | 2026-06-05T19:10:13+00:00 | Vulnerability · Source |
| CVE-2026-35610 | redhat_vex | PolarLearn has a Server Action Admin Bypass in Account Management Actions | known not affected: 1 | 2026-06-05T19:10:12+00:00 | Vulnerability · Source |
| CVE-2026-35223 | redhat_vex | Joomla! Core - [20260508] - Improper access check in com_config webservice endpoints | known not affected: 1 | 2026-06-05T19:10:11+00:00 | Vulnerability · Source |
| CVE-2026-35087 | redhat_vex | Authentication Bypass in Slican telephone exchanges | known not affected: 1 | 2026-06-05T19:10:09+00:00 | Vulnerability · Source |
| CVE-2026-35546 | redhat_vex | Anviz Products Missing Authentication for Critical Function | known not affected: 1 | 2026-06-05T19:10:08+00:00 | Vulnerability · Source |
| CVE-2026-35555 | redhat_vex | Subnet Solutions PowerSYSTEM Center Incorrect Authorization | known not affected: 1 | 2026-06-05T19:10:07+00:00 | Vulnerability · Source |