VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298678 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-10286 | redhat_vex | CodeAstro Payroll System home_employee.php sql injection | known not affected: 1 | 2026-06-02T22:02:49+00:00 | Vulnerability · Source |
| CVE-2026-0088 | redhat_vex | CVE-2026-0088 | known not affected: 1 | 2026-06-02T22:02:46+00:00 | Vulnerability · Source |
| CVE-2026-0055 | redhat_vex | CVE-2026-0055 | known not affected: 1 | 2026-06-02T22:02:43+00:00 | Vulnerability · Source |
| CVE-2026-0086 | redhat_vex | CVE-2026-0086 | known not affected: 1 | 2026-06-02T22:02:43+00:00 | Vulnerability · Source |
| CVE-2026-0048 | redhat_vex | CVE-2026-0048 | known not affected: 1 | 2026-06-02T22:02:42+00:00 | Vulnerability · Source |
| CVE-2026-0046 | redhat_vex | CVE-2026-0046 | known not affected: 1 | 2026-06-02T22:02:40+00:00 | Vulnerability · Source |
| CVE-2025-32348 | redhat_vex | CVE-2025-32348 | known not affected: 1 | 2026-06-02T22:02:34+00:00 | Vulnerability · Source |
| CVE-2026-5516 | redhat_vex | IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability | known not affected: 1 | 2026-06-02T22:02:32+00:00 | Vulnerability · Source |
| CVE-2022-4991 | redhat_vex | Tychon is vulnerable to privilege escalation due to OPENSSLDIR location | known not affected: 1 | 2026-06-02T22:02:32+00:00 | Vulnerability · Source |
| CVE-2025-48595 | redhat_vex | CVE-2025-48595 | known not affected: 1 | 2026-06-02T22:02:32+00:00 | Vulnerability · Source |
| CVE-2026-5515 | redhat_vex | IBM App Connect Enterprise is vulnerable to a confidential disclosure | known not affected: 1 | 2026-06-02T22:02:31+00:00 | Vulnerability · Source |
| CVE-2026-47674 | redhat_vex | Hono: IP Restriction bypasses static deny rules for non-canonical IPv6 | known not affected: 1 | 2026-06-02T22:02:27+00:00 | Vulnerability · Source |
| CVE-2026-24755 | redhat_vex | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key | known not affected: 1 | 2026-06-02T22:02:26+00:00 | Vulnerability · Source |
| CVE-2026-44720 | redhat_vex | OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover | known not affected: 1 | 2026-06-02T22:02:24+00:00 | Vulnerability · Source |
| CVE-2026-10291 | redhat_vex | Enderfga claw-orchestrator Session Grep Endpoint embedded-server.ts validateRegex redos | known not affected: 1 | 2026-06-02T22:02:17+00:00 | Vulnerability · Source |
| CVE-2026-9381 | redhat_vex | Edimax BR-6675nD POST Request formPPPoESetup buffer overflow | known not affected: 1 | 2026-06-02T22:02:08+00:00 | Vulnerability · Source |
| CVE-2026-5509 | redhat_vex | Arbitrary Command Injection via Browser Developer Console in TP-Link Archer BE450 and BE7200 | known not affected: 1 | 2026-06-02T22:02:07+00:00 | Vulnerability · Source |
| CVE-2026-49136 | redhat_vex | Banana Slides 0.4.0 Path Traversal via generate_image() in ai_service.py | known not affected: 1 | 2026-06-02T22:02:06+00:00 | Vulnerability · Source |
| CVE-2026-8726 | redhat_vex | SQL Injection in extension "News system" (news) | known not affected: 1 | 2026-06-02T22:02:04+00:00 | Vulnerability · Source |
| CVE-2026-49139 | redhat_vex | Nanobot < 0.2.1 SSRF via Microsoft Teams Channel serviceUrl Poisoning | known not affected: 1 | 2026-06-02T22:02:02+00:00 | Vulnerability · Source |
| CVE-2026-47179 | redhat_vex | Arcane: Authenticated Arbitrary Host File Read via Docker Compose Include Directives in Arcane | known not affected: 1 | 2026-06-02T22:02:01+00:00 | Vulnerability · Source |
| CVE-2026-48064 | redhat_vex | pam_usb: PAM_RHOST check skipped when deny_remote=false allows XDMCP authentication bypass | known not affected: 1 | 2026-06-02T22:02:01+00:00 | Vulnerability · Source |
| CVE-2026-45632 | redhat_vex | Dokploy: Schedule Authorization Bypass Enables Host/Server Command Execution | known not affected: 1 | 2026-06-02T22:02:00+00:00 | Vulnerability · Source |
| CVE-2026-46820 | redhat_vex | CVE-2026-46820 | known not affected: 1 | 2026-06-02T22:02:00+00:00 | Vulnerability · Source |
| CVE-2026-46414 | redhat_vex | Microsoft UFO WebSocket role spoofing allows authenticated peer task hijacking | known not affected: 1 | 2026-06-02T22:02:00+00:00 | Vulnerability · Source |
| CVE-2026-45393 | redhat_vex | Local privilege escalation to SYSTEM in Cribl Edge for Windows | known not affected: 1 | 2026-06-02T22:01:56+00:00 | Vulnerability · Source |
| CVE-2026-45392 | redhat_vex | DOM-based XSS in Cribl Stream | known not affected: 1 | 2026-06-02T22:01:52+00:00 | Vulnerability · Source |
| CVE-2026-45391 | redhat_vex | Local privilege escalation in Cribl Edge for Linux | known not affected: 1 | 2026-06-02T22:01:49+00:00 | Vulnerability · Source |
| CVE-2026-45136 | redhat_vex | claude-code-cache-fix: Local code execution via Python triple-quote injection in tools/quota-statusline.sh | known not affected: 1 | 2026-06-02T22:01:41+00:00 | Vulnerability · Source |
| CVE-2026-10292 | redhat_vex | UTT HiPER 1200GW formTaskEdit strcpy stack-based overflow | known not affected: 1 | 2026-06-02T22:01:31+00:00 | Vulnerability · Source |
| CVE-2026-44709 | redhat_vex | pam_usb: PINENTRY_FALLBACK_APP environment variable allows arbitrary command execution | known not affected: 1 | 2026-06-02T22:01:31+00:00 | Vulnerability · Source |
| CVE-2021-21974 | redhat_vex | OpenSLP: heap-overflow | known not affected: 13 | 2026-06-02T21:20:48+00:00 | Vulnerability · Source |
| CVE-2026-40564 | redhat_vex | Apache Flink Kubernetes Operator: Server-Side Request Forgery and local file access in Kubernetes Operator | known not affected: 1 | 2026-06-02T16:01:51+00:00 | Vulnerability · Source |
| CVE-2026-37233 | redhat_vex | CVE-2026-37233 | known not affected: 1 | 2026-06-02T16:01:50+00:00 | Vulnerability · Source |
| CVE-2026-37234 | redhat_vex | CVE-2026-37234 | known not affected: 1 | 2026-06-02T16:01:50+00:00 | Vulnerability · Source |
| CVE-2026-37232 | redhat_vex | CVE-2026-37232 | known not affected: 1 | 2026-06-02T16:01:48+00:00 | Vulnerability · Source |
| CVE-2026-37231 | redhat_vex | CVE-2026-37231 | known not affected: 1 | 2026-06-02T16:01:48+00:00 | Vulnerability · Source |
| CVE-2026-37229 | redhat_vex | CVE-2026-37229 | known not affected: 1 | 2026-06-02T16:01:47+00:00 | Vulnerability · Source |
| CVE-2026-37230 | redhat_vex | CVE-2026-37230 | known not affected: 1 | 2026-06-02T16:01:47+00:00 | Vulnerability · Source |
| CVE-2026-10257 | redhat_vex | itsourcecode Content Management System update_ss_img.php sql injection | known not affected: 1 | 2026-06-02T16:01:45+00:00 | Vulnerability · Source |
| CVE-2026-37228 | redhat_vex | CVE-2026-37228 | known not affected: 1 | 2026-06-02T16:01:45+00:00 | Vulnerability · Source |
| CVE-2026-37226 | redhat_vex | CVE-2026-37226 | known not affected: 1 | 2026-06-02T16:01:45+00:00 | Vulnerability · Source |
| CVE-2026-10246 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System main create_medicine_presentation cross site scripting | known not affected: 1 | 2026-06-02T16:01:44+00:00 | Vulnerability · Source |
| CVE-2026-10240 | redhat_vex | JeecgBoot test server-side request forgery | known not affected: 1 | 2026-06-02T16:01:43+00:00 | Vulnerability · Source |
| CVE-2026-10239 | redhat_vex | JeecgBoot edit WordUtil.addImage server-side request forgery | known not affected: 1 | 2026-06-02T16:01:43+00:00 | Vulnerability · Source |
| CVE-2026-10245 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System main create_supplier cross site scripting | known not affected: 1 | 2026-06-02T16:01:43+00:00 | Vulnerability · Source |
| CVE-2026-10234 | redhat_vex | Mettle sendportal Campaign webview cross site scripting | known not affected: 1 | 2026-06-02T16:01:41+00:00 | Vulnerability · Source |
| CVE-2026-10193 | redhat_vex | OFCMS ComnController ComnController.java query sql injection | known not affected: 1 | 2026-06-02T16:01:40+00:00 | Vulnerability · Source |
| CVE-2026-48134 | redhat_vex | SQL injection issue in UserCheck Portal when DLP Software Blade is active | known not affected: 1 | 2026-06-02T16:01:39+00:00 | Vulnerability · Source |
| CVE-2026-48136 | redhat_vex | Authenticated Administrator Role-Based Access Control Bypass in Compliance | known not affected: 1 | 2026-06-02T16:01:39+00:00 | Vulnerability · Source |