VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298678 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-45040 | redhat_vex | RustFS: Sensitive Information Leakage (SessionToken and SecretAccessKey) in RustFS Logs [Debug Mode] | known not affected: 1 | 2026-06-02T16:01:38+00:00 | Vulnerability · Source |
| CVE-2026-42070 | redhat_vex | MantisBT: Authorization Bypass in Bugnote Editing via Issue Update API | known not affected: 1 | 2026-06-02T16:01:38+00:00 | Vulnerability · Source |
| CVE-2026-48132 | redhat_vex | VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP | known not affected: 1 | 2026-06-02T16:01:38+00:00 | Vulnerability · Source |
| CVE-2026-30894 | redhat_vex | Joomla! Core - [20260503] - XSS in com_contenthistory | known not affected: 1 | 2026-06-02T16:01:37+00:00 | Vulnerability · Source |
| CVE-2026-10263 | redhat_vex | SourceCodester Computer Repair Shop Management System manage_product.php sql injection | known not affected: 1 | 2026-06-02T16:01:37+00:00 | Vulnerability · Source |
| CVE-2026-35222 | redhat_vex | Joomla! Core - [20260507] - Authenticated blind SQLi in com_tags | known not affected: 1 | 2026-06-02T16:01:37+00:00 | Vulnerability · Source |
| CVE-2026-10187 | redhat_vex | Totolink N300RH Web Management wireless.so setWiFiBasicConfig stack-based overflow | known not affected: 1 | 2026-06-02T16:01:36+00:00 | Vulnerability · Source |
| CVE-2026-10226 | redhat_vex | raisulislamg4 student_management_system_by_php delete.php sql injection | known not affected: 1 | 2026-06-02T16:01:36+00:00 | Vulnerability · Source |
| CVE-2026-10251 | redhat_vex | itsourcecode Online House Rental System ajax.php login sql injection | known not affected: 1 | 2026-06-02T16:01:36+00:00 | Vulnerability · Source |
| CVE-2026-10208 | redhat_vex | code-projects Online Hospital Management System login_1.php login_user sql injection | known not affected: 1 | 2026-06-02T16:01:35+00:00 | Vulnerability · Source |
| CVE-2026-10220 | redhat_vex | NousResearch hermes-agent skills_tool.py skill_view injection | known not affected: 1 | 2026-06-02T16:01:35+00:00 | Vulnerability · Source |
| CVE-2026-10214 | redhat_vex | zhayujie chatgpt-on-wechat Bash Tool bash.py _get_safety_warning os command injection | known not affected: 1 | 2026-06-02T16:01:35+00:00 | Vulnerability · Source |
| CVE-2026-46509 | redhat_vex | deepobj: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | known not affected: 1 | 2026-06-02T16:01:34+00:00 | Vulnerability · Source |
| CVE-2026-44883 | redhat_vex | Portainer: JWT accepted in URL query leaks tokens to logs and referers | known not affected: 1 | 2026-06-02T16:01:34+00:00 | Vulnerability · Source |
| CVE-2026-48133 | redhat_vex | Identity Awareness Captive Portal - Unauthenticated Local File Inclusion | known not affected: 1 | 2026-06-02T16:01:34+00:00 | Vulnerability · Source |
| CVE-2026-44593 | redhat_vex | esm.sh: Legacy Route Path Traversal Can Lead to RCE | known not affected: 1 | 2026-06-02T16:01:33+00:00 | Vulnerability · Source |
| CVE-2026-10188 | redhat_vex | Tenda W12 httpd cgistaKickOff stack-based overflow | known not affected: 1 | 2026-06-02T16:01:33+00:00 | Vulnerability · Source |
| CVE-2026-10181 | redhat_vex | TRENDnet TEW-432BRP formSysCmd stack-based overflow | known not affected: 1 | 2026-06-02T16:01:32+00:00 | Vulnerability · Source |
| CVE-2026-10176 | redhat_vex | Aider-AI Aider Code Generation Workflow sql injection | known not affected: 1 | 2026-06-02T16:01:32+00:00 | Vulnerability · Source |
| CVE-2025-70099 | redhat_vex | CVE-2025-70099 | known not affected: 1 | 2026-06-02T16:01:32+00:00 | Vulnerability · Source |
| CVE-2026-10170 | redhat_vex | code-projects Visitor Management System phone_0.php sql injection | known not affected: 1 | 2026-06-02T16:01:32+00:00 | Vulnerability · Source |
| CVE-2026-10182 | redhat_vex | TRENDnet TEW-432BRP formWlanSetup command injection | known not affected: 1 | 2026-06-02T16:01:32+00:00 | Vulnerability · Source |
| CVE-2026-10175 | redhat_vex | Aider-AI Aider Architect Mode auth.py editor_coder.run code injection | known not affected: 1 | 2026-06-02T16:01:32+00:00 | Vulnerability · Source |
| CVE-2024-52005 | redhat_vex | git: The sideband payload is passed unfiltered to the terminal in git | fixed: 254 known affected: 34 known not affected: 2 | 2026-06-02T15:22:36+00:00 | Vulnerability · Source |
| CVE-2024-7143 | redhat_vex | pulpcore: RBAC permissions incorrectly assigned in tasks that create objects | known affected: 2 known not affected: 3 | 2026-06-02T15:17:10+00:00 | Vulnerability · Source |
| CVE-2026-39831 | microsoft_vex | Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh | known not affected: 12 | 2026-06-02T14:39:43+00:00 | Vulnerability · Source |
| CVE-2023-3955 | redhat_vex | kubernetes: Insufficient input sanitization on Windows nodes leads to privilege escalation | fixed: 7 known not affected: 4 | 2026-06-02T10:17:00+00:00 | Vulnerability · Source |
| CVE-2023-3676 | redhat_vex | kubernetes: Insufficient input sanitization on Windows nodes leads to privilege escalation | fixed: 7 known not affected: 4 | 2026-06-02T10:16:36+00:00 | Vulnerability · Source |
| CVE-2026-20452 | redhat_vex | CVE-2026-20452 | known not affected: 1 | 2026-06-02T10:02:30+00:00 | Vulnerability · Source |
| CVE-2026-42359 | redhat_vex | Apache Airflow: Authenticated RCE via XCom PATCH endpoint — XComUpdateBody missing FORBIDDEN_XCOM_KEYS validator | known not affected: 1 | 2026-06-02T10:02:29+00:00 | Vulnerability · Source |
| CVE-2026-20455 | redhat_vex | CVE-2026-20455 | known not affected: 1 | 2026-06-02T10:02:28+00:00 | Vulnerability · Source |
| CVE-2026-20454 | redhat_vex | CVE-2026-20454 | known not affected: 1 | 2026-06-02T10:02:28+00:00 | Vulnerability · Source |
| CVE-2026-20453 | redhat_vex | CVE-2026-20453 | known not affected: 1 | 2026-06-02T10:02:28+00:00 | Vulnerability · Source |
| CVE-2026-3091 | redhat_vex | CVE-2026-3091 | known not affected: 1 | 2026-06-02T10:02:27+00:00 | Vulnerability · Source |
| CVE-2026-2237 | redhat_vex | CVE-2026-2237 | known not affected: 1 | 2026-06-02T10:02:27+00:00 | Vulnerability · Source |
| CVE-2025-66593 | redhat_vex | CVE-2025-66593 | known not affected: 1 | 2026-06-02T10:02:26+00:00 | Vulnerability · Source |
| CVE-2025-66592 | redhat_vex | CVE-2025-66592 | known not affected: 1 | 2026-06-02T10:02:26+00:00 | Vulnerability · Source |
| CVE-2025-13593 | redhat_vex | CVE-2025-13593 | known not affected: 1 | 2026-06-02T10:02:26+00:00 | Vulnerability · Source |
| CVE-2024-9819 | redhat_vex | IDOR in NextGEO's NG Analyser | known not affected: 1 | 2026-06-02T10:02:25+00:00 | Vulnerability · Source |
| CVE-2024-9147 | redhat_vex | HTML Injection in Bna Informatics' PosPratik | known not affected: 1 | 2026-06-02T10:02:24+00:00 | Vulnerability · Source |
| CVE-2024-8475 | redhat_vex | Protection Mechanism Failure in Digital Operation Services' WiFiBurada | known not affected: 1 | 2026-06-02T10:02:24+00:00 | Vulnerability · Source |
| CVE-2024-9477 | redhat_vex | XSS in AirTies' Air4443 Firmware | known not affected: 1 | 2026-06-02T10:02:24+00:00 | Vulnerability · Source |
| CVE-2024-8429 | redhat_vex | Improper Authentication in Digital Operation Services' WiFiBurada | known not affected: 1 | 2026-06-02T10:02:23+00:00 | Vulnerability · Source |
| CVE-2024-8950 | redhat_vex | SQLi in Arne Informatics' Piramit Automation | known not affected: 1 | 2026-06-02T10:02:23+00:00 | Vulnerability · Source |
| CVE-2024-11404 | redhat_vex | File Upload Bypass in django Filer | known not affected: 1 | 2026-06-02T10:02:23+00:00 | Vulnerability · Source |
| CVE-2024-11406 | redhat_vex | Stored XSS in django CMS Attributes Fields | known not affected: 1 | 2026-06-02T10:02:22+00:00 | Vulnerability · Source |
| CVE-2024-7882 | redhat_vex | SQLi in Special Minds' e-Commerce | known not affected: 1 | 2026-06-02T10:02:22+00:00 | Vulnerability · Source |
| CVE-2024-9334 | redhat_vex | Information Disclosure in E-Kent's Pallium Vehicle Tracking | known not affected: 1 | 2026-06-02T10:02:21+00:00 | Vulnerability · Source |
| CVE-2024-8972 | redhat_vex | SQLi in Mobil365 Informatics' Saha365 App | known not affected: 1 | 2026-06-02T10:02:21+00:00 | Vulnerability · Source |
| CVE-2024-9142 | redhat_vex | Local File Inclusion (LFI) in Olgu Computer Systems' e-Belediye | known not affected: 1 | 2026-06-02T10:02:20+00:00 | Vulnerability · Source |