VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298678 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-9286 | redhat_vex | SQLi in TRtek Software's Distant Education Platform | known not affected: 1 | 2026-06-02T10:02:20+00:00 | Vulnerability · Source |
| CVE-2024-9149 | redhat_vex | SQLi in Wind Media's E-Commerce Website Template | known not affected: 1 | 2026-06-02T10:02:20+00:00 | Vulnerability · Source |
| CVE-2024-8997 | redhat_vex | SQLi in Vestel's EVC04 Configuration Interface | known not affected: 1 | 2026-06-02T10:02:19+00:00 | Vulnerability · Source |
| CVE-2024-8781 | redhat_vex | Container Escape Vulnerability in TR7's Application Security Platform (ASP) | known not affected: 1 | 2026-06-02T10:02:19+00:00 | Vulnerability · Source |
| CVE-2024-8644 | redhat_vex | Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp | known not affected: 1 | 2026-06-02T10:02:19+00:00 | Vulnerability · Source |
| CVE-2024-8262 | redhat_vex | Path Traversal in Proliz Software's OBS | known not affected: 1 | 2026-06-02T10:02:18+00:00 | Vulnerability · Source |
| CVE-2024-8643 | redhat_vex | Session Hijacking in Oceanic Software's ValeApp | known not affected: 1 | 2026-06-02T10:02:18+00:00 | Vulnerability · Source |
| CVE-2024-8261 | redhat_vex | IDOR in Proliz Software's OBS | known not affected: 1 | 2026-06-02T10:02:18+00:00 | Vulnerability · Source |
| CVE-2024-8259 | redhat_vex | Unauthenticated SQLi in Eryaz IT's NatraCar B2B Dealer Management Program | known not affected: 1 | 2026-06-02T10:02:18+00:00 | Vulnerability · Source |
| CVE-2024-8609 | redhat_vex | Improper Access Control in Oceanic Software's ValeApp | known not affected: 1 | 2026-06-02T10:02:18+00:00 | Vulnerability · Source |
| CVE-2024-8608 | redhat_vex | Stored XSS in Oceanic Software's ValeApp | known not affected: 1 | 2026-06-02T10:02:18+00:00 | Vulnerability · Source |
| CVE-2024-8607 | redhat_vex | SQLi in Oceanic Software's ValeApp | known not affected: 1 | 2026-06-02T10:02:18+00:00 | Vulnerability · Source |
| CVE-2024-11739 | redhat_vex | SQLi in Case Informatics' Case ERP | known not affected: 1 | 2026-06-02T10:02:17+00:00 | Vulnerability · Source |
| CVE-2024-7873 | redhat_vex | Stored XSS in Veribilim Software's Veribase Order Management | known not affected: 1 | 2026-06-02T10:02:17+00:00 | Vulnerability · Source |
| CVE-2024-7837 | redhat_vex | SQLi in Firmanet Software's ERP | known not affected: 1 | 2026-06-02T10:02:17+00:00 | Vulnerability · Source |
| CVE-2024-7872 | redhat_vex | Sensetive Data Exposure in ExtremePACS' Extreme XDS | known not affected: 1 | 2026-06-02T10:02:17+00:00 | Vulnerability · Source |
| CVE-2024-12097 | redhat_vex | SQLi in Boceksoft Informatics' E-Travel | known not affected: 1 | 2026-06-02T10:02:17+00:00 | Vulnerability · Source |
| CVE-2024-8074 | redhat_vex | Sensetive Data Exposure in Nomysoft Informatics' Nomysem | known not affected: 1 | 2026-06-02T10:02:17+00:00 | Vulnerability · Source |
| CVE-2024-11142 | redhat_vex | CSRF in Gosoft Software's Proticaret E-Commerce | known not affected: 1 | 2026-06-02T10:02:16+00:00 | Vulnerability · Source |
| CVE-2024-10035 | redhat_vex | Code Injection in BG-TEK's CoslatV3 | known not affected: 1 | 2026-06-02T10:02:16+00:00 | Vulnerability · Source |
| CVE-2024-11321 | redhat_vex | Reflected XSS in Hi e-learning's Learning Management System (LMS) | known not affected: 1 | 2026-06-02T10:02:16+00:00 | Vulnerability · Source |
| CVE-2024-10244 | redhat_vex | SQLi in ISDO Software's Web Software | known not affected: 1 | 2026-06-02T10:02:16+00:00 | Vulnerability · Source |
| CVE-2024-11216 | redhat_vex | Broken Access Control in PozitifIK's Pik Online | known not affected: 1 | 2026-06-02T10:02:16+00:00 | Vulnerability · Source |
| CVE-2024-10534 | redhat_vex | Improper Access Control in Dataprom Informatics' PACS-ACSS | known not affected: 1 | 2026-06-02T10:02:16+00:00 | Vulnerability · Source |
| CVE-2024-12016 | redhat_vex | SQLi in CM Informatics' CM News | known not affected: 1 | 2026-06-02T10:02:16+00:00 | Vulnerability · Source |
| CVE-2024-10539 | redhat_vex | Reflected XSS in Uyumsoft's ERP | known not affected: 1 | 2026-06-02T10:02:16+00:00 | Vulnerability · Source |
| CVE-2024-11319 | redhat_vex | Stored XSS in Open Source Project "django-cms" | known not affected: 1 | 2026-06-02T10:02:16+00:00 | Vulnerability · Source |
| CVE-2026-32906 | redhat_vex | OpenClaw < 2026.5.12 - Privilege Escalation in Slack Plugin Approvals via Exec Approver Gate | known not affected: 1 | 2026-06-02T04:03:05+00:00 | Vulnerability · Source |
| CVE-2026-10169 | redhat_vex | OUSL-GROUP-BrinaryBrains School Student Management System Forgot Password Endpoint Login.php ajax_forgot_password password recovery | known not affected: 1 | 2026-06-02T04:03:04+00:00 | Vulnerability · Source |
| CVE-2026-10114 | redhat_vex | Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds write | known not affected: 1 | 2026-06-02T04:03:04+00:00 | Vulnerability · Source |
| CVE-2026-10127 | redhat_vex | Edimax BR-6478AC POST Request formStaDrvSetup command injection | known not affected: 1 | 2026-06-02T04:03:04+00:00 | Vulnerability · Source |
| CVE-2026-10064 | redhat_vex | TRENDnet TEW-432BRP formSetPortTr stack-based overflow | known not affected: 1 | 2026-06-02T04:03:04+00:00 | Vulnerability · Source |
| CVE-2025-60495 | redhat_vex | CVE-2025-60495 | known not affected: 1 | 2026-06-02T04:03:03+00:00 | Vulnerability · Source |
| CVE-2025-60486 | redhat_vex | CVE-2025-60486 | known not affected: 1 | 2026-06-02T04:03:01+00:00 | Vulnerability · Source |
| CVE-2025-60483 | redhat_vex | CVE-2025-60483 | known not affected: 1 | 2026-06-02T04:03:01+00:00 | Vulnerability · Source |
| CVE-2025-60481 | redhat_vex | CVE-2025-60481 | known not affected: 1 | 2026-06-02T04:03:01+00:00 | Vulnerability · Source |
| CVE-2025-60485 | redhat_vex | CVE-2025-60485 | known not affected: 1 | 2026-06-02T04:03:01+00:00 | Vulnerability · Source |
| CVE-2025-55664 | redhat_vex | CVE-2025-55664 | known not affected: 1 | 2026-06-02T04:03:00+00:00 | Vulnerability · Source |
| CVE-2026-45626 | redhat_vex | Arcane: OS Command Injection in Volume Browser ListDirectory via path query parameter | known not affected: 1 | 2026-06-02T04:02:54+00:00 | Vulnerability · Source |
| CVE-2026-45580 | redhat_vex | WWBN AVideo Live: stored XSS via unescaped stream key in modeYoutubeLive.php class attribute | known not affected: 1 | 2026-06-02T04:02:53+00:00 | Vulnerability · Source |
| CVE-2026-47740 | redhat_vex | Shopper: Authorization bypass in multiple Livewire admin components | known not affected: 1 | 2026-06-02T04:02:51+00:00 | Vulnerability · Source |
| CVE-2026-45294 | redhat_vex | FreeScout: User Account Enumeration via Password Reset Response Differentiation | known not affected: 1 | 2026-06-02T04:02:51+00:00 | Vulnerability · Source |
| CVE-2026-47123 | redhat_vex | FreeScout: Agent Impersonation via Missing HMAC Verification on Notification Reply Message-ID Path | known not affected: 1 | 2026-06-02T04:02:50+00:00 | Vulnerability · Source |
| CVE-2026-46510 | redhat_vex | Prototype pollution in form-data-objectizer via bracket-notation form keys | known not affected: 1 | 2026-06-02T04:02:50+00:00 | Vulnerability · Source |
| CVE-2026-10158 | redhat_vex | TRENDnet TEW-432BRP formPortFw stack-based overflow | known not affected: 1 | 2026-06-02T04:02:47+00:00 | Vulnerability · Source |
| CVE-2026-45662 | redhat_vex | Dokploy: Command Injection via incomplete shell escaping in docker logout (registry deletion) | known not affected: 1 | 2026-06-02T04:02:45+00:00 | Vulnerability · Source |
| CVE-2026-45629 | redhat_vex | Dokploy: Authenticated Remote Code Execution via Command Injection in /listen-deployment WebSocket Endpoint | known not affected: 1 | 2026-06-02T04:02:44+00:00 | Vulnerability · Source |
| CVE-2026-45661 | redhat_vex | Dokploy: Remote Code Execution through Path Traversal | known not affected: 1 | 2026-06-02T04:02:44+00:00 | Vulnerability · Source |
| CVE-2026-45312 | redhat_vex | RAGFlow: Server-Side Template Injection in Prompt Generator leads to Remote Code Execution | known not affected: 1 | 2026-06-02T04:02:44+00:00 | Vulnerability · Source |
| CVE-2026-45609 | redhat_vex | mcp-security: Unvalidated URL Fetching (SSRF) | known not affected: 1 | 2026-06-02T04:02:43+00:00 | Vulnerability · Source |