VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298678 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-42879 | redhat_vex | FacturaScripts: Authenticated Remote Code Execution (RCE) via GIF Image Upload in Product Images | known not affected: 1 | 2026-06-01T22:03:39+00:00 | Vulnerability · Source |
| CVE-2026-44323 | redhat_vex | free5GC: UDR nudr-dr DELETE amf-subscriptions panics on missing subsId when UE state exists (nil pointer dereference) | known not affected: 1 | 2026-06-01T22:03:39+00:00 | Vulnerability · Source |
| CVE-2026-40421 | redhat_vex | Microsoft Word Information Disclosure Vulnerability | known not affected: 1 | 2026-06-01T22:03:38+00:00 | Vulnerability · Source |
| CVE-2026-35429 | redhat_vex | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability | known not affected: 1 | 2026-06-01T22:03:38+00:00 | Vulnerability · Source |
| CVE-2026-10184 | redhat_vex | SourceCodester Hospitals Patient Records Management System Users.php delete sql injection | known not affected: 1 | 2026-06-01T22:03:37+00:00 | Vulnerability · Source |
| CVE-2026-32170 | redhat_vex | Windows Rich Text Edit Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-01T22:03:37+00:00 | Vulnerability · Source |
| CVE-2026-49490 | redhat_vex | OpenCATS - SQL Injection in DataGrid Filter Handling for Tags Column | known not affected: 1 | 2026-06-01T22:03:37+00:00 | Vulnerability · Source |
| CVE-2026-10190 | redhat_vex | Tenda W12 Web Management httpd cgiSysWebTimeoutSet denial of service | known not affected: 1 | 2026-06-01T22:03:37+00:00 | Vulnerability · Source |
| CVE-2026-10185 | redhat_vex | SourceCodester Hospitals Patient Records Management System Users.php save sql injection | known not affected: 1 | 2026-06-01T22:03:37+00:00 | Vulnerability · Source |
| CVE-2026-10178 | redhat_vex | code-projects Online Music Site AdminEditAlbum.php sql injection | known not affected: 1 | 2026-06-01T22:03:37+00:00 | Vulnerability · Source |
| CVE-2026-10167 | redhat_vex | OUSL-GROUP-BrinaryBrains School Student Management System MY_Controller Login.php sign_auth_cookie improper authentication | known not affected: 1 | 2026-06-01T22:03:36+00:00 | Vulnerability · Source |
| CVE-2026-10154 | redhat_vex | Dolibarr ERP CRM messaging.php authorization | known not affected: 1 | 2026-06-01T22:03:36+00:00 | Vulnerability · Source |
| CVE-2026-10111 | redhat_vex | sambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injection | known not affected: 1 | 2026-06-01T22:03:36+00:00 | Vulnerability · Source |
| CVE-2026-10099 | redhat_vex | XX-Net V5.16.6 WebSocket Frame Parsing Data Corruption via simple_http_server.py | known not affected: 1 | 2026-06-01T22:03:35+00:00 | Vulnerability · Source |
| CVE-2026-45697 | redhat_vex | Formie: Pre-authenticated server-side template injection in Hidden fields | known not affected: 1 | 2026-06-01T22:03:33+00:00 | Vulnerability · Source |
| CVE-2026-49489 | redhat_vex | OpenCATS - SQL Injection in DataGrid sortDirection Parameter | known not affected: 1 | 2026-06-01T22:03:32+00:00 | Vulnerability · Source |
| CVE-2026-47125 | redhat_vex | Arcane: Missing admin authorization on global variables endpoint | known not affected: 1 | 2026-06-01T22:03:32+00:00 | Vulnerability · Source |
| CVE-2026-45707 | redhat_vex | n8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant headers are absent or incomplete | known not affected: 1 | 2026-06-01T22:03:31+00:00 | Vulnerability · Source |
| CVE-2026-45631 | redhat_vex | Dokploy: Pre-Auth Admin Takeover via Hardcoded Authentication Secret | known not affected: 1 | 2026-06-01T22:03:30+00:00 | Vulnerability · Source |
| CVE-2026-45630 | redhat_vex | Dokploy: Authenticated Remote Code Execution via Command Injection in updateTraefikConfig Echo Statement | known not affected: 1 | 2026-06-01T22:03:30+00:00 | Vulnerability · Source |
| CVE-2026-45625 | redhat_vex | Arcane: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs | known not affected: 1 | 2026-06-01T22:03:29+00:00 | Vulnerability · Source |
| CVE-2026-45344 | redhat_vex | LinkAce: Setup database password newline injection enables pre-auth RCE on uninitialized instances | known not affected: 1 | 2026-06-01T22:03:29+00:00 | Vulnerability · Source |
| CVE-2026-45311 | redhat_vex | CodeWhale: run_tests Tool Enables RCE via Malicious Repository Without Approval | known not affected: 1 | 2026-06-01T22:03:28+00:00 | Vulnerability · Source |
| CVE-2026-44966 | redhat_vex | Velocity.js: Prototype Pollution in #set path assignment | known not affected: 1 | 2026-06-01T22:03:28+00:00 | Vulnerability · Source |
| CVE-2026-44848 | redhat_vex | Portainer: Missing authorization on Docker plugin endpoints allows host RCE | known not affected: 1 | 2026-06-01T22:03:27+00:00 | Vulnerability · Source |
| CVE-2026-44450 | redhat_vex | Lumiverse: RCE via MCP stdio argument injection | known not affected: 1 | 2026-06-01T22:03:27+00:00 | Vulnerability · Source |
| CVE-2026-44847 | redhat_vex | MaxKB: Webhook Trigger Authentication Bypass | known not affected: 1 | 2026-06-01T22:03:27+00:00 | Vulnerability · Source |
| CVE-2026-44285 | redhat_vex | FastGPT: SSRF Protection Bypass via `externalFile` in Dataset Preview API | known not affected: 1 | 2026-06-01T22:03:26+00:00 | Vulnerability · Source |
| CVE-2026-44239 | redhat_vex | FreePBX: Authenticated Local File Inclusion in Dashboard Module | known not affected: 1 | 2026-06-01T22:03:26+00:00 | Vulnerability · Source |
| CVE-2026-42834 | redhat_vex | Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-01T22:03:25+00:00 | Vulnerability · Source |
| CVE-2026-42833 | redhat_vex | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-01T22:03:24+00:00 | Vulnerability · Source |
| CVE-2026-40420 | redhat_vex | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-01T22:03:22+00:00 | Vulnerability · Source |
| CVE-2026-40418 | redhat_vex | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-01T22:03:22+00:00 | Vulnerability · Source |
| CVE-2026-41088 | redhat_vex | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-01T22:03:22+00:00 | Vulnerability · Source |
| CVE-2026-40414 | redhat_vex | Windows TCP/IP Denial of Service Vulnerability | known not affected: 1 | 2026-06-01T22:03:20+00:00 | Vulnerability · Source |
| CVE-2026-40413 | redhat_vex | Windows TCP/IP Denial of Service Vulnerability | known not affected: 1 | 2026-06-01T22:03:19+00:00 | Vulnerability · Source |
| CVE-2026-40401 | redhat_vex | Windows TCP/IP Denial of Service Vulnerability | known not affected: 1 | 2026-06-01T22:03:19+00:00 | Vulnerability · Source |
| CVE-2026-40399 | redhat_vex | Windows TCP/IP Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-01T22:03:18+00:00 | Vulnerability · Source |
| CVE-2026-40397 | redhat_vex | Windows Common Log File System Driver Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-01T22:03:18+00:00 | Vulnerability · Source |
| CVE-2026-40367 | redhat_vex | Microsoft Word Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-01T22:03:17+00:00 | Vulnerability · Source |
| CVE-2026-40358 | redhat_vex | Microsoft Office Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-01T22:03:17+00:00 | Vulnerability · Source |
| CVE-2026-40369 | redhat_vex | Windows Kernel Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-01T22:03:17+00:00 | Vulnerability · Source |
| CVE-2026-40362 | redhat_vex | Microsoft Excel Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-01T22:03:16+00:00 | Vulnerability · Source |
| CVE-2026-40365 | redhat_vex | Microsoft SharePoint Server Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-01T22:03:16+00:00 | Vulnerability · Source |
| CVE-2026-40366 | redhat_vex | Microsoft Word Remote Code Execution Vulnerability | known not affected: 1 | 2026-06-01T22:03:16+00:00 | Vulnerability · Source |
| CVE-2026-35436 | redhat_vex | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-01T22:03:12+00:00 | Vulnerability · Source |
| CVE-2026-35417 | redhat_vex | Windows Win32k Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-01T22:03:11+00:00 | Vulnerability · Source |
| CVE-2026-34345 | redhat_vex | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-01T22:03:10+00:00 | Vulnerability · Source |
| CVE-2026-34336 | redhat_vex | Windows DWM Core Library Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-01T22:03:10+00:00 | Vulnerability · Source |
| CVE-2026-35416 | redhat_vex | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | known not affected: 1 | 2026-06-01T22:03:10+00:00 | Vulnerability · Source |