VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298679 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-47069 | redhat_vex | CRLF injection in cookie domain/path options in hackney | known not affected: 1 | 2026-05-26T20:14:36+00:00 | Vulnerability · Source |
| CVE-2026-42627 | redhat_vex | CVE-2026-42627 | known not affected: 1 | 2026-05-26T20:14:35+00:00 | Vulnerability · Source |
| CVE-2026-45249 | redhat_vex | Apache ECharts: XSS in Lines series tooltip rendering | known not affected: 1 | 2026-05-26T20:14:35+00:00 | Vulnerability · Source |
| CVE-2026-9490 | redhat_vex | Acer Care Center creates a Named Pipe with a weak Security Descriptor | known not affected: 1 | 2026-05-26T20:14:35+00:00 | Vulnerability · Source |
| CVE-2026-39967 | redhat_vex | TypeBot: Cross-Typebot Result Data Access via Missing typebotId Filter | known not affected: 1 | 2026-05-26T20:14:35+00:00 | Vulnerability · Source |
| CVE-2026-9469 | redhat_vex | yashpokharna2555 StudentManagementSystem success.php sql injection | known not affected: 1 | 2026-05-26T20:14:34+00:00 | Vulnerability · Source |
| CVE-2026-9374 | redhat_vex | yangzongzhuan RuoYi-Vue Common Upload Endpoint upload FileUploadUtils.upload unrestricted upload | known not affected: 1 | 2026-05-26T20:14:33+00:00 | Vulnerability · Source |
| CVE-2026-9453 | redhat_vex | FoundDream miniclawd SkillsLoader skills-loader.ts which command injection | known not affected: 1 | 2026-05-26T20:14:33+00:00 | Vulnerability · Source |
| CVE-2026-9368 | redhat_vex | NousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandbox | known not affected: 1 | 2026-05-26T20:14:33+00:00 | Vulnerability · Source |
| CVE-2026-9447 | redhat_vex | SourceCodester Simple POS and Inventory System search.php sql injection | known not affected: 1 | 2026-05-26T20:14:33+00:00 | Vulnerability · Source |
| CVE-2026-9421 | redhat_vex | KLiK SocialMediaWebsite File upload.inc.php uniqid unrestricted upload | known not affected: 1 | 2026-05-26T20:14:33+00:00 | Vulnerability · Source |
| CVE-2026-9274 | redhat_vex | Information Exposure Vulnerability in CP-Plus Wi-Fi Camera | known not affected: 1 | 2026-05-26T20:14:31+00:00 | Vulnerability · Source |
| CVE-2026-9356 | redhat_vex | SourceCodester Hospitals Patient Records Management System manage_history.php sql injection | known not affected: 1 | 2026-05-26T20:14:31+00:00 | Vulnerability · Source |
| CVE-2026-9355 | redhat_vex | SourceCodester Hospitals Patient Records Management System Master.php save_patient_history sql injection | known not affected: 1 | 2026-05-26T20:14:30+00:00 | Vulnerability · Source |
| CVE-2026-9350 | redhat_vex | NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorization | known not affected: 1 | 2026-05-26T20:14:28+00:00 | Vulnerability · Source |
| CVE-2026-9351 | redhat_vex | NousResearch hermes-agent read_file Tool file_tools.py _is_blocked_device path traversal | known not affected: 1 | 2026-05-26T20:14:28+00:00 | Vulnerability · Source |
| CVE-2026-9349 | redhat_vex | calcom cal.diy Generic React API bookings-single-view.getServerSideProps.tsx getServerSideProps information disclosure | known not affected: 1 | 2026-05-26T20:14:27+00:00 | Vulnerability · Source |
| CVE-2026-6059 | redhat_vex | CVE-2026-6059 | known not affected: 1 | 2026-05-26T20:14:26+00:00 | Vulnerability · Source |
| CVE-2026-4915 | redhat_vex | Server panic via outgoing webhook responses | known not affected: 1 | 2026-05-26T20:14:26+00:00 | Vulnerability · Source |
| CVE-2026-47072 | redhat_vex | CRLF injection in WebSocket upgrade request in hackney | known not affected: 1 | 2026-05-26T20:14:25+00:00 | Vulnerability · Source |
| CVE-2026-47070 | redhat_vex | HTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackney | known not affected: 1 | 2026-05-26T20:14:25+00:00 | Vulnerability · Source |
| CVE-2026-47076 | redhat_vex | SSRF allowlist bypass via percent-encoded host in hackney | known not affected: 1 | 2026-05-26T20:14:25+00:00 | Vulnerability · Source |
| CVE-2026-47075 | redhat_vex | CR/LF injection in query parameter in hackney | known not affected: 1 | 2026-05-26T20:14:25+00:00 | Vulnerability · Source |
| CVE-2026-40610 | redhat_vex | BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context | known not affected: 1 | 2026-05-26T20:14:24+00:00 | Vulnerability · Source |
| CVE-2026-24546 | redhat_vex | WordPress GamiPress plugin <= 7.6.3 - Broken Access Control vulnerability | known not affected: 1 | 2026-05-26T20:14:23+00:00 | Vulnerability · Source |
| CVE-2026-40127 | redhat_vex | Authorization Bypass Through User-Controlled Key in OutSystems Lifetime | known not affected: 1 | 2026-05-26T20:14:23+00:00 | Vulnerability · Source |
| CVE-2026-9489 | redhat_vex | NitroSense V3: Local Privilege Escalation (LPE) vulnerability | known not affected: 1 | 2026-05-26T20:14:22+00:00 | Vulnerability · Source |
| CVE-2026-9481 | redhat_vex | Edimax EW-7438RPn formStats stack-based overflow | known not affected: 1 | 2026-05-26T20:14:21+00:00 | Vulnerability · Source |
| CVE-2026-9480 | redhat_vex | Edimax EW-7438RPn formrefresh stack-based overflow | known not affected: 1 | 2026-05-26T20:14:20+00:00 | Vulnerability · Source |
| CVE-2026-9475 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setIpQosRules os command injection | known not affected: 1 | 2026-05-26T20:14:19+00:00 | Vulnerability · Source |
| CVE-2026-9459 | redhat_vex | Edimax EW-7438RPn formConnectionSetting stack-based overflow | known not affected: 1 | 2026-05-26T20:14:18+00:00 | Vulnerability · Source |
| CVE-2026-9463 | redhat_vex | Edimax EW-7438RPn formLicence stack-based overflow | known not affected: 1 | 2026-05-26T20:14:18+00:00 | Vulnerability · Source |
| CVE-2026-9426 | redhat_vex | Edimax EW-7438RPn formHwSet stack-based overflow | known not affected: 1 | 2026-05-26T20:14:17+00:00 | Vulnerability · Source |
| CVE-2026-9433 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setMacFilterRules os command injection | known not affected: 1 | 2026-05-26T20:14:16+00:00 | Vulnerability · Source |
| CVE-2026-9435 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setQosCfg os command injection | known not affected: 1 | 2026-05-26T20:14:16+00:00 | Vulnerability · Source |
| CVE-2026-9457 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi UploadFirmwareFile os command injection | known not affected: 1 | 2026-05-26T20:14:16+00:00 | Vulnerability · Source |
| CVE-2026-9429 | redhat_vex | Tenda F1202 WrlExtraSet formWrlExtraSet stack-based overflow | known not affected: 1 | 2026-05-26T20:14:15+00:00 | Vulnerability · Source |
| CVE-2026-9427 | redhat_vex | Edimax EW-7438RPn webs formWlSiteSurvey stack-based overflow | known not affected: 1 | 2026-05-26T20:14:15+00:00 | Vulnerability · Source |
| CVE-2026-9432 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setWiFiAdvancedCfg os command injection | known not affected: 1 | 2026-05-26T20:14:15+00:00 | Vulnerability · Source |
| CVE-2026-9408 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setStaticDhcpRules os command injection | known not affected: 1 | 2026-05-26T20:14:14+00:00 | Vulnerability · Source |
| CVE-2026-9405 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setGameSpeedCfg os command injection | known not affected: 1 | 2026-05-26T20:14:13+00:00 | Vulnerability · Source |
| CVE-2026-9393 | redhat_vex | H3C Magic B0 aspForm Edit_BasicSSID_5G buffer overflow | known not affected: 1 | 2026-05-26T20:14:13+00:00 | Vulnerability · Source |
| CVE-2026-9397 | redhat_vex | Besen BS20 EV Charging Station OTA Update Installation improper authorization | known not affected: 1 | 2026-05-26T20:14:13+00:00 | Vulnerability · Source |
| CVE-2026-9399 | redhat_vex | Edimax BR-6675nD POST Request formsetPPPoE buffer overflow | known not affected: 1 | 2026-05-26T20:14:13+00:00 | Vulnerability · Source |
| CVE-2026-9403 | redhat_vex | Edimax BR-6675nD POST Request formWlSiteSurvey buffer overflow | known not affected: 1 | 2026-05-26T20:14:13+00:00 | Vulnerability · Source |
| CVE-2026-9388 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setScheduleCfg os command injection | known not affected: 1 | 2026-05-26T20:14:12+00:00 | Vulnerability · Source |
| CVE-2026-9387 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setUpgradeFW os command injection | known not affected: 1 | 2026-05-26T20:14:11+00:00 | Vulnerability · Source |
| CVE-2026-9384 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setDiagnosisCfg os command injection | known not affected: 1 | 2026-05-26T20:14:11+00:00 | Vulnerability · Source |
| CVE-2026-9345 | redhat_vex | Edimax EW-7438RPn webs formWizSurvey buffer overflow | known not affected: 1 | 2026-05-26T20:14:09+00:00 | Vulnerability · Source |
| CVE-2026-9382 | redhat_vex | Edimax BR-6675nD POST Request formPPTPSetup buffer overflow | known not affected: 1 | 2026-05-26T20:14:09+00:00 | Vulnerability · Source |