VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299358 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-9484 | redhat_vex | SourceCodester Student Grades Management System classroom.php removeStudentFromClassroom improper authorization | known not affected: 1 | 2026-05-27T20:14:18+00:00 | Vulnerability · Source |
| CVE-2026-9472 | redhat_vex | dazeb markdown-downloader index.ts create_subdirectory path traversal | known not affected: 1 | 2026-05-27T20:14:18+00:00 | Vulnerability · Source |
| CVE-2026-9424 | redhat_vex | Edimax EW-7438RPn Content-Type formWlanMP os command injection | known not affected: 1 | 2026-05-27T20:14:18+00:00 | Vulnerability · Source |
| CVE-2026-9394 | redhat_vex | Besen BS20 EV Charging Station Bluetooth Low Energy weak password | known not affected: 1 | 2026-05-27T20:14:17+00:00 | Vulnerability · Source |
| CVE-2026-9412 | redhat_vex | SourceCodester Indian Invoicing System Backend Endpoint access control | known not affected: 1 | 2026-05-27T20:14:17+00:00 | Vulnerability · Source |
| CVE-2026-9418 | redhat_vex | code-projects Employee Management System changepassemp.php cross site scripting | known not affected: 1 | 2026-05-27T20:14:17+00:00 | Vulnerability · Source |
| CVE-2026-9400 | redhat_vex | Edimax BR-6675nD POST Request formUSBStorage command injection | known not affected: 1 | 2026-05-27T20:14:17+00:00 | Vulnerability · Source |
| CVE-2026-9342 | redhat_vex | SourceCodester Hospitals Patient Records Management System view_history.php sql injection | known not affected: 1 | 2026-05-27T20:14:15+00:00 | Vulnerability · Source |
| CVE-2026-9379 | redhat_vex | Edimax BR-6675nD POST Request formWpsStart command injection | known not affected: 1 | 2026-05-27T20:14:15+00:00 | Vulnerability · Source |
| CVE-2026-9301 | redhat_vex | omec-project amf NGReset Message memory corruption | known not affected: 1 | 2026-05-27T20:14:14+00:00 | Vulnerability · Source |
| CVE-2025-4528 | redhat_vex | Dígitro NGC Explorer session expiration | known not affected: 1 | 2026-05-27T20:14:10+00:00 | Vulnerability · Source |
| CVE-2025-4527 | redhat_vex | Dígitro NGC Explorer Password Transmission client-side enforcement of server-side security | known not affected: 1 | 2026-05-27T20:14:06+00:00 | Vulnerability · Source |
| CVE-2025-4526 | redhat_vex | Dígitro NGC Explorer Configuration missing password field masking | known not affected: 1 | 2026-05-27T20:14:05+00:00 | Vulnerability · Source |
| CVE-2026-9372 | redhat_vex | ItzCrazyKns Vane Model Provider API route.ts server-side request forgery | known not affected: 1 | 2026-05-27T20:14:00+00:00 | Vulnerability · Source |
| CVE-2026-9366 | redhat_vex | NousResearch hermes-agent prompt_builder.py _scan_context_content injection | known not affected: 1 | 2026-05-27T20:13:59+00:00 | Vulnerability · Source |
| CVE-2026-9354 | redhat_vex | NousResearch hermes-agent Slack Agent/Mattermost Agent escape output | known not affected: 1 | 2026-05-27T20:13:56+00:00 | Vulnerability · Source |
| CVE-2026-48593 | redhat_vex | Unbounded range expansion in cron describe causes memory exhaustion in oban_web | known not affected: 1 | 2026-05-27T20:13:55+00:00 | Vulnerability · Source |
| CVE-2026-48592 | redhat_vex | Missing authorization check on save-job event handler in oban_web | known not affected: 1 | 2026-05-27T20:13:54+00:00 | Vulnerability · Source |
| CVE-2026-44831 | redhat_vex | Snipe-IT: XSS vulnerability in component notes | known not affected: 1 | 2026-05-27T20:13:54+00:00 | Vulnerability · Source |
| CVE-2026-46620 | redhat_vex | e107: CSRF in comment.php moderation endpoints via token-optional validation in session_handler::check() | known not affected: 1 | 2026-05-27T20:13:53+00:00 | Vulnerability · Source |
| CVE-2026-48135 | redhat_vex | HTTP service can incorrectly process malformed HTTP requests | known not affected: 1 | 2026-05-27T20:13:53+00:00 | Vulnerability · Source |
| CVE-2026-44833 | redhat_vex | Snipe-IT: Open redirect vulnerability | known not affected: 1 | 2026-05-27T20:13:52+00:00 | Vulnerability · Source |
| CVE-2026-44502 | redhat_vex | Bugsink: SSRF bypass in `validate_webhook_url` | known not affected: 1 | 2026-05-27T20:13:46+00:00 | Vulnerability · Source |
| CVE-2026-42335 | redhat_vex | MaxKB: SSRF Bypass in MaxKB OSS URL Fetch due to URL Parsing Discrepancy | known not affected: 1 | 2026-05-27T20:13:46+00:00 | Vulnerability · Source |
| CVE-2026-44707 | redhat_vex | Chatwoot: Pre-Account Takeover via OAuth on Unconfirmed Accounts | known not affected: 1 | 2026-05-27T20:13:46+00:00 | Vulnerability · Source |
| CVE-2026-41917 | redhat_vex | OpenKM 6.3.12 Local File Inclusion via Admin Scripting | known not affected: 1 | 2026-05-27T20:13:45+00:00 | Vulnerability · Source |
| CVE-2026-41164 | redhat_vex | nuts-node: JWT type confusion in v1 access token introspection allows VP replay as access token | known not affected: 1 | 2026-05-27T20:13:44+00:00 | Vulnerability · Source |
| CVE-2026-24201 | redhat_vex | CVE-2026-24201 | known not affected: 1 | 2026-05-27T20:13:43+00:00 | Vulnerability · Source |
| CVE-2026-24199 | redhat_vex | CVE-2026-24199 | known not affected: 1 | 2026-05-27T20:13:42+00:00 | Vulnerability · Source |
| CVE-2026-24198 | redhat_vex | CVE-2026-24198 | known not affected: 1 | 2026-05-27T20:13:42+00:00 | Vulnerability · Source |
| CVE-2026-24197 | redhat_vex | CVE-2026-24197 | known not affected: 1 | 2026-05-27T20:13:40+00:00 | Vulnerability · Source |
| CVE-2026-24182 | redhat_vex | CVE-2026-24182 | known not affected: 1 | 2026-05-27T20:13:39+00:00 | Vulnerability · Source |
| CVE-2026-9478 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setParentalRules os command injection | known not affected: 1 | 2026-05-27T20:13:36+00:00 | Vulnerability · Source |
| CVE-2026-9385 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setTracerouteCfg os command injection | known not affected: 1 | 2026-05-27T20:13:36+00:00 | Vulnerability · Source |
| CVE-2026-9348 | redhat_vex | Edimax EW-7438RPn webs mp stack-based overflow | known not affected: 1 | 2026-05-27T20:13:36+00:00 | Vulnerability · Source |
| CVE-2026-9360 | redhat_vex | Edimax EW-7438RPn POST Request formwlencrypt24g buffer overflow | known not affected: 1 | 2026-05-27T20:13:36+00:00 | Vulnerability · Source |
| CVE-2026-9406 | redhat_vex | Totolink A8000RU Web Management cstecgi.cgi setRemoteCfg os command injection | known not affected: 1 | 2026-05-27T20:13:36+00:00 | Vulnerability · Source |
| CVE-2026-45321 | redhat_vex | Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys | known not affected: 1 | 2026-05-27T20:13:35+00:00 | Vulnerability · Source |
| CVE-2026-8855 | redhat_vex | IBM HTTP Server is affected by multiple vulnerabilities | known not affected: 1 | 2026-05-27T20:13:35+00:00 | Vulnerability · Source |
| CVE-2026-44832 | redhat_vex | Snipe-IT: Privilege Escalation via API Permissions Assignment | known not affected: 1 | 2026-05-27T20:13:35+00:00 | Vulnerability · Source |
| CVE-2026-8468 | redhat_vex | Unbounded buffer accumulation in multipart header parsing causes denial of service in plug | known not affected: 1 | 2026-05-27T20:13:35+00:00 | Vulnerability · Source |
| CVE-2026-47202 | redhat_vex | Kavita: Pre-Auth Account Takeover | known not affected: 1 | 2026-05-27T20:13:35+00:00 | Vulnerability · Source |
| CVE-2026-44667 | redhat_vex | Faction: Stored XSS in Remediation Verification Attachment Filename Preview Rendering | known not affected: 1 | 2026-05-27T20:13:35+00:00 | Vulnerability · Source |
| CVE-2026-44668 | redhat_vex | Faction: Unauthenticated Read, Modify, and Delete of Boilerplate Templates | known not affected: 1 | 2026-05-27T20:13:35+00:00 | Vulnerability · Source |
| CVE-2026-44444 | redhat_vex | Lumiverse: Spindle extension install runs untrusted lifecycle scripts before security scan | known not affected: 1 | 2026-05-27T20:13:34+00:00 | Vulnerability · Source |
| CVE-2026-44451 | redhat_vex | Lumiverse: TSX component sandbox escape via DOM ref and string-split identifier bypass | known not affected: 1 | 2026-05-27T20:13:30+00:00 | Vulnerability · Source |
| CVE-2026-39806 | redhat_vex | HTTP/1 chunked decoder infinite loop on requests with trailer fields in bandit | known not affected: 1 | 2026-05-27T20:13:28+00:00 | Vulnerability · Source |
| CVE-2026-39803 | redhat_vex | HTTP/1 chunked body reader ignores length cap in bandit | known not affected: 1 | 2026-05-27T20:13:27+00:00 | Vulnerability · Source |
| CVE-2026-24200 | redhat_vex | CVE-2026-24200 | known not affected: 1 | 2026-05-27T20:13:20+00:00 | Vulnerability · Source |
| CVE-2026-24196 | redhat_vex | CVE-2026-24196 | known not affected: 1 | 2026-05-27T20:13:20+00:00 | Vulnerability · Source |