VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299358 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-5718 | redhat_vex | Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass | known not affected: 1 | 2026-05-27T02:12:37+00:00 | Vulnerability · Source |
| CVE-2026-32687 | redhat_vex | SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3 | known not affected: 1 | 2026-05-27T02:12:37+00:00 | Vulnerability · Source |
| CVE-2025-68711 | redhat_vex | CVE-2025-68711 | known not affected: 1 | 2026-05-27T02:12:37+00:00 | Vulnerability · Source |
| CVE-2025-46310 | redhat_vex | CVE-2025-46310 | known not affected: 1 | 2026-05-27T02:12:37+00:00 | Vulnerability · Source |
| CVE-2026-8711 | microsoft_vex | NGINX JavaScript vulnerability | fixed: 1 known affected: 1 | 2026-05-27T01:40:27+00:00 | Vulnerability · Source |
| CVE-2026-9451 | redhat_vex | code-projects Employee Management System applyleaveprocess.php sql injection | known not affected: 1 | 2026-05-26T20:14:54+00:00 | Vulnerability · Source |
| CVE-2026-9497 | redhat_vex | changmingxie tcc-transaction Fastjson AutoType REST API Fastjson.parseObject deserialization | known not affected: 1 | 2026-05-26T20:14:54+00:00 | Vulnerability · Source |
| CVE-2026-9450 | redhat_vex | code-projects Employee Management System psubmit.php sql injection | known not affected: 1 | 2026-05-26T20:14:54+00:00 | Vulnerability · Source |
| CVE-2026-9445 | redhat_vex | SourceCodester Simple POS and Inventory System File Extension addproduct.php unrestricted upload | known not affected: 1 | 2026-05-26T20:14:53+00:00 | Vulnerability · Source |
| CVE-2026-9444 | redhat_vex | SourceCodester Simple POS and Inventory System GET Parameter deleteproduct.php delete sql injection | known not affected: 1 | 2026-05-26T20:14:53+00:00 | Vulnerability · Source |
| CVE-2026-9441 | redhat_vex | Edimax BR-6478AC POST Request formiNICbasic command injection | known not affected: 1 | 2026-05-26T20:14:53+00:00 | Vulnerability · Source |
| CVE-2026-9439 | redhat_vex | Edimax BR-6675nD stainfo command injection | known not affected: 1 | 2026-05-26T20:14:53+00:00 | Vulnerability · Source |
| CVE-2026-9438 | redhat_vex | yashpokharna2555 StudentManagementSystem courseDel.php resource injection | known not affected: 1 | 2026-05-26T20:14:52+00:00 | Vulnerability · Source |
| CVE-2026-9417 | redhat_vex | code-projects Employee Management System myprofileup.php cross site scripting | known not affected: 1 | 2026-05-26T20:14:50+00:00 | Vulnerability · Source |
| CVE-2026-9423 | redhat_vex | Edimax BR-6675nD POST Request mp command injection | known not affected: 1 | 2026-05-26T20:14:50+00:00 | Vulnerability · Source |
| CVE-2026-9420 | redhat_vex | KLiK SocialMediaWebsite HTTP GET Request Parameter injection | known not affected: 1 | 2026-05-26T20:14:49+00:00 | Vulnerability · Source |
| CVE-2026-9415 | redhat_vex | code-projects Employee Management System eloginwel.php cross site scripting | known not affected: 1 | 2026-05-26T20:14:47+00:00 | Vulnerability · Source |
| CVE-2026-9409 | redhat_vex | Sushmi-pal Invoice-System User Management user improper authorization | known not affected: 1 | 2026-05-26T20:14:46+00:00 | Vulnerability · Source |
| CVE-2026-9402 | redhat_vex | Edimax BR-6675nD POST Request formWlanMP command injection | known not affected: 1 | 2026-05-26T20:14:46+00:00 | Vulnerability · Source |
| CVE-2026-9411 | redhat_vex | SourceCodester Indian Invoicing System Invoice Generation IGST_Invoice.php sql injection | known not affected: 1 | 2026-05-26T20:14:46+00:00 | Vulnerability · Source |
| CVE-2026-9414 | redhat_vex | SourceCodester Indian Invoicing System Invoice Template Render Database-Backed add_order.php cross site scripting | known not affected: 1 | 2026-05-26T20:14:46+00:00 | Vulnerability · Source |
| CVE-2026-9396 | redhat_vex | Besen BS20 EV Charging Station Firmware Version Check ui layer | known not affected: 1 | 2026-05-26T20:14:45+00:00 | Vulnerability · Source |
| CVE-2026-9376 | redhat_vex | JPress UCenter Article Submission Endpoint doWriteSave improper authorization | known not affected: 1 | 2026-05-26T20:14:45+00:00 | Vulnerability · Source |
| CVE-2026-9378 | redhat_vex | Edimax BR-6675nD POST Request formHwSet command injection | known not affected: 1 | 2026-05-26T20:14:45+00:00 | Vulnerability · Source |
| CVE-2026-9369 | redhat_vex | NousResearch hermes-agent CLI web-dashboard web_server.py _discover_dashboard_plugins comparison | known not affected: 1 | 2026-05-26T20:14:44+00:00 | Vulnerability · Source |
| CVE-2026-9371 | redhat_vex | ItzCrazyKns Vane API route.ts missing authentication | known not affected: 1 | 2026-05-26T20:14:44+00:00 | Vulnerability · Source |
| CVE-2026-9304 | redhat_vex | calcom cal.diy Logo API route.ts validateUrlForSSRF server-side request forgery | known not affected: 1 | 2026-05-26T20:14:41+00:00 | Vulnerability · Source |
| CVE-2026-9303 | redhat_vex | calcom cal.diy cross-site request forgery | known not affected: 1 | 2026-05-26T20:14:40+00:00 | Vulnerability · Source |
| CVE-2026-9302 | redhat_vex | 546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injection | known not affected: 1 | 2026-05-26T20:14:39+00:00 | Vulnerability · Source |
| CVE-2026-9297 | redhat_vex | Edimax BR-6428NS POST Request formWlbasic command injection | known not affected: 1 | 2026-05-26T20:14:38+00:00 | Vulnerability · Source |
| CVE-2026-9296 | redhat_vex | Edimax BR-6428NS POST Request formWlanM system command injection | known not affected: 1 | 2026-05-26T20:14:37+00:00 | Vulnerability · Source |
| CVE-2026-5072 | redhat_vex | ptp: Potential Denial of Service via PTP Interval Shift | known not affected: 1 | 2026-05-26T20:14:36+00:00 | Vulnerability · Source |
| CVE-2026-5426 | redhat_vex | KnowledgeDeliver deployments before February 24, 2026 use a static ASP.NET/IIS machineKey value | known not affected: 1 | 2026-05-26T20:14:36+00:00 | Vulnerability · Source |
| CVE-2026-48832 | redhat_vex | CVE-2026-48832 | known not affected: 1 | 2026-05-26T20:14:36+00:00 | Vulnerability · Source |
| CVE-2026-47069 | redhat_vex | CRLF injection in cookie domain/path options in hackney | known not affected: 1 | 2026-05-26T20:14:36+00:00 | Vulnerability · Source |
| CVE-2026-42627 | redhat_vex | CVE-2026-42627 | known not affected: 1 | 2026-05-26T20:14:35+00:00 | Vulnerability · Source |
| CVE-2026-45249 | redhat_vex | Apache ECharts: XSS in Lines series tooltip rendering | known not affected: 1 | 2026-05-26T20:14:35+00:00 | Vulnerability · Source |
| CVE-2026-9490 | redhat_vex | Acer Care Center creates a Named Pipe with a weak Security Descriptor | known not affected: 1 | 2026-05-26T20:14:35+00:00 | Vulnerability · Source |
| CVE-2026-39967 | redhat_vex | TypeBot: Cross-Typebot Result Data Access via Missing typebotId Filter | known not affected: 1 | 2026-05-26T20:14:35+00:00 | Vulnerability · Source |
| CVE-2026-9469 | redhat_vex | yashpokharna2555 StudentManagementSystem success.php sql injection | known not affected: 1 | 2026-05-26T20:14:34+00:00 | Vulnerability · Source |
| CVE-2026-9374 | redhat_vex | yangzongzhuan RuoYi-Vue Common Upload Endpoint upload FileUploadUtils.upload unrestricted upload | known not affected: 1 | 2026-05-26T20:14:33+00:00 | Vulnerability · Source |
| CVE-2026-9453 | redhat_vex | FoundDream miniclawd SkillsLoader skills-loader.ts which command injection | known not affected: 1 | 2026-05-26T20:14:33+00:00 | Vulnerability · Source |
| CVE-2026-9368 | redhat_vex | NousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandbox | known not affected: 1 | 2026-05-26T20:14:33+00:00 | Vulnerability · Source |
| CVE-2026-9447 | redhat_vex | SourceCodester Simple POS and Inventory System search.php sql injection | known not affected: 1 | 2026-05-26T20:14:33+00:00 | Vulnerability · Source |
| CVE-2026-9421 | redhat_vex | KLiK SocialMediaWebsite File upload.inc.php uniqid unrestricted upload | known not affected: 1 | 2026-05-26T20:14:33+00:00 | Vulnerability · Source |
| CVE-2026-9274 | redhat_vex | Information Exposure Vulnerability in CP-Plus Wi-Fi Camera | known not affected: 1 | 2026-05-26T20:14:31+00:00 | Vulnerability · Source |
| CVE-2026-9356 | redhat_vex | SourceCodester Hospitals Patient Records Management System manage_history.php sql injection | known not affected: 1 | 2026-05-26T20:14:31+00:00 | Vulnerability · Source |
| CVE-2026-9355 | redhat_vex | SourceCodester Hospitals Patient Records Management System Master.php save_patient_history sql injection | known not affected: 1 | 2026-05-26T20:14:30+00:00 | Vulnerability · Source |
| CVE-2026-9350 | redhat_vex | NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorization | known not affected: 1 | 2026-05-26T20:14:28+00:00 | Vulnerability · Source |
| CVE-2026-9351 | redhat_vex | NousResearch hermes-agent read_file Tool file_tools.py _is_blocked_device path traversal | known not affected: 1 | 2026-05-26T20:14:28+00:00 | Vulnerability · Source |