VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
302181 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-7676 | redhat_vex | kerwincui FastBee Tool Download Endpoint ToolController.java ToolController.download path traversal | known not affected: 1 | 2026-05-05T20:21:09+00:00 | Vulnerability · Source |
| CVE-2026-7447 | redhat_vex | SourceCodester Pet Grooming Management Software update_customer.php sql injection | known not affected: 1 | 2026-05-05T20:21:08+00:00 | Vulnerability · Source |
| CVE-2026-7670 | redhat_vex | Jinher OA UserSel.aspx sql injection | known not affected: 1 | 2026-05-05T20:21:08+00:00 | Vulnerability · Source |
| CVE-2026-42233 | redhat_vex | n8n: SQL Injection in Oracle Database Node via Limit Field | known not affected: 1 | 2026-05-05T20:21:08+00:00 | Vulnerability · Source |
| CVE-2026-7695 | redhat_vex | Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform elecMaxMinAvgValue sql injection | known not affected: 1 | 2026-05-05T20:21:08+00:00 | Vulnerability · Source |
| CVE-2026-42091 | redhat_vex | goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS | known not affected: 1 | 2026-05-05T20:21:07+00:00 | Vulnerability · Source |
| CVE-2026-42229 | redhat_vex | n8n: SQL Injection in SeaTable Node | known not affected: 1 | 2026-05-05T20:21:07+00:00 | Vulnerability · Source |
| CVE-2026-7750 | redhat_vex | Totolink N300RH POST Request cstecgi.cgi setMacFilterRules buffer overflow | known not affected: 1 | 2026-05-05T20:21:07+00:00 | Vulnerability · Source |
| CVE-2026-42223 | redhat_vex | nginx-ui: Settings API Exposes Protected Secrets | known not affected: 1 | 2026-05-05T20:21:07+00:00 | Vulnerability · Source |
| CVE-2026-7719 | redhat_vex | Totolink WA300 POST Request cstecgi.cgi loginauth buffer overflow | known not affected: 1 | 2026-05-05T20:21:07+00:00 | Vulnerability · Source |
| CVE-2026-42238 | redhat_vex | Unauthenticated Remote Code Execution via Backup Restore in nginx-ui | known not affected: 1 | 2026-05-05T20:21:06+00:00 | Vulnerability · Source |
| CVE-2026-5394 | redhat_vex | Pimcore Platform v12.3.3 - SQL Injection in DataObject composite index handling | known not affected: 1 | 2026-05-05T20:21:06+00:00 | Vulnerability · Source |
| CVE-2026-42221 | redhat_vex | nginx-ui: Unauthenticated First-Run Installer Allows Remote Initial Admin Claim | known not affected: 1 | 2026-05-05T20:21:06+00:00 | Vulnerability · Source |
| CVE-2026-42076 | redhat_vex | Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution | known not affected: 1 | 2026-05-05T20:21:06+00:00 | Vulnerability · Source |
| CVE-2026-41923 | redhat_vex | WDR201A WiFi Extender OS Command Injection via internet.cgi | known not affected: 1 | 2026-05-05T20:21:05+00:00 | Vulnerability · Source |
| CVE-2026-41927 | redhat_vex | WDR201A WiFi Extender Stack-Based Buffer Overflow via firewall.cgi | known not affected: 1 | 2026-05-05T20:21:05+00:00 | Vulnerability · Source |
| CVE-2025-65717 | redhat_vex | CVE-2025-65717 | known not affected: 1 | 2026-05-05T20:21:05+00:00 | Vulnerability · Source |
| CVE-2025-67796 | redhat_vex | CVE-2025-67796 | known not affected: 1 | 2026-05-05T20:21:05+00:00 | Vulnerability · Source |
| CVE-2026-42052 | redhat_vex | beets is Vulnerable to XSS | known not affected: 1 | 2026-05-05T20:21:05+00:00 | Vulnerability · Source |
| CVE-2026-41686 | redhat_vex | Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool | known not affected: 1 | 2026-05-05T20:21:05+00:00 | Vulnerability · Source |
| CVE-2026-36365 | redhat_vex | CVE-2026-36365 | known not affected: 1 | 2026-05-05T20:21:05+00:00 | Vulnerability · Source |
| CVE-2026-40687 | redhat_vex | Exim: Exim: Denial of Service and Information Disclosure via SPA authentication driver vulnerability | known not affected: 1 | 2026-05-05T15:12:50+00:00 | Vulnerability · Source |
| CVE-2026-40684 | redhat_vex | Exim: Exim: Denial of Service due to malformed DNS data in PTR records on musl libc systems | known not affected: 1 | 2026-05-05T15:12:48+00:00 | Vulnerability · Source |
| CVE-2026-40685 | redhat_vex | Exim: Exim: Denial of Service due to malformed JSON processing | known not affected: 1 | 2026-05-05T15:09:36+00:00 | Vulnerability · Source |
| CVE-2026-22679 | redhat_vex | Weaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug Endpoint | known not affected: 1 | 2026-05-05T14:20:36+00:00 | Vulnerability · Source |
| CVE-2026-38751 | redhat_vex | CVE-2026-38751 | known not affected: 1 | 2026-05-05T14:20:36+00:00 | Vulnerability · Source |
| CVE-2026-22745 | redhat_vex | spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows | known affected: 9 | 2026-05-05T14:06:50+00:00 | Vulnerability · Source |
| CVE-2026-7372 | redhat_vex | GeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerability | known not affected: 1 | 2026-05-05T08:20:47+00:00 | Vulnerability · Source |
| CVE-2026-42370 | redhat_vex | GeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerability | known not affected: 1 | 2026-05-05T08:20:46+00:00 | Vulnerability · Source |
| CVE-2026-20448 | redhat_vex | CVE-2026-20448 | known not affected: 1 | 2026-05-05T08:20:46+00:00 | Vulnerability · Source |
| CVE-2026-20447 | redhat_vex | CVE-2026-20447 | known not affected: 1 | 2026-05-05T08:20:46+00:00 | Vulnerability · Source |
| CVE-2026-20451 | redhat_vex | CVE-2026-20451 | known not affected: 1 | 2026-05-05T08:20:46+00:00 | Vulnerability · Source |
| CVE-2026-42369 | redhat_vex | GeoVision GV-VMS V20 WebCam Server stack overflow vulnerability | known not affected: 1 | 2026-05-05T08:20:46+00:00 | Vulnerability · Source |
| CVE-2026-42367 | redhat_vex | GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi privilege escalation vulnerability via leak of Administrator credentials | known not affected: 1 | 2026-05-05T08:20:46+00:00 | Vulnerability · Source |
| CVE-2026-42368 | redhat_vex | GeoVision LPC2011/LPC2211 Web Interface privilege escalation vulnerability | known not affected: 1 | 2026-05-05T08:20:46+00:00 | Vulnerability · Source |
| CVE-2026-42364 | redhat_vex | GeoVision LPC2011/LPC2211 Web Interface / DdnsSetting.cgi OS command injection vulnerability | known not affected: 1 | 2026-05-05T08:20:46+00:00 | Vulnerability · Source |
| CVE-2026-7161 | redhat_vex | GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability | known not affected: 1 | 2026-05-05T08:20:46+00:00 | Vulnerability · Source |
| CVE-2026-7718 | redhat_vex | Totolink WA300 POST Request cstecgi.cgi setWebWlanIdx command injection | known not affected: 1 | 2026-05-05T02:20:48+00:00 | Vulnerability · Source |
| CVE-2026-7700 | redhat_vex | langflow-ai langflow LambdaFilterComponent lambda_filter.p eval code injection | known not affected: 1 | 2026-05-05T02:20:48+00:00 | Vulnerability · Source |
| CVE-2026-7712 | redhat_vex | MindsDB Pickle pickle.loads deserialization | known not affected: 1 | 2026-05-05T02:20:48+00:00 | Vulnerability · Source |
| CVE-2026-7722 | redhat_vex | PrefectHQ prefect Health Check API health endswith improper authentication | known not affected: 1 | 2026-05-05T02:20:48+00:00 | Vulnerability · Source |
| CVE-2026-7706 | redhat_vex | Open5GS AMF gmm-handler.c gmm_handle_service_request denial of service | known not affected: 1 | 2026-05-05T02:20:48+00:00 | Vulnerability · Source |
| CVE-2026-7694 | redhat_vex | Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System elecMaxMinAvgValue sql injection | known not affected: 1 | 2026-05-05T02:20:47+00:00 | Vulnerability · Source |
| CVE-2026-7687 | redhat_vex | langflow-ai langflow Full Builtins code_parser.py CodeParser.parse_callable_details command injection | known not affected: 1 | 2026-05-05T02:20:46+00:00 | Vulnerability · Source |
| CVE-2026-7429 | redhat_vex | SSCMS v7.4.0 Reflected Cross-Site Scripting via STL Processing | known not affected: 1 | 2026-05-05T02:20:46+00:00 | Vulnerability · Source |
| CVE-2026-40201 | redhat_vex | CVE-2026-40201 | known not affected: 1 | 2026-05-05T02:20:46+00:00 | Vulnerability · Source |
| CVE-2026-2554 | redhat_vex | WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.25 - Authenticated (Vendor+) Insecure Direct Object Reference to Arbitrary User Deletion | known not affected: 1 | 2026-05-05T02:20:46+00:00 | Vulnerability · Source |
| CVE-2026-7642 | redhat_vex | pskill9 website-downloader MCP index.ts download_website os command injection | known not affected: 1 | 2026-05-05T02:20:46+00:00 | Vulnerability · Source |
| CVE-2026-7675 | redhat_vex | Shenzhen Libituo Technology LBT-T300-HW1 apply.cgi start_lan buffer overflow | known not affected: 1 | 2026-05-05T02:20:46+00:00 | Vulnerability · Source |
| CVE-2026-7669 | redhat_vex | sgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer code injection | known not affected: 1 | 2026-05-05T02:20:46+00:00 | Vulnerability · Source |