VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
302237 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-7678 | redhat_vex | YunaiV yudao-cloud GoViewDataServiceImpl.java getDataBySQL sql injection | known not affected: 1 | 2026-05-04T20:21:43+00:00 | Vulnerability · Source |
| CVE-2026-7672 | redhat_vex | youlaitech youlai-boot Users Endpoint UserController.java getUserList sql injection | known not affected: 1 | 2026-05-04T20:21:43+00:00 | Vulnerability · Source |
| CVE-2026-7673 | redhat_vex | crmeb_java Admin Upload UploadServiceImpl.java unrestricted upload | known not affected: 1 | 2026-05-04T20:21:43+00:00 | Vulnerability · Source |
| CVE-2026-7643 | redhat_vex | ChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policy | known not affected: 1 | 2026-05-04T20:21:42+00:00 | Vulnerability · Source |
| CVE-2026-7671 | redhat_vex | CodeWise Tornet Scooter Mobile App TwoFactor excessive authentication | known not affected: 1 | 2026-05-04T20:21:41+00:00 | Vulnerability · Source |
| CVE-2026-7653 | redhat_vex | r-huijts mcp-server-rijksmuseum MCP index.ts open_image_in_browser os command injection | known not affected: 1 | 2026-05-04T20:21:41+00:00 | Vulnerability · Source |
| CVE-2026-7602 | redhat_vex | JeecgBoot FillRuleUtil edit improper authorization | known not affected: 1 | 2026-05-04T20:21:39+00:00 | Vulnerability · Source |
| CVE-2026-7631 | redhat_vex | code-projects Online Hospital Management System Registration improper authorization | known not affected: 1 | 2026-05-04T20:21:39+00:00 | Vulnerability · Source |
| CVE-2026-7628 | redhat_vex | crazyrabbitLTC mcp-code-review-server RepoMix repomix.ts executeRepomix command injection | known not affected: 1 | 2026-05-04T20:21:39+00:00 | Vulnerability · Source |
| CVE-2026-7629 | redhat_vex | kleneway awesome-cursor-mpc-server Ccode-Review Tool codeReview.ts runCodeReviewTool command injection | known not affected: 1 | 2026-05-04T20:21:39+00:00 | Vulnerability · Source |
| CVE-2026-7612 | redhat_vex | itsourcecode Courier Management System edit_user.php sql injection | known not affected: 1 | 2026-05-04T20:21:38+00:00 | Vulnerability · Source |
| CVE-2026-7627 | redhat_vex | 8nite metatrader-4-mcp sync_ea_from_file index.ts CallToolRequestSchema path traversal | known not affected: 1 | 2026-05-04T20:21:38+00:00 | Vulnerability · Source |
| CVE-2026-7609 | redhat_vex | TRENDnet TEW-821DAP Firmware Udpate diagnostic tools_diagnostic os command injection | known not affected: 1 | 2026-05-04T20:21:37+00:00 | Vulnerability · Source |
| CVE-2026-7610 | redhat_vex | TRENDnet TEW-821DAP Firmware Update ssi cleartext transmission | known not affected: 1 | 2026-05-04T20:21:37+00:00 | Vulnerability · Source |
| CVE-2026-7608 | redhat_vex | TRENDnet TEW-821DAP tools_diagnostic os command injection | known not affected: 1 | 2026-05-04T20:21:36+00:00 | Vulnerability · Source |
| CVE-2026-7605 | redhat_vex | JeecgBoot uploadImgByHttpEndpoint CommonController.java HttpFileToMultipartFileUtil.downloadImageData server-side request forgery | known not affected: 1 | 2026-05-04T20:21:36+00:00 | Vulnerability · Source |
| CVE-2026-7604 | redhat_vex | JeecgBoot OpenApi Service OpenApiController.java OpenApiController.call server-side request forgery | known not affected: 1 | 2026-05-04T20:21:35+00:00 | Vulnerability · Source |
| CVE-2026-7603 | redhat_vex | JeecgBoot LoadFile Endpoint FileDownloadUtils.jav checkPathTraversalBatch server-side request forgery | known not affected: 1 | 2026-05-04T20:21:34+00:00 | Vulnerability · Source |
| CVE-2026-7599 | redhat_vex | Dayoooun hwpx-mcp MCP index.ts export_to_html path traversal | known not affected: 1 | 2026-05-04T20:21:33+00:00 | Vulnerability · Source |
| CVE-2026-7597 | redhat_vex | mem0ai mem0 faiss.py pickle.dump deserialization | known not affected: 1 | 2026-05-04T20:21:33+00:00 | Vulnerability · Source |
| CVE-2026-7600 | redhat_vex | ArtMin96 yii2-mcp-server MCP index.ts yii_execute_command os command injection | known not affected: 1 | 2026-05-04T20:21:33+00:00 | Vulnerability · Source |
| CVE-2026-7595 | redhat_vex | nextlevelbuilder ui-ux-pro-max-skill Tailwind Config Generator tailwind_config_gen.py _format_plugins code injection | known not affected: 1 | 2026-05-04T20:21:32+00:00 | Vulnerability · Source |
| CVE-2026-7586 | redhat_vex | Open5GS AMF nudm-handler.c ogs_id_get_value denial of service | known not affected: 1 | 2026-05-04T20:21:31+00:00 | Vulnerability · Source |
| CVE-2026-7554 | redhat_vex | D-Link M60 httpd password recovery | known not affected: 1 | 2026-05-04T20:21:30+00:00 | Vulnerability · Source |
| CVE-2026-7535 | redhat_vex | Open5GS transfer-update denial of service | known not affected: 1 | 2026-05-04T20:21:30+00:00 | Vulnerability · Source |
| CVE-2026-7508 | redhat_vex | Bootstrap CMS Page Creation show.blade.php code injection | known not affected: 1 | 2026-05-04T20:21:29+00:00 | Vulnerability · Source |
| CVE-2026-7702 | redhat_vex | toeverything AFFiNE Public Markdown Preview Endpoint :docId allowDocPreview authorization | known not affected: 1 | 2026-05-04T20:21:28+00:00 | Vulnerability · Source |
| CVE-2026-5337 | redhat_vex | Frontend File Manager Plugin <= 23.6 - Subscriber+ Arbitrary Download Access via IDOR | known not affected: 1 | 2026-05-04T20:21:28+00:00 | Vulnerability · Source |
| CVE-2026-7410 | redhat_vex | SourceCodester Pizzafy Ecommerce System ajax.php add_to_cart sql injection | known not affected: 1 | 2026-05-04T20:21:28+00:00 | Vulnerability · Source |
| CVE-2026-7703 | redhat_vex | AV Stumpfl Pixera Two Media Server Websocket API code injection | known not affected: 1 | 2026-05-04T20:21:27+00:00 | Vulnerability · Source |
| CVE-2026-7698 | redhat_vex | Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection | known not affected: 1 | 2026-05-04T20:21:26+00:00 | Vulnerability · Source |
| CVE-2026-7686 | redhat_vex | eyeo Adblock Plus Legacy Premium Activation premium.preload.js postMessage access control | known not affected: 1 | 2026-05-04T20:21:26+00:00 | Vulnerability · Source |
| CVE-2026-7679 | redhat_vex | YunaiV yudao-cloud OAuth2TokenServiceImpl.java getAccessToken improper authentication | known not affected: 1 | 2026-05-04T20:21:25+00:00 | Vulnerability · Source |
| CVE-2026-7645 | redhat_vex | ruvnet sublinear-time-solver MCP server.js export_state path traversal | known not affected: 1 | 2026-05-04T20:21:25+00:00 | Vulnerability · Source |
| CVE-2026-7644 | redhat_vex | ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization | known not affected: 1 | 2026-05-04T20:21:24+00:00 | Vulnerability · Source |
| CVE-2026-7638 | redhat_vex | App Builder <= 5.5.10 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Avatar Modification via 'user_id' Parameter | known not affected: 1 | 2026-05-04T20:21:24+00:00 | Vulnerability · Source |
| CVE-2026-7611 | redhat_vex | TRENDnet TEW-821DAP Firmware Update cameo_dev.sh platform_do_upgrade_cameo_dev data authenticity | known not affected: 1 | 2026-05-04T20:21:23+00:00 | Vulnerability · Source |
| CVE-2026-7633 | redhat_vex | Totolink N300RH cstecgi.cgi setUploadSetting file inclusion | known not affected: 1 | 2026-05-04T20:21:23+00:00 | Vulnerability · Source |
| CVE-2026-7630 | redhat_vex | innocommerce InnoShop Installation Endpoint InstallServiceProvider.php boot improper authentication | known not affected: 1 | 2026-05-04T20:21:23+00:00 | Vulnerability · Source |
| CVE-2026-7632 | redhat_vex | code-projects Online Hospital Management System viewappointment.php sql injection | known not affected: 1 | 2026-05-04T20:21:23+00:00 | Vulnerability · Source |
| CVE-2026-7601 | redhat_vex | Open5GS AMF gmm-handler.c denial of service | known not affected: 1 | 2026-05-04T20:21:22+00:00 | Vulnerability · Source |
| CVE-2026-7606 | redhat_vex | TRENDnet TEW-821DAP Firmware Update new_gui_update_firmware data authenticity | known not affected: 1 | 2026-05-04T20:21:22+00:00 | Vulnerability · Source |
| CVE-2026-7594 | redhat_vex | Flux159 mcp-game-asset-gen MCP index.ts image_to_3d_async path traversal | known not affected: 1 | 2026-05-04T20:21:21+00:00 | Vulnerability · Source |
| CVE-2026-7592 | redhat_vex | itsourcecode Courier Management System edit_staff.php sql injection | known not affected: 1 | 2026-05-04T20:21:20+00:00 | Vulnerability · Source |
| CVE-2026-6457 | redhat_vex | Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection via 'geo_mashup_null_fields' Parameter | known not affected: 1 | 2026-05-04T20:21:20+00:00 | Vulnerability · Source |
| CVE-2026-6916 | redhat_vex | Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute | known not affected: 1 | 2026-05-04T20:21:20+00:00 | Vulnerability · Source |
| CVE-2026-7593 | redhat_vex | Sunwood-ai-labs command-executor-mcp-server MCP index.ts execute_command os command injection | known not affected: 1 | 2026-05-04T20:21:20+00:00 | Vulnerability · Source |
| CVE-2026-7589 | redhat_vex | ghantakiran splunk-mcp-integration CSV Export csv_export.py create_csv_export path traversal | known not affected: 1 | 2026-05-04T20:21:19+00:00 | Vulnerability · Source |
| CVE-2026-7579 | redhat_vex | AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials | known not affected: 1 | 2026-05-04T20:21:18+00:00 | Vulnerability · Source |
| CVE-2026-7545 | redhat_vex | SourceCodester Advanced School Management System checkEmail Endpoint commonController.php sql injection | known not affected: 1 | 2026-05-04T20:21:18+00:00 | Vulnerability · Source |