VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
302310 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-5337 | redhat_vex | Frontend File Manager Plugin <= 23.6 - Subscriber+ Arbitrary Download Access via IDOR | known not affected: 1 | 2026-05-04T20:21:28+00:00 | Vulnerability · Source |
| CVE-2026-7410 | redhat_vex | SourceCodester Pizzafy Ecommerce System ajax.php add_to_cart sql injection | known not affected: 1 | 2026-05-04T20:21:28+00:00 | Vulnerability · Source |
| CVE-2026-7703 | redhat_vex | AV Stumpfl Pixera Two Media Server Websocket API code injection | known not affected: 1 | 2026-05-04T20:21:27+00:00 | Vulnerability · Source |
| CVE-2026-7698 | redhat_vex | Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection | known not affected: 1 | 2026-05-04T20:21:26+00:00 | Vulnerability · Source |
| CVE-2026-7686 | redhat_vex | eyeo Adblock Plus Legacy Premium Activation premium.preload.js postMessage access control | known not affected: 1 | 2026-05-04T20:21:26+00:00 | Vulnerability · Source |
| CVE-2026-7679 | redhat_vex | YunaiV yudao-cloud OAuth2TokenServiceImpl.java getAccessToken improper authentication | known not affected: 1 | 2026-05-04T20:21:25+00:00 | Vulnerability · Source |
| CVE-2026-7645 | redhat_vex | ruvnet sublinear-time-solver MCP server.js export_state path traversal | known not affected: 1 | 2026-05-04T20:21:25+00:00 | Vulnerability · Source |
| CVE-2026-7644 | redhat_vex | ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization | known not affected: 1 | 2026-05-04T20:21:24+00:00 | Vulnerability · Source |
| CVE-2026-7638 | redhat_vex | App Builder <= 5.5.10 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Avatar Modification via 'user_id' Parameter | known not affected: 1 | 2026-05-04T20:21:24+00:00 | Vulnerability · Source |
| CVE-2026-7611 | redhat_vex | TRENDnet TEW-821DAP Firmware Update cameo_dev.sh platform_do_upgrade_cameo_dev data authenticity | known not affected: 1 | 2026-05-04T20:21:23+00:00 | Vulnerability · Source |
| CVE-2026-7633 | redhat_vex | Totolink N300RH cstecgi.cgi setUploadSetting file inclusion | known not affected: 1 | 2026-05-04T20:21:23+00:00 | Vulnerability · Source |
| CVE-2026-7630 | redhat_vex | innocommerce InnoShop Installation Endpoint InstallServiceProvider.php boot improper authentication | known not affected: 1 | 2026-05-04T20:21:23+00:00 | Vulnerability · Source |
| CVE-2026-7632 | redhat_vex | code-projects Online Hospital Management System viewappointment.php sql injection | known not affected: 1 | 2026-05-04T20:21:23+00:00 | Vulnerability · Source |
| CVE-2026-7601 | redhat_vex | Open5GS AMF gmm-handler.c denial of service | known not affected: 1 | 2026-05-04T20:21:22+00:00 | Vulnerability · Source |
| CVE-2026-7606 | redhat_vex | TRENDnet TEW-821DAP Firmware Update new_gui_update_firmware data authenticity | known not affected: 1 | 2026-05-04T20:21:22+00:00 | Vulnerability · Source |
| CVE-2026-7594 | redhat_vex | Flux159 mcp-game-asset-gen MCP index.ts image_to_3d_async path traversal | known not affected: 1 | 2026-05-04T20:21:21+00:00 | Vulnerability · Source |
| CVE-2026-7592 | redhat_vex | itsourcecode Courier Management System edit_staff.php sql injection | known not affected: 1 | 2026-05-04T20:21:20+00:00 | Vulnerability · Source |
| CVE-2026-6457 | redhat_vex | Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection via 'geo_mashup_null_fields' Parameter | known not affected: 1 | 2026-05-04T20:21:20+00:00 | Vulnerability · Source |
| CVE-2026-6916 | redhat_vex | Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute | known not affected: 1 | 2026-05-04T20:21:20+00:00 | Vulnerability · Source |
| CVE-2026-7593 | redhat_vex | Sunwood-ai-labs command-executor-mcp-server MCP index.ts execute_command os command injection | known not affected: 1 | 2026-05-04T20:21:20+00:00 | Vulnerability · Source |
| CVE-2026-7589 | redhat_vex | ghantakiran splunk-mcp-integration CSV Export csv_export.py create_csv_export path traversal | known not affected: 1 | 2026-05-04T20:21:19+00:00 | Vulnerability · Source |
| CVE-2026-7579 | redhat_vex | AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials | known not affected: 1 | 2026-05-04T20:21:18+00:00 | Vulnerability · Source |
| CVE-2026-7545 | redhat_vex | SourceCodester Advanced School Management System checkEmail Endpoint commonController.php sql injection | known not affected: 1 | 2026-05-04T20:21:18+00:00 | Vulnerability · Source |
| CVE-2026-7549 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System ajax.php delete_customer sql injection | known not affected: 1 | 2026-05-04T20:21:18+00:00 | Vulnerability · Source |
| CVE-2026-7209 | redhat_vex | Simple Link Directory <= 8.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-05-04T20:21:17+00:00 | Vulnerability · Source |
| CVE-2026-7443 | redhat_vex | BurtTheCoder mcp-dnstwist MCP index.ts fuzz_domain os command injection | known not affected: 1 | 2026-05-04T20:21:17+00:00 | Vulnerability · Source |
| CVE-2026-6817 | redhat_vex | Quiz Maker by AYS <= 6.7.1.29 - Unauthenticated Stored Cross-Site Scripting via 'rate_reason' | known not affected: 1 | 2026-05-04T20:21:16+00:00 | Vulnerability · Source |
| CVE-2026-7674 | redhat_vex | Shenzhen Libituo Technology LBT-T300-HW1 Web Management start_single_service buffer overflow | known not affected: 1 | 2026-05-04T20:21:16+00:00 | Vulnerability · Source |
| CVE-2026-6812 | redhat_vex | Ona <= 1.26 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'download_link' Parameter | known not affected: 1 | 2026-05-04T20:21:15+00:00 | Vulnerability · Source |
| CVE-2026-6447 | redhat_vex | Call for Price for WooCommerce <= 4.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Call for Price' Label Settings | known not affected: 1 | 2026-05-04T20:21:15+00:00 | Vulnerability · Source |
| CVE-2026-6446 | redhat_vex | My Social Feeds <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'ttp_get_accounts' AJAX Action | known not affected: 1 | 2026-05-04T20:21:15+00:00 | Vulnerability · Source |
| CVE-2026-6449 | redhat_vex | Booking for Appointments and Events Calendar – Amelia <= 2.1.2 - Unauthenticated Authorization Bypass via Remote Approval Endpoint | known not affected: 1 | 2026-05-04T20:21:15+00:00 | Vulnerability · Source |
| CVE-2026-4790 | redhat_vex | Premium Addons for Elementor <= 4.11.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_svg' Parameter | known not affected: 1 | 2026-05-04T20:21:14+00:00 | Vulnerability · Source |
| CVE-2026-6378 | redhat_vex | Maxi Blocks <= 2.1.9 - Authenticated (Author+) Stored Cross-Site Scripting via Style Card REST API | known not affected: 1 | 2026-05-04T20:21:14+00:00 | Vulnerability · Source |
| CVE-2026-5077 | redhat_vex | Total <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in Blog Section Image alt Attribute | known not affected: 1 | 2026-05-04T20:21:14+00:00 | Vulnerability · Source |
| CVE-2026-4650 | redhat_vex | FundPress <= 2.0.8 - Missing Authorization to Unauthenticated Arbitrary Donation Status Modification via donate_action_status AJAX Handler | known not affected: 1 | 2026-05-04T20:21:13+00:00 | Vulnerability · Source |
| CVE-2026-4658 | redhat_vex | Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes | known not affected: 1 | 2026-05-04T20:21:13+00:00 | Vulnerability · Source |
| CVE-2026-7685 | redhat_vex | Edimax BR-6208AC setWAN buffer overflow | known not affected: 1 | 2026-05-04T20:21:12+00:00 | Vulnerability · Source |
| CVE-2026-3504 | redhat_vex | Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 4.3.1 - Unauthenticated Information Disclosure in Store Reviews REST API Endpoint | known not affected: 1 | 2026-05-04T20:21:12+00:00 | Vulnerability · Source |
| CVE-2026-7684 | redhat_vex | Edimax BR-6428nC setWAN buffer overflow | known not affected: 1 | 2026-05-04T20:21:12+00:00 | Vulnerability · Source |
| CVE-2026-4024 | redhat_vex | Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modification | known not affected: 1 | 2026-05-04T20:21:12+00:00 | Vulnerability · Source |
| CVE-2026-7641 | redhat_vex | Import and export users and customers <= 2.0.8 - Authenticated (Subscriber+) Privilege Escalation via Multisite Capability Meta Fields | known not affected: 1 | 2026-05-04T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-7647 | redhat_vex | Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object Injection | known not affected: 1 | 2026-05-04T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-7489 | redhat_vex | Sunnet｜CTMS - SQL Injection | known not affected: 1 | 2026-05-04T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-7649 | redhat_vex | ARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' Parameter | known not affected: 1 | 2026-05-04T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-7470 | redhat_vex | Tenda 4G300 SafeMacFilter sub_427C3C stack-based overflow | known not affected: 1 | 2026-05-04T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-7607 | redhat_vex | TRENDnet TEW-821DAP Firmware Udpate auto_update_firmware buffer overflow | known not affected: 1 | 2026-05-04T20:21:09+00:00 | Vulnerability · Source |
| CVE-2026-6229 | redhat_vex | Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter | known not affected: 1 | 2026-05-04T20:21:09+00:00 | Vulnerability · Source |
| CVE-2026-7491 | redhat_vex | Zyosoft｜School App - Insecure Direct Object Reference | known not affected: 1 | 2026-05-04T20:21:08+00:00 | Vulnerability · Source |
| CVE-2026-7435 | redhat_vex | SSCMS v7.4.0 SQL Injection via stl:sqlContent queryString | known not affected: 1 | 2026-05-04T20:21:08+00:00 | Vulnerability · Source |