VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
305222 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-7595 | redhat_vex | nextlevelbuilder ui-ux-pro-max-skill Tailwind Config Generator tailwind_config_gen.py _format_plugins code injection | known not affected: 1 | 2026-05-04T20:21:32+00:00 | Vulnerability · Source |
| CVE-2026-7586 | redhat_vex | Open5GS AMF nudm-handler.c ogs_id_get_value denial of service | known not affected: 1 | 2026-05-04T20:21:31+00:00 | Vulnerability · Source |
| CVE-2026-7554 | redhat_vex | D-Link M60 httpd password recovery | known not affected: 1 | 2026-05-04T20:21:30+00:00 | Vulnerability · Source |
| CVE-2026-7535 | redhat_vex | Open5GS transfer-update denial of service | known not affected: 1 | 2026-05-04T20:21:30+00:00 | Vulnerability · Source |
| CVE-2026-7508 | redhat_vex | Bootstrap CMS Page Creation show.blade.php code injection | known not affected: 1 | 2026-05-04T20:21:29+00:00 | Vulnerability · Source |
| CVE-2026-7702 | redhat_vex | toeverything AFFiNE Public Markdown Preview Endpoint :docId allowDocPreview authorization | known not affected: 1 | 2026-05-04T20:21:28+00:00 | Vulnerability · Source |
| CVE-2026-5337 | redhat_vex | Frontend File Manager Plugin <= 23.6 - Subscriber+ Arbitrary Download Access via IDOR | known not affected: 1 | 2026-05-04T20:21:28+00:00 | Vulnerability · Source |
| CVE-2026-7410 | redhat_vex | SourceCodester Pizzafy Ecommerce System ajax.php add_to_cart sql injection | known not affected: 1 | 2026-05-04T20:21:28+00:00 | Vulnerability · Source |
| CVE-2026-7703 | redhat_vex | AV Stumpfl Pixera Two Media Server Websocket API code injection | known not affected: 1 | 2026-05-04T20:21:27+00:00 | Vulnerability · Source |
| CVE-2026-7698 | redhat_vex | Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection | known not affected: 1 | 2026-05-04T20:21:26+00:00 | Vulnerability · Source |
| CVE-2026-7686 | redhat_vex | eyeo Adblock Plus Legacy Premium Activation premium.preload.js postMessage access control | known not affected: 1 | 2026-05-04T20:21:26+00:00 | Vulnerability · Source |
| CVE-2026-7679 | redhat_vex | YunaiV yudao-cloud OAuth2TokenServiceImpl.java getAccessToken improper authentication | known not affected: 1 | 2026-05-04T20:21:25+00:00 | Vulnerability · Source |
| CVE-2026-7645 | redhat_vex | ruvnet sublinear-time-solver MCP server.js export_state path traversal | known not affected: 1 | 2026-05-04T20:21:25+00:00 | Vulnerability · Source |
| CVE-2026-7644 | redhat_vex | ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization | known not affected: 1 | 2026-05-04T20:21:24+00:00 | Vulnerability · Source |
| CVE-2026-7638 | redhat_vex | App Builder <= 5.5.10 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Avatar Modification via 'user_id' Parameter | known not affected: 1 | 2026-05-04T20:21:24+00:00 | Vulnerability · Source |
| CVE-2026-7611 | redhat_vex | TRENDnet TEW-821DAP Firmware Update cameo_dev.sh platform_do_upgrade_cameo_dev data authenticity | known not affected: 1 | 2026-05-04T20:21:23+00:00 | Vulnerability · Source |
| CVE-2026-7633 | redhat_vex | Totolink N300RH cstecgi.cgi setUploadSetting file inclusion | known not affected: 1 | 2026-05-04T20:21:23+00:00 | Vulnerability · Source |
| CVE-2026-7630 | redhat_vex | innocommerce InnoShop Installation Endpoint InstallServiceProvider.php boot improper authentication | known not affected: 1 | 2026-05-04T20:21:23+00:00 | Vulnerability · Source |
| CVE-2026-7632 | redhat_vex | code-projects Online Hospital Management System viewappointment.php sql injection | known not affected: 1 | 2026-05-04T20:21:23+00:00 | Vulnerability · Source |
| CVE-2026-7601 | redhat_vex | Open5GS AMF gmm-handler.c denial of service | known not affected: 1 | 2026-05-04T20:21:22+00:00 | Vulnerability · Source |
| CVE-2026-7606 | redhat_vex | TRENDnet TEW-821DAP Firmware Update new_gui_update_firmware data authenticity | known not affected: 1 | 2026-05-04T20:21:22+00:00 | Vulnerability · Source |
| CVE-2026-7594 | redhat_vex | Flux159 mcp-game-asset-gen MCP index.ts image_to_3d_async path traversal | known not affected: 1 | 2026-05-04T20:21:21+00:00 | Vulnerability · Source |
| CVE-2026-7592 | redhat_vex | itsourcecode Courier Management System edit_staff.php sql injection | known not affected: 1 | 2026-05-04T20:21:20+00:00 | Vulnerability · Source |
| CVE-2026-6457 | redhat_vex | Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection via 'geo_mashup_null_fields' Parameter | known not affected: 1 | 2026-05-04T20:21:20+00:00 | Vulnerability · Source |
| CVE-2026-6916 | redhat_vex | Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute | known not affected: 1 | 2026-05-04T20:21:20+00:00 | Vulnerability · Source |
| CVE-2026-7593 | redhat_vex | Sunwood-ai-labs command-executor-mcp-server MCP index.ts execute_command os command injection | known not affected: 1 | 2026-05-04T20:21:20+00:00 | Vulnerability · Source |
| CVE-2026-7589 | redhat_vex | ghantakiran splunk-mcp-integration CSV Export csv_export.py create_csv_export path traversal | known not affected: 1 | 2026-05-04T20:21:19+00:00 | Vulnerability · Source |
| CVE-2026-7579 | redhat_vex | AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials | known not affected: 1 | 2026-05-04T20:21:18+00:00 | Vulnerability · Source |
| CVE-2026-7545 | redhat_vex | SourceCodester Advanced School Management System checkEmail Endpoint commonController.php sql injection | known not affected: 1 | 2026-05-04T20:21:18+00:00 | Vulnerability · Source |
| CVE-2026-7549 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System ajax.php delete_customer sql injection | known not affected: 1 | 2026-05-04T20:21:18+00:00 | Vulnerability · Source |
| CVE-2026-7209 | redhat_vex | Simple Link Directory <= 8.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-05-04T20:21:17+00:00 | Vulnerability · Source |
| CVE-2026-7443 | redhat_vex | BurtTheCoder mcp-dnstwist MCP index.ts fuzz_domain os command injection | known not affected: 1 | 2026-05-04T20:21:17+00:00 | Vulnerability · Source |
| CVE-2026-6817 | redhat_vex | Quiz Maker by AYS <= 6.7.1.29 - Unauthenticated Stored Cross-Site Scripting via 'rate_reason' | known not affected: 1 | 2026-05-04T20:21:16+00:00 | Vulnerability · Source |
| CVE-2026-7674 | redhat_vex | Shenzhen Libituo Technology LBT-T300-HW1 Web Management start_single_service buffer overflow | known not affected: 1 | 2026-05-04T20:21:16+00:00 | Vulnerability · Source |
| CVE-2026-6812 | redhat_vex | Ona <= 1.26 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'download_link' Parameter | known not affected: 1 | 2026-05-04T20:21:15+00:00 | Vulnerability · Source |
| CVE-2026-6447 | redhat_vex | Call for Price for WooCommerce <= 4.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Call for Price' Label Settings | known not affected: 1 | 2026-05-04T20:21:15+00:00 | Vulnerability · Source |
| CVE-2026-6446 | redhat_vex | My Social Feeds <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'ttp_get_accounts' AJAX Action | known not affected: 1 | 2026-05-04T20:21:15+00:00 | Vulnerability · Source |
| CVE-2026-6449 | redhat_vex | Booking for Appointments and Events Calendar – Amelia <= 2.1.2 - Unauthenticated Authorization Bypass via Remote Approval Endpoint | known not affected: 1 | 2026-05-04T20:21:15+00:00 | Vulnerability · Source |
| CVE-2026-4790 | redhat_vex | Premium Addons for Elementor <= 4.11.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_svg' Parameter | known not affected: 1 | 2026-05-04T20:21:14+00:00 | Vulnerability · Source |
| CVE-2026-6378 | redhat_vex | Maxi Blocks <= 2.1.9 - Authenticated (Author+) Stored Cross-Site Scripting via Style Card REST API | known not affected: 1 | 2026-05-04T20:21:14+00:00 | Vulnerability · Source |
| CVE-2026-5077 | redhat_vex | Total <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in Blog Section Image alt Attribute | known not affected: 1 | 2026-05-04T20:21:14+00:00 | Vulnerability · Source |
| CVE-2026-4650 | redhat_vex | FundPress <= 2.0.8 - Missing Authorization to Unauthenticated Arbitrary Donation Status Modification via donate_action_status AJAX Handler | known not affected: 1 | 2026-05-04T20:21:13+00:00 | Vulnerability · Source |
| CVE-2026-4658 | redhat_vex | Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes | known not affected: 1 | 2026-05-04T20:21:13+00:00 | Vulnerability · Source |
| CVE-2026-7685 | redhat_vex | Edimax BR-6208AC setWAN buffer overflow | known not affected: 1 | 2026-05-04T20:21:12+00:00 | Vulnerability · Source |
| CVE-2026-3504 | redhat_vex | Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 4.3.1 - Unauthenticated Information Disclosure in Store Reviews REST API Endpoint | known not affected: 1 | 2026-05-04T20:21:12+00:00 | Vulnerability · Source |
| CVE-2026-7684 | redhat_vex | Edimax BR-6428nC setWAN buffer overflow | known not affected: 1 | 2026-05-04T20:21:12+00:00 | Vulnerability · Source |
| CVE-2026-4024 | redhat_vex | Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modification | known not affected: 1 | 2026-05-04T20:21:12+00:00 | Vulnerability · Source |
| CVE-2026-7641 | redhat_vex | Import and export users and customers <= 2.0.8 - Authenticated (Subscriber+) Privilege Escalation via Multisite Capability Meta Fields | known not affected: 1 | 2026-05-04T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-7647 | redhat_vex | Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object Injection | known not affected: 1 | 2026-05-04T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-7489 | redhat_vex | Sunnet｜CTMS - SQL Injection | known not affected: 1 | 2026-05-04T20:21:10+00:00 | Vulnerability · Source |