VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297698 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-2638 | redhat_vex | X-VPN macOS website versions - Local Privilege Escalation | known not affected: 1 | 2026-06-10T14:59:46+00:00 | Vulnerability · Source |
| CVE-2026-41031 | redhat_vex | A Stored Cross-Site Scripting (XSS) vulnerability occurs in Vinna Process Monitor | known not affected: 1 | 2026-06-10T14:59:46+00:00 | Vulnerability · Source |
| CVE-2026-50752 | redhat_vex | Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1 | known not affected: 1 | 2026-06-10T14:59:43+00:00 | Vulnerability · Source |
| CVE-2026-34031 | redhat_vex | Apache Answer: The custom avatar was not properly validated | known not affected: 1 | 2026-06-10T14:59:43+00:00 | Vulnerability · Source |
| CVE-2026-49144 | redhat_vex | BrowserStack Runner 0.9.5 Path Traversal via _default HTTP Handler | known not affected: 1 | 2026-06-10T14:59:43+00:00 | Vulnerability · Source |
| CVE-2026-50751 | redhat_vex | User Authentication Bypass in VPN Remote Access and Mobile Access | known not affected: 1 | 2026-06-10T14:59:43+00:00 | Vulnerability · Source |
| CVE-2026-42554 | redhat_vex | github.com/gofiber/fiber: Fiber: Cross-Site Scripting via Accept header manipulation | known not affected: 1 | 2026-06-10T10:53:54+00:00 | Vulnerability · Source |
| CVE-2026-8981 | redhat_vex | Lazy Blocks < 4.3.0 - Admin+ Stored XSS via Custom Block Frontend HTML | known not affected: 1 | 2026-06-10T08:59:41+00:00 | Vulnerability · Source |
| CVE-2026-41974 | redhat_vex | CVE-2026-41974 | known not affected: 1 | 2026-06-10T08:59:41+00:00 | Vulnerability · Source |
| CVE-2026-11434 | redhat_vex | FluentCMS Blocks Plugin blocks cross site scripting | known not affected: 1 | 2026-06-10T08:59:41+00:00 | Vulnerability · Source |
| CVE-2026-41986 | redhat_vex | CVE-2026-41986 | known not affected: 1 | 2026-06-10T08:59:39+00:00 | Vulnerability · Source |
| CVE-2026-49818 | redhat_vex | Apache Airflow Samba provider: Path traversal in GCSToSambaOperator via GCS object names | known not affected: 1 | 2026-06-10T08:59:39+00:00 | Vulnerability · Source |
| CVE-2026-4986 | redhat_vex | WPForms Lite < 1.10.0.5 – Unauthenticated PayPal Webhook Forgery | known not affected: 1 | 2026-06-10T08:59:39+00:00 | Vulnerability · Source |
| CVE-2026-34905 | redhat_vex | Apache Answer: Unlisted Questions Accessible via Direct API Access | known not affected: 1 | 2026-06-10T08:59:37+00:00 | Vulnerability · Source |
| CVE-2026-34033 | redhat_vex | Apache Answer: HTML Content Injection in Email | known not affected: 1 | 2026-06-10T08:59:37+00:00 | Vulnerability · Source |
| CVE-2026-33582 | redhat_vex | Apache Answer: Uploading specially crafted TIFF files causes an Out-of-Memory error | known not affected: 1 | 2026-06-10T08:59:36+00:00 | Vulnerability · Source |
| CVE-2026-25699 | redhat_vex | Apache Answer: Authorization Bypass in Timeline API | known not affected: 1 | 2026-06-10T08:59:35+00:00 | Vulnerability · Source |
| CVE-2026-25688 | redhat_vex | Apache Answer: XSS in AI Answer Rendering | known not affected: 1 | 2026-06-10T08:59:34+00:00 | Vulnerability · Source |
| CVE-2026-46749 | redhat_vex | CVE-2026-46749 | known not affected: 1 | 2026-06-10T08:59:32+00:00 | Vulnerability · Source |
| CVE-2026-11621 | redhat_vex | Dcat-Admin User Setting upload editorMDUpload unrestricted upload | known not affected: 1 | 2026-06-10T08:59:32+00:00 | Vulnerability · Source |
| CVE-2026-8910 | redhat_vex | WP Emoticon Rating <= 1.0.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting via 'emo_settings' Parameter | known not affected: 1 | 2026-06-10T08:59:31+00:00 | Vulnerability · Source |
| CVE-2026-8907 | redhat_vex | WP-Ultimate-Map <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'zoom-level' Parameter | known not affected: 1 | 2026-06-10T08:59:31+00:00 | Vulnerability · Source |
| CVE-2026-46747 | redhat_vex | CVE-2026-46747 | known not affected: 1 | 2026-06-10T08:59:31+00:00 | Vulnerability · Source |
| CVE-2025-40808 | redhat_vex | CVE-2025-40808 | known not affected: 1 | 2026-06-10T08:59:30+00:00 | Vulnerability · Source |
| CVE-2026-8940 | redhat_vex | WP Meta Sort Posts <= 0.9 - Cross-Site Request Forgery to Plugin Settings Update | known not affected: 1 | 2026-06-10T08:59:29+00:00 | Vulnerability · Source |
| CVE-2026-8977 | redhat_vex | WP GDPR Cookie Consent <= 1.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ninja_gdpr_ajax_actions' AJAX Action | known not affected: 1 | 2026-06-10T08:59:29+00:00 | Vulnerability · Source |
| CVE-2026-8909 | redhat_vex | WpMobi <= 0.0.3 - Cross-Site Request Forgery via save_general_settings Action | known not affected: 1 | 2026-06-10T08:59:28+00:00 | Vulnerability · Source |
| CVE-2026-8904 | redhat_vex | FastPicker, an order picker and order management system (oms) for WooCommerce on steroids <= 1.0.2 - Cross-Site Request Forgery via Settings Save | known not affected: 1 | 2026-06-10T08:59:27+00:00 | Vulnerability · Source |
| CVE-2026-8902 | redhat_vex | AJAX Report Comments <= 2.0.4 - Cross-Site Request Forgery to Settings Update | known not affected: 1 | 2026-06-10T08:59:26+00:00 | Vulnerability · Source |
| CVE-2026-8895 | redhat_vex | kk blog card <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-10T08:59:25+00:00 | Vulnerability · Source |
| CVE-2026-8883 | redhat_vex | Global Body Mass Index Calculator <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-10T08:59:24+00:00 | Vulnerability · Source |
| CVE-2026-8882 | redhat_vex | WP ApplicantStack Jobs Display <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-10T08:59:23+00:00 | Vulnerability · Source |
| CVE-2026-8841 | redhat_vex | Extra Settings for RocketChat <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-10T08:59:22+00:00 | Vulnerability · Source |
| CVE-2026-8880 | redhat_vex | RomanCart Ecommerce <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-10T08:59:22+00:00 | Vulnerability · Source |
| CVE-2026-8677 | redhat_vex | Prime Elementor Addons <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget HTML Tag Settings | known not affected: 1 | 2026-06-10T08:59:22+00:00 | Vulnerability · Source |
| CVE-2026-8599 | redhat_vex | MailerPress <= 2.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Campaign HTML Content Field | known not affected: 1 | 2026-06-10T08:59:21+00:00 | Vulnerability · Source |
| CVE-2026-8499 | redhat_vex | Helpfulcrowd Product Reviews <= 1.2.9 - Inccorect Authorization via Type Juggling in 'token' Parameter to Arbitrary Settings Update | known not affected: 1 | 2026-06-10T08:59:20+00:00 | Vulnerability · Source |
| CVE-2026-6899 | redhat_vex | Improper Check for Certificate Revocation in S2OPC | known not affected: 1 | 2026-06-10T08:59:19+00:00 | Vulnerability · Source |
| CVE-2026-7662 | redhat_vex | ePaperFlip Publisher <= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'publicationid' Shortcode Attribute | known not affected: 1 | 2026-06-10T08:59:19+00:00 | Vulnerability · Source |
| CVE-2026-41982 | redhat_vex | CVE-2026-41982 | known not affected: 1 | 2026-06-10T08:59:18+00:00 | Vulnerability · Source |
| CVE-2026-41985 | redhat_vex | CVE-2026-41985 | known not affected: 1 | 2026-06-10T08:59:18+00:00 | Vulnerability · Source |
| CVE-2026-41984 | redhat_vex | CVE-2026-41984 | known not affected: 1 | 2026-06-10T08:59:17+00:00 | Vulnerability · Source |
| CVE-2026-41983 | redhat_vex | CVE-2026-41983 | known not affected: 1 | 2026-06-10T08:59:17+00:00 | Vulnerability · Source |
| CVE-2026-41981 | redhat_vex | CVE-2026-41981 | known not affected: 1 | 2026-06-10T08:59:15+00:00 | Vulnerability · Source |
| CVE-2026-24349 | redhat_vex | CVE-2026-24349 | known not affected: 1 | 2026-06-10T08:59:14+00:00 | Vulnerability · Source |
| CVE-2026-41980 | redhat_vex | CVE-2026-41980 | known not affected: 1 | 2026-06-10T08:59:13+00:00 | Vulnerability · Source |
| CVE-2026-9662 | redhat_vex | Recover Exit For WooCommerce <= 1.0.3 - Unauthenticated Local File Inclusion via 'tpf' Parameter | known not affected: 1 | 2026-06-10T08:59:13+00:00 | Vulnerability · Source |
| CVE-2026-41979 | redhat_vex | CVE-2026-41979 | known not affected: 1 | 2026-06-10T08:59:13+00:00 | Vulnerability · Source |
| CVE-2026-41978 | redhat_vex | CVE-2026-41978 | known not affected: 1 | 2026-06-10T08:59:12+00:00 | Vulnerability · Source |
| CVE-2026-41975 | redhat_vex | CVE-2026-41975 | known not affected: 1 | 2026-06-10T08:59:11+00:00 | Vulnerability · Source |