VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297729 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2012-2319 | suse_vex | SUSE CVE CVE-2012-2319 | recommended: 95 | 2026-06-08T01:51:08+00:00 | Vulnerability · Source |
| CVE-2012-2373 | suse_vex | SUSE CVE CVE-2012-2373 | recommended: 124 | 2026-06-08T01:51:04+00:00 | Vulnerability · Source |
| CVE-2012-2395 | suse_vex | SUSE CVE CVE-2012-2395 | known affected: 384 known not affected: 5 recommended: 11 | 2026-06-08T01:51:01+00:00 | Vulnerability · Source |
| CVE-2012-3356 | suse_vex | SUSE CVE CVE-2012-3356 | recommended: 1 | 2026-06-08T01:50:20+00:00 | Vulnerability · Source |
| CVE-2012-3410 | suse_vex | SUSE CVE CVE-2012-3410 | recommended: 5 | 2026-06-08T01:50:15+00:00 | Vulnerability · Source |
| CVE-2012-6548 | suse_vex | SUSE CVE CVE-2012-6548 | known not affected: 437 recommended: 128 | 2026-06-08T01:47:43+00:00 | Vulnerability · Source |
| CVE-2013-0231 | suse_vex | SUSE CVE CVE-2013-0231 | known affected: 24 known not affected: 73 recommended: 464 | 2026-06-08T01:47:25+00:00 | Vulnerability · Source |
| CVE-2013-0871 | suse_vex | SUSE CVE CVE-2013-0871 | known not affected: 437 recommended: 188 | 2026-06-08T01:46:28+00:00 | Vulnerability · Source |
| CVE-2013-1848 | suse_vex | SUSE CVE CVE-2013-1848 | known not affected: 355 recommended: 144 | 2026-06-08T01:45:00+00:00 | Vulnerability · Source |
| CVE-2013-2146 | suse_vex | SUSE CVE CVE-2013-2146 | known not affected: 437 recommended: 126 | 2026-06-08T01:44:04+00:00 | Vulnerability · Source |
| CVE-2014-0044 | suse_vex | SUSE CVE CVE-2014-0044 | recommended: 3 | 2026-06-08T01:39:43+00:00 | Vulnerability · Source |
| CVE-2014-3672 | suse_vex | SUSE CVE CVE-2014-3672 | known affected: 312 known not affected: 12 recommended: 524 | 2026-06-08T01:35:31+00:00 | Vulnerability · Source |
| CVE-2014-3755 | suse_vex | SUSE CVE CVE-2014-3755 | recommended: 3 | 2026-06-08T01:35:15+00:00 | Vulnerability · Source |
| CVE-2014-3756 | suse_vex | SUSE CVE CVE-2014-3756 | recommended: 3 | 2026-06-08T01:35:14+00:00 | Vulnerability · Source |
| CVE-2014-5326 | suse_vex | SUSE CVE CVE-2014-5326 | known affected: 384 recommended: 51 | 2026-06-08T01:34:23+00:00 | Vulnerability · Source |
| CVE-2015-1338 | suse_vex | SUSE CVE CVE-2015-1338 | known affected: 1 recommended: 12 | 2026-06-08T01:28:48+00:00 | Vulnerability · Source |
| CVE-2015-2694 | suse_vex | SUSE CVE CVE-2015-2694 | known affected: 310 known not affected: 139 recommended: 639 | 2026-06-08T01:27:48+00:00 | Vulnerability · Source |
| CVE-2015-7687 | suse_vex | SUSE CVE CVE-2015-7687 | No product status | 2026-06-08T01:22:14+00:00 | Vulnerability · Source |
| CVE-2016-0794 | suse_vex | SUSE CVE CVE-2016-0794 | recommended: 5100 | 2026-06-08T01:18:42+00:00 | Vulnerability · Source |
| CVE-2016-3115 | suse_vex | SUSE CVE CVE-2016-3115 | known affected: 2 known not affected: 148 recommended: 90 | 2026-06-08T01:15:23+00:00 | Vulnerability · Source |
| CVE-2016-6259 | suse_vex | SUSE CVE CVE-2016-6259 | known affected: 310 known not affected: 43 recommended: 427 | 2026-06-08T01:11:12+00:00 | Vulnerability · Source |
| CVE-2026-1070 | suse_vex | SUSE CVE CVE-2026-1070 | No product status | 2026-06-08T01:05:25+00:00 | Vulnerability · Source |
| CVE-2026-9658 | redhat_vex | Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths | known not affected: 1 | 2026-06-07T14:58:59+00:00 | Vulnerability · Source |
| CVE-2026-9594 | redhat_vex | WP Maps <= 4.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting via 'location_messages' Parameter | known not affected: 1 | 2026-06-07T08:59:48+00:00 | Vulnerability · Source |
| CVE-2026-9829 | redhat_vex | Photo Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter | known not affected: 1 | 2026-06-07T08:59:45+00:00 | Vulnerability · Source |
| CVE-2026-9280 | redhat_vex | Ad Inserter <= 2.8.15 - Reflected Cross-Site Scripting via URL Parameters in iframe Mode | known not affected: 1 | 2026-06-07T08:59:44+00:00 | Vulnerability · Source |
| CVE-2026-8978 | redhat_vex | OptinCraft <= 1.2.0 - Authenticated (Administrator+) SQL Injection via 'order_by' Parameter | known not affected: 1 | 2026-06-07T08:59:44+00:00 | Vulnerability · Source |
| CVE-2026-9197 | redhat_vex | Smart Slider 3 <= 3.5.1.36 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'src'/'srcset' Attribute in HTML Export | known not affected: 1 | 2026-06-07T08:59:44+00:00 | Vulnerability · Source |
| CVE-2026-9281 | redhat_vex | Master Addons For Elementor <= 3.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'jtlma_custom_js' Page Setting (Custom JS Extension) | known not affected: 1 | 2026-06-07T08:59:44+00:00 | Vulnerability · Source |
| CVE-2026-9016 | redhat_vex | Debug Log Manager <= 2.5.0 - Unauthenticated Improper Output Neutralization for Logs via log_js_errors AJAX Action | known not affected: 1 | 2026-06-07T08:59:44+00:00 | Vulnerability · Source |
| CVE-2026-8991 | redhat_vex | Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'drag_n_drop_text' and 'drag_n_drop_browse_text' Settings | known not affected: 1 | 2026-06-07T08:59:44+00:00 | Vulnerability · Source |
| CVE-2026-9008 | redhat_vex | Page-list <= 6.2 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure via Shortcode Attributes | known not affected: 1 | 2026-06-07T08:59:44+00:00 | Vulnerability · Source |
| CVE-2026-7796 | redhat_vex | EmbedPress <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block 'url' Attribute | known not affected: 1 | 2026-06-07T08:59:43+00:00 | Vulnerability · Source |
| CVE-2026-7795 | redhat_vex | Click to Chat <= 4.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'num' Shortcode Parameter | known not affected: 1 | 2026-06-07T08:59:43+00:00 | Vulnerability · Source |
| CVE-2026-7792 | redhat_vex | WPForms <= 1.10.0.4 - Unauthenticated Insufficient Verification of Data Authenticity via PayPal Commerce Webhook Endpoint | known not affected: 1 | 2026-06-07T08:59:43+00:00 | Vulnerability · Source |
| CVE-2026-8502 | redhat_vex | LearnPress <= 4.3.6 - Unauthenticated Sensitive Information Exposure via 'c_status' and 'return_type' Parameters | known not affected: 1 | 2026-06-07T08:59:43+00:00 | Vulnerability · Source |
| CVE-2026-8839 | redhat_vex | MapPress Maps for WordPress <= 2.96.6 - Unauthenticated Insecure Direct Object Reference via REST API Endpoints | known not affected: 1 | 2026-06-07T08:59:43+00:00 | Vulnerability · Source |
| CVE-2026-8611 | redhat_vex | Klamra Paycal for Aspaclaria <= 1.1.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via 'invoice_id' Parameter | known not affected: 1 | 2026-06-07T08:59:43+00:00 | Vulnerability · Source |
| CVE-2026-9851 | redhat_vex | Booking Package <= 1.7.16 - Authenticated (Editor+) Privilege Escalation via Account Takeover to updateUser AJAX Action | known not affected: 1 | 2026-06-07T08:59:42+00:00 | Vulnerability · Source |
| CVE-2026-8901 | redhat_vex | Integration for Freshsales <= 1.0.15 - Unauthenticated Stored Cross-Site Scripting via Form Submission Data | known not affected: 1 | 2026-06-07T08:59:42+00:00 | Vulnerability · Source |
| CVE-2026-2500 | redhat_vex | Quick Playground <= 1.3.4 - Authenticated (Administrator+) Arbitrary File Read via 'filename' Parameter | known not affected: 1 | 2026-06-07T08:59:42+00:00 | Vulnerability · Source |
| CVE-2026-7624 | redhat_vex | SEO Plugin by Squirrly SEO <= 12.4.16 - Missing Authorization to Authenticated (Contributor+) Privileged Cloud API Operations | known not affected: 1 | 2026-06-07T08:59:42+00:00 | Vulnerability · Source |
| CVE-2026-7566 | redhat_vex | LearnPress – Backup & Migration Tool <= 4.1.4 - Authenticated (Administrator+) PHP Object Injection via WXR XML File Upload | known not affected: 1 | 2026-06-07T08:59:42+00:00 | Vulnerability · Source |
| CVE-2026-7537 | redhat_vex | MDJM Event Management <= 1.7.8.3 - Authenticated (Administrator+) Arbitrary File Upload via 'mdjm_email_upload_file' Parameter | known not affected: 1 | 2026-06-07T08:59:42+00:00 | Vulnerability · Source |
| CVE-2026-8438 | redhat_vex | All-In-One Security (AIOS) <= 5.4.7 - Unauthenticated Stored Cross-Site Scripting via REST API Request Path | known not affected: 1 | 2026-06-07T08:59:42+00:00 | Vulnerability · Source |
| CVE-2026-7565 | redhat_vex | LearnPress <= 4.1.4 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'import-user-file' Parameter | known not affected: 1 | 2026-06-07T08:59:42+00:00 | Vulnerability · Source |
| CVE-2026-7665 | redhat_vex | Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler | known not affected: 1 | 2026-06-07T08:59:42+00:00 | Vulnerability · Source |
| CVE-2025-48977 | redhat_vex | Apache Ignite: REST HTTP arbitrary file read vulnerability | known not affected: 1 | 2026-06-07T08:59:42+00:00 | Vulnerability · Source |
| CVE-2016-7966 | suse_vex | SUSE CVE CVE-2016-7966 | recommended: 22 | 2026-06-07T06:21:59+00:00 | Vulnerability · Source |
| CVE-2016-8405 | suse_vex | SUSE CVE CVE-2016-8405 | known affected: 2 recommended: 123 | 2026-06-07T06:21:35+00:00 | Vulnerability · Source |