VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297729 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2020-8151 | suse_vex | SUSE CVE CVE-2020-8151 | known not affected: 2 recommended: 270 | 2026-06-07T05:18:02+00:00 | Vulnerability · Source |
| CVE-2020-10648 | suse_vex | SUSE CVE CVE-2020-10648 | known affected: 16 recommended: 192 | 2026-06-07T05:16:07+00:00 | Vulnerability · Source |
| CVE-2020-10690 | suse_vex | SUSE CVE CVE-2020-10690 | known affected: 323 known not affected: 49 recommended: 1424 | 2026-06-07T05:16:00+00:00 | Vulnerability · Source |
| CVE-2020-13625 | suse_vex | SUSE CVE CVE-2020-13625 | recommended: 9 | 2026-06-07T05:13:27+00:00 | Vulnerability · Source |
| CVE-2020-14353 | suse_vex | SUSE CVE CVE-2020-14353 | known not affected: 204 recommended: 49 | 2026-06-07T05:12:42+00:00 | Vulnerability · Source |
| CVE-2020-14391 | suse_vex | SUSE CVE CVE-2020-14391 | recommended: 88 | 2026-06-07T05:12:25+00:00 | Vulnerability · Source |
| CVE-2020-14424 | suse_vex | SUSE CVE CVE-2020-14424 | recommended: 11 | 2026-06-07T05:12:21+00:00 | Vulnerability · Source |
| CVE-2020-24119 | suse_vex | SUSE CVE CVE-2020-24119 | recommended: 5 | 2026-06-07T05:10:01+00:00 | Vulnerability · Source |
| CVE-2020-26957 | suse_vex | SUSE CVE CVE-2020-26957 | recommended: 9 | 2026-06-07T05:08:08+00:00 | Vulnerability · Source |
| CVE-2020-26964 | suse_vex | SUSE CVE CVE-2020-26964 | recommended: 9 | 2026-06-07T05:08:06+00:00 | Vulnerability · Source |
| CVE-2020-26977 | suse_vex | SUSE CVE CVE-2020-26977 | recommended: 9 | 2026-06-07T05:07:59+00:00 | Vulnerability · Source |
| CVE-2020-27745 | suse_vex | SUSE CVE CVE-2020-27745 | known affected: 1 known not affected: 114 recommended: 1641 | 2026-06-07T05:07:35+00:00 | Vulnerability · Source |
| CVE-2020-35114 | suse_vex | SUSE CVE CVE-2020-35114 | recommended: 9 | 2026-06-07T05:06:23+00:00 | Vulnerability · Source |
| CVE-2020-35701 | suse_vex | SUSE CVE CVE-2020-35701 | recommended: 7 | 2026-06-07T05:05:57+00:00 | Vulnerability · Source |
| CVE-2026-34278 | suse_vex | SUSE CVE CVE-2026-34278 | recommended: 7 | 2026-06-07T04:38:18+00:00 | Vulnerability · Source |
| CVE-2025-12656 | redhat_vex | Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion | known not affected: 1 | 2026-06-07T00:43:36+00:00 | Vulnerability · Source |
| CVE-2026-9719 | redhat_vex | LatePoint <= 5.6.0 - Cross-Site Request Forgery via invoices__change_status Action | known not affected: 1 | 2026-06-07T00:43:35+00:00 | Vulnerability · Source |
| CVE-2026-8976 | redhat_vex | RSS Aggregator by Feedzy <= 5.1.7 - Missing Authorization to Authenticated (Contributor+) Import Job Creation, Execution, Purge, Log Clearing, and Information Disclosure via Multiple AJAX Sub-Actions | known not affected: 1 | 2026-06-07T00:43:35+00:00 | Vulnerability · Source |
| CVE-2026-8900 | redhat_vex | Simple SEO Slideshow <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-07T00:43:34+00:00 | Vulnerability · Source |
| CVE-2026-8893 | redhat_vex | Express Payment For Stripe <= 1.28.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-07T00:43:32+00:00 | Vulnerability · Source |
| CVE-2026-8608 | redhat_vex | Event Monster <= 2.1.0 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via em_capture_payment AJAX Action | known not affected: 1 | 2026-06-07T00:43:30+00:00 | Vulnerability · Source |
| CVE-2026-7523 | redhat_vex | Alba Board <= 2.1.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'card_id' Parameter | known not affected: 1 | 2026-06-07T00:43:30+00:00 | Vulnerability · Source |
| CVE-2026-6448 | redhat_vex | Quiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters | known not affected: 1 | 2026-06-07T00:43:28+00:00 | Vulnerability · Source |
| CVE-2026-6242 | redhat_vex | Authenticated Format String Vulnerability in ONVIF Subscribe Service on TP-Link Tapo C520WS | known not affected: 1 | 2026-06-07T00:43:28+00:00 | Vulnerability · Source |
| CVE-2026-7047 | redhat_vex | Frontend User Notes <= 2.1.1 - Cross-Site Request Forgery to Note Content Modification via 'confirmEdit' Action | known not affected: 1 | 2026-06-07T00:43:28+00:00 | Vulnerability · Source |
| CVE-2026-6241 | redhat_vex | Authenticated Format String Vulnerability in ONVIF AddScopes Method on TP-Link Tapo C520WS | known not affected: 1 | 2026-06-07T00:43:28+00:00 | Vulnerability · Source |
| CVE-2026-25624 | redhat_vex | Arista Edge Threat Management NGFW UI Administrative Cross-Site Scripting | known not affected: 1 | 2026-06-07T00:43:26+00:00 | Vulnerability · Source |
| CVE-2026-6240 | redhat_vex | Authenticated Stack-based Buffer Overflow in ONVIF DeleteUsers Service on TP-Link Tapo C520WS | known not affected: 1 | 2026-06-07T00:43:26+00:00 | Vulnerability · Source |
| CVE-2026-6239 | redhat_vex | Authenticated Stack-based Buffer Overflow in ONVIF CreateUsers Service in TP-Link Tao C520WS | known not affected: 1 | 2026-06-07T00:43:26+00:00 | Vulnerability · Source |
| CVE-2026-10038 | redhat_vex | Charitable <= 1.8.11.1 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Attachment Deletion via 'avatar' Parameter | known not affected: 1 | 2026-06-07T00:43:25+00:00 | Vulnerability · Source |
| CVE-2026-46401 | redhat_vex | HAX CMS PHP has Insufficient Session Expiration | known not affected: 1 | 2026-06-07T00:43:24+00:00 | Vulnerability · Source |
| CVE-2026-46397 | redhat_vex | haxcms-php Local File Inclusion via saveOutline API Location Parameter v2.0 | known not affected: 1 | 2026-06-07T00:43:23+00:00 | Vulnerability · Source |
| CVE-2026-45776 | redhat_vex | Open XDMoD has Broken Access Control via Client-Controlled Session Variable | known not affected: 1 | 2026-06-07T00:43:22+00:00 | Vulnerability · Source |
| CVE-2026-46357 | redhat_vex | HAX CMS NodeJS application Vulnerable to Denial of Service using Malicious Import Request | known not affected: 1 | 2026-06-07T00:43:20+00:00 | Vulnerability · Source |
| CVE-2026-9290 | redhat_vex | WP User Manager <= 2.9.17 - Unauthenticated Path Traversal to Local File Inclusion via 'tab' Query Parameter | known not affected: 1 | 2026-06-07T00:43:18+00:00 | Vulnerability · Source |
| CVE-2026-7654 | redhat_vex | Admin Columns <= 7.0.18 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution via Custom Field Meta Value | known not affected: 1 | 2026-06-07T00:43:18+00:00 | Vulnerability · Source |
| CVE-2026-45778 | redhat_vex | Open XDMoD Vulnerable to Reflected Cross-Site Scripting (XSS) in Password Reset | known not affected: 1 | 2026-06-07T00:43:16+00:00 | Vulnerability · Source |
| CVE-2026-45779 | redhat_vex | Open XDMoD Vulnerable to Unauthenticated SQL Injection Leading to Full Database Compromise | known not affected: 1 | 2026-06-07T00:43:16+00:00 | Vulnerability · Source |
| CVE-2026-45777 | redhat_vex | Open XDMoD Vulnerable to Unauthenticated Remote Code Execution (RCE) via OS Command Injection | known not affected: 1 | 2026-06-07T00:43:15+00:00 | Vulnerability · Source |
| CVE-2026-45758 | redhat_vex | Malicious code in guardrails-ai 0.10.1 (supply chain compromise) | known not affected: 1 | 2026-06-07T00:43:15+00:00 | Vulnerability · Source |
| CVE-2026-34123 | redhat_vex | Whitelist Validation Bypass in TP-Link Tapo C520WS | known not affected: 1 | 2026-06-07T00:43:14+00:00 | Vulnerability · Source |
| CVE-2026-25623 | redhat_vex | Arista Edge Threat Management NGFW UI Arbitrary Command Execution | known not affected: 1 | 2026-06-07T00:43:13+00:00 | Vulnerability · Source |
| CVE-2026-25622 | redhat_vex | Arista Edge Threat Management NGFW Captive Portal Custom Handler Command Injection | known not affected: 1 | 2026-06-07T00:43:12+00:00 | Vulnerability · Source |
| CVE-2026-25621 | redhat_vex | Arista Edge Threat Management NGFW Reports Application Insecure Input Validation | known not affected: 1 | 2026-06-07T00:43:11+00:00 | Vulnerability · Source |
| CVE-2026-11431 | redhat_vex | Path Traversal in Altium Projects Service Allows Arbitrary File Read | known not affected: 1 | 2026-06-07T00:43:10+00:00 | Vulnerability · Source |
| CVE-2026-25620 | redhat_vex | Arista Edge Threat Management NGFW Captive Portal Encrypted Password Command Injection | known not affected: 1 | 2026-06-07T00:43:10+00:00 | Vulnerability · Source |
| CVE-2026-11423 | redhat_vex | Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege Escalation | known not affected: 1 | 2026-06-07T00:43:08+00:00 | Vulnerability · Source |
| CVE-2026-11422 | redhat_vex | Markdown Preview Enhanced 0.8.x Code Injection via WaveDrom Rendering | known not affected: 1 | 2026-06-07T00:43:08+00:00 | Vulnerability · Source |
| CVE-2026-11424 | redhat_vex | Server-Side Request Forgery in Altium Platform Design GraphQL Service Allows Information Disclosure | known not affected: 1 | 2026-06-07T00:43:08+00:00 | Vulnerability · Source |
| CVE-2026-11420 | redhat_vex | Path Traversal in Altium Enterprise Server NIS Allows Unauthenticated Arbitrary File Write and File Read | known not affected: 1 | 2026-06-07T00:43:07+00:00 | Vulnerability · Source |