GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

VEX records

Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.

Reset

297756 VEX records

API response
Vulnerability Source Title Product status Imported Links
CVE-2025-14972 redhat_vex Insufficient DPA countermeasure reseeding known not affected: 1 2026-06-05T19:42:21+00:00 Vulnerability · Source
CVE-2025-5519 redhat_vex Information Disclosure in ArgusTech's BILGER known not affected: 1 2026-06-05T19:42:20+00:00 Vulnerability · Source
CVE-2025-5254 redhat_vex Stored XSS in Kron Technologies' Kron PAM known not affected: 1 2026-06-05T19:42:20+00:00 Vulnerability · Source
CVE-2025-5681 redhat_vex IDOR in Turtek Software's Eyotek known not affected: 1 2026-06-05T19:42:20+00:00 Vulnerability · Source
CVE-2025-5518 redhat_vex IDOR in ArgusTech's BILGER known not affected: 1 2026-06-05T19:42:20+00:00 Vulnerability · Source
CVE-2025-5253 redhat_vex DoS in Kron Technologies' Kron PAM known not affected: 1 2026-06-05T19:42:19+00:00 Vulnerability · Source
CVE-2025-67604 redhat_vex CVE-2025-67604 known not affected: 1 2026-06-05T19:42:18+00:00 Vulnerability · Source
CVE-2025-1241 redhat_vex Encryption vulnerable to brute-force decryption in GoAnywhere MFT known not affected: 1 2026-06-05T19:42:16+00:00 Vulnerability · Source
CVE-2025-10354 redhat_vex Reflected Cross-Site Scripting (XSS) in Semantic MediaWiki known not affected: 1 2026-06-05T19:42:13+00:00 Vulnerability · Source
CVE-2025-1794 redhat_vex AM LottiePlayer <= 3.6.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG known not affected: 1 2026-06-05T19:42:13+00:00 Vulnerability · Source
CVE-2025-10466 redhat_vex CVE-2025-10466 known not affected: 1 2026-06-05T19:42:12+00:00 Vulnerability · Source
CVE-2025-10503 redhat_vex Reflected Cross-Site Scripting via Authentication Endpoint in WSO2 Identity Server known not affected: 1 2026-06-05T19:42:12+00:00 Vulnerability · Source
CVE-2025-36148 redhat_vex IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to cross-site scripting. known not affected: 1 2026-06-05T19:42:11+00:00 Vulnerability · Source
CVE-2025-36074 redhat_vex Security vulnerability has been detected in IBM Security Verify Directory known not affected: 1 2026-06-05T19:42:11+00:00 Vulnerability · Source
CVE-2025-36221 redhat_vex Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops. known not affected: 1 2026-06-05T19:42:11+00:00 Vulnerability · Source
CVE-2025-36180 redhat_vex Inadequate Pod Communication Restrictions, affects watsonx.data known not affected: 1 2026-06-05T19:42:11+00:00 Vulnerability · Source
CVE-2025-36515 redhat_vex CVE-2025-36515 known not affected: 1 2026-06-05T19:42:10+00:00 Vulnerability · Source
CVE-2025-36335 redhat_vex Vulnerabilities found known not affected: 1 2026-06-05T19:42:09+00:00 Vulnerability · Source
CVE-2025-36220 redhat_vex Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops. known not affected: 1 2026-06-05T19:42:08+00:00 Vulnerability · Source
CVE-2025-9988 redhat_vex Broadstreet <= 1.53.1 - Missing Authorization to Authenticated (Subscriber+) Advertiser Creation known not affected: 1 2026-06-05T19:42:08+00:00 Vulnerability · Source
CVE-2025-36145 redhat_vex Multiple Vulnerabilities in watsonx.data known not affected: 1 2026-06-05T19:42:07+00:00 Vulnerability · Source
CVE-2025-36510 redhat_vex CVE-2025-36510 known not affected: 1 2026-06-05T19:42:06+00:00 Vulnerability · Source
CVE-2025-9973 redhat_vex Authorization Bypass via Adaptive Authentication in WSO2 Identity Server Allows Cross-Organization Account Takeover known not affected: 1 2026-06-05T19:42:05+00:00 Vulnerability · Source
CVE-2025-9484 redhat_vex Missing Authorization in GitLab known not affected: 1 2026-06-05T19:42:04+00:00 Vulnerability · Source
CVE-2025-9987 redhat_vex Broadstreet <= 1.53.1 - Authenticated (Subscriber+) Information Disclosure known not affected: 1 2026-06-05T19:42:04+00:00 Vulnerability · Source
CVE-2025-27723 redhat_vex CVE-2025-27723 known not affected: 1 2026-06-05T19:42:03+00:00 Vulnerability · Source
CVE-2025-54511 redhat_vex CVE-2025-54511 known not affected: 1 2026-06-05T19:42:03+00:00 Vulnerability · Source
CVE-2025-9989 redhat_vex Broadstreet <= 1.53.1 - Authenticated (Admin+) Stored Cross-Site Scripting known not affected: 1 2026-06-05T19:42:03+00:00 Vulnerability · Source
CVE-2025-15565 redhat_vex Nexi XPay <= 8.3.0 - Missing Authorization to Unauthenticated Order Status Modification known not affected: 1 2026-06-05T19:42:02+00:00 Vulnerability · Source
CVE-2025-15626 redhat_vex Authenticated user can bypass authorization in Ribblr - Crochet & Knitting iOS application known not affected: 1 2026-06-05T19:42:02+00:00 Vulnerability · Source
CVE-2025-15345 redhat_vex MapGeo - Interactive Geo Maps <= 1.6.27 - Reflected Cross-Site Scripting via 'map' Parameter known not affected: 1 2026-06-05T19:42:02+00:00 Vulnerability · Source
CVE-2025-15369 redhat_vex Xpro Addons — 140+ Widgets for Elementor <= 1.5.0 - Missing Authorization to Unauthenticated Xpro Template Creation known not affected: 1 2026-06-05T19:42:01+00:00 Vulnerability · Source
CVE-2025-15622 redhat_vex Sparx Enterprise Architect Client reveals plaintext OAuth2 client secret known not affected: 1 2026-06-05T19:42:01+00:00 Vulnerability · Source
CVE-2025-15463 redhat_vex Advanced Custom Fields: Extended <= 0.9.2.3 - Unauthenticated Arbitrary Shortcode Execution known not affected: 1 2026-06-05T19:42:00+00:00 Vulnerability · Source
CVE-2025-15470 redhat_vex Eleganzo <= 1.2 - Authenticated (Subscriber+) Arbitrary Directory Deletion known not affected: 1 2026-06-05T19:42:00+00:00 Vulnerability · Source
CVE-2025-15645 redhat_vex Ledger Nano X, Flex, Stax MCU Firmware Update Denial of Service known not affected: 1 2026-06-05T19:42:00+00:00 Vulnerability · Source
CVE-2025-6923 redhat_vex Reflected XSS in Talent Software's UNIS known not affected: 1 2026-06-05T19:41:59+00:00 Vulnerability · Source
CVE-2025-15621 redhat_vex Sparx Enterprise Architect Client does not verify the receiver of OAuth2 credentials during OpenID authentication known not affected: 1 2026-06-05T19:41:59+00:00 Vulnerability · Source
CVE-2025-6060 redhat_vex XSS in DECE Software's Geodi known not affected: 1 2026-06-05T19:41:59+00:00 Vulnerability · Source
CVE-2025-6024 redhat_vex Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Allows Redirection to Malicious Websites known not affected: 1 2026-06-05T19:41:58+00:00 Vulnerability · Source
CVE-2025-68604 redhat_vex WordPress WPGraphQL plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerability known not affected: 1 2026-06-05T19:41:57+00:00 Vulnerability · Source
CVE-2025-6924 redhat_vex Reflected XSS in Talent Software's e-BAP known not affected: 1 2026-06-05T19:41:57+00:00 Vulnerability · Source
CVE-2025-6396 redhat_vex XSS in Webbeyaz's web site known not affected: 1 2026-06-05T19:41:57+00:00 Vulnerability · Source
CVE-2025-6575 redhat_vex XSS in Dolusoft's Omaspot known not affected: 1 2026-06-05T19:41:56+00:00 Vulnerability · Source
CVE-2025-6016 redhat_vex Allocation of Resources Without Limits or Throttling in GitLab known not affected: 1 2026-06-05T19:41:55+00:00 Vulnerability · Source
CVE-2025-42611 redhat_vex Improper certificate validation in multiple RouterOS services known not affected: 1 2026-06-05T19:41:54+00:00 Vulnerability · Source
CVE-2025-68649 redhat_vex CVE-2025-68649 known not affected: 1 2026-06-05T19:41:53+00:00 Vulnerability · Source
CVE-2025-59613 redhat_vex Stack-based Buffer Overflow in Windows Compute known not affected: 1 2026-06-05T19:41:53+00:00 Vulnerability · Source
CVE-2025-59601 redhat_vex Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware known not affected: 1 2026-06-05T19:41:53+00:00 Vulnerability · Source
CVE-2025-59809 redhat_vex CVE-2025-59809 known not affected: 1 2026-06-05T19:41:52+00:00 Vulnerability · Source