VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297761 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-15655 | redhat_vex | WordPress School Management plugin <= 93.2.0 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:41:13+00:00 | Vulnerability · Source |
| CVE-2025-15024 | redhat_vex | RCE in Yordam Informatics' Library Automation System | known not affected: 1 | 2026-06-05T19:41:13+00:00 | Vulnerability · Source |
| CVE-2025-63939 | redhat_vex | CVE-2025-63939 | known not affected: 1 | 2026-06-05T19:41:13+00:00 | Vulnerability · Source |
| CVE-2025-15624 | redhat_vex | Plaintext Storage of a Password in Sparx Pro Cloud Server. | known not affected: 1 | 2026-06-05T19:41:13+00:00 | Vulnerability · Source |
| CVE-2025-15654 | redhat_vex | WordPress Prague plugin <= 2.2.8 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:41:12+00:00 | Vulnerability · Source |
| CVE-2025-15623 | redhat_vex | Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user | known not affected: 1 | 2026-06-05T19:41:12+00:00 | Vulnerability · Source |
| CVE-2025-15025 | redhat_vex | IDOR in Yordam Informatics' Library Automation System | known not affected: 1 | 2026-06-05T19:41:12+00:00 | Vulnerability · Source |
| CVE-2025-15023 | redhat_vex | Improper Access Control in Yordam Informatics' Library Automation System | known not affected: 1 | 2026-06-05T19:41:11+00:00 | Vulnerability · Source |
| CVE-2025-15656 | redhat_vex | WordPress School Management plugin <= 93.2.0 - Privilege Escalation vulnerability | known not affected: 1 | 2026-06-05T19:41:11+00:00 | Vulnerability · Source |
| CVE-2025-15625 | redhat_vex | Unauthenticated execution of arbitrary SQL queries in Sparx Pro Cloud Server | known not affected: 1 | 2026-06-05T19:41:11+00:00 | Vulnerability · Source |
| CVE-2025-6967 | redhat_vex | Authentication Bypass in Sarman Soft's CMS | known not affected: 1 | 2026-06-05T19:41:10+00:00 | Vulnerability · Source |
| CVE-2025-51846 | redhat_vex | CryptPad unbounded WebSocket frame flood | known not affected: 1 | 2026-06-05T19:41:10+00:00 | Vulnerability · Source |
| CVE-2025-6918 | redhat_vex | SQLi in Ncvav's Virtual PBX Software | known not affected: 1 | 2026-06-05T19:41:10+00:00 | Vulnerability · Source |
| CVE-2025-6520 | redhat_vex | SQLi in Abis Technology's BAPSIS | known not affected: 1 | 2026-06-05T19:41:09+00:00 | Vulnerability · Source |
| CVE-2025-6830 | redhat_vex | SQLi in Xpoda Türkiye Information Technology's Password Module | known not affected: 1 | 2026-06-05T19:41:09+00:00 | Vulnerability · Source |
| CVE-2025-6577 | redhat_vex | SQLi in Akilli Commerce's E-Commerce Website | known not affected: 1 | 2026-06-05T19:41:09+00:00 | Vulnerability · Source |
| CVE-2025-6919 | redhat_vex | SQLi in Cats Informatics' Aykome | known not affected: 1 | 2026-06-05T19:41:08+00:00 | Vulnerability · Source |
| CVE-2025-33255 | redhat_vex | CVE-2025-33255 | known not affected: 1 | 2026-06-05T19:41:08+00:00 | Vulnerability · Source |
| CVE-2025-6397 | redhat_vex | XSS in Ankara Hosting's web site | known not affected: 1 | 2026-06-05T19:41:08+00:00 | Vulnerability · Source |
| CVE-2025-6175 | redhat_vex | CRLF Injection in DECE Software's Geodi | known not affected: 1 | 2026-06-05T19:41:08+00:00 | Vulnerability · Source |
| CVE-2025-68060 | redhat_vex | WordPress Team Member plugin <= 8.5 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:41:07+00:00 | Vulnerability · Source |
| CVE-2025-68886 | redhat_vex | WordPress Cookiteer theme <= 1.4.8 - Local File Inclusion vulnerability | known not affected: 1 | 2026-06-05T19:41:06+00:00 | Vulnerability · Source |
| CVE-2025-68421 | redhat_vex | Hardcoded credentials in Comarch ERP Optima | known not affected: 1 | 2026-06-05T19:41:06+00:00 | Vulnerability · Source |
| CVE-2025-59969 | redhat_vex | Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restart | known not affected: 1 | 2026-06-05T19:41:06+00:00 | Vulnerability · Source |
| CVE-2025-68420 | redhat_vex | Privilege Escalation in Comarch ERP Optima | known not affected: 1 | 2026-06-05T19:41:06+00:00 | Vulnerability · Source |
| CVE-2025-11954 | redhat_vex | CSRF in Sitemio's WISECP | known not affected: 1 | 2026-06-05T19:41:05+00:00 | Vulnerability · Source |
| CVE-2026-35202 | redhat_vex | Pterodactyl has a database resource limit bypass via race condition in Client API | known not affected: 1 | 2026-06-05T19:41:05+00:00 | Vulnerability · Source |
| CVE-2025-59874 | redhat_vex | HCL Hive Telco Observability is affected by a Required directives missing from the CSP . | known not affected: 1 | 2026-06-05T19:41:05+00:00 | Vulnerability · Source |
| CVE-2025-11262 | redhat_vex | Link Whisper Free <= 0.9.0 - Unauthenticated Stored Cross-Site Scripting | known not affected: 1 | 2026-06-05T19:41:04+00:00 | Vulnerability · Source |
| CVE-2025-11024 | redhat_vex | SQLi in Akıllı Ticaret's E-Commerce Pack | known not affected: 1 | 2026-06-05T19:41:04+00:00 | Vulnerability · Source |
| CVE-2025-11482 | redhat_vex | Allocation of Resources Without Limits or Throttling in the OPC-UA Server | known not affected: 1 | 2026-06-05T19:41:04+00:00 | Vulnerability · Source |
| CVE-2025-11993 | redhat_vex | WooCommerce Infinite Scroll and Ajax Pagination <= 1.8 - Authenticated (Subscriber+) PHP Object Injection | known not affected: 1 | 2026-06-05T19:41:03+00:00 | Vulnerability · Source |
| CVE-2025-46638 | redhat_vex | CVE-2025-46638 | known not affected: 1 | 2026-06-05T19:41:03+00:00 | Vulnerability · Source |
| CVE-2025-11159 | redhat_vex | Hitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party Component | known not affected: 1 | 2026-06-05T19:41:03+00:00 | Vulnerability · Source |
| CVE-2025-31951 | redhat_vex | HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability | known not affected: 1 | 2026-06-05T19:41:02+00:00 | Vulnerability · Source |
| CVE-2026-41522 | redhat_vex | Iris has an Improper Authorization issue | known not affected: 1 | 2026-06-05T19:41:02+00:00 | Vulnerability · Source |
| CVE-2026-35624 | redhat_vex | OpenClaw < 2026.3.22 - Policy Confusion via Room Name Collision in Nextcloud Talk | known not affected: 1 | 2026-06-05T19:41:01+00:00 | Vulnerability · Source |
| CVE-2026-35400 | redhat_vex | LORIS incorrectly trusts user input in publication module | known not affected: 1 | 2026-06-05T19:41:01+00:00 | Vulnerability · Source |
| CVE-2026-35906 | redhat_vex | CVE-2026-35906 | known not affected: 1 | 2026-06-05T19:41:01+00:00 | Vulnerability · Source |
| CVE-2026-35194 | redhat_vex | Apache Flink: Remote code execution via SQL injection in code generation | known not affected: 1 | 2026-06-05T19:40:59+00:00 | Vulnerability · Source |
| CVE-2026-35565 | redhat_vex | Apache Storm UI: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Storm UI | known not affected: 1 | 2026-06-05T19:40:59+00:00 | Vulnerability · Source |
| CVE-2026-35086 | redhat_vex | Apache OFBiz: Authenticated Remote Code Execution via Unsafe Template Expansion in email services | known not affected: 1 | 2026-06-05T19:40:58+00:00 | Vulnerability · Source |
| CVE-2026-35905 | redhat_vex | CVE-2026-35905 | known not affected: 1 | 2026-06-05T19:40:58+00:00 | Vulnerability · Source |
| CVE-2025-31991 | redhat_vex | HCL DevOps Velocity is susceptible to brute-force attacks | known not affected: 1 | 2026-06-05T19:40:50+00:00 | Vulnerability · Source |
| CVE-2025-4411 | redhat_vex | XSS in Dataprom Informatics' PACS-ACSS | known not affected: 1 | 2026-06-05T19:40:49+00:00 | Vulnerability · Source |
| CVE-2025-31973 | redhat_vex | HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version' | known not affected: 1 | 2026-06-05T19:40:49+00:00 | Vulnerability · Source |
| CVE-2025-4284 | redhat_vex | Reflected XSS in Rolantis Information Technologies' Agentis | known not affected: 1 | 2026-06-05T19:40:49+00:00 | Vulnerability · Source |
| CVE-2025-4295 | redhat_vex | Host Header Injection in HotelRunner's B2B | known not affected: 1 | 2026-06-05T19:40:48+00:00 | Vulnerability · Source |
| CVE-2025-4763 | redhat_vex | XSS in Aida Computer's Hotspot | known not affected: 1 | 2026-06-05T19:40:48+00:00 | Vulnerability · Source |
| CVE-2025-4296 | redhat_vex | Open Redirect in HotelRunner's B2B | known not affected: 1 | 2026-06-05T19:40:47+00:00 | Vulnerability · Source |