VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297763 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-34296 | redhat_vex | CVE-2026-34296 | known not affected: 1 | 2026-06-05T19:38:17+00:00 | Vulnerability · Source |
| CVE-2026-34854 | redhat_vex | CVE-2026-34854 | known not affected: 1 | 2026-06-05T19:38:16+00:00 | Vulnerability · Source |
| CVE-2026-34371 | redhat_vex | LibreChat Affected by Arbitrary File Write via `execute_code` Artifact Filename Traversal | known not affected: 1 | 2026-06-05T19:38:16+00:00 | Vulnerability · Source |
| CVE-2026-34656 | redhat_vex | Adobe Commerce | Improper Authorization (CWE-285) | known not affected: 1 | 2026-06-05T19:38:16+00:00 | Vulnerability · Source |
| CVE-2026-34317 | redhat_vex | CVE-2026-34317 | known not affected: 1 | 2026-06-05T19:38:15+00:00 | Vulnerability · Source |
| CVE-2026-34614 | redhat_vex | Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) | known not affected: 1 | 2026-06-05T19:38:15+00:00 | Vulnerability · Source |
| CVE-2026-34281 | redhat_vex | CVE-2026-34281 | known not affected: 1 | 2026-06-05T19:38:14+00:00 | Vulnerability · Source |
| CVE-2026-34722 | redhat_vex | Zammad is missing authorization in ticket create endpoint | known not affected: 1 | 2026-06-05T19:38:14+00:00 | Vulnerability · Source |
| CVE-2026-34623 | redhat_vex | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) | known not affected: 1 | 2026-06-05T19:38:13+00:00 | Vulnerability · Source |
| CVE-2026-34313 | redhat_vex | CVE-2026-34313 | known not affected: 1 | 2026-06-05T19:38:13+00:00 | Vulnerability · Source |
| CVE-2026-34289 | redhat_vex | CVE-2026-34289 | known not affected: 1 | 2026-06-05T19:38:13+00:00 | Vulnerability · Source |
| CVE-2026-34658 | redhat_vex | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | known not affected: 1 | 2026-06-05T19:38:11+00:00 | Vulnerability · Source |
| CVE-2026-34298 | redhat_vex | CVE-2026-34298 | known not affected: 1 | 2026-06-05T19:38:11+00:00 | Vulnerability · Source |
| CVE-2026-21999 | redhat_vex | CVE-2026-21999 | known not affected: 1 | 2026-06-05T19:37:57+00:00 | Vulnerability · Source |
| CVE-2026-3073 | redhat_vex | Authorization Bypass Through User-Controlled Key in GitLab | known not affected: 1 | 2026-06-05T19:37:54+00:00 | Vulnerability · Source |
| CVE-2026-3369 | redhat_vex | Better Find and Replace – AI-Powered Suggestions <= 1.7.9 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Title | known not affected: 1 | 2026-06-05T19:37:54+00:00 | Vulnerability · Source |
| CVE-2026-3279 | redhat_vex | Enable jQuery Migrate Helper <= 1.4.1 - Missing Authorization to Authenticated (Subscriber+) jQuery Version Downgrade | known not affected: 1 | 2026-06-05T19:37:54+00:00 | Vulnerability · Source |
| CVE-2026-3477 | redhat_vex | PZ Frontend Manager <= 1.0.6 - Missing Authorization to Arbitrary User Deletion via 'dataType' Parameter | known not affected: 1 | 2026-06-05T19:37:53+00:00 | Vulnerability · Source |
| CVE-2026-3594 | redhat_vex | Riaxe Product Customizer <= 2.4 - Unauthenticated Sensitive Information Disclosure via '/orders' REST API Endpoint | known not affected: 1 | 2026-06-05T19:37:53+00:00 | Vulnerability · Source |
| CVE-2026-3307 | redhat_vex | Authorization bypass in GitHub Enterprise Server secret scanning push protection allows cross-repository modification of delegated bypass reviewers | known not affected: 1 | 2026-06-05T19:37:52+00:00 | Vulnerability · Source |
| CVE-2026-3208 | redhat_vex | Mercado Pago payments for WooCommerce <= 8.7.11 - Missing Authorization to Unauthenticated PIX Payment QR Code Image Disclosure | known not affected: 1 | 2026-06-05T19:37:51+00:00 | Vulnerability · Source |
| CVE-2026-3998 | redhat_vex | WM JqMath <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:37:51+00:00 | Vulnerability · Source |
| CVE-2026-3604 | redhat_vex | WP SEO Structured Data Schema <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_kcseo_ative_tab' Parameter | known not affected: 1 | 2026-06-05T19:37:51+00:00 | Vulnerability · Source |
| CVE-2026-3581 | redhat_vex | Basic Google Maps Placemarks <= 1.10.7 - Missing Authorization to Unauthenticated Default Map Coordinate Update | known not affected: 1 | 2026-06-05T19:37:50+00:00 | Vulnerability · Source |
| CVE-2026-3361 | redhat_vex | WP Store Locator <= 2.2.261 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsl_address' Post Meta | known not affected: 1 | 2026-06-05T19:37:50+00:00 | Vulnerability · Source |
| CVE-2026-3428 | redhat_vex | CVE-2026-3428 | known not affected: 1 | 2026-06-05T19:37:49+00:00 | Vulnerability · Source |
| CVE-2026-3239 | redhat_vex | Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode | known not affected: 1 | 2026-06-05T19:37:49+00:00 | Vulnerability · Source |
| CVE-2026-3473 | redhat_vex | Improper file ownership validation in the Boards API allows unauthorised file access | known not affected: 1 | 2026-06-05T19:37:49+00:00 | Vulnerability · Source |
| CVE-2026-3600 | redhat_vex | Investi <= 1.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'maximum-num-years' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:37:48+00:00 | Vulnerability · Source |
| CVE-2026-3895 | redhat_vex | WPBakery Page Builder Addons by Livemesh <= 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting | known not affected: 1 | 2026-06-05T19:37:48+00:00 | Vulnerability · Source |
| CVE-2026-3565 | redhat_vex | Taqnix <= 1.0.3 - Cross-Site Request Forgery to Account Deletion via 'taqnix_delete_my_account' AJAX Action | known not affected: 1 | 2026-06-05T19:37:47+00:00 | Vulnerability · Source |
| CVE-2026-3349 | redhat_vex | MinhNhut Link Gateway <= 3.6.1 - Reflected Cross-Site Scripting via 'url' Parameter | known not affected: 1 | 2026-06-05T19:37:47+00:00 | Vulnerability · Source |
| CVE-2026-3330 | redhat_vex | Form Maker by 10Web <= 1.15.40 - Authenticated (Administrator+) SQL Injection via 'ip_search' Parameter | known not affected: 1 | 2026-06-05T19:37:47+00:00 | Vulnerability · Source |
| CVE-2026-3646 | redhat_vex | LTL Freight Quotes – R+L Carriers Edition <= 3.3.13 - Missing Authorization to Unauthenticated Settings Update | known not affected: 1 | 2026-06-05T19:37:47+00:00 | Vulnerability · Source |
| CVE-2026-3004 | redhat_vex | Snow Monkey Blocks <= 24.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-slick' Attribute | known not affected: 1 | 2026-06-05T19:37:46+00:00 | Vulnerability · Source |
| CVE-2026-3673 | redhat_vex | Frappe Framework 16.10.0 - Stored DOM XSS in Tag Pill Renderer | known not affected: 1 | 2026-06-05T19:37:46+00:00 | Vulnerability · Source |
| CVE-2026-3781 | redhat_vex | Attendance Manager <= 0.6.2 - Authenticated (Subscriber+) SQL Injection via 'attmgr_off' Parameter | known not affected: 1 | 2026-06-05T19:37:46+00:00 | Vulnerability · Source |
| CVE-2026-3875 | redhat_vex | BetterDocs <= 4.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:37:45+00:00 | Vulnerability · Source |
| CVE-2026-3637 | redhat_vex | Mattermost fails to enforce create_post permission when editing posts | known not affected: 1 | 2026-06-05T19:37:45+00:00 | Vulnerability · Source |
| CVE-2026-3574 | redhat_vex | Experto Dashboard for WooCommerce <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Navigation Font Size' Setting | known not affected: 1 | 2026-06-05T19:37:45+00:00 | Vulnerability · Source |
| CVE-2026-3871 | redhat_vex | CVE-2026-3871 | known not affected: 1 | 2026-06-05T19:37:45+00:00 | Vulnerability · Source |
| CVE-2026-3620 | redhat_vex | Word Replacer <= 0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Replacement' Parameter | known not affected: 1 | 2026-06-05T19:37:44+00:00 | Vulnerability · Source |
| CVE-2026-3008 | redhat_vex | Vulnerability in Notepad++ | known not affected: 1 | 2026-06-05T19:37:44+00:00 | Vulnerability · Source |
| CVE-2026-3897 | redhat_vex | Livemesh Addons for Beaver Builder <= 3.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Missing Authorization | known not affected: 1 | 2026-06-05T19:37:44+00:00 | Vulnerability · Source |
| CVE-2026-3480 | redhat_vex | WP Blockade <= 0.9.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'shortcode' Parameter | known not affected: 1 | 2026-06-05T19:37:43+00:00 | Vulnerability · Source |
| CVE-2026-3048 | redhat_vex | Nexus Repository 3 - Improper LDAP Referral Handling | known not affected: 1 | 2026-06-05T19:37:43+00:00 | Vulnerability · Source |
| CVE-2026-3314 | redhat_vex | Missing Password Masking in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpoint | known not affected: 1 | 2026-06-05T19:37:43+00:00 | Vulnerability · Source |
| CVE-2026-3471 | redhat_vex | Opening a window with {{javascript:alert()}} as URL causes crash in the Mattermost Desktop App | known not affected: 1 | 2026-06-05T19:37:43+00:00 | Vulnerability · Source |
| CVE-2026-3426 | redhat_vex | RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Missing Authorization to Widget Configuration Modification | known not affected: 1 | 2026-06-05T19:37:43+00:00 | Vulnerability · Source |
| CVE-2026-3291 | redhat_vex | Samsung Print Service Plugin – Potential Information Disclosure | known not affected: 1 | 2026-06-05T19:37:42+00:00 | Vulnerability · Source |