VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-49382 | redhat_vex | CVE-2026-49382 | known not affected: 1 | 2026-06-05T19:34:44+00:00 | Vulnerability · Source |
| CVE-2026-49140 | redhat_vex | Nanobot < 0.2.1 Denial of Service via Matrix Media Download Handler | known not affected: 1 | 2026-06-05T19:34:44+00:00 | Vulnerability · Source |
| CVE-2026-49377 | redhat_vex | CVE-2026-49377 | known not affected: 1 | 2026-06-05T19:34:44+00:00 | Vulnerability · Source |
| CVE-2026-49054 | redhat_vex | WordPress The Post Grid plugin <= 7.9.2 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:34:42+00:00 | Vulnerability · Source |
| CVE-2026-49386 | redhat_vex | CVE-2026-49386 | known not affected: 1 | 2026-06-05T19:34:42+00:00 | Vulnerability · Source |
| CVE-2026-49782 | redhat_vex | WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:34:42+00:00 | Vulnerability · Source |
| CVE-2026-49045 | redhat_vex | WordPress Adminimize plugin <= 1.11.11 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:34:41+00:00 | Vulnerability · Source |
| CVE-2026-49324 | redhat_vex | Indian Scout Bobber 2025 WCM brute-force | known not affected: 1 | 2026-06-05T19:34:40+00:00 | Vulnerability · Source |
| CVE-2026-1543 | redhat_vex | Avada (Fusion) Builder <= 3.15.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Shortcodes | known not affected: 1 | 2026-06-05T19:34:39+00:00 | Vulnerability · Source |
| CVE-2026-1677 | redhat_vex | net: TLS 1.2 connections allowed on TLS 1.3 sockets | known not affected: 1 | 2026-06-05T19:34:39+00:00 | Vulnerability · Source |
| CVE-2026-1660 | redhat_vex | Allocation of Resources Without Limits or Throttling in GitLab | known not affected: 1 | 2026-06-05T19:34:38+00:00 | Vulnerability · Source |
| CVE-2026-1354 | redhat_vex | Zero Motorcycles Firmware Key Exchange without Entity Authentication | known not affected: 1 | 2026-06-05T19:34:38+00:00 | Vulnerability · Source |
| CVE-2026-1880 | redhat_vex | CVE-2026-1880 | known not affected: 1 | 2026-06-05T19:34:37+00:00 | Vulnerability · Source |
| CVE-2026-1930 | redhat_vex | Emailchef <= 3.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Deletion | known not affected: 1 | 2026-06-05T19:34:37+00:00 | Vulnerability · Source |
| CVE-2026-1673 | redhat_vex | BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Taxonomy Term Deletion | known not affected: 1 | 2026-06-05T19:34:37+00:00 | Vulnerability · Source |
| CVE-2026-1516 | redhat_vex | Improper Control of Generation of Code ('Code Injection') in GitLab | known not affected: 1 | 2026-06-05T19:34:37+00:00 | Vulnerability · Source |
| CVE-2026-1079 | redhat_vex | A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed Pega Browser Extension. | known not affected: 1 | 2026-06-05T19:34:36+00:00 | Vulnerability · Source |
| CVE-2026-1493 | redhat_vex | Cross-Site Scripting in LEX Baza Dokumentów | known not affected: 1 | 2026-06-05T19:34:36+00:00 | Vulnerability · Source |
| CVE-2026-1314 | redhat_vex | 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.17 - Missing Authorization to Unauthenticated Private/Draft Flipbook Data Exposure | known not affected: 1 | 2026-06-05T19:34:35+00:00 | Vulnerability · Source |
| CVE-2026-1934 | redhat_vex | Motors – Car Dealership & Classified Listings Plugin <= 1.4.103 - Missing Authorization to Authenticated (Subscriber+) Payment Bypass via 'stm_payment_status' Parameter | known not affected: 1 | 2026-06-05T19:34:35+00:00 | Vulnerability · Source |
| CVE-2026-1789 | redhat_vex | CVE-2026-1789 | known not affected: 1 | 2026-06-05T19:34:34+00:00 | Vulnerability · Source |
| CVE-2026-1541 | redhat_vex | Avada (Fusion) Builder <= 3.15.1 - Authenticated (Subscriber+) Sensitive Information Exposure via Insecure Direct Object Reference | known not affected: 1 | 2026-06-05T19:34:34+00:00 | Vulnerability · Source |
| CVE-2026-1163 | redhat_vex | Insufficient Session Expiration in parisneo/lollms | known not affected: 1 | 2026-06-05T19:34:34+00:00 | Vulnerability · Source |
| CVE-2026-1101 | redhat_vex | Improper Validation of Specified Quantity in Input in GitLab | known not affected: 1 | 2026-06-05T19:34:34+00:00 | Vulnerability · Source |
| CVE-2026-1451 | redhat_vex | rognone <= 0.6.2 - Reflected Cross-Site Scripting via 'a' Parameter | known not affected: 1 | 2026-06-05T19:34:33+00:00 | Vulnerability · Source |
| CVE-2026-1352 | redhat_vex | IBM® Db2® is vulnerable to a trap or return SQLCODE -901 when compiling a specially crafted query with a defined index | known not affected: 1 | 2026-06-05T19:34:33+00:00 | Vulnerability · Source |
| CVE-2026-1509 | redhat_vex | Avada (Fusion) Builder <= 3.15.1 - Authenticated (Subscriber+) Limited Arbitrary WordPress Action Execution | known not affected: 1 | 2026-06-05T19:34:32+00:00 | Vulnerability · Source |
| CVE-2026-1923 | redhat_vex | Social Rocket – Social Sharing Plugin <= 1.3.4.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via id | known not affected: 1 | 2026-06-05T19:34:32+00:00 | Vulnerability · Source |
| CVE-2026-1572 | redhat_vex | Livemesh Addons by Elementor <= 9.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via Plugin Settings | known not affected: 1 | 2026-06-05T19:34:31+00:00 | Vulnerability · Source |
| CVE-2026-1815 | redhat_vex | Session Hijacking in TEİAŞ's Mobile Application | known not affected: 1 | 2026-06-05T19:34:30+00:00 | Vulnerability · Source |
| CVE-2026-1338 | redhat_vex | Authorization Bypass Through User-Controlled Key in GitLab | known not affected: 1 | 2026-06-05T19:34:30+00:00 | Vulnerability · Source |
| CVE-2026-1402 | redhat_vex | Allocation of Resources Without Limits or Throttling in GitLab | known not affected: 1 | 2026-06-05T19:34:29+00:00 | Vulnerability · Source |
| CVE-2026-1752 | redhat_vex | Incorrect Authorization in GitLab | known not affected: 1 | 2026-06-05T19:34:29+00:00 | Vulnerability · Source |
| CVE-2026-1379 | redhat_vex | HTTP Headers <= 1.19.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Custom Headers' Plugin Setting | known not affected: 1 | 2026-06-05T19:34:28+00:00 | Vulnerability · Source |
| CVE-2026-1865 | redhat_vex | User Registration & Membership <= 5.1.2 - Authenticated (Subscriber+) SQL Injection via membership_ids[] | known not affected: 1 | 2026-06-05T19:34:28+00:00 | Vulnerability · Source |
| CVE-2026-1782 | redhat_vex | MetForm Pro <= 3.9.7 - Unauthenticated Payment Amount Manipulation via 'mf-calculation' | known not affected: 1 | 2026-06-05T19:34:28+00:00 | Vulnerability · Source |
| CVE-2026-1636 | redhat_vex | CVE-2026-1636 | known not affected: 1 | 2026-06-05T19:34:27+00:00 | Vulnerability · Source |
| CVE-2026-1816 | redhat_vex | OTP Bypass in TEİAŞ's Mobile Application | known not affected: 1 | 2026-06-05T19:34:27+00:00 | Vulnerability · Source |
| CVE-2026-1852 | redhat_vex | Product Pricing Table by WooBeWoo <= 1.1.0 - Cross-Site Request Forgery to Stored XSS and Pricing Table Deletion | known not affected: 1 | 2026-06-05T19:34:27+00:00 | Vulnerability · Source |
| CVE-2026-1263 | redhat_vex | Webling <= 3.9.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'title' Parameter | known not affected: 1 | 2026-06-05T19:34:27+00:00 | Vulnerability · Source |
| CVE-2026-1672 | redhat_vex | BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Product Data Modification | known not affected: 1 | 2026-06-05T19:34:26+00:00 | Vulnerability · Source |
| CVE-2026-1564 | redhat_vex | Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role. | known not affected: 1 | 2026-06-05T19:34:26+00:00 | Vulnerability · Source |
| CVE-2026-1924 | redhat_vex | Aruba HiSpeed Cache <= 3.0.4 - Cross-Site Request Forgery to Plugin Settings Reset | known not affected: 1 | 2026-06-05T19:34:25+00:00 | Vulnerability · Source |
| CVE-2026-1322 | redhat_vex | Business Logic Errors in GitLab | known not affected: 1 | 2026-06-05T19:34:24+00:00 | Vulnerability · Source |
| CVE-2026-1395 | redhat_vex | Gutentools <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Slider Block Attributes | known not affected: 1 | 2026-06-05T19:34:24+00:00 | Vulnerability · Source |
| CVE-2026-1845 | redhat_vex | Real Estate Pro <= 1.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings | known not affected: 1 | 2026-06-05T19:34:24+00:00 | Vulnerability · Source |
| CVE-2026-1681 | redhat_vex | net: Stack Overflow with Ping (to own IP Address) via Shell | known not affected: 1 | 2026-06-05T19:34:24+00:00 | Vulnerability · Source |
| CVE-2026-1881 | redhat_vex | Broadstreet <= 1.52.2 - Authenticated (Subscriber+) Private Post Meta Disclosure via get_sponsored_meta | known not affected: 1 | 2026-06-05T19:34:23+00:00 | Vulnerability · Source |
| CVE-2026-1089 | redhat_vex | User‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS Lookups | known not affected: 1 | 2026-06-05T19:34:22+00:00 | Vulnerability · Source |
| CVE-2026-1711 | redhat_vex | Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role. | known not affected: 1 | 2026-06-05T19:34:22+00:00 | Vulnerability · Source |