VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-10607 | redhat_vex | DedeCMS flink.php dede_htmlspecialchars sql injection | known not affected: 1 | 2026-06-05T19:34:01+00:00 | Vulnerability · Source |
| CVE-2026-10058 | redhat_vex | ITP Technology｜ITS Intelligent SCADA System - Stored Cross-Site Scripting | known not affected: 1 | 2026-06-05T19:34:01+00:00 | Vulnerability · Source |
| CVE-2026-10597 | redhat_vex | ITPison｜OMICARD EDM - Insecure Direct Object Reference | known not affected: 1 | 2026-06-05T19:34:00+00:00 | Vulnerability · Source |
| CVE-2026-9606 | redhat_vex | itsourcecode Courier Management System manage_user.php sql injection | known not affected: 1 | 2026-06-05T19:33:58+00:00 | Vulnerability · Source |
| CVE-2026-9084 | redhat_vex | MISP OIDC authentication bypass via automatic email-based account linking under insecure IdP configurations | known not affected: 1 | 2026-06-05T19:33:58+00:00 | Vulnerability · Source |
| CVE-2026-9723 | redhat_vex | Google Plus One Bottom <= 0.0.2 - Cross-Site Request Forgery to Plugin Settings Update via Settings Page | known not affected: 1 | 2026-06-05T19:33:58+00:00 | Vulnerability · Source |
| CVE-2026-9048 | redhat_vex | Slider Revolution 7.0.0 - 7.0.14 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure | known not affected: 1 | 2026-06-05T19:33:57+00:00 | Vulnerability · Source |
| CVE-2026-9228 | redhat_vex | Timetable and Event Schedule by MotoPress <= 2.4.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via action_get_event_data Function | known not affected: 1 | 2026-06-05T19:33:56+00:00 | Vulnerability · Source |
| CVE-2026-9714 | redhat_vex | Simple Divi Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:33:56+00:00 | Vulnerability · Source |
| CVE-2026-9156 | redhat_vex | Tanium addressed a denial of service vulnerability in Tanium Server. | known not affected: 1 | 2026-06-05T19:33:55+00:00 | Vulnerability · Source |
| CVE-2026-9552 | redhat_vex | Das Parking Management System 停车场管理系统 Search API Endpoint sql injection | known not affected: 1 | 2026-06-05T19:33:55+00:00 | Vulnerability · Source |
| CVE-2026-9813 | redhat_vex | FlowIntel external reference URL probe allows server-side request forgery | known not affected: 1 | 2026-06-05T19:33:54+00:00 | Vulnerability · Source |
| CVE-2026-9732 | redhat_vex | EmergencyWP <= 1.4.2 - Cross-Site Request Forgery to Plugin Settings Update | known not affected: 1 | 2026-06-05T19:33:54+00:00 | Vulnerability · Source |
| CVE-2026-9022 | redhat_vex | Splide Carousel Block <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'url' Block Attribute | known not affected: 1 | 2026-06-05T19:33:53+00:00 | Vulnerability · Source |
| CVE-2026-9035 | redhat_vex | Multiple vulnerabilities in Aspera applications. | known not affected: 1 | 2026-06-05T19:33:52+00:00 | Vulnerability · Source |
| CVE-2026-9646 | redhat_vex | ScadaBR Unauthenticated Reflected Cross-Site Scripting | known not affected: 1 | 2026-06-05T19:33:51+00:00 | Vulnerability · Source |
| CVE-2026-9053 | redhat_vex | CVE-2026-9053 | known not affected: 1 | 2026-06-05T19:33:50+00:00 | Vulnerability · Source |
| CVE-2026-9574 | redhat_vex | itsourcecode Student Transcript Processing System trans.php sql injection | known not affected: 1 | 2026-06-05T19:33:49+00:00 | Vulnerability · Source |
| CVE-2026-9495 | redhat_vex | CVE-2026-9495 | known not affected: 1 | 2026-06-05T19:33:49+00:00 | Vulnerability · Source |
| CVE-2026-9523 | redhat_vex | Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform getCalcmeterDetailDayListTree sql injection | known not affected: 1 | 2026-06-05T19:33:49+00:00 | Vulnerability · Source |
| CVE-2026-9811 | redhat_vex | CVE-2026-9811 | known not affected: 1 | 2026-06-05T19:33:48+00:00 | Vulnerability · Source |
| CVE-2026-9550 | redhat_vex | Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform upfile path traversal | known not affected: 1 | 2026-06-05T19:33:47+00:00 | Vulnerability · Source |
| CVE-2026-9730 | redhat_vex | Remove NoFollow Commenter URL <= 1.0 - Cross-Site Request Forgery to Settings Update | known not affected: 1 | 2026-06-05T19:33:47+00:00 | Vulnerability · Source |
| CVE-2026-9189 | redhat_vex | Contact Form 7 – PayPal & Stripe Add-on <= 2.4.9 - Unauthenticated Payment Bypass via Insufficient Verification of Data Authenticity via PayPal IPN Handler ('invoice'/'mc_gross' Verification) | known not affected: 1 | 2026-06-05T19:33:46+00:00 | Vulnerability · Source |
| CVE-2026-9015 | redhat_vex | Equalize Digital Accessibility Checker <= 1.42.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Accessibility Issue Modification via edac_insert_ignore_data AJAX Action | known not affected: 1 | 2026-06-05T19:33:46+00:00 | Vulnerability · Source |
| CVE-2026-9806 | redhat_vex | Stored Cross-Site Scripting (XSS) in CTI Transmute Notification Panel via Malicious Convert Names | known not affected: 1 | 2026-06-05T19:33:45+00:00 | Vulnerability · Source |
| CVE-2026-9644 | redhat_vex | LiveSmart Video Chat <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting | known not affected: 1 | 2026-06-05T19:33:45+00:00 | Vulnerability · Source |
| CVE-2026-9056 | redhat_vex | Security fix for Qlik Talend Administration Center cross-site scripting vulnerability | known not affected: 1 | 2026-06-05T19:33:44+00:00 | Vulnerability · Source |
| CVE-2026-9236 | redhat_vex | CM Ad Changer <= 2.0.7 - Cross-Site Request Forgery to Campaign Deletion via Campaign Management | known not affected: 1 | 2026-06-05T19:33:44+00:00 | Vulnerability · Source |
| CVE-2026-9551 | redhat_vex | Das Parking Management System 停车场管理系统 API Endpoint ExportParkingRecords xp_cmdshell sql injection | known not affected: 1 | 2026-06-05T19:33:44+00:00 | Vulnerability · Source |
| CVE-2026-9722 | redhat_vex | Laiser Tag <= 1.2.5 - Cross-Site Request Forgery to Plugin Settings Update via Settings Form | known not affected: 1 | 2026-06-05T19:33:43+00:00 | Vulnerability · Source |
| CVE-2026-9524 | redhat_vex | xianrendzw EasyReport REST Endpoint execute sql injection | known not affected: 1 | 2026-06-05T19:33:43+00:00 | Vulnerability · Source |
| CVE-2026-9241 | redhat_vex | FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter | known not affected: 1 | 2026-06-05T19:33:42+00:00 | Vulnerability · Source |
| CVE-2026-9599 | redhat_vex | Tectite Forms <= 1.3 - Cross-Site Request Forgery to Settings Update | known not affected: 1 | 2026-06-05T19:33:42+00:00 | Vulnerability · Source |
| CVE-2026-9528 | redhat_vex | itsourcecode Electronic Judging System delete_judge.php sql injection | known not affected: 1 | 2026-06-05T19:33:41+00:00 | Vulnerability · Source |
| CVE-2026-9807 | redhat_vex | Incorrect Authorization in GitLab | known not affected: 1 | 2026-06-05T19:33:41+00:00 | Vulnerability · Source |
| CVE-2026-9474 | redhat_vex | yashpokharna2555 StudentManagementSystem studentdel.php confirm_logged_in sql injection | known not affected: 1 | 2026-06-05T19:33:40+00:00 | Vulnerability · Source |
| CVE-2026-9465 | redhat_vex | Tiandy Easy7 Integrated Management Platform GetDBDataEx.jsp sql injection | known not affected: 1 | 2026-06-05T19:33:40+00:00 | Vulnerability · Source |
| CVE-2026-9234 | redhat_vex | JTL-Connector for WooCommerce <= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Settings Modification via Multiple Functions | known not affected: 1 | 2026-06-05T19:33:39+00:00 | Vulnerability · Source |
| CVE-2026-9618 | redhat_vex | PeachPay <= 1.120.46 - Cross-Site Request Forgery to Stripe Unlink | known not affected: 1 | 2026-06-05T19:33:39+00:00 | Vulnerability · Source |
| CVE-2026-9603 | redhat_vex | SourceCodester eDoc Doctor Appointment System delete-session.php authorization | known not affected: 1 | 2026-06-05T19:33:38+00:00 | Vulnerability · Source |
| CVE-2026-9243 | redhat_vex | The Plus Addons for Elementor <= 6.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'carousel_direction' Parameter | known not affected: 1 | 2026-06-05T19:33:38+00:00 | Vulnerability · Source |
| CVE-2026-9584 | redhat_vex | code-projects Project Management System Login chk.php sql injection | known not affected: 1 | 2026-06-05T19:33:38+00:00 | Vulnerability · Source |
| CVE-2026-9557 | redhat_vex | CVE-2026-9557 | known not affected: 1 | 2026-06-05T19:33:37+00:00 | Vulnerability · Source |
| CVE-2026-9575 | redhat_vex | itsourcecode Student Transcript Processing System index.php sql injection | known not affected: 1 | 2026-06-05T19:33:37+00:00 | Vulnerability · Source |
| CVE-2026-9104 | redhat_vex | Draft List <= 2.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via Draft Post Title | known not affected: 1 | 2026-06-05T19:33:36+00:00 | Vulnerability · Source |
| CVE-2026-9014 | redhat_vex | WP Promoter <= 1.3 - Missing Authorization to Unauthenticated Statistics Reset via wpp-reset_stats AJAX Action | known not affected: 1 | 2026-06-05T19:33:36+00:00 | Vulnerability · Source |
| CVE-2026-9050 | redhat_vex | Slider Revolution 6.0.0-6.7.55 and 7.0.0-7.0.14 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Deactivation | known not affected: 1 | 2026-06-05T19:33:36+00:00 | Vulnerability · Source |
| CVE-2026-27349 | redhat_vex | WordPress Mail Mint plugin <= 1.19.5 - Sensitive Data Exposure vulnerability | known not affected: 1 | 2026-06-05T19:33:35+00:00 | Vulnerability · Source |
| CVE-2026-9580 | redhat_vex | JeecgBoot selectDepart LoginController.selectDepart access control | known not affected: 1 | 2026-06-05T19:33:35+00:00 | Vulnerability · Source |