VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-9526 | redhat_vex | itsourcecode Electronic Judging System edit_team.php sql injection | known not affected: 1 | 2026-06-05T19:33:35+00:00 | Vulnerability · Source |
| CVE-2026-27677 | redhat_vex | Missing Authorization check in SAP S/4HANA OData Service (Manage Reference Equipment) | known not affected: 1 | 2026-06-05T19:33:34+00:00 | Vulnerability · Source |
| CVE-2026-27398 | redhat_vex | WordPress RSVP and Event Management plugin <= 2.7.16 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:33:34+00:00 | Vulnerability · Source |
| CVE-2026-9517 | redhat_vex | hemant6488 CodeIgniter-StudentManagementSystem Student Management addStudentView access control | known not affected: 1 | 2026-06-05T19:33:34+00:00 | Vulnerability · Source |
| CVE-2026-27299 | redhat_vex | Adobe Framemaker | Improper Input Validation (CWE-20) | known not affected: 1 | 2026-06-05T19:33:33+00:00 | Vulnerability · Source |
| CVE-2026-27286 | redhat_vex | InDesign Desktop | Heap-based Buffer Overflow (CWE-122) | known not affected: 1 | 2026-06-05T19:33:32+00:00 | Vulnerability · Source |
| CVE-2026-27301 | redhat_vex | Adobe Framemaker | Heap-based Buffer Overflow (CWE-122) | known not affected: 1 | 2026-06-05T19:33:32+00:00 | Vulnerability · Source |
| CVE-2026-27682 | redhat_vex | Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) | known not affected: 1 | 2026-06-05T19:33:32+00:00 | Vulnerability · Source |
| CVE-2026-27222 | redhat_vex | Bridge | Divide By Zero (CWE-369) | known not affected: 1 | 2026-06-05T19:33:31+00:00 | Vulnerability · Source |
| CVE-2026-27673 | redhat_vex | Missing Authorization Check in SAP S/4HANA (Private Cloud and On-Premise) | known not affected: 1 | 2026-06-05T19:33:30+00:00 | Vulnerability · Source |
| CVE-2026-27415 | redhat_vex | WordPress BEAR plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-06-05T19:33:30+00:00 | Vulnerability · Source |
| CVE-2026-27288 | redhat_vex | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) | known not affected: 1 | 2026-06-05T19:33:29+00:00 | Vulnerability · Source |
| CVE-2026-27424 | redhat_vex | WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:33:29+00:00 | Vulnerability · Source |
| CVE-2026-27105 | redhat_vex | CVE-2026-27105 | known not affected: 1 | 2026-06-05T19:33:28+00:00 | Vulnerability · Source |
| CVE-2026-27787 | redhat_vex | CVE-2026-27787 | known not affected: 1 | 2026-06-05T19:33:28+00:00 | Vulnerability · Source |
| CVE-2026-27329 | redhat_vex | WordPress YITH WooCommerce Wishlist plugin <= 4.12.0 - Insecure Direct Object References (IDOR) vulnerability | known not affected: 1 | 2026-06-05T19:33:27+00:00 | Vulnerability · Source |
| CVE-2026-27892 | redhat_vex | FacturaScripts: Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download | known not affected: 1 | 2026-06-05T19:33:27+00:00 | Vulnerability · Source |
| CVE-2026-27679 | redhat_vex | Missing Authorization check in SAP S/4HANA Frontend OData Service (Manage Reference Structures) | known not affected: 1 | 2026-06-05T19:33:27+00:00 | Vulnerability · Source |
| CVE-2026-27644 | redhat_vex | traccar allows CSV formula injection via exported position data | known not affected: 1 | 2026-06-05T19:33:26+00:00 | Vulnerability · Source |
| CVE-2026-27416 | redhat_vex | WordPress PDF Poster plugin <= 2.4.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:33:26+00:00 | Vulnerability · Source |
| CVE-2026-27300 | redhat_vex | Adobe Framemaker | Access of Uninitialized Pointer (CWE-824) | known not affected: 1 | 2026-06-05T19:33:25+00:00 | Vulnerability · Source |
| CVE-2026-27694 | redhat_vex | traccar allows stored HTML injection in notification emails | known not affected: 1 | 2026-06-05T19:33:25+00:00 | Vulnerability · Source |
| CVE-2026-27766 | redhat_vex | multimedia_audio_framework has a Race Condition vulnerability | known not affected: 1 | 2026-06-05T19:33:24+00:00 | Vulnerability · Source |
| CVE-2026-27676 | redhat_vex | Missing Authorization check in SAP S/4HANA OData Service (Manage Technical Object Structures) | known not affected: 1 | 2026-06-05T19:33:24+00:00 | Vulnerability · Source |
| CVE-2026-27421 | redhat_vex | WordPress Royal Elementor Addons plugin < 1.7.1053 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:33:23+00:00 | Vulnerability · Source |
| CVE-2026-27393 | redhat_vex | WordPress CF7 WOW Styler plugin <= 1.7.6 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:33:22+00:00 | Vulnerability · Source |
| CVE-2026-27331 | redhat_vex | WordPress WpTravelly plugin <= 2.1.5 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:33:22+00:00 | Vulnerability · Source |
| CVE-2026-27258 | redhat_vex | DNG SDK | Out-of-bounds Write (CWE-787) | known not affected: 1 | 2026-06-05T19:33:22+00:00 | Vulnerability · Source |
| CVE-2026-27672 | redhat_vex | Missing Authorization check in Material Master Application | known not affected: 1 | 2026-06-05T19:33:21+00:00 | Vulnerability · Source |
| CVE-2026-27357 | redhat_vex | WordPress WP Search Analytics plugin < 1.5.0 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:33:21+00:00 | Vulnerability · Source |
| CVE-2026-27285 | redhat_vex | InDesign Desktop | Heap-based Buffer Overflow (CWE-122) | known not affected: 1 | 2026-06-05T19:33:20+00:00 | Vulnerability · Source |
| CVE-2026-27351 | redhat_vex | WordPress Crew HRM plugin <= 1.2.2 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:33:19+00:00 | Vulnerability · Source |
| CVE-2026-27405 | redhat_vex | WordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:33:19+00:00 | Vulnerability · Source |
| CVE-2026-27678 | redhat_vex | Missing Authorization check in SAP S/4HANA Backend OData Service (Manage Reference Structures) | known not affected: 1 | 2026-06-05T19:33:19+00:00 | Vulnerability · Source |
| CVE-2026-27737 | redhat_vex | BigBlueButton has Stored XSS in bbb-playback replay | known not affected: 1 | 2026-06-05T19:33:19+00:00 | Vulnerability · Source |
| CVE-2026-27683 | redhat_vex | Reflected cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform | known not affected: 1 | 2026-06-05T19:33:19+00:00 | Vulnerability · Source |
| CVE-2026-27427 | redhat_vex | WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:33:18+00:00 | Vulnerability · Source |
| CVE-2026-45435 | redhat_vex | WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:33:17+00:00 | Vulnerability · Source |
| CVE-2026-45246 | redhat_vex | Summarize < 0.15.1 Insecure File Permissions Information Disclosure | known not affected: 1 | 2026-06-05T19:33:17+00:00 | Vulnerability · Source |
| CVE-2026-27346 | redhat_vex | WordPress B2BKing plugin < 5.2.10 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:33:17+00:00 | Vulnerability · Source |
| CVE-2026-45543 | redhat_vex | Nextcloud: Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files share | known not affected: 1 | 2026-06-05T19:33:17+00:00 | Vulnerability · Source |
| CVE-2026-45264 | redhat_vex | Nextcloud: ACL Rename Permission Bypass in Team Folders Allows Unauthorized File Renames | known not affected: 1 | 2026-06-05T19:33:17+00:00 | Vulnerability · Source |
| CVE-2026-45660 | redhat_vex | Statamic: Server-Side Request Forgery via Glide | known not affected: 1 | 2026-06-05T19:33:17+00:00 | Vulnerability · Source |
| CVE-2026-45147 | redhat_vex | SiYuan: Broken access control in SiYuan `/api/tag/getTag` — Reader role can mutate `Conf.Tag.Sort` and persist to disk | known not affected: 1 | 2026-06-05T19:33:17+00:00 | Vulnerability · Source |
| CVE-2026-45299 | redhat_vex | Open WebUI: Stored Cross-Site Scripting In Profile Picture | known not affected: 1 | 2026-06-05T19:33:16+00:00 | Vulnerability · Source |
| CVE-2026-45413 | redhat_vex | MaxKB: Unsalted MD5 Password Hashing | known not affected: 1 | 2026-06-05T19:33:15+00:00 | Vulnerability · Source |
| CVE-2026-45215 | redhat_vex | WordPress WP EasyPay plugin <= 4.3.0 - Sensitive Data Exposure vulnerability | known not affected: 1 | 2026-06-05T19:33:15+00:00 | Vulnerability · Source |
| CVE-2026-45701 | redhat_vex | Sulu: Weak Cryptographical usage for API Key generation and Reset Tokens | known not affected: 1 | 2026-06-05T19:33:14+00:00 | Vulnerability · Source |
| CVE-2026-45620 | redhat_vex | AVideo CVE-2026-43881 incomplete fix - `objects/mention.json.php:17` is an unauthenticated user enumeration | known not affected: 1 | 2026-06-05T19:33:14+00:00 | Vulnerability · Source |
| CVE-2026-45026 | redhat_vex | WeGIA: Stored XSS in html/atendido/processo_aceitacao.php | known not affected: 1 | 2026-06-05T19:33:14+00:00 | Vulnerability · Source |