VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-24147 | redhat_vex | CVE-2026-24147 | known not affected: 1 | 2026-06-05T19:29:56+00:00 | Vulnerability · Source |
| CVE-2026-24318 | redhat_vex | Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence Platform | known not affected: 1 | 2026-06-05T19:29:56+00:00 | Vulnerability · Source |
| CVE-2026-24907 | redhat_vex | October CMS has Stored XSS via Event Log Mail Preview | known not affected: 1 | 2026-06-05T19:29:55+00:00 | Vulnerability · Source |
| CVE-2026-24592 | redhat_vex | WordPress Auto Affiliate Links plugin <= 6.8.8.3 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:29:53+00:00 | Vulnerability · Source |
| CVE-2026-24000 | redhat_vex | Fleet has a rate limiting bypass via untrusted client IP headers | known not affected: 1 | 2026-06-05T19:29:52+00:00 | Vulnerability · Source |
| CVE-2026-2955 | redhat_vex | AI Chatbot & Workflow Automation by AIWU <= 1.4.14 - Unauthenticated Stored Cross-Site Scripting via 'X-Forwarded-For' Header | known not affected: 1 | 2026-06-05T19:29:51+00:00 | Vulnerability · Source |
| CVE-2026-24574 | redhat_vex | WordPress Export WP Page to Static HTML/CSS plugin <= 6.0.0 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-06-05T19:29:51+00:00 | Vulnerability · Source |
| CVE-2026-2515 | redhat_vex | Hostinger Reach <= 1.3.8 - Missing Authorization to Authenticated (Subscriber+) Integration API Key Update | known not affected: 1 | 2026-06-05T19:29:50+00:00 | Vulnerability · Source |
| CVE-2026-2030 | redhat_vex | WPBakery Page Builder Addons by Livemesh <= 3.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:29:49+00:00 | Vulnerability · Source |
| CVE-2026-2254 | redhat_vex | Hitachi Vantara Pentaho Data Integration & Analytics - Incorrect Permission Assignment for Critical Resource | known not affected: 1 | 2026-06-05T19:29:49+00:00 | Vulnerability · Source |
| CVE-2026-2812 | redhat_vex | Improper Authentication issue in ArcGIS Server | known not affected: 1 | 2026-06-05T19:29:47+00:00 | Vulnerability · Source |
| CVE-2026-2128 | redhat_vex | Breeze Cache <= 2.5.2 - Unauthenticated Exposure of Sensitive Information to an Unauthorized Actor via Crafted Login Cookie | known not affected: 1 | 2026-06-05T19:29:46+00:00 | Vulnerability · Source |
| CVE-2026-2263 | redhat_vex | Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.10.2 - Missing Authorization to Unauthenticated Conversion Tracking Data Manipulation | known not affected: 1 | 2026-06-05T19:29:46+00:00 | Vulnerability · Source |
| CVE-2026-2582 | redhat_vex | Germanized for WooCommerce <= 3.20.5 - Unauthenticated Arbitrary Shortcode Execution | known not affected: 1 | 2026-06-05T19:29:45+00:00 | Vulnerability · Source |
| CVE-2026-2425 | redhat_vex | hiWeb Migration Simple <= 2.0.0.1 - Reflected Cross-Site Scripting via 'new_domain' Parameter | known not affected: 1 | 2026-06-05T19:29:45+00:00 | Vulnerability · Source |
| CVE-2026-2902 | redhat_vex | WP Meteor Website Speed Optimization Addon <= 3.4.16 - Unauthenticated Stored Cross-Site Scripting via Comment | known not affected: 1 | 2026-06-05T19:29:45+00:00 | Vulnerability · Source |
| CVE-2026-2728 | redhat_vex | CVE-2026-2728 | known not affected: 1 | 2026-06-05T19:29:44+00:00 | Vulnerability · Source |
| CVE-2026-2717 | redhat_vex | HTTP Headers <= 1.19.2 - Authenticated (Administrator+) CRLF Injection via Custom Header Values | known not affected: 1 | 2026-06-05T19:29:43+00:00 | Vulnerability · Source |
| CVE-2026-2382 | redhat_vex | FPW Category Thumbnails <= 1.9.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'id' Parameter | known not affected: 1 | 2026-06-05T19:29:43+00:00 | Vulnerability · Source |
| CVE-2026-2951 | redhat_vex | Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutentor Block HTML | known not affected: 1 | 2026-06-05T19:29:43+00:00 | Vulnerability · Source |
| CVE-2026-2403 | redhat_vex | CVE-2026-2403 | known not affected: 1 | 2026-06-05T19:29:41+00:00 | Vulnerability · Source |
| CVE-2026-2601 | redhat_vex | Missing Authorization in GitLab | known not affected: 1 | 2026-06-05T19:29:41+00:00 | Vulnerability · Source |
| CVE-2026-2988 | redhat_vex | Blubrry PowerPress <= 11.15.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via powerpress and podcast Shortcodes | known not affected: 1 | 2026-06-05T19:29:40+00:00 | Vulnerability · Source |
| CVE-2026-2810 | redhat_vex | Endpoint DLP Driver Out-of-Bounds Read | known not affected: 1 | 2026-06-05T19:29:39+00:00 | Vulnerability · Source |
| CVE-2026-2306 | redhat_vex | Ninja Tables <= 5.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation | known not affected: 1 | 2026-06-05T19:29:39+00:00 | Vulnerability · Source |
| CVE-2026-2405 | redhat_vex | CVE-2026-2405 | known not affected: 1 | 2026-06-05T19:29:38+00:00 | Vulnerability · Source |
| CVE-2026-2729 | redhat_vex | Forminator – Contact Form, Payment Form & Custom Form Builder <= 1.52.0 - Missing Authorization to Unauthenticated Stripe PaymentIntent Reuse / Underpayment Bypass via 'paymentid' Parameter | known not affected: 1 | 2026-06-05T19:29:37+00:00 | Vulnerability · Source |
| CVE-2026-2481 | redhat_vex | Beaver Builder Page Builder – Drag and Drop Website Builder <= 2.10.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'settings[js]' | known not affected: 1 | 2026-06-05T19:29:37+00:00 | Vulnerability · Source |
| CVE-2026-2399 | redhat_vex | CVE-2026-2399 | known not affected: 1 | 2026-06-05T19:29:36+00:00 | Vulnerability · Source |
| CVE-2026-2104 | redhat_vex | Authorization Bypass Through User-Controlled Key in GitLab | known not affected: 1 | 2026-06-05T19:29:36+00:00 | Vulnerability · Source |
| CVE-2026-2288 | redhat_vex | myLinksDump <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'link_title' Parameter | known not affected: 1 | 2026-06-05T19:29:36+00:00 | Vulnerability · Source |
| CVE-2026-2028 | redhat_vex | Maxi Blocks <= 2.1.8 - Missing Authorization to Authenticated (Author+) Media File Deletion via 'old_media_src' Parameter | known not affected: 1 | 2026-06-05T19:29:35+00:00 | Vulnerability · Source |
| CVE-2026-2840 | redhat_vex | Email Encoder – Protect Email Addresses and Phone Numbers <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via eeb_mailto Shortcode | known not affected: 1 | 2026-06-05T19:29:35+00:00 | Vulnerability · Source |
| CVE-2026-2325 | redhat_vex | Improper Input Validation in MS Teams Meetings API Handler | known not affected: 1 | 2026-06-05T19:29:35+00:00 | Vulnerability · Source |
| CVE-2026-2280 | redhat_vex | rexCrawler <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings | known not affected: 1 | 2026-06-05T19:29:34+00:00 | Vulnerability · Source |
| CVE-2026-2518 | redhat_vex | FastX <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation and Activation | known not affected: 1 | 2026-06-05T19:29:33+00:00 | Vulnerability · Source |
| CVE-2026-2509 | redhat_vex | Page Builder: Pagelayer <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes | known not affected: 1 | 2026-06-05T19:29:33+00:00 | Vulnerability · Source |
| CVE-2026-2712 | redhat_vex | WP-Optimize <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update and Image Manipulation | known not affected: 1 | 2026-06-05T19:29:33+00:00 | Vulnerability · Source |
| CVE-2026-2619 | redhat_vex | Incorrect Authorization in GitLab | known not affected: 1 | 2026-06-05T19:29:32+00:00 | Vulnerability · Source |
| CVE-2026-2402 | redhat_vex | CVE-2026-2402 | known not affected: 1 | 2026-06-05T19:29:32+00:00 | Vulnerability · Source |
| CVE-2026-20172 | redhat_vex | Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerability | known not affected: 1 | 2026-06-05T19:29:17+00:00 | Vulnerability · Source |
| CVE-2026-20136 | redhat_vex | Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability | known not affected: 1 | 2026-06-05T19:29:16+00:00 | Vulnerability · Source |
| CVE-2026-20059 | redhat_vex | Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability | known not affected: 1 | 2026-06-05T19:29:16+00:00 | Vulnerability · Source |
| CVE-2026-20914 | redhat_vex | CVE-2026-20914 | known not affected: 1 | 2026-06-05T19:29:16+00:00 | Vulnerability · Source |
| CVE-2026-20905 | redhat_vex | CVE-2026-20905 | known not affected: 1 | 2026-06-05T19:29:15+00:00 | Vulnerability · Source |
| CVE-2026-20132 | redhat_vex | Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities | known not affected: 1 | 2026-06-05T19:29:15+00:00 | Vulnerability · Source |
| CVE-2026-20060 | redhat_vex | Cisco Unity Connection Open Redirect Vulnerability | known not affected: 1 | 2026-06-05T19:29:14+00:00 | Vulnerability · Source |
| CVE-2026-20240 | redhat_vex | Denial of Service through coldToFrozen.sh Script in Splunk Enterprise | known not affected: 1 | 2026-06-05T19:29:14+00:00 | Vulnerability · Source |
| CVE-2026-20754 | redhat_vex | CVE-2026-20754 | known not affected: 1 | 2026-06-05T19:29:13+00:00 | Vulnerability · Source |
| CVE-2026-20170 | redhat_vex | CVE-2026-20170 | known not affected: 1 | 2026-06-05T19:29:13+00:00 | Vulnerability · Source |