VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298249 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-8698 | redhat_vex | Cryptocurrency Prijsvergelijking Widget <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:24:28+00:00 | Vulnerability · Source |
| CVE-2026-8942 | redhat_vex | MetaMagic SEO Plugin <= 1.6 - Cross-Site Request Forgery to Plugin Settings Update via Settings Page | known not affected: 1 | 2026-06-05T19:24:28+00:00 | Vulnerability · Source |
| CVE-2026-8106 | redhat_vex | Reflected HTML injection vulnerability in GitHub Enterprise Server Management Console login page allowed credential theft | known not affected: 1 | 2026-06-05T19:24:27+00:00 | Vulnerability · Source |
| CVE-2026-8627 | redhat_vex | Correct Prices <= 1.0 - Reflected Cross-Site Scripting via PHP_SELF Parameter | known not affected: 1 | 2026-06-05T19:24:26+00:00 | Vulnerability · Source |
| CVE-2026-8474 | redhat_vex | Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances. | known not affected: 1 | 2026-06-05T19:24:26+00:00 | Vulnerability · Source |
| CVE-2026-8906 | redhat_vex | WP Promoter <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'popup_width' Parameter | known not affected: 1 | 2026-06-05T19:24:25+00:00 | Vulnerability · Source |
| CVE-2026-8708 | redhat_vex | Genzel breadcrumbs <= 1.2 - Cross-Site Request Forgery to Settings Update via Plugin Settings Page | known not affected: 1 | 2026-06-05T19:24:25+00:00 | Vulnerability · Source |
| CVE-2026-8672 | redhat_vex | Default credentials for internal DB | known not affected: 1 | 2026-06-05T19:24:24+00:00 | Vulnerability · Source |
| CVE-2026-8870 | redhat_vex | Team Master <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:24+00:00 | Vulnerability · Source |
| CVE-2026-8771 | redhat_vex | linlinjava litemall Front-end WeChat API WxGoodsController.java list sql injection | known not affected: 1 | 2026-06-05T19:24:23+00:00 | Vulnerability · Source |
| CVE-2026-8096 | redhat_vex | Kirki <= 6.0.6 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Submission Data Exposure via 'kirki_wp_admin_get_apis' Action | known not affected: 1 | 2026-06-05T19:24:22+00:00 | Vulnerability · Source |
| CVE-2026-8327 | redhat_vex | Concrete CMS below 9.5.0 and below is vulnerable to password change without reauthorization and session-hardening bypass. | known not affected: 1 | 2026-06-05T19:24:22+00:00 | Vulnerability · Source |
| CVE-2026-8852 | redhat_vex | IBM HTTP Server is affected by multiple vulnerabilities | known not affected: 1 | 2026-06-05T19:24:22+00:00 | Vulnerability · Source |
| CVE-2026-8048 | redhat_vex | My Email Shortcode <= 0.91 - [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')] | known not affected: 1 | 2026-06-05T19:24:21+00:00 | Vulnerability · Source |
| CVE-2026-8129 | redhat_vex | SourceCodester SUP Online Shopping wishlist.php sql injection | known not affected: 1 | 2026-06-05T19:24:21+00:00 | Vulnerability · Source |
| CVE-2026-8624 | redhat_vex | LJ comments import: reloaded <= 0.97.1 - Reflected Cross-Site Scripting via PHP_SELF Parameter | known not affected: 1 | 2026-06-05T19:24:20+00:00 | Vulnerability · Source |
| CVE-2026-8381 | redhat_vex | Broken Access Control in TeamViewer DEX Platform (On Premises) | known not affected: 1 | 2026-06-05T19:24:20+00:00 | Vulnerability · Source |
| CVE-2026-8903 | redhat_vex | Two-factor authentication (formerly IP Vault) <= 2.1 - Cross-Site Request Forgery to Settings Update | known not affected: 1 | 2026-06-05T19:24:20+00:00 | Vulnerability · Source |
| CVE-2026-8318 | redhat_vex | VectifyAI PageIndex PDF Table of Contents page_index.py toc_transformer infinite loop | known not affected: 1 | 2026-06-05T19:24:19+00:00 | Vulnerability · Source |
| CVE-2026-8237 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to IDOR in the`/ccm/frontend/conversations/message_detail` endpoint | known not affected: 1 | 2026-06-05T19:24:19+00:00 | Vulnerability · Source |
| CVE-2026-8273 | redhat_vex | D-Link DNS-320 system_mgr.cgi cgi_merge_user os command injection | known not affected: 1 | 2026-06-05T19:24:18+00:00 | Vulnerability · Source |
| CVE-2026-8174 | redhat_vex | Cross-site Request Forgery | known not affected: 1 | 2026-06-05T19:24:17+00:00 | Vulnerability · Source |
| CVE-2026-8040 | redhat_vex | faq shortocde <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:24:16+00:00 | Vulnerability · Source |
| CVE-2026-8479 | redhat_vex | CVE-2026-8479 | known not affected: 1 | 2026-06-05T19:24:16+00:00 | Vulnerability · Source |
| CVE-2026-8202 | redhat_vex | Post-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators | known not affected: 1 | 2026-06-05T19:24:16+00:00 | Vulnerability · Source |
| CVE-2026-8875 | redhat_vex | Easy Prism Syntax Highlighter <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:16+00:00 | Vulnerability · Source |
| CVE-2026-8938 | redhat_vex | auto making JSON-LD <= 4.5.3 - Cross-Site Request Forgery to Plugin Certification Settings via Nonce Validation Bypass | known not affected: 1 | 2026-06-05T19:24:15+00:00 | Vulnerability · Source |
| CVE-2026-8785 | redhat_vex | projectworlds hospital-management-system-in-php GET Parameter update_info.php getAllPatientDetail sql injection | known not affected: 1 | 2026-06-05T19:24:14+00:00 | Vulnerability · Source |
| CVE-2026-8031 | redhat_vex | PicoTronica e-Clinic Healthcare System ECHS API Endpoint patient-records missing authentication | known not affected: 1 | 2026-06-05T19:24:14+00:00 | Vulnerability · Source |
| CVE-2026-8866 | redhat_vex | jQuery googleslides <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:14+00:00 | Vulnerability · Source |
| CVE-2026-8130 | redhat_vex | SourceCodester SUP Online Shopping message.php sql injection | known not affected: 1 | 2026-06-05T19:24:14+00:00 | Vulnerability · Source |
| CVE-2026-8884 | redhat_vex | Instant-Quote.co Quotation Page <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:13+00:00 | Vulnerability · Source |
| CVE-2026-8488 | redhat_vex | Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation | known not affected: 1 | 2026-06-05T19:24:13+00:00 | Vulnerability · Source |
| CVE-2026-8422 | redhat_vex | Remove meta boxes per user role <= 1.01 - Cross-Site Request Forgery to Settings Update | known not affected: 1 | 2026-06-05T19:24:12+00:00 | Vulnerability · Source |
| CVE-2026-8080 | redhat_vex | MISP core - Stored XSS in MISP template (old engine) element attribute type | known not affected: 1 | 2026-06-05T19:24:12+00:00 | Vulnerability · Source |
| CVE-2026-8897 | redhat_vex | Shortcode Buddy <= 0.1.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:12+00:00 | Vulnerability · Source |
| CVE-2026-8305 | redhat_vex | OpenClaw bluebubbles Webhook monitor.ts handleBlueBubblesWebhookRequest improper authentication | known not affected: 1 | 2026-06-05T19:24:12+00:00 | Vulnerability · Source |
| CVE-2026-8026 | redhat_vex | FlowiseAI Flowise API Response account.service.ts login information disclosure | known not affected: 1 | 2026-06-05T19:24:11+00:00 | Vulnerability · Source |
| CVE-2026-8701 | redhat_vex | GNTT Post Title Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:11+00:00 | Vulnerability · Source |
| CVE-2026-8035 | redhat_vex | NULL pointer dereference in NI-PAL | known not affected: 1 | 2026-06-05T19:24:11+00:00 | Vulnerability · Source |
| CVE-2026-8871 | redhat_vex | Formidable Kinetic <= 1.1.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:10+00:00 | Vulnerability · Source |
| CVE-2026-8673 | redhat_vex | Password re-initialization mechanism sends passwords in plain text | known not affected: 1 | 2026-06-05T19:24:10+00:00 | Vulnerability · Source |
| CVE-2026-8943 | redhat_vex | GoStats for WordPress <= 1.4 - Cross-Site Request Forgery via gostats_manage() Function | known not affected: 1 | 2026-06-05T19:24:09+00:00 | Vulnerability · Source |
| CVE-2026-8367 | redhat_vex | aria2c Improper Certificate Validation | known not affected: 1 | 2026-06-05T19:24:08+00:00 | Vulnerability · Source |
| CVE-2026-8109 | redhat_vex | CVE-2026-8109 | known not affected: 1 | 2026-06-05T19:24:07+00:00 | Vulnerability · Source |
| CVE-2026-8682 | redhat_vex | 3D Viewer <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification via settings REST endpoint | known not affected: 1 | 2026-06-05T19:24:07+00:00 | Vulnerability · Source |
| CVE-2026-8844 | redhat_vex | Responsive Check <= 0.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:07+00:00 | Vulnerability · Source |
| CVE-2026-8424 | redhat_vex | Remove Yellow BGBOX <= 1.0 - Cross-Site Request Forgery | known not affected: 1 | 2026-06-05T19:24:06+00:00 | Vulnerability · Source |
| CVE-2026-8703 | redhat_vex | Endless Scroll <= 1.0.0 - [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')] | known not affected: 1 | 2026-06-05T19:24:05+00:00 | Vulnerability · Source |
| CVE-2026-8486 | redhat_vex | Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation | known not affected: 1 | 2026-06-05T19:24:05+00:00 | Vulnerability · Source |