VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298279 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-8273 | redhat_vex | D-Link DNS-320 system_mgr.cgi cgi_merge_user os command injection | known not affected: 1 | 2026-06-05T19:24:18+00:00 | Vulnerability · Source |
| CVE-2026-8174 | redhat_vex | Cross-site Request Forgery | known not affected: 1 | 2026-06-05T19:24:17+00:00 | Vulnerability · Source |
| CVE-2026-8040 | redhat_vex | faq shortocde <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:24:16+00:00 | Vulnerability · Source |
| CVE-2026-8479 | redhat_vex | CVE-2026-8479 | known not affected: 1 | 2026-06-05T19:24:16+00:00 | Vulnerability · Source |
| CVE-2026-8202 | redhat_vex | Post-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators | known not affected: 1 | 2026-06-05T19:24:16+00:00 | Vulnerability · Source |
| CVE-2026-8875 | redhat_vex | Easy Prism Syntax Highlighter <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:16+00:00 | Vulnerability · Source |
| CVE-2026-8938 | redhat_vex | auto making JSON-LD <= 4.5.3 - Cross-Site Request Forgery to Plugin Certification Settings via Nonce Validation Bypass | known not affected: 1 | 2026-06-05T19:24:15+00:00 | Vulnerability · Source |
| CVE-2026-8785 | redhat_vex | projectworlds hospital-management-system-in-php GET Parameter update_info.php getAllPatientDetail sql injection | known not affected: 1 | 2026-06-05T19:24:14+00:00 | Vulnerability · Source |
| CVE-2026-8031 | redhat_vex | PicoTronica e-Clinic Healthcare System ECHS API Endpoint patient-records missing authentication | known not affected: 1 | 2026-06-05T19:24:14+00:00 | Vulnerability · Source |
| CVE-2026-8866 | redhat_vex | jQuery googleslides <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:14+00:00 | Vulnerability · Source |
| CVE-2026-8130 | redhat_vex | SourceCodester SUP Online Shopping message.php sql injection | known not affected: 1 | 2026-06-05T19:24:14+00:00 | Vulnerability · Source |
| CVE-2026-8884 | redhat_vex | Instant-Quote.co Quotation Page <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:13+00:00 | Vulnerability · Source |
| CVE-2026-8488 | redhat_vex | Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation | known not affected: 1 | 2026-06-05T19:24:13+00:00 | Vulnerability · Source |
| CVE-2026-8422 | redhat_vex | Remove meta boxes per user role <= 1.01 - Cross-Site Request Forgery to Settings Update | known not affected: 1 | 2026-06-05T19:24:12+00:00 | Vulnerability · Source |
| CVE-2026-8080 | redhat_vex | MISP core - Stored XSS in MISP template (old engine) element attribute type | known not affected: 1 | 2026-06-05T19:24:12+00:00 | Vulnerability · Source |
| CVE-2026-8897 | redhat_vex | Shortcode Buddy <= 0.1.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:12+00:00 | Vulnerability · Source |
| CVE-2026-8305 | redhat_vex | OpenClaw bluebubbles Webhook monitor.ts handleBlueBubblesWebhookRequest improper authentication | known not affected: 1 | 2026-06-05T19:24:12+00:00 | Vulnerability · Source |
| CVE-2026-8026 | redhat_vex | FlowiseAI Flowise API Response account.service.ts login information disclosure | known not affected: 1 | 2026-06-05T19:24:11+00:00 | Vulnerability · Source |
| CVE-2026-8701 | redhat_vex | GNTT Post Title Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:11+00:00 | Vulnerability · Source |
| CVE-2026-8035 | redhat_vex | NULL pointer dereference in NI-PAL | known not affected: 1 | 2026-06-05T19:24:11+00:00 | Vulnerability · Source |
| CVE-2026-8871 | redhat_vex | Formidable Kinetic <= 1.1.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:10+00:00 | Vulnerability · Source |
| CVE-2026-8673 | redhat_vex | Password re-initialization mechanism sends passwords in plain text | known not affected: 1 | 2026-06-05T19:24:10+00:00 | Vulnerability · Source |
| CVE-2026-8943 | redhat_vex | GoStats for WordPress <= 1.4 - Cross-Site Request Forgery via gostats_manage() Function | known not affected: 1 | 2026-06-05T19:24:09+00:00 | Vulnerability · Source |
| CVE-2026-8367 | redhat_vex | aria2c Improper Certificate Validation | known not affected: 1 | 2026-06-05T19:24:08+00:00 | Vulnerability · Source |
| CVE-2026-8109 | redhat_vex | CVE-2026-8109 | known not affected: 1 | 2026-06-05T19:24:07+00:00 | Vulnerability · Source |
| CVE-2026-8682 | redhat_vex | 3D Viewer <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification via settings REST endpoint | known not affected: 1 | 2026-06-05T19:24:07+00:00 | Vulnerability · Source |
| CVE-2026-8844 | redhat_vex | Responsive Check <= 0.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:07+00:00 | Vulnerability · Source |
| CVE-2026-8424 | redhat_vex | Remove Yellow BGBOX <= 1.0 - Cross-Site Request Forgery | known not affected: 1 | 2026-06-05T19:24:06+00:00 | Vulnerability · Source |
| CVE-2026-8703 | redhat_vex | Endless Scroll <= 1.0.0 - [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')] | known not affected: 1 | 2026-06-05T19:24:05+00:00 | Vulnerability · Source |
| CVE-2026-8486 | redhat_vex | Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation | known not affected: 1 | 2026-06-05T19:24:05+00:00 | Vulnerability · Source |
| CVE-2026-8899 | redhat_vex | Auto Thumbnails <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:05+00:00 | Vulnerability · Source |
| CVE-2026-8891 | redhat_vex | BitForm <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:04+00:00 | Vulnerability · Source |
| CVE-2026-8369 | redhat_vex | Improper Input Validation in OpenThread NAT64 Translator | known not affected: 1 | 2026-06-05T19:24:04+00:00 | Vulnerability · Source |
| CVE-2026-8802 | redhat_vex | opensourcepos Open Source Point of Sale Items.php getPicThumb path traversal | known not affected: 1 | 2026-06-05T19:24:04+00:00 | Vulnerability · Source |
| CVE-2026-8280 | redhat_vex | Allocation of Resources Without Limits or Throttling in GitLab | known not affected: 1 | 2026-06-05T19:24:04+00:00 | Vulnerability · Source |
| CVE-2026-8873 | redhat_vex | Content Slideshow <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:03+00:00 | Vulnerability · Source |
| CVE-2026-8990 | redhat_vex | Authentication Bypass in Kidsview | known not affected: 1 | 2026-06-05T19:24:03+00:00 | Vulnerability · Source |
| CVE-2026-8837 | redhat_vex | WP Iframe Geo Style for Amazon affiliates <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'adid' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:24:02+00:00 | Vulnerability · Source |
| CVE-2026-8200 | redhat_vex | Schema validation log messages may not redact user data | known not affected: 1 | 2026-06-05T19:24:02+00:00 | Vulnerability · Source |
| CVE-2026-8846 | redhat_vex | Tuxquote <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:24:01+00:00 | Vulnerability · Source |
| CVE-2026-8684 | redhat_vex | MotoPress Hotel Booking <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary Booking Notes Modification via mphb_update_booking_notes AJAX Action | known not affected: 1 | 2026-06-05T19:24:00+00:00 | Vulnerability · Source |
| CVE-2026-8204 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to Authorization Bypass in the Calendar Event Frontend Dialog | known not affected: 1 | 2026-06-05T19:23:59+00:00 | Vulnerability · Source |
| CVE-2026-8420 | redhat_vex | BLOGCHAT Chat System <= 1.3.6.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update | known not affected: 1 | 2026-06-05T19:23:59+00:00 | Vulnerability · Source |
| CVE-2026-8042 | redhat_vex | Github Shortcode <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | known not affected: 1 | 2026-06-05T19:23:59+00:00 | Vulnerability · Source |
| CVE-2026-8877 | redhat_vex | Responsive Video Embedder <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:23:58+00:00 | Vulnerability · Source |
| CVE-2026-8240 | redhat_vex | Concrete CMS 9.5.0 and below is vulnerable to unauthenticated page metadata disclosure in Backend\SummaryTemplate | known not affected: 1 | 2026-06-05T19:23:57+00:00 | Vulnerability · Source |
| CVE-2026-8321 | redhat_vex | inkeep agents runAuth Middleware runAuth.ts createDevContext authentication bypass | known not affected: 1 | 2026-06-05T19:23:57+00:00 | Vulnerability · Source |
| CVE-2026-8132 | redhat_vex | CodeAstro Leave Management System login.php sql injection | known not affected: 1 | 2026-06-05T19:23:56+00:00 | Vulnerability · Source |
| CVE-2026-8868 | redhat_vex | Single Mailchimp <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:23:56+00:00 | Vulnerability · Source |
| CVE-2026-8886 | redhat_vex | hk_shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:23:56+00:00 | Vulnerability · Source |