VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298612 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-34928 | redhat_vex | CVE-2026-34928 | known not affected: 1 | 2026-06-05T19:21:48+00:00 | Vulnerability · Source |
| CVE-2026-34618 | redhat_vex | Illustrator | Out-of-bounds Write (CWE-787) | known not affected: 1 | 2026-06-05T19:21:47+00:00 | Vulnerability · Source |
| CVE-2026-34649 | redhat_vex | Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) | known not affected: 1 | 2026-06-05T19:21:47+00:00 | Vulnerability · Source |
| CVE-2026-34865 | redhat_vex | CVE-2026-34865 | known not affected: 1 | 2026-06-05T19:21:47+00:00 | Vulnerability · Source |
| CVE-2026-34856 | redhat_vex | CVE-2026-34856 | known not affected: 1 | 2026-06-05T19:21:46+00:00 | Vulnerability · Source |
| CVE-2026-34676 | redhat_vex | Substance3D - Painter | Out-of-bounds Write (CWE-787) | known not affected: 1 | 2026-06-05T19:21:46+00:00 | Vulnerability · Source |
| CVE-2026-34160 | redhat_vex | Chamilo LMS: Unauthenticated SSRF via PENS Plugin allows attacker to probe internal network and reach cloud metadata services | known not affected: 1 | 2026-06-05T19:21:46+00:00 | Vulnerability · Source |
| CVE-2026-34241 | redhat_vex | CtrlPanel: Stored XSS in Ticket Reply Notifications Allows Session Hijacking | known not affected: 1 | 2026-06-05T19:21:46+00:00 | Vulnerability · Source |
| CVE-2026-34906 | redhat_vex | Server-Side Template Injection (SSTI) in Wirtualna Uczelnia | known not affected: 1 | 2026-06-05T19:21:44+00:00 | Vulnerability · Source |
| CVE-2026-34186 | redhat_vex | SQL Injection in Custom Fields leads to Database Compromise | known not affected: 1 | 2026-06-05T19:21:44+00:00 | Vulnerability · Source |
| CVE-2026-34393 | redhat_vex | Weblate: Privilege escalation in the user API endpoint | known not affected: 1 | 2026-06-05T19:21:44+00:00 | Vulnerability · Source |
| CVE-2026-34681 | redhat_vex | Substance3D - Designer | Out-of-bounds Write (CWE-787) | known not affected: 1 | 2026-06-05T19:21:44+00:00 | Vulnerability · Source |
| CVE-2026-34285 | redhat_vex | CVE-2026-34285 | known not affected: 1 | 2026-06-05T19:21:44+00:00 | Vulnerability · Source |
| CVE-2026-3499 | redhat_vex | Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce 13.4.6 - 13.5.2.1 - Cross-Site Request Forgery to Multiple Administrative Actions | known not affected: 1 | 2026-06-05T19:21:43+00:00 | Vulnerability · Source |
| CVE-2026-34177 | redhat_vex | VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf | known not affected: 1 | 2026-06-05T19:21:43+00:00 | Vulnerability · Source |
| CVE-2026-34636 | redhat_vex | Premiere Pro | Out-of-bounds Write (CWE-787) | known not affected: 1 | 2026-06-05T19:21:43+00:00 | Vulnerability · Source |
| CVE-2026-21719 | redhat_vex | CVE-2026-21719 | known not affected: 1 | 2026-06-05T19:21:42+00:00 | Vulnerability · Source |
| CVE-2026-21997 | redhat_vex | CVE-2026-21997 | known not affected: 1 | 2026-06-05T19:21:42+00:00 | Vulnerability · Source |
| CVE-2026-21661 | redhat_vex | AC2000 Uncontrolled Search Path Element | known not affected: 1 | 2026-06-05T19:21:42+00:00 | Vulnerability · Source |
| CVE-2026-3820 | redhat_vex | Supermicro BMC's SMTP service contains a command injection vulnerability | known not affected: 1 | 2026-06-05T19:21:41+00:00 | Vulnerability · Source |
| CVE-2026-3396 | redhat_vex | WCAPF – WooCommerce Ajax Product Filter <= 4.2.3 - Unauthenticated Time-Based SQL Injection | known not affected: 1 | 2026-06-05T19:21:41+00:00 | Vulnerability · Source |
| CVE-2026-3325 | redhat_vex | SQL injection in MegaCMS by CRM Sistemas de Fidelización | known not affected: 1 | 2026-06-05T19:21:41+00:00 | Vulnerability · Source |
| CVE-2026-3868 | redhat_vex | CVE-2026-3868 | known not affected: 1 | 2026-06-05T19:21:41+00:00 | Vulnerability · Source |
| CVE-2026-3514 | redhat_vex | Authentication Bypass in prefecthq/prefect | known not affected: 1 | 2026-06-05T19:21:40+00:00 | Vulnerability · Source |
| CVE-2026-3464 | redhat_vex | WP Customer Area <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_file | known not affected: 1 | 2026-06-05T19:21:40+00:00 | Vulnerability · Source |
| CVE-2026-3296 | redhat_vex | Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata | known not affected: 1 | 2026-06-05T19:21:39+00:00 | Vulnerability · Source |
| CVE-2026-3844 | redhat_vex | Breeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remote | known not affected: 1 | 2026-06-05T19:21:38+00:00 | Vulnerability · Source |
| CVE-2026-3985 | redhat_vex | Creative Mail – Easier WordPress & WooCommerce Email Marketing <= 1.6.9 - Unauthenticated SQL Injection via 'checkout_uuid' Parameter | known not affected: 1 | 2026-06-05T19:21:38+00:00 | Vulnerability · Source |
| CVE-2026-3655 | redhat_vex | OTP Login With Phone Number, OTP Verification <= 1.8.60 - Unauthenticated Authentication Bypass via Firebase OTP Verification | known not affected: 1 | 2026-06-05T19:21:37+00:00 | Vulnerability · Source |
| CVE-2026-3772 | redhat_vex | WP Editor <= 1.2.9.2 - Cross-Site Request Forgery to Remote Code Execution via Plugin and Theme File Editor | known not affected: 1 | 2026-06-05T19:21:37+00:00 | Vulnerability · Source |
| CVE-2026-3718 | redhat_vex | ManageWP Worker <= 4.9.31 - Unauthenticated Stored Cross-Site Scripting via 'MWP-Key-Name' Header | known not affected: 1 | 2026-06-05T19:21:37+00:00 | Vulnerability · Source |
| CVE-2026-3596 | redhat_vex | Riaxe Product Customizer <= 2.1.2 - Missing Authorization to Unauthenticated Arbitrary Options Update to Privilege Escalation via 'install-imprint' AJAX Action | known not affected: 1 | 2026-06-05T19:21:36+00:00 | Vulnerability · Source |
| CVE-2026-3017 | redhat_vex | Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts <= 3.0.12 - Authenticated (Administrator+) PHP Object Injection | known not affected: 1 | 2026-06-05T19:21:36+00:00 | Vulnerability · Source |
| CVE-2026-3323 | redhat_vex | VEGA: Privilege escalation through unsecured configuration interface in VEGAPULS devices | known not affected: 1 | 2026-06-05T19:21:36+00:00 | Vulnerability · Source |
| CVE-2026-3953 | redhat_vex | Reflected XSS in Gosoft Software's Proticaret E-Commerce | known not affected: 1 | 2026-06-05T19:21:35+00:00 | Vulnerability · Source |
| CVE-2026-3324 | redhat_vex | Authentication Bypass | known not affected: 1 | 2026-06-05T19:21:34+00:00 | Vulnerability · Source |
| CVE-2026-3603 | redhat_vex | IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML external entity injection (XXE) attack | known not affected: 1 | 2026-06-05T19:21:34+00:00 | Vulnerability · Source |
| CVE-2026-3360 | redhat_vex | Tutor LMS <= 3.9.7 - Missing Authorization to Unauthenticated Arbitrary Billing Profile Overwrite via 'order_id' Parameter | known not affected: 1 | 2026-06-05T19:21:34+00:00 | Vulnerability · Source |
| CVE-2026-3643 | redhat_vex | Accessibly <= 3.0.3 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Widget Source Injection via REST API | known not affected: 1 | 2026-06-05T19:21:33+00:00 | Vulnerability · Source |
| CVE-2026-3489 | redhat_vex | DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Unauthenticated SQL Injection via 'packages' | known not affected: 1 | 2026-06-05T19:21:33+00:00 | Vulnerability · Source |
| CVE-2026-3535 | redhat_vex | DSGVO Google Web Fonts GDPR <= 1.1 - Unauthenticated Arbitrary File Upload via 'fonturl' Parameter | known not affected: 1 | 2026-06-05T19:21:33+00:00 | Vulnerability · Source |
| CVE-2026-3243 | redhat_vex | Advanced Members for ACF <= 1.2.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Path Traversal | known not affected: 1 | 2026-06-05T19:21:33+00:00 | Vulnerability · Source |
| CVE-2026-3456 | redhat_vex | GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation <= 1.2.0 - Unauthenticated SQL Injection via 'attributekey' | known not affected: 1 | 2026-06-05T19:21:32+00:00 | Vulnerability · Source |
| CVE-2026-3876 | redhat_vex | Prismatic <= 3.7.3 - Unauthenticated Stored Cross-Site Scripting via 'prismatic_encoded' Pseudo-Shortcode | known not affected: 1 | 2026-06-05T19:21:32+00:00 | Vulnerability · Source |
| CVE-2026-3366 | redhat_vex | InfoSphere Optim Test Data Fabrication is affected by Arbitrary File Read | known not affected: 1 | 2026-06-05T19:21:31+00:00 | Vulnerability · Source |
| CVE-2026-3375 | redhat_vex | LiteSpeed Cache <= 7.7 - Unauthenticated Stored Cross-Site Scripting via QUIC.cloud CCSS/UCSS REST API Endpoints | known not affected: 1 | 2026-06-05T19:21:31+00:00 | Vulnerability · Source |
| CVE-2026-3599 | redhat_vex | Riaxe Product Customizer <= 2.1.2 - Unauthenticated SQL Injection via 'options' Parameter Keys in product_data | known not affected: 1 | 2026-06-05T19:21:31+00:00 | Vulnerability · Source |
| CVE-2026-3614 | redhat_vex | AcyMailing 9.11.0 - 10.8.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation | known not affected: 1 | 2026-06-05T19:21:31+00:00 | Vulnerability · Source |
| CVE-2026-3357 | redhat_vex | IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file | known not affected: 1 | 2026-06-05T19:21:31+00:00 | Vulnerability · Source |
| CVE-2026-3290 | redhat_vex | Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values | known not affected: 1 | 2026-06-05T19:21:30+00:00 | Vulnerability · Source |