VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
302613 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-7470 | redhat_vex | Tenda 4G300 SafeMacFilter sub_427C3C stack-based overflow | known not affected: 1 | 2026-05-04T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-7607 | redhat_vex | TRENDnet TEW-821DAP Firmware Udpate auto_update_firmware buffer overflow | known not affected: 1 | 2026-05-04T20:21:09+00:00 | Vulnerability · Source |
| CVE-2026-6229 | redhat_vex | Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter | known not affected: 1 | 2026-05-04T20:21:09+00:00 | Vulnerability · Source |
| CVE-2026-7491 | redhat_vex | Zyosoft｜School App - Insecure Direct Object Reference | known not affected: 1 | 2026-05-04T20:21:08+00:00 | Vulnerability · Source |
| CVE-2026-7435 | redhat_vex | SSCMS v7.4.0 SQL Injection via stl:sqlContent queryString | known not affected: 1 | 2026-05-04T20:21:08+00:00 | Vulnerability · Source |
| CVE-2026-7513 | redhat_vex | UTT HiPER 1200GW formRemoteControl strcpy buffer overflow | known not affected: 1 | 2026-05-04T20:21:08+00:00 | Vulnerability · Source |
| CVE-2026-7490 | redhat_vex | Sunnet｜CTMS and CPAS - Arbitrary File Upload | known not affected: 1 | 2026-05-04T20:21:07+00:00 | Vulnerability · Source |
| CVE-2026-7503 | redhat_vex | code-projects for Plugin cstecgi.cgi setWiFiMultipleConfig buffer overflow | known not affected: 1 | 2026-05-04T20:21:07+00:00 | Vulnerability · Source |
| CVE-2026-5324 | redhat_vex | Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value | known not affected: 1 | 2026-05-04T20:21:07+00:00 | Vulnerability · Source |
| CVE-2026-7458 | redhat_vex | User Verification by PickPlugins <= 2.0.46 - Unauthenticated Authentication Bypass via OTP Verification REST API Endpoint | known not affected: 1 | 2026-05-04T20:21:06+00:00 | Vulnerability · Source |
| CVE-2026-7049 | redhat_vex | PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter | known not affected: 1 | 2026-05-04T20:21:05+00:00 | Vulnerability · Source |
| CVE-2026-6963 | redhat_vex | WP Mail Gateway <= 1.8 - Missing Authorization to Authenticated (Subscriber+) SMTP Configuration Modification via 'wmg_save_provider_config' AJAX Action | known not affected: 1 | 2026-05-04T20:21:05+00:00 | Vulnerability · Source |
| CVE-2026-6320 | redhat_vex | Salon Booking System – Free Version <= 10.30.25 - Unauthenticated Arbitrary File Read via Booking File Field Path Traversal | known not affected: 1 | 2026-05-04T20:21:05+00:00 | Vulnerability · Source |
| CVE-2026-5111 | redhat_vex | Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Hidden Product Field in Repeater | known not affected: 1 | 2026-05-04T20:21:04+00:00 | Vulnerability · Source |
| CVE-2026-5113 | redhat_vex | Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Consent Field Hidden Input | known not affected: 1 | 2026-05-04T20:21:04+00:00 | Vulnerability · Source |
| CVE-2026-5112 | redhat_vex | Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Calculation Product Field in Repeater | known not affected: 1 | 2026-05-04T20:21:04+00:00 | Vulnerability · Source |
| CVE-2026-5110 | redhat_vex | Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Single Product Field Inside Repeater | known not affected: 1 | 2026-05-04T20:21:04+00:00 | Vulnerability · Source |
| CVE-2026-5063 | redhat_vex | NEX-Forms <= 9.1.11 - Unauthenticated Stored Cross-Site Scripting via POST Parameter Key Names | known not affected: 1 | 2026-05-04T20:21:03+00:00 | Vulnerability · Source |
| CVE-2026-4100 | redhat_vex | Paid Memberships Pro <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Stripe Webhook Deletion and Payment Processing Disruption | known not affected: 1 | 2026-05-04T20:21:03+00:00 | Vulnerability · Source |
| CVE-2026-4060 | redhat_vex | Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'sort' Parameter | known not affected: 1 | 2026-05-04T20:21:03+00:00 | Vulnerability · Source |
| CVE-2026-5109 | redhat_vex | Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Product Option | known not affected: 1 | 2026-05-04T20:21:03+00:00 | Vulnerability · Source |
| CVE-2026-4882 | redhat_vex | User Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File Upload | known not affected: 1 | 2026-05-04T20:21:03+00:00 | Vulnerability · Source |
| CVE-2026-4061 | redhat_vex | Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'map_post_type' Parameter | known not affected: 1 | 2026-05-04T20:21:03+00:00 | Vulnerability · Source |
| CVE-2026-4062 | redhat_vex | Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'object_ids' Parameter | known not affected: 1 | 2026-05-04T20:21:03+00:00 | Vulnerability · Source |
| CVE-2026-40601 | redhat_vex | Chartbrew: Missing Authorization in /api/chart/:chart_id/query via team-level refresh toggle | known not affected: 1 | 2026-05-04T20:21:02+00:00 | Vulnerability · Source |
| CVE-2026-0703 | redhat_vex | NextMove Lite - Thank You Page for WooCommerce <= 2.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'xlwcty_current_date' Shortcode | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2026-36762 | redhat_vex | CVE-2026-36762 | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2025-56568 | redhat_vex | CVE-2025-56568 | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2025-14726 | redhat_vex | Widgets for Social Photo Feed <= 1.8 - Missing Authentication to Unauthenticated Plugin Settings Access/Update via trustindex_feed_hook_instagram REST API endpoints | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2026-3143 | redhat_vex | Total Upkeep <= 1.17.1 - Missing Authorization to Unauthenticated Rollback Cancellation | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2026-2052 | redhat_vex | Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2026-36765 | redhat_vex | CVE-2026-36765 | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2025-46115 | redhat_vex | CVE-2025-46115 | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2025-70072 | redhat_vex | Assimp: Assimp: Denial of Service via FBXConverter components | known not affected: 8 | 2026-05-04T16:57:14+00:00 | Vulnerability · Source |
| CVE-2025-70070 | redhat_vex | Assimp: Assimp: Denial of Service via FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry() | known not affected: 8 | 2026-05-04T16:57:14+00:00 | Vulnerability · Source |
| CVE-2017-15108 | redhat_vex | spice-vdagent: Improper validation of xfers->save_dir in vdagent_file_xfers_data() | known affected: 3 | 2026-05-04T15:08:20+00:00 | Vulnerability · Source |
| CVE-2017-1000376 | redhat_vex | libffi: Requests an executable stack | known not affected: 8 | 2026-05-04T15:03:51+00:00 | Vulnerability · Source |
| CVE-2017-15133 | redhat_vex | miekg-dns: Denial of service via TCP serving code | known affected: 1 | 2026-05-04T15:03:49+00:00 | Vulnerability · Source |
| CVE-2017-20230 | microsoft_vex | Storable versions before 3.05 for Perl has a stack overflow | known affected: 2 | 2026-05-04T14:42:27+00:00 | Vulnerability · Source |
| CVE-2026-31700 | microsoft_vex | net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() | fixed: 1 known affected: 1 | 2026-05-04T14:41:14+00:00 | Vulnerability · Source |
| CVE-2026-31708 | microsoft_vex | smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path | fixed: 1 known affected: 1 | 2026-05-04T14:41:08+00:00 | Vulnerability · Source |
| CVE-2026-31698 | microsoft_vex | crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed | fixed: 1 known affected: 1 | 2026-05-04T14:40:49+00:00 | Vulnerability · Source |
| CVE-2026-31696 | microsoft_vex | rxrpc: Fix missing validation of ticket length in non-XDR key preparsing | fixed: 1 known affected: 1 | 2026-05-04T14:40:43+00:00 | Vulnerability · Source |
| CVE-2026-43033 | microsoft_vex | crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption | fixed: 1 known affected: 1 | 2026-05-04T14:40:36+00:00 | Vulnerability · Source |
| CVE-2026-31705 | microsoft_vex | ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment | fixed: 1 known affected: 1 | 2026-05-04T14:40:30+00:00 | Vulnerability · Source |
| CVE-2026-31694 | microsoft_vex | fuse: reject oversized dirents in page cache | fixed: 1 known affected: 1 | 2026-05-04T14:40:23+00:00 | Vulnerability · Source |
| CVE-2026-31699 | microsoft_vex | crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed | fixed: 1 known affected: 1 | 2026-05-04T14:40:17+00:00 | Vulnerability · Source |
| CVE-2026-31711 | microsoft_vex | smb: server: fix active_num_conn leak on transport allocation failure | fixed: 1 known affected: 1 | 2026-05-04T14:40:11+00:00 | Vulnerability · Source |
| CVE-2026-31697 | microsoft_vex | crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed | fixed: 1 known affected: 1 | 2026-05-04T14:39:59+00:00 | Vulnerability · Source |
| CVE-2026-41263 | redhat_vex | github.com/traefik/traefik: Traefik: Username enumeration via timing side-channel in BasicAuth middleware | known affected: 1 | 2026-05-04T10:17:06+00:00 | Vulnerability · Source |