VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
306114 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-10549 | redhat_vex | DLL Hijacking in EfficientLab Controlio Leads to Local Privilege Escalation | known not affected: 1 | 2026-04-29T20:48:02+00:00 | Vulnerability · Source |
| CVE-2026-0919 | redhat_vex | Unauthenticated Denial of Service via Oversized URL in HTTP Parser on TP-Link Tapo C210, C220 & C520WS | known not affected: 1 | 2026-04-29T20:48:02+00:00 | Vulnerability · Source |
| CVE-2026-24178 | redhat_vex | CVE-2026-24178 | known not affected: 1 | 2026-04-29T20:48:02+00:00 | Vulnerability · Source |
| CVE-2026-24222 | redhat_vex | CVE-2026-24222 | known not affected: 1 | 2026-04-29T20:48:02+00:00 | Vulnerability · Source |
| CVE-2025-10539 | redhat_vex | Improper TLS Certificate Validation RCE via Malicious Update in DeskTime Time Tracking App | known not affected: 1 | 2026-04-29T20:48:02+00:00 | Vulnerability · Source |
| CVE-2026-24204 | redhat_vex | CVE-2026-24204 | known not affected: 1 | 2026-04-29T20:48:02+00:00 | Vulnerability · Source |
| CVE-2026-24186 | redhat_vex | CVE-2026-24186 | known not affected: 1 | 2026-04-29T20:48:02+00:00 | Vulnerability · Source |
| CVE-2016-10708 | redhat_vex | openssh: Out of sequence NEWKEYS message can allow remote attacker to cause denial of service | fixed: 456 known affected: 8 known not affected: 9 | 2026-04-29T18:32:41+00:00 | Vulnerability · Source |
| CVE-2020-35357 | redhat_vex | gsl: Stack buffer overflow in gsl_stats_quantile_from_sorted_data | known affected: 11 | 2026-04-29T18:28:54+00:00 | Vulnerability · Source |
| CVE-2026-7269 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting | known not affected: 1 | 2026-04-29T14:49:15+00:00 | Vulnerability · Source |
| CVE-2026-7133 | redhat_vex | code-projects Online Lot Reservation System activity.php unrestricted upload | known not affected: 1 | 2026-04-29T14:49:14+00:00 | Vulnerability · Source |
| CVE-2026-7230 | redhat_vex | SourceCodester Safety Anger Pad cross site scripting | known not affected: 1 | 2026-04-29T14:49:14+00:00 | Vulnerability · Source |
| CVE-2026-7116 | redhat_vex | code-projects Employee Management System mark.php cross site scripting | known not affected: 1 | 2026-04-29T14:49:11+00:00 | Vulnerability · Source |
| CVE-2026-7110 | redhat_vex | code-projects Invoice System in Laravel item cross site scripting | known not affected: 1 | 2026-04-29T14:49:09+00:00 | Vulnerability · Source |
| CVE-2026-7102 | redhat_vex | Tenda F456 httpd WriteFacMac FromWriteFacMac command injection | known not affected: 1 | 2026-04-29T14:49:08+00:00 | Vulnerability · Source |
| CVE-2026-7092 | redhat_vex | code-projects Invoice System in Laravel Profile profile improper authorization | known not affected: 1 | 2026-04-29T14:49:07+00:00 | Vulnerability · Source |
| CVE-2026-5760 | redhat_vex | CVE-2026-5760 | known not affected: 1 | 2026-04-29T14:49:07+00:00 | Vulnerability · Source |
| CVE-2026-4537 | redhat_vex | Cudy TR1200 ipsec.lua action_ipsec_conn command injection | known not affected: 1 | 2026-04-29T14:49:07+00:00 | Vulnerability · Source |
| CVE-2026-7224 | redhat_vex | SourceCodester Pizzafy Ecommerce System ajax.php delete_cart sql injection | known not affected: 1 | 2026-04-29T14:49:06+00:00 | Vulnerability · Source |
| CVE-2026-7213 | redhat_vex | ef10007 MLOps_MCP save_file Tool fastmcp_server.py path traversal | known not affected: 1 | 2026-04-29T14:49:05+00:00 | Vulnerability · Source |
| CVE-2026-7157 | redhat_vex | disler aider-mcp-server aider_ai_code server.py command injection | known not affected: 1 | 2026-04-29T14:49:05+00:00 | Vulnerability · Source |
| CVE-2026-7212 | redhat_vex | edvardlindelof notes-mcp notes_mcp.py path traversal | known not affected: 1 | 2026-04-29T14:49:05+00:00 | Vulnerability · Source |
| CVE-2026-7127 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection | known not affected: 1 | 2026-04-29T14:49:04+00:00 | Vulnerability · Source |
| CVE-2026-7145 | redhat_vex | mettle sendportal Invitation WorkspaceInvitationsController.php destroy authorization | known not affected: 1 | 2026-04-29T14:49:04+00:00 | Vulnerability · Source |
| CVE-2026-7087 | redhat_vex | SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection | known not affected: 1 | 2026-04-29T14:49:03+00:00 | Vulnerability · Source |
| CVE-2026-7077 | redhat_vex | itsourcecode Courier Management System edit_parcel.php sql injection | known not affected: 1 | 2026-04-29T14:49:03+00:00 | Vulnerability · Source |
| CVE-2026-7072 | redhat_vex | CodePanda Source canteen_management_system login.php sql injection | known not affected: 1 | 2026-04-29T14:49:01+00:00 | Vulnerability · Source |
| CVE-2026-40742 | redhat_vex | WordPress Nelio AB Testing plugin <= 8.2.8 - Sensitive Data Exposure vulnerability | known not affected: 1 | 2026-04-29T14:49:00+00:00 | Vulnerability · Source |
| CVE-2026-4911 | redhat_vex | Booking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' Parameter | known not affected: 1 | 2026-04-29T14:49:00+00:00 | Vulnerability · Source |
| CVE-2026-40728 | redhat_vex | WordPress Magazine Blocks plugin <= 1.8.3 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:59+00:00 | Vulnerability · Source |
| CVE-2026-40737 | redhat_vex | WordPress COMPE plugin <= 1.1.4 - Insecure Direct Object References (IDOR) vulnerability | known not affected: 1 | 2026-04-29T14:48:59+00:00 | Vulnerability · Source |
| CVE-2026-39716 | redhat_vex | WordPress Flipmart theme <= 2.8 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:58+00:00 | Vulnerability · Source |
| CVE-2026-39713 | redhat_vex | WordPress Mailercloud – Integrate webforms and synchronize website contacts plugin <= 1.0.7 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:57+00:00 | Vulnerability · Source |
| CVE-2026-39714 | redhat_vex | WordPress G5Plus April theme <= 6.8 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:57+00:00 | Vulnerability · Source |
| CVE-2026-39712 | redhat_vex | WordPress tagDiv Composer plugin <= 5.4.3 - Arbitrary Shortcode Execution vulnerability | known not affected: 1 | 2026-04-29T14:48:57+00:00 | Vulnerability · Source |
| CVE-2026-39710 | redhat_vex | WordPress RT-Theme 18 | Extensions plugin <= 2.5 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-04-29T14:48:56+00:00 | Vulnerability · Source |
| CVE-2026-39708 | redhat_vex | WordPress UiCore Elements plugin <= 1.3.14 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T14:48:55+00:00 | Vulnerability · Source |
| CVE-2026-39706 | redhat_vex | WordPress Make My Trivia plugin <= 1.1.0 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:55+00:00 | Vulnerability · Source |
| CVE-2026-39704 | redhat_vex | WordPress Precious Metals Automated Product Pricing – Pro plugin <= 4.0.5 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:55+00:00 | Vulnerability · Source |
| CVE-2026-39702 | redhat_vex | WordPress Animation Addons for Elementor plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T14:48:54+00:00 | Vulnerability · Source |
| CVE-2026-39700 | redhat_vex | WordPress WowOptin plugin <= 1.4.32 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:54+00:00 | Vulnerability · Source |
| CVE-2026-39697 | redhat_vex | WordPress MAIO – The new AI GEO / SEO tool plugin <= 6.2.8 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:53+00:00 | Vulnerability · Source |
| CVE-2026-39698 | redhat_vex | WordPress The Publisher Desk ads.txt plugin <= 1.5.0 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:53+00:00 | Vulnerability · Source |
| CVE-2026-39696 | redhat_vex | WordPress Elfsight WhatsApp Chat CC plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T14:48:52+00:00 | Vulnerability · Source |
| CVE-2026-39692 | redhat_vex | WordPress tagDiv Composer plugin <= 5.4.3 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T14:48:51+00:00 | Vulnerability · Source |
| CVE-2026-39694 | redhat_vex | WordPress Simply Schedule Appointments plugin <= 1.6.10.2 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:51+00:00 | Vulnerability · Source |
| CVE-2026-39690 | redhat_vex | WordPress Author Avatars List/Block plugin <= 2.1.25 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:50+00:00 | Vulnerability · Source |
| CVE-2026-39688 | redhat_vex | WordPress WP Frontend Profile plugin <= 1.3.9 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:49+00:00 | Vulnerability · Source |
| CVE-2026-39686 | redhat_vex | WordPress BSK PDF Manager plugin <= 3.7.2 - Sensitive Data Exposure vulnerability | known not affected: 1 | 2026-04-29T14:48:49+00:00 | Vulnerability · Source |
| CVE-2026-39674 | redhat_vex | WordPress MK Google Directions plugin <= 3.1.1 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T14:48:48+00:00 | Vulnerability · Source |