VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-5308 | redhat_vex | Missing request body size limits on Zoom plugin HTTP endpoints | known not affected: 1 | 2026-06-05T19:35:12+00:00 | Vulnerability · Source |
| CVE-2026-5748 | redhat_vex | Text Snippets <= 0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'w' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:35:12+00:00 | Vulnerability · Source |
| CVE-2026-5829 | redhat_vex | code-projects Simple IT Discussion Forum content.php sql injection | known not affected: 1 | 2026-06-05T19:35:12+00:00 | Vulnerability · Source |
| CVE-2026-5300 | redhat_vex | Missing Authentication for Critical Function in coolercontrold | known not affected: 1 | 2026-06-05T19:35:11+00:00 | Vulnerability · Source |
| CVE-2026-5193 | redhat_vex | Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user | known not affected: 1 | 2026-06-05T19:35:11+00:00 | Vulnerability · Source |
| CVE-2026-5937 | redhat_vex | Foxit PDF Editor/Reader's insufficient parameter validation leads to denial-of-service vulnerability | known not affected: 1 | 2026-06-05T19:35:11+00:00 | Vulnerability · Source |
| CVE-2026-5427 | redhat_vex | Kubio AI Page Builder <= 2.7.2 - Missing Authorization to Authenticated (Contributor+) Limited File Upload via Kubio Block Attributes | known not affected: 1 | 2026-06-05T19:35:10+00:00 | Vulnerability · Source |
| CVE-2026-5247 | redhat_vex | Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.10.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:35:10+00:00 | Vulnerability · Source |
| CVE-2026-5814 | redhat_vex | PHPGurukul Online Course Registration check_availability.php sql injection | known not affected: 1 | 2026-06-05T19:35:10+00:00 | Vulnerability · Source |
| CVE-2026-5508 | redhat_vex | WowPress <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:35:10+00:00 | Vulnerability · Source |
| CVE-2026-5742 | redhat_vex | UsersWP <= 1.2.60 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Badge Link Substitution | known not affected: 1 | 2026-06-05T19:35:10+00:00 | Vulnerability · Source |
| CVE-2026-5805 | redhat_vex | code-projects Easy Blog Site contact_us.php sql injection | known not affected: 1 | 2026-06-05T19:35:09+00:00 | Vulnerability · Source |
| CVE-2026-5131 | redhat_vex | Server-Side Request Forgery in GREENmod | known not affected: 1 | 2026-06-05T19:35:08+00:00 | Vulnerability · Source |
| CVE-2026-5302 | redhat_vex | Permissive Cross-domain Policy with Untrusted Domains in coolercontrold | known not affected: 1 | 2026-06-05T19:35:07+00:00 | Vulnerability · Source |
| CVE-2026-5849 | redhat_vex | Tenda i12 HTTP path traversal | known not affected: 1 | 2026-06-05T19:35:07+00:00 | Vulnerability · Source |
| CVE-2026-5234 | redhat_vex | LatePoint <= 5.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Financial Data Exposure via Sequential Invoice ID | known not affected: 1 | 2026-06-05T19:35:06+00:00 | Vulnerability · Source |
| CVE-2026-5711 | redhat_vex | Post Blocks & Tools <= 1.3.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'sliderStyle' Block Attribute | known not affected: 1 | 2026-06-05T19:35:06+00:00 | Vulnerability · Source |
| CVE-2026-5243 | redhat_vex | The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Lite Widget | known not affected: 1 | 2026-06-05T19:35:05+00:00 | Vulnerability · Source |
| CVE-2026-5944 | redhat_vex | Cisco Intersight Device Connector for Nutanix Prism Central Unauthenticated API Access | known not affected: 1 | 2026-06-05T19:35:04+00:00 | Vulnerability · Source |
| CVE-2026-5162 | redhat_vex | Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed Widget | known not affected: 1 | 2026-06-05T19:35:04+00:00 | Vulnerability · Source |
| CVE-2026-5926 | redhat_vex | Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access | known not affected: 1 | 2026-06-05T19:35:03+00:00 | Vulnerability · Source |
| CVE-2026-5962 | redhat_vex | Tenda CH22 httpd R7WebsSecurityHandlerfunction path traversal | known not affected: 1 | 2026-06-05T19:35:03+00:00 | Vulnerability · Source |
| CVE-2026-5377 | redhat_vex | Incorrect Authorization in GitLab | known not affected: 1 | 2026-06-05T19:35:02+00:00 | Vulnerability · Source |
| CVE-2026-5296 | redhat_vex | Missing Authorization in GitLab | known not affected: 1 | 2026-06-05T19:35:02+00:00 | Vulnerability · Source |
| CVE-2026-5737 | redhat_vex | Independent Analytics <= 2.14.9 - Unauthenticated Server-Side Request Forgery via Tracking Route | known not affected: 1 | 2026-06-05T19:35:01+00:00 | Vulnerability · Source |
| CVE-2026-5755 | redhat_vex | Denial of service via crafted TIFF file upload | known not affected: 1 | 2026-06-05T19:35:00+00:00 | Vulnerability · Source |
| CVE-2026-49053 | redhat_vex | WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:34:59+00:00 | Vulnerability · Source |
| CVE-2026-49044 | redhat_vex | WordPress Advanced Custom Fields: Font Awesome Field plugin <= 5.0.2 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:34:58+00:00 | Vulnerability · Source |
| CVE-2026-49323 | redhat_vex | Indian Scout Bobber 2025 WCM-to-ECM weak authentication | known not affected: 1 | 2026-06-05T19:34:58+00:00 | Vulnerability · Source |
| CVE-2026-49385 | redhat_vex | CVE-2026-49385 | known not affected: 1 | 2026-06-05T19:34:57+00:00 | Vulnerability · Source |
| CVE-2026-49376 | redhat_vex | CVE-2026-49376 | known not affected: 1 | 2026-06-05T19:34:56+00:00 | Vulnerability · Source |
| CVE-2026-49138 | redhat_vex | Nanobot < 0.2.1 SSRF via web_fetch Tool Redirect Following | known not affected: 1 | 2026-06-05T19:34:55+00:00 | Vulnerability · Source |
| CVE-2026-49369 | redhat_vex | CVE-2026-49369 | known not affected: 1 | 2026-06-05T19:34:55+00:00 | Vulnerability · Source |
| CVE-2026-49051 | redhat_vex | WordPress WP Meta and Date Remover plugin <= 2.3.6 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:34:54+00:00 | Vulnerability · Source |
| CVE-2026-49192 | redhat_vex | Summary Service Insecure Direct Object Reference | known not affected: 1 | 2026-06-05T19:34:54+00:00 | Vulnerability · Source |
| CVE-2026-49204 | redhat_vex | Hard-coded AWS Cognito Testing Accounts | known not affected: 1 | 2026-06-05T19:34:54+00:00 | Vulnerability · Source |
| CVE-2026-49077 | redhat_vex | WordPress WP eMember plugin <= v10.2.2 - Sensitive Data Exposure vulnerability | known not affected: 1 | 2026-06-05T19:34:53+00:00 | Vulnerability · Source |
| CVE-2026-49052 | redhat_vex | WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:34:51+00:00 | Vulnerability · Source |
| CVE-2026-49059 | redhat_vex | WordPress Facebook for WooCommerce plugin <= 3.7.0 - Open Redirection vulnerability | known not affected: 1 | 2026-06-05T19:34:51+00:00 | Vulnerability · Source |
| CVE-2026-49378 | redhat_vex | CVE-2026-49378 | known not affected: 1 | 2026-06-05T19:34:49+00:00 | Vulnerability · Source |
| CVE-2026-49322 | redhat_vex | Indian Scout Bobber 2025 Infotainment-to-WCM weak authentication allows recovery of user PIN from observed exchange | known not affected: 1 | 2026-06-05T19:34:48+00:00 | Vulnerability · Source |
| CVE-2026-49325 | redhat_vex | Indian Scout Bobber 2025 WCM voltage-based shutdown | known not affected: 1 | 2026-06-05T19:34:48+00:00 | Vulnerability · Source |
| CVE-2026-49316 | redhat_vex | Indian Scout Bobber 2025 WCM CAN bus-off attack silently bypasses anti-theft shutdown | known not affected: 1 | 2026-06-05T19:34:48+00:00 | Vulnerability · Source |
| CVE-2026-49753 | redhat_vex | HTTP response smuggling in Mint HTTP/1 client via lenient Content-Length parsing | known not affected: 1 | 2026-06-05T19:34:47+00:00 | Vulnerability · Source |
| CVE-2026-49375 | redhat_vex | CVE-2026-49375 | known not affected: 1 | 2026-06-05T19:34:46+00:00 | Vulnerability · Source |
| CVE-2026-49120 | redhat_vex | Medplum < 5.1.14 SSRF via FHIR Subscription Endpoint | known not affected: 1 | 2026-06-05T19:34:46+00:00 | Vulnerability · Source |
| CVE-2026-49384 | redhat_vex | CVE-2026-49384 | known not affected: 1 | 2026-06-05T19:34:46+00:00 | Vulnerability · Source |
| CVE-2026-49102 | redhat_vex | CVE-2026-49102 | known not affected: 1 | 2026-06-05T19:34:46+00:00 | Vulnerability · Source |
| CVE-2026-49379 | redhat_vex | CVE-2026-49379 | known not affected: 1 | 2026-06-05T19:34:45+00:00 | Vulnerability · Source |
| CVE-2026-49047 | redhat_vex | WordPress DearFlip plugin <= 2.4.27 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:34:44+00:00 | Vulnerability · Source |