VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297765 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-42600 | redhat_vex | MinIO: Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint | known not affected: 1 | 2026-06-05T19:30:26+00:00 | Vulnerability · Source |
| CVE-2026-42679 | redhat_vex | WordPress Classified Listing plugin <= 5.3.8 - Arbitrary File Download vulnerability | known not affected: 1 | 2026-06-05T19:30:25+00:00 | Vulnerability · Source |
| CVE-2026-42303 | redhat_vex | Fides: Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection | known not affected: 1 | 2026-06-05T19:30:24+00:00 | Vulnerability · Source |
| CVE-2026-42316 | redhat_vex | KQL injection via kusto.tables.topics.mapping in kafka-sink-azure-kusto | known not affected: 1 | 2026-06-05T19:30:23+00:00 | Vulnerability · Source |
| CVE-2026-42237 | redhat_vex | n8n: SQL Injection in Snowflake and MySQL Nodes | known not affected: 1 | 2026-06-05T19:30:23+00:00 | Vulnerability · Source |
| CVE-2026-42073 | redhat_vex | OpenClaude's MCP OAuth Callback: State Check Bypass via error Param Leads to DoS | known not affected: 1 | 2026-06-05T19:30:23+00:00 | Vulnerability · Source |
| CVE-2026-42028 | redhat_vex | novaGallery: Unauthenticated Path Traversal in Album and Cached Image Routes Allows Reading Images Outside Gallery Root | known not affected: 1 | 2026-06-05T19:30:21+00:00 | Vulnerability · Source |
| CVE-2026-42424 | redhat_vex | OpenClaw < 2026.4.8 - Local File Exfiltration via Shared Reply MEDIA Paths | known not affected: 1 | 2026-06-05T19:30:21+00:00 | Vulnerability · Source |
| CVE-2026-42549 | redhat_vex | Flight: Path traversal in `make:controller` CLI creates arbitrary directories outside project root | known not affected: 1 | 2026-06-05T19:30:20+00:00 | Vulnerability · Source |
| CVE-2026-42279 | redhat_vex | solidtime: Time entry update endpoint allows cross-organization modification of a known time-entry UUID | known not affected: 1 | 2026-06-05T19:30:20+00:00 | Vulnerability · Source |
| CVE-2026-42750 | redhat_vex | WordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:30:18+00:00 | Vulnerability · Source |
| CVE-2026-42336 | redhat_vex | MaxKB: SSRF Bypass via DNS Rebinding in MaxKB OSS URL Fetch | known not affected: 1 | 2026-06-05T19:30:18+00:00 | Vulnerability · Source |
| CVE-2026-42732 | redhat_vex | WordPress Ads by WPQuads plugin <= 3.0.2 - Broken Authentication vulnerability | known not affected: 1 | 2026-06-05T19:30:18+00:00 | Vulnerability · Source |
| CVE-2026-42138 | redhat_vex | Dify Vulnerable to Stored XSS via SVG-file upload | known not affected: 1 | 2026-06-05T19:30:18+00:00 | Vulnerability · Source |
| CVE-2026-42840 | redhat_vex | ERPNext 16.16.0 - Stored XSS in POS customer section via unescaped template literals | known not affected: 1 | 2026-06-05T19:30:17+00:00 | Vulnerability · Source |
| CVE-2026-42408 | redhat_vex | BIG-IP DNS tmsh vulnerability | known not affected: 1 | 2026-06-05T19:30:16+00:00 | Vulnerability · Source |
| CVE-2026-42866 | redhat_vex | Tookie: Arbitrary file write via path traversal in -u username / -U userfile output filename | known not affected: 1 | 2026-06-05T19:30:15+00:00 | Vulnerability · Source |
| CVE-2026-42776 | redhat_vex | WordPress Sunshine Photo Cart plugin <= 3.6.7 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:30:15+00:00 | Vulnerability · Source |
| CVE-2026-42884 | redhat_vex | Audiobookshelf: Collection endpoints bypass library access controls exposing restricted library data | known not affected: 1 | 2026-06-05T19:30:15+00:00 | Vulnerability · Source |
| CVE-2026-42839 | redhat_vex | ERPNext 16.16.0 - Stored XSS in POS cart item rendering | known not affected: 1 | 2026-06-05T19:30:14+00:00 | Vulnerability · Source |
| CVE-2026-42314 | redhat_vex | pyLoad: Path Traversal via Package Folder Name | known not affected: 1 | 2026-06-05T19:30:13+00:00 | Vulnerability · Source |
| CVE-2026-42080 | redhat_vex | PPTAgent: Arbitrary File Write via `save_generated_slides` | known not affected: 1 | 2026-06-05T19:30:12+00:00 | Vulnerability · Source |
| CVE-2026-42798 | redhat_vex | CVE-2026-42798 | known not affected: 1 | 2026-06-05T19:30:12+00:00 | Vulnerability · Source |
| CVE-2026-24520 | redhat_vex | WordPress Tiktok Feed plugin <= 1.0.24 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:30:12+00:00 | Vulnerability · Source |
| CVE-2026-42763 | redhat_vex | WordPress SePay Gateway plugin <= 1.1.20 - Sensitive Data Exposure vulnerability | known not affected: 1 | 2026-06-05T19:30:11+00:00 | Vulnerability · Source |
| CVE-2026-42592 | redhat_vex | Gotenberg: DNS rebinding bypasses SSRF validation on Chromium URL conversion routes | known not affected: 1 | 2026-06-05T19:30:11+00:00 | Vulnerability · Source |
| CVE-2026-42961 | redhat_vex | CVE-2026-42961 | known not affected: 1 | 2026-06-05T19:30:11+00:00 | Vulnerability · Source |
| CVE-2026-24582 | redhat_vex | WordPress FlexTable plugin <= 3.24.0 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:30:10+00:00 | Vulnerability · Source |
| CVE-2026-42277 | redhat_vex | Onyx: IDOR in /chat/file/{file_id} allows any authenticated user to download other users files | known not affected: 1 | 2026-06-05T19:30:10+00:00 | Vulnerability · Source |
| CVE-2026-42439 | redhat_vex | OpenClaw < 2026.4.10 - SSRF Policy Bypass in Browser Tabs Action Routes | known not affected: 1 | 2026-06-05T19:30:10+00:00 | Vulnerability · Source |
| CVE-2026-24573 | redhat_vex | WordPress Visualizer plugin < 4.0.0 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:30:09+00:00 | Vulnerability · Source |
| CVE-2026-24753 | redhat_vex | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key | known not affected: 1 | 2026-06-05T19:30:09+00:00 | Vulnerability · Source |
| CVE-2026-24142 | redhat_vex | CVE-2026-24142 | known not affected: 1 | 2026-06-05T19:30:08+00:00 | Vulnerability · Source |
| CVE-2026-24160 | redhat_vex | CVE-2026-24160 | known not affected: 1 | 2026-06-05T19:30:08+00:00 | Vulnerability · Source |
| CVE-2026-24511 | redhat_vex | CVE-2026-24511 | known not affected: 1 | 2026-06-05T19:30:07+00:00 | Vulnerability · Source |
| CVE-2026-24032 | redhat_vex | CVE-2026-24032 | known not affected: 1 | 2026-06-05T19:30:06+00:00 | Vulnerability · Source |
| CVE-2026-24597 | redhat_vex | WordPress Organization chart plugin <= 1.7.5 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-06-05T19:30:06+00:00 | Vulnerability · Source |
| CVE-2026-24586 | redhat_vex | WordPress Newses theme <= 2.0.0.77 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:30:06+00:00 | Vulnerability · Source |
| CVE-2026-24638 | redhat_vex | WordPress RepairBuddy plugin <= 4.1121 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:30:04+00:00 | Vulnerability · Source |
| CVE-2026-24590 | redhat_vex | WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:30:03+00:00 | Vulnerability · Source |
| CVE-2026-24554 | redhat_vex | WordPress WPSubscription plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-06-05T19:30:03+00:00 | Vulnerability · Source |
| CVE-2026-24176 | redhat_vex | CVE-2026-24176 | known not affected: 1 | 2026-06-05T19:30:02+00:00 | Vulnerability · Source |
| CVE-2026-24545 | redhat_vex | WordPress QR Redirector plugin <= 2.0.3 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:30:01+00:00 | Vulnerability · Source |
| CVE-2026-24464 | redhat_vex | Appliance mode iControl REST vulnerability | known not affected: 1 | 2026-06-05T19:30:00+00:00 | Vulnerability · Source |
| CVE-2026-24662 | redhat_vex | CVE-2026-24662 | known not affected: 1 | 2026-06-05T19:30:00+00:00 | Vulnerability · Source |
| CVE-2026-24527 | redhat_vex | WordPress Autoship Cloud for WooCommerce Subscription Products plugin <= 2.14.0 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:29:59+00:00 | Vulnerability · Source |
| CVE-2026-24208 | redhat_vex | CVE-2026-24208 | known not affected: 1 | 2026-06-05T19:29:59+00:00 | Vulnerability · Source |
| CVE-2026-24215 | redhat_vex | CVE-2026-24215 | known not affected: 1 | 2026-06-05T19:29:58+00:00 | Vulnerability · Source |
| CVE-2026-24468 | redhat_vex | OpenAEV Vulnerable to Username/Email Enumeration Through Differential HTTP Responses in Password Reset API | known not affected: 1 | 2026-06-05T19:29:58+00:00 | Vulnerability · Source |
| CVE-2026-24756 | redhat_vex | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key | known not affected: 1 | 2026-06-05T19:29:57+00:00 | Vulnerability · Source |