VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298629 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-42061 | redhat_vex | CVE-2026-42061 | known not affected: 1 | 2026-06-05T19:16:52+00:00 | Vulnerability · Source |
| CVE-2026-42920 | redhat_vex | BIG-IP DTLS Vulnerability | known not affected: 1 | 2026-06-05T19:16:51+00:00 | Vulnerability · Source |
| CVE-2026-42515 | redhat_vex | Insecure Direct Object Reference (IDOR) Vulnerability in e-Sushrut HMIS | known not affected: 1 | 2026-06-05T19:16:50+00:00 | Vulnerability · Source |
| CVE-2026-42232 | redhat_vex | n8n: XML Node Prototype Pollution to RCE | known not affected: 1 | 2026-06-05T19:16:50+00:00 | Vulnerability · Source |
| CVE-2026-42869 | redhat_vex | SOCFortress CoPilot: Hardcoded JWT secret allows unauthenticated full admin compromise and lateral movement into all integrated SOC tools | known not affected: 1 | 2026-06-05T19:16:50+00:00 | Vulnerability · Source |
| CVE-2026-42313 | redhat_vex | pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy | known not affected: 1 | 2026-06-05T19:16:50+00:00 | Vulnerability · Source |
| CVE-2026-42047 | redhat_vex | Inngest TypeScript SDK exposes environment variables via serve() handler on unhandled HTTP methods | known not affected: 1 | 2026-06-05T19:16:48+00:00 | Vulnerability · Source |
| CVE-2026-42083 | redhat_vex | free5GC: PCF Npcf_SMPolicyControl missing authentication middleware allows unauthenticated access to SM policy handlers and disclosure of subscriber SUPI | known not affected: 1 | 2026-06-05T19:16:48+00:00 | Vulnerability · Source |
| CVE-2026-42740 | redhat_vex | WordPress Tainacan plugin <= 1.0.3 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:16:47+00:00 | Vulnerability · Source |
| CVE-2026-42353 | redhat_vex | Path traversal / SSRF in i18next-http-middleware via user-controlled language and namespace parameters | known not affected: 1 | 2026-06-05T19:16:47+00:00 | Vulnerability · Source |
| CVE-2026-42425 | redhat_vex | OpenKM 6.3.12 Unrestricted SQL Execution via DatabaseQuery | known not affected: 1 | 2026-06-05T19:16:47+00:00 | Vulnerability · Source |
| CVE-2026-42272 | redhat_vex | Heimdall: Case-sensitive handling of URL-encoded slashes may lead to inconsistent path interpretation | known not affected: 1 | 2026-06-05T19:16:46+00:00 | Vulnerability · Source |
| CVE-2026-42236 | redhat_vex | n8n: Unauthenticated Denial of Service via MCP Client Registration | known not affected: 1 | 2026-06-05T19:16:45+00:00 | Vulnerability · Source |
| CVE-2026-42434 | redhat_vex | OpenClaw 2026.4.5 < 2026.4.10 - Sandbox Escape via host Parameter Override in Exec Routing | known not affected: 1 | 2026-06-05T19:16:45+00:00 | Vulnerability · Source |
| CVE-2026-42155 | redhat_vex | Magento LTS: Weak API Session ID — Predictable MD5 of Time-Derived Inputs | known not affected: 1 | 2026-06-05T19:16:45+00:00 | Vulnerability · Source |
| CVE-2026-42551 | redhat_vex | Flight: HTTP method override enabled by default enables CSRF escalation and middleware bypass in flightphp/core | known not affected: 1 | 2026-06-05T19:16:45+00:00 | Vulnerability · Source |
| CVE-2026-42074 | redhat_vex | OpenClaude: Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input | known not affected: 1 | 2026-06-05T19:16:44+00:00 | Vulnerability · Source |
| CVE-2026-42812 | redhat_vex | Apache Polaris: No protection on `write.metadata.path` | known not affected: 1 | 2026-06-05T19:16:44+00:00 | Vulnerability · Source |
| CVE-2026-42757 | redhat_vex | WordPress WebinarIgnition plugin < 4.08.253 - Arbitrary File Deletion vulnerability | known not affected: 1 | 2026-06-05T19:16:44+00:00 | Vulnerability · Source |
| CVE-2026-42731 | redhat_vex | WordPress miniorange otp verification plugin <= 5.4.9 - Privilege Escalation vulnerability | known not affected: 1 | 2026-06-05T19:16:44+00:00 | Vulnerability · Source |
| CVE-2026-42595 | redhat_vex | Gotenberg: Server-Side Request Forgery via Chromium URL Endpoint with Redirect-Based Deny-List Bypass | known not affected: 1 | 2026-06-05T19:16:43+00:00 | Vulnerability · Source |
| CVE-2026-42685 | redhat_vex | WordPress WP Job Portal plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:16:43+00:00 | Vulnerability · Source |
| CVE-2026-42919 | redhat_vex | F5 BIG-IP Appliance Mode Vulnerability | known not affected: 1 | 2026-06-05T19:16:43+00:00 | Vulnerability · Source |
| CVE-2026-42793 | redhat_vex | Atom table exhaustion via attacker-controlled GraphQL SDL names in absinthe | known not affected: 1 | 2026-06-05T19:16:42+00:00 | Vulnerability · Source |
| CVE-2026-42856 | redhat_vex | Network-AI: Missing authentication on MCP HTTP endpoint allows unauthenticated privileged tool calls | known not affected: 1 | 2026-06-05T19:16:42+00:00 | Vulnerability · Source |
| CVE-2026-42577 | redhat_vex | Netty: epoll transport denial of service via RST on half-closed TCP connection | known not affected: 1 | 2026-06-05T19:16:42+00:00 | Vulnerability · Source |
| CVE-2026-42739 | redhat_vex | WordPress Advanced IP Blocker plugin <= 8.10.7 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:16:42+00:00 | Vulnerability · Source |
| CVE-2026-42379 | redhat_vex | WordPress Templately plugin <= 3.6.1 - Sensitive Data Exposure vulnerability | known not affected: 1 | 2026-06-05T19:16:41+00:00 | Vulnerability · Source |
| CVE-2026-42748 | redhat_vex | WordPress WPify Woo Czech plugin <= 5.4.1 - Arbitrary File Upload vulnerability | known not affected: 1 | 2026-06-05T19:16:41+00:00 | Vulnerability · Source |
| CVE-2026-42742 | redhat_vex | WordPress Views for WPForms plugin <= 3.4.6 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:16:40+00:00 | Vulnerability · Source |
| CVE-2026-42463 | redhat_vex | SQLBot: Unauthorized Access Vulnerability | known not affected: 1 | 2026-06-05T19:16:40+00:00 | Vulnerability · Source |
| CVE-2026-42760 | redhat_vex | WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.25 - Broken Authentication vulnerability | known not affected: 1 | 2026-06-05T19:16:39+00:00 | Vulnerability · Source |
| CVE-2026-42759 | redhat_vex | WordPress Affiliate Super Assistent plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:16:39+00:00 | Vulnerability · Source |
| CVE-2026-42409 | redhat_vex | BIG-IP HTTP/2 vulnerability | known not affected: 1 | 2026-06-05T19:16:39+00:00 | Vulnerability · Source |
| CVE-2026-42607 | redhat_vex | Grav: Remote Code Execution (RCE) via Malicious Plugin ZIP Upload in Direct Install Feature | known not affected: 1 | 2026-06-05T19:16:38+00:00 | Vulnerability · Source |
| CVE-2026-42553 | redhat_vex | Cinny: Access token disclosure via invalidated emoji pack avatar URL in service worker | known not affected: 1 | 2026-06-05T19:16:37+00:00 | Vulnerability · Source |
| CVE-2026-42373 | redhat_vex | D-Link DIR-605L B2 Hardcoded Telnet Backdoor Credentials | known not affected: 1 | 2026-06-05T19:16:37+00:00 | Vulnerability · Source |
| CVE-2026-42733 | redhat_vex | WordPress WPCS plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:16:37+00:00 | Vulnerability · Source |
| CVE-2026-42517 | redhat_vex | Cryptographic Failure Vulnerability in e-Sushrut HMIS | known not affected: 1 | 2026-06-05T19:16:36+00:00 | Vulnerability · Source |
| CVE-2026-42889 | redhat_vex | Relay Server WebSocket authentication bypass when token is omitted | known not affected: 1 | 2026-06-05T19:16:36+00:00 | Vulnerability · Source |
| CVE-2026-42678 | redhat_vex | WordPress GiveWP plugin <= 4.14.5 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:16:36+00:00 | Vulnerability · Source |
| CVE-2026-42603 | redhat_vex | OWASP BLT: pre-commit-fix.yaml executes untrusted fork code via pull_request_target | known not affected: 1 | 2026-06-05T19:16:35+00:00 | Vulnerability · Source |
| CVE-2026-42799 | redhat_vex | Out-of-bounds read in ulp | known not affected: 1 | 2026-06-05T19:16:35+00:00 | Vulnerability · Source |
| CVE-2026-42669 | redhat_vex | WordPress EventPrime plugin <= 4.3.2.0 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:16:35+00:00 | Vulnerability · Source |
| CVE-2026-42612 | redhat_vex | Grav: Publisher-Level Stored XSS via Unquoted Event Attributes | known not affected: 1 | 2026-06-05T19:16:34+00:00 | Vulnerability · Source |
| CVE-2026-42090 | redhat_vex | Notesnook: RCE via stored XSS in note export rendering | known not affected: 1 | 2026-06-05T19:16:34+00:00 | Vulnerability · Source |
| CVE-2026-42773 | redhat_vex | WordPress eMagicOne Store Manager plugin <= 1.3.2 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:16:33+00:00 | Vulnerability · Source |
| CVE-2026-42513 | redhat_vex | Authentication Bypass Vulnerability in e-Sushrut HMIS | known not affected: 1 | 2026-06-05T19:16:33+00:00 | Vulnerability · Source |
| CVE-2026-42737 | redhat_vex | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Arbitrary File Deletion vulnerability | known not affected: 1 | 2026-06-05T19:16:33+00:00 | Vulnerability · Source |
| CVE-2026-42234 | redhat_vex | n8n: Python Task Runner Sandbox Escape | known not affected: 1 | 2026-06-05T19:16:33+00:00 | Vulnerability · Source |