VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298657 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-42919 | redhat_vex | F5 BIG-IP Appliance Mode Vulnerability | known not affected: 1 | 2026-06-05T19:16:43+00:00 | Vulnerability · Source |
| CVE-2026-42793 | redhat_vex | Atom table exhaustion via attacker-controlled GraphQL SDL names in absinthe | known not affected: 1 | 2026-06-05T19:16:42+00:00 | Vulnerability · Source |
| CVE-2026-42856 | redhat_vex | Network-AI: Missing authentication on MCP HTTP endpoint allows unauthenticated privileged tool calls | known not affected: 1 | 2026-06-05T19:16:42+00:00 | Vulnerability · Source |
| CVE-2026-42577 | redhat_vex | Netty: epoll transport denial of service via RST on half-closed TCP connection | known not affected: 1 | 2026-06-05T19:16:42+00:00 | Vulnerability · Source |
| CVE-2026-42739 | redhat_vex | WordPress Advanced IP Blocker plugin <= 8.10.7 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:16:42+00:00 | Vulnerability · Source |
| CVE-2026-42379 | redhat_vex | WordPress Templately plugin <= 3.6.1 - Sensitive Data Exposure vulnerability | known not affected: 1 | 2026-06-05T19:16:41+00:00 | Vulnerability · Source |
| CVE-2026-42748 | redhat_vex | WordPress WPify Woo Czech plugin <= 5.4.1 - Arbitrary File Upload vulnerability | known not affected: 1 | 2026-06-05T19:16:41+00:00 | Vulnerability · Source |
| CVE-2026-42742 | redhat_vex | WordPress Views for WPForms plugin <= 3.4.6 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:16:40+00:00 | Vulnerability · Source |
| CVE-2026-42463 | redhat_vex | SQLBot: Unauthorized Access Vulnerability | known not affected: 1 | 2026-06-05T19:16:40+00:00 | Vulnerability · Source |
| CVE-2026-42760 | redhat_vex | WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.25 - Broken Authentication vulnerability | known not affected: 1 | 2026-06-05T19:16:39+00:00 | Vulnerability · Source |
| CVE-2026-42759 | redhat_vex | WordPress Affiliate Super Assistent plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:16:39+00:00 | Vulnerability · Source |
| CVE-2026-42409 | redhat_vex | BIG-IP HTTP/2 vulnerability | known not affected: 1 | 2026-06-05T19:16:39+00:00 | Vulnerability · Source |
| CVE-2026-42607 | redhat_vex | Grav: Remote Code Execution (RCE) via Malicious Plugin ZIP Upload in Direct Install Feature | known not affected: 1 | 2026-06-05T19:16:38+00:00 | Vulnerability · Source |
| CVE-2026-42553 | redhat_vex | Cinny: Access token disclosure via invalidated emoji pack avatar URL in service worker | known not affected: 1 | 2026-06-05T19:16:37+00:00 | Vulnerability · Source |
| CVE-2026-42373 | redhat_vex | D-Link DIR-605L B2 Hardcoded Telnet Backdoor Credentials | known not affected: 1 | 2026-06-05T19:16:37+00:00 | Vulnerability · Source |
| CVE-2026-42733 | redhat_vex | WordPress WPCS plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:16:37+00:00 | Vulnerability · Source |
| CVE-2026-42517 | redhat_vex | Cryptographic Failure Vulnerability in e-Sushrut HMIS | known not affected: 1 | 2026-06-05T19:16:36+00:00 | Vulnerability · Source |
| CVE-2026-42889 | redhat_vex | Relay Server WebSocket authentication bypass when token is omitted | known not affected: 1 | 2026-06-05T19:16:36+00:00 | Vulnerability · Source |
| CVE-2026-42678 | redhat_vex | WordPress GiveWP plugin <= 4.14.5 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:16:36+00:00 | Vulnerability · Source |
| CVE-2026-42603 | redhat_vex | OWASP BLT: pre-commit-fix.yaml executes untrusted fork code via pull_request_target | known not affected: 1 | 2026-06-05T19:16:35+00:00 | Vulnerability · Source |
| CVE-2026-42799 | redhat_vex | Out-of-bounds read in ulp | known not affected: 1 | 2026-06-05T19:16:35+00:00 | Vulnerability · Source |
| CVE-2026-42669 | redhat_vex | WordPress EventPrime plugin <= 4.3.2.0 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:16:35+00:00 | Vulnerability · Source |
| CVE-2026-42612 | redhat_vex | Grav: Publisher-Level Stored XSS via Unquoted Event Attributes | known not affected: 1 | 2026-06-05T19:16:34+00:00 | Vulnerability · Source |
| CVE-2026-42090 | redhat_vex | Notesnook: RCE via stored XSS in note export rendering | known not affected: 1 | 2026-06-05T19:16:34+00:00 | Vulnerability · Source |
| CVE-2026-42773 | redhat_vex | WordPress eMagicOne Store Manager plugin <= 1.3.2 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:16:33+00:00 | Vulnerability · Source |
| CVE-2026-42513 | redhat_vex | Authentication Bypass Vulnerability in e-Sushrut HMIS | known not affected: 1 | 2026-06-05T19:16:33+00:00 | Vulnerability · Source |
| CVE-2026-42737 | redhat_vex | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Arbitrary File Deletion vulnerability | known not affected: 1 | 2026-06-05T19:16:33+00:00 | Vulnerability · Source |
| CVE-2026-42234 | redhat_vex | n8n: Python Task Runner Sandbox Escape | known not affected: 1 | 2026-06-05T19:16:33+00:00 | Vulnerability · Source |
| CVE-2026-42810 | redhat_vex | Apache Polaris: could broaden vended S3 credentials through wildcard-bearing namespace or table names | known not affected: 1 | 2026-06-05T19:16:33+00:00 | Vulnerability · Source |
| CVE-2026-42315 | redhat_vex | pyLoad: Path Traversal via Package Folder Name in set_package_data | known not affected: 1 | 2026-06-05T19:16:33+00:00 | Vulnerability · Source |
| CVE-2026-42845 | redhat_vex | Grav: Anonymous Page Content Overwrite via Form File Upload filename Override | known not affected: 1 | 2026-06-05T19:16:32+00:00 | Vulnerability · Source |
| CVE-2026-42377 | redhat_vex | WordPress SureForms Pro plugin <= 2.8.0 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:16:32+00:00 | Vulnerability · Source |
| CVE-2026-42854 | redhat_vex | arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE | known not affected: 1 | 2026-06-05T19:16:32+00:00 | Vulnerability · Source |
| CVE-2026-42100 | redhat_vex | DoS in Sparx Pro Cloud Server | known not affected: 1 | 2026-06-05T19:16:31+00:00 | Vulnerability · Source |
| CVE-2026-42755 | redhat_vex | WordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:16:30+00:00 | Vulnerability · Source |
| CVE-2026-42098 | redhat_vex | Authorization Bypass in Sparx Enterprise Architect | known not affected: 1 | 2026-06-05T19:16:30+00:00 | Vulnerability · Source |
| CVE-2026-42197 | redhat_vex | RELATE Vulnerable to Stored XSS via Unprivileged User Profile | known not affected: 1 | 2026-06-05T19:16:29+00:00 | Vulnerability · Source |
| CVE-2026-42674 | redhat_vex | WordPress Advanced Access Manager plugin <= 7.1.0 - Bypass Vulnerability vulnerability | known not affected: 1 | 2026-06-05T19:16:29+00:00 | Vulnerability · Source |
| CVE-2026-42278 | redhat_vex | UltraDAG: Smart Account Spending Policy Bypass via Pockets | known not affected: 1 | 2026-06-05T19:16:28+00:00 | Vulnerability · Source |
| CVE-2026-42683 | redhat_vex | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:16:27+00:00 | Vulnerability · Source |
| CVE-2026-42449 | redhat_vex | n8n-MCP: IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embedders | known not affected: 1 | 2026-06-05T19:16:27+00:00 | Vulnerability · Source |
| CVE-2026-42881 | redhat_vex | STIGQter: Arbitrary File Write leading to Local Code Execution via Export HTML | known not affected: 1 | 2026-06-05T19:16:26+00:00 | Vulnerability · Source |
| CVE-2026-42809 | redhat_vex | Apache Polaris: staged table creation could vend storage credentials for unvalidated locations | known not affected: 1 | 2026-06-05T19:16:26+00:00 | Vulnerability · Source |
| CVE-2026-42728 | redhat_vex | WordPress HT Contact Form 7 plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:16:26+00:00 | Vulnerability · Source |
| CVE-2026-42746 | redhat_vex | WordPress Smart Online Order for Clover plugin <= 1.6.0 - Sensitive Data Exposure vulnerability | known not affected: 1 | 2026-06-05T19:16:25+00:00 | Vulnerability · Source |
| CVE-2026-42374 | redhat_vex | D-Link DIR-600L B1 Hardcoded Telnet Backdoor Credentials | known not affected: 1 | 2026-06-05T19:16:25+00:00 | Vulnerability · Source |
| CVE-2026-42548 | redhat_vex | Flight: Reflected XSS via unvalidated JSONP callback in Flight::jsonp() | known not affected: 1 | 2026-06-05T19:16:25+00:00 | Vulnerability · Source |
| CVE-2026-42734 | redhat_vex | WordPress Geo Mashup plugin <= 1.13.19 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:16:24+00:00 | Vulnerability · Source |
| CVE-2026-42518 | redhat_vex | Information Disclosure Vulnerability in e-Sushrut HMIS | known not affected: 1 | 2026-06-05T19:16:24+00:00 | Vulnerability · Source |
| CVE-2026-42275 | redhat_vex | zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write | known not affected: 1 | 2026-06-05T19:16:24+00:00 | Vulnerability · Source |