VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298639 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-42811 | redhat_vex | Apache Polaris: could broaden vended GCS credentials through unescaped identifier content in access-boundary CEL conditions | known not affected: 1 | 2026-06-05T19:16:15+00:00 | Vulnerability · Source |
| CVE-2026-42613 | redhat_vex | Grav: Privilege Escalation via Missing Server-Side Validation of groups/access | known not affected: 1 | 2026-06-05T19:16:14+00:00 | Vulnerability · Source |
| CVE-2026-42235 | redhat_vex | n8n: XSS via MCP OAuth client | known not affected: 1 | 2026-06-05T19:16:14+00:00 | Vulnerability · Source |
| CVE-2026-42406 | redhat_vex | BIG-IP and BIG-IQ privilege escalation vulnerability | known not affected: 1 | 2026-06-05T19:16:13+00:00 | Vulnerability · Source |
| CVE-2026-42433 | redhat_vex | OpenClaw < 2026.4.10 - Unauthorized Matrix Profile Config Persistence Access via operator.write Message Tools | known not affected: 1 | 2026-06-05T19:16:13+00:00 | Vulnerability · Source |
| CVE-2026-42226 | redhat_vex | n8n: Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay | known not affected: 1 | 2026-06-05T19:16:12+00:00 | Vulnerability · Source |
| CVE-2026-42729 | redhat_vex | WordPress PropertyHive plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:16:12+00:00 | Vulnerability · Source |
| CVE-2026-42684 | redhat_vex | WordPress WP Job Portal plugin <= 2.5.1 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:16:11+00:00 | Vulnerability · Source |
| CVE-2026-42675 | redhat_vex | WordPress Hydra Booking plugin <= 1.1.41 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:16:10+00:00 | Vulnerability · Source |
| CVE-2026-42747 | redhat_vex | WordPress Easy Form Builder plugin <= 4.0.6 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:16:10+00:00 | Vulnerability · Source |
| CVE-2026-42864 | redhat_vex | FireFighter: Unauthenticated SSRF in Raid jira_bot endpoint allows IAM credential theft | known not affected: 1 | 2026-06-05T19:16:10+00:00 | Vulnerability · Source |
| CVE-2026-42075 | redhat_vex | Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write | known not affected: 1 | 2026-06-05T19:16:09+00:00 | Vulnerability · Source |
| CVE-2026-42756 | redhat_vex | WordPress QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly plugin <= 3.2.7 - Arbitrary File Deletion vulnerability | known not affected: 1 | 2026-06-05T19:16:09+00:00 | Vulnerability · Source |
| CVE-2026-42855 | redhat_vex | arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack | known not affected: 1 | 2026-06-05T19:16:08+00:00 | Vulnerability · Source |
| CVE-2026-42774 | redhat_vex | WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:16:07+00:00 | Vulnerability · Source |
| CVE-2026-42738 | redhat_vex | WordPress Smart Online Order for Clover plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:16:06+00:00 | Vulnerability · Source |
| CVE-2026-42099 | redhat_vex | Race Condition in Sparx Pro Cloud Server | known not affected: 1 | 2026-06-05T19:16:06+00:00 | Vulnerability · Source |
| CVE-2026-42156 | redhat_vex | Flowsint: Cypher query injection in node type on node creation | known not affected: 1 | 2026-06-05T19:16:05+00:00 | Vulnerability · Source |
| CVE-2026-42318 | redhat_vex | GLPI Vulnerable to Arbitrary Item Deletion via Planning Endpoint | known not affected: 1 | 2026-06-05T19:16:05+00:00 | Vulnerability · Source |
| CVE-2026-42273 | redhat_vex | Heimdall: Case-sensitive host matching may lead to policy bypass | known not affected: 1 | 2026-06-05T19:16:04+00:00 | Vulnerability · Source |
| CVE-2026-42516 | redhat_vex | Broken Access Control Vulnerability in e-Sushrut HMIS | known not affected: 1 | 2026-06-05T19:16:04+00:00 | Vulnerability · Source |
| CVE-2026-42741 | redhat_vex | WordPress Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend plugin <= 3.3.2 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:16:04+00:00 | Vulnerability · Source |
| CVE-2026-42615 | redhat_vex | CVE-2026-42615 | known not affected: 1 | 2026-06-05T19:16:03+00:00 | Vulnerability · Source |
| CVE-2026-42372 | redhat_vex | D-Link DIR-605L A1 Hardcoded Telnet Backdoor Credentials | known not affected: 1 | 2026-06-05T19:16:03+00:00 | Vulnerability · Source |
| CVE-2026-42363 | redhat_vex | GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability | known not affected: 1 | 2026-06-05T19:16:02+00:00 | Vulnerability · Source |
| CVE-2026-42930 | redhat_vex | Appliance mode iControl REST vulnerability | known not affected: 1 | 2026-06-05T19:16:02+00:00 | Vulnerability · Source |
| CVE-2026-42785 | redhat_vex | OpenKM 6.3.12 Remote Code Execution via Administrative Scripting | known not affected: 1 | 2026-06-05T19:16:00+00:00 | Vulnerability · Source |
| CVE-2026-42749 | redhat_vex | WordPress Disable Comments for Any Post Types (Remove comments) plugin <= 1.3.0 - Broken Authentication vulnerability | known not affected: 1 | 2026-06-05T19:16:00+00:00 | Vulnerability · Source |
| CVE-2026-42929 | redhat_vex | MacGregor Voyage Data Recorder (VDR) G4e Use of Hard-coded Credentials | known not affected: 1 | 2026-06-05T19:15:59+00:00 | Vulnerability · Source |
| CVE-2026-42758 | redhat_vex | WordPress WebinarIgnition plugin < 4.08.253 - Privilege Escalation vulnerability | known not affected: 1 | 2026-06-05T19:15:58+00:00 | Vulnerability · Source |
| CVE-2026-42677 | redhat_vex | WordPress WP Document Revisions plugin <= 3.8.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:15:58+00:00 | Vulnerability · Source |
| CVE-2026-42611 | redhat_vex | Grav: Stored XSS via Tag Injection | known not affected: 1 | 2026-06-05T19:15:58+00:00 | Vulnerability · Source |
| CVE-2026-42431 | redhat_vex | OpenClaw < 2026.4.8 - Persistent Profile Mutation via node.invoke(browser.proxy) Bypass | known not affected: 1 | 2026-06-05T19:15:57+00:00 | Vulnerability · Source |
| CVE-2026-42251 | redhat_vex | Hard-coded credentials in KS-SOMED | known not affected: 1 | 2026-06-05T19:15:56+00:00 | Vulnerability · Source |
| CVE-2026-42071 | redhat_vex | MantisBT: Private Bugnote Attachment Content Leak via REST API | known not affected: 1 | 2026-06-05T19:15:56+00:00 | Vulnerability · Source |
| CVE-2026-42602 | redhat_vex | azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay | known not affected: 1 | 2026-06-05T19:15:56+00:00 | Vulnerability · Source |
| CVE-2026-42422 | redhat_vex | OpenClaw < 2026.4.8 - Role Bypass in device.token.rotate Function | known not affected: 1 | 2026-06-05T19:15:55+00:00 | Vulnerability · Source |
| CVE-2026-42800 | redhat_vex | Deference after null check in ims_client sip | known not affected: 1 | 2026-06-05T19:15:54+00:00 | Vulnerability · Source |
| CVE-2026-42062 | redhat_vex | CVE-2026-42062 | known not affected: 1 | 2026-06-05T19:15:54+00:00 | Vulnerability · Source |
| CVE-2026-42781 | redhat_vex | BIG-IP FastL4 virtual server vulnerability | known not affected: 1 | 2026-06-05T19:15:53+00:00 | Vulnerability · Source |
| CVE-2026-42745 | redhat_vex | WordPress Smart Online Order for Clover plugin <= 1.6.0 - Broken Authentication vulnerability | known not affected: 1 | 2026-06-05T19:15:53+00:00 | Vulnerability · Source |
| CVE-2026-42097 | redhat_vex | Authentication Bypass in Sparx Pro Cloud Server | known not affected: 1 | 2026-06-05T19:15:53+00:00 | Vulnerability · Source |
| CVE-2026-42727 | redhat_vex | WordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:15:52+00:00 | Vulnerability · Source |
| CVE-2026-42088 | redhat_vex | OpenC3 COSMOS: Administrative Actions via the Script Runner Tool | known not affected: 1 | 2026-06-05T19:15:52+00:00 | Vulnerability · Source |
| CVE-2026-42682 | redhat_vex | WordPress wpForo Forum plugin <= 3.0.6 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:15:51+00:00 | Vulnerability · Source |
| CVE-2026-42844 | redhat_vex | Grav: Low-privileged API users can create super-admin accounts via blueprint-upload | known not affected: 1 | 2026-06-05T19:15:50+00:00 | Vulnerability · Source |
| CVE-2026-42736 | redhat_vex | WordPress BP Better Messages plugin <= 2.14.16 - Insecure Direct Object References (IDOR) vulnerability | known not affected: 1 | 2026-06-05T19:15:49+00:00 | Vulnerability · Source |
| CVE-2026-42376 | redhat_vex | D-Link DIR-456U A1 Hardcoded Telnet Backdoor Credentials | known not affected: 1 | 2026-06-05T19:15:48+00:00 | Vulnerability · Source |
| CVE-2026-42457 | redhat_vex | vCluster Platform: Stored XSS can lead to privilege escalation | known not affected: 1 | 2026-06-05T19:15:47+00:00 | Vulnerability · Source |
| CVE-2026-42079 | redhat_vex | PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope | known not affected: 1 | 2026-06-05T19:15:47+00:00 | Vulnerability · Source |