VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298657 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-42431 | redhat_vex | OpenClaw < 2026.4.8 - Persistent Profile Mutation via node.invoke(browser.proxy) Bypass | known not affected: 1 | 2026-06-05T19:15:57+00:00 | Vulnerability · Source |
| CVE-2026-42251 | redhat_vex | Hard-coded credentials in KS-SOMED | known not affected: 1 | 2026-06-05T19:15:56+00:00 | Vulnerability · Source |
| CVE-2026-42071 | redhat_vex | MantisBT: Private Bugnote Attachment Content Leak via REST API | known not affected: 1 | 2026-06-05T19:15:56+00:00 | Vulnerability · Source |
| CVE-2026-42602 | redhat_vex | azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay | known not affected: 1 | 2026-06-05T19:15:56+00:00 | Vulnerability · Source |
| CVE-2026-42422 | redhat_vex | OpenClaw < 2026.4.8 - Role Bypass in device.token.rotate Function | known not affected: 1 | 2026-06-05T19:15:55+00:00 | Vulnerability · Source |
| CVE-2026-42800 | redhat_vex | Deference after null check in ims_client sip | known not affected: 1 | 2026-06-05T19:15:54+00:00 | Vulnerability · Source |
| CVE-2026-42062 | redhat_vex | CVE-2026-42062 | known not affected: 1 | 2026-06-05T19:15:54+00:00 | Vulnerability · Source |
| CVE-2026-42781 | redhat_vex | BIG-IP FastL4 virtual server vulnerability | known not affected: 1 | 2026-06-05T19:15:53+00:00 | Vulnerability · Source |
| CVE-2026-42745 | redhat_vex | WordPress Smart Online Order for Clover plugin <= 1.6.0 - Broken Authentication vulnerability | known not affected: 1 | 2026-06-05T19:15:53+00:00 | Vulnerability · Source |
| CVE-2026-42097 | redhat_vex | Authentication Bypass in Sparx Pro Cloud Server | known not affected: 1 | 2026-06-05T19:15:53+00:00 | Vulnerability · Source |
| CVE-2026-42727 | redhat_vex | WordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:15:52+00:00 | Vulnerability · Source |
| CVE-2026-42088 | redhat_vex | OpenC3 COSMOS: Administrative Actions via the Script Runner Tool | known not affected: 1 | 2026-06-05T19:15:52+00:00 | Vulnerability · Source |
| CVE-2026-42682 | redhat_vex | WordPress wpForo Forum plugin <= 3.0.6 - Broken Access Control vulnerability | known not affected: 1 | 2026-06-05T19:15:51+00:00 | Vulnerability · Source |
| CVE-2026-42844 | redhat_vex | Grav: Low-privileged API users can create super-admin accounts via blueprint-upload | known not affected: 1 | 2026-06-05T19:15:50+00:00 | Vulnerability · Source |
| CVE-2026-42736 | redhat_vex | WordPress BP Better Messages plugin <= 2.14.16 - Insecure Direct Object References (IDOR) vulnerability | known not affected: 1 | 2026-06-05T19:15:49+00:00 | Vulnerability · Source |
| CVE-2026-42376 | redhat_vex | D-Link DIR-456U A1 Hardcoded Telnet Backdoor Credentials | known not affected: 1 | 2026-06-05T19:15:48+00:00 | Vulnerability · Source |
| CVE-2026-42457 | redhat_vex | vCluster Platform: Stored XSS can lead to privilege escalation | known not affected: 1 | 2026-06-05T19:15:47+00:00 | Vulnerability · Source |
| CVE-2026-42079 | redhat_vex | PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope | known not affected: 1 | 2026-06-05T19:15:47+00:00 | Vulnerability · Source |
| CVE-2026-42754 | redhat_vex | WordPress Favicon plugin <= 1.3.46 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-06-05T19:15:46+00:00 | Vulnerability · Source |
| CVE-2026-42196 | redhat_vex | django-s3file: Relative path traversal | known not affected: 1 | 2026-06-05T19:15:45+00:00 | Vulnerability · Source |
| CVE-2026-42673 | redhat_vex | WordPress Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin <= 3.3.6 - Sensitive Data Exposure vulnerability | known not affected: 1 | 2026-06-05T19:15:45+00:00 | Vulnerability · Source |
| CVE-2026-24087 | redhat_vex | Improper Validation of Syntactic Correctness of Input in Kernel | known not affected: 1 | 2026-06-05T19:15:45+00:00 | Vulnerability · Source |
| CVE-2026-24214 | redhat_vex | CVE-2026-24214 | known not affected: 1 | 2026-06-05T19:15:44+00:00 | Vulnerability · Source |
| CVE-2026-24177 | redhat_vex | CVE-2026-24177 | known not affected: 1 | 2026-06-05T19:15:44+00:00 | Vulnerability · Source |
| CVE-2026-24195 | redhat_vex | CVE-2026-24195 | known not affected: 1 | 2026-06-05T19:15:44+00:00 | Vulnerability · Source |
| CVE-2026-24146 | redhat_vex | CVE-2026-24146 | known not affected: 1 | 2026-06-05T19:15:43+00:00 | Vulnerability · Source |
| CVE-2026-24209 | redhat_vex | CVE-2026-24209 | known not affected: 1 | 2026-06-05T19:15:43+00:00 | Vulnerability · Source |
| CVE-2026-24425 | redhat_vex | Twig 2.16.x & 3.9.0-3.25.x Sandbox Bypass via SourcePolicyInterface | known not affected: 1 | 2026-06-05T19:15:43+00:00 | Vulnerability · Source |
| CVE-2026-24173 | redhat_vex | CVE-2026-24173 | known not affected: 1 | 2026-06-05T19:15:42+00:00 | Vulnerability · Source |
| CVE-2026-24218 | redhat_vex | CVE-2026-24218 | known not affected: 1 | 2026-06-05T19:15:42+00:00 | Vulnerability · Source |
| CVE-2026-24092 | redhat_vex | Improper Validation of Syntactic Correctness of Input in Display | known not affected: 1 | 2026-06-05T19:15:42+00:00 | Vulnerability · Source |
| CVE-2026-24937 | redhat_vex | WordPress Broadcast Live Video plugin < 7.1.3 - Remote Code Execution (RCE) vulnerability | known not affected: 1 | 2026-06-05T19:15:41+00:00 | Vulnerability · Source |
| CVE-2026-24210 | redhat_vex | CVE-2026-24210 | known not affected: 1 | 2026-06-05T19:15:40+00:00 | Vulnerability · Source |
| CVE-2026-24085 | redhat_vex | Stack-based Buffer Overflow in Display | known not affected: 1 | 2026-06-05T19:15:40+00:00 | Vulnerability · Source |
| CVE-2026-24913 | redhat_vex | CVE-2026-24913 | known not affected: 1 | 2026-06-05T19:15:39+00:00 | Vulnerability · Source |
| CVE-2026-24751 | redhat_vex | Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting | known not affected: 1 | 2026-06-05T19:15:39+00:00 | Vulnerability · Source |
| CVE-2026-24221 | redhat_vex | CVE-2026-24221 | known not affected: 1 | 2026-06-05T19:15:38+00:00 | Vulnerability · Source |
| CVE-2026-24212 | redhat_vex | CVE-2026-24212 | known not affected: 1 | 2026-06-05T19:15:37+00:00 | Vulnerability · Source |
| CVE-2026-24207 | redhat_vex | CVE-2026-24207 | known not affected: 1 | 2026-06-05T19:15:36+00:00 | Vulnerability · Source |
| CVE-2026-24162 | redhat_vex | CVE-2026-24162 | known not affected: 1 | 2026-06-05T19:15:36+00:00 | Vulnerability · Source |
| CVE-2026-24782 | redhat_vex | Kiteworks Secure Data Forms has a SQL Injection vulnerability | known not affected: 1 | 2026-06-05T19:15:35+00:00 | Vulnerability · Source |
| CVE-2026-24216 | redhat_vex | CVE-2026-24216 | known not affected: 1 | 2026-06-05T19:15:35+00:00 | Vulnerability · Source |
| CVE-2026-24188 | redhat_vex | CVE-2026-24188 | known not affected: 1 | 2026-06-05T19:15:34+00:00 | Vulnerability · Source |
| CVE-2026-24089 | redhat_vex | Improper Validation of Syntactic Correctness of Input in Kernel | known not affected: 1 | 2026-06-05T19:15:34+00:00 | Vulnerability · Source |
| CVE-2026-24752 | redhat_vex | Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting | known not affected: 1 | 2026-06-05T19:15:34+00:00 | Vulnerability · Source |
| CVE-2026-24467 | redhat_vex | OpenAEV's Improper Password Reset Token Management Leads to Unauthenticated Account Takeover and Platform Compromise | known not affected: 1 | 2026-06-05T19:15:34+00:00 | Vulnerability · Source |
| CVE-2026-24091 | redhat_vex | Improper Validation of Syntactic Correctness of Input in Display | known not affected: 1 | 2026-06-05T19:15:33+00:00 | Vulnerability · Source |
| CVE-2026-24156 | redhat_vex | CVE-2026-24156 | known not affected: 1 | 2026-06-05T19:15:33+00:00 | Vulnerability · Source |
| CVE-2026-24217 | redhat_vex | CVE-2026-24217 | known not affected: 1 | 2026-06-05T19:15:33+00:00 | Vulnerability · Source |
| CVE-2026-24213 | redhat_vex | CVE-2026-24213 | known not affected: 1 | 2026-06-05T19:15:33+00:00 | Vulnerability · Source |