VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299669 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-50967 | redhat_vex | uBidAuction 2.0.1 tickets manage Reflected XSS | known not affected: 1 | 2026-05-11T20:26:19+00:00 | Vulnerability · Source |
| CVE-2022-50966 | redhat_vex | uBidAuction 2.0.1 news manage Reflected XSS | known not affected: 1 | 2026-05-11T20:26:18+00:00 | Vulnerability · Source |
| CVE-2022-50965 | redhat_vex | uBidAuction 2.0.1 posts manage Reflected XSS | known not affected: 1 | 2026-05-11T20:26:17+00:00 | Vulnerability · Source |
| CVE-2022-50964 | redhat_vex | uBidAuction 2.0.1 myAuctions loose Reflected XSS | known not affected: 1 | 2026-05-11T20:26:16+00:00 | Vulnerability · Source |
| CVE-2022-50962 | redhat_vex | uBidAuction 2.0.1 myOrders Reflected XSS | known not affected: 1 | 2026-05-11T20:26:15+00:00 | Vulnerability · Source |
| CVE-2022-50961 | redhat_vex | WordPress Plugin IP2Location Country Blocker 2.26.7 Stored XSS | known not affected: 1 | 2026-05-11T20:26:13+00:00 | Vulnerability · Source |
| CVE-2022-50959 | redhat_vex | WordPress Contact Form Builder 1.6.1 Cross-Site Scripting via code_generator.php | known not affected: 1 | 2026-05-11T20:26:11+00:00 | Vulnerability · Source |
| CVE-2022-50958 | redhat_vex | WordPress Plugin Jetpack 9.1 Cross Site Scripting via grunion-form-view.php | known not affected: 1 | 2026-05-11T20:26:10+00:00 | Vulnerability · Source |
| CVE-2022-50956 | redhat_vex | WordPress Plugin amministrazione-aperta 3.7.3 Local File Read | known not affected: 1 | 2026-05-11T20:26:10+00:00 | Vulnerability · Source |
| CVE-2022-50955 | redhat_vex | WordPress Plugin Curtain 1.0.2 Cross-site Request Forgery | known not affected: 1 | 2026-05-11T20:26:09+00:00 | Vulnerability · Source |
| CVE-2022-50948 | redhat_vex | Motopress Hotel Booking Lite 4.2.4 Stored Cross-Site Scripting | known not affected: 1 | 2026-05-11T20:26:07+00:00 | Vulnerability · Source |
| CVE-2022-50946 | redhat_vex | WordPress Plugin Netroics Blog Posts Grid 1.0 Stored XSS | known not affected: 1 | 2026-05-11T20:26:05+00:00 | Vulnerability · Source |
| CVE-2021-47951 | redhat_vex | WordPress Picture Gallery 1.4.2 Stored XSS via Edit Content URL | known not affected: 1 | 2026-05-11T20:26:02+00:00 | Vulnerability · Source |
| CVE-2021-47953 | redhat_vex | OpenCart 3.0.3.7 Cross-Site Request Forgery via account/password | known not affected: 1 | 2026-05-11T20:26:02+00:00 | Vulnerability · Source |
| CVE-2021-47947 | redhat_vex | Projectsend r1295 Stored Cross-Site Scripting via files-edit.php | known not affected: 1 | 2026-05-11T20:26:01+00:00 | Vulnerability · Source |
| CVE-2021-47948 | redhat_vex | WordPress GetPaid Plugin 2.4.6 HTML Injection via Help Text | known not affected: 1 | 2026-05-11T20:26:01+00:00 | Vulnerability · Source |
| CVE-2021-47929 | redhat_vex | WordPress Plugin Filterable Portfolio Gallery 1.0 Stored XSS | known not affected: 1 | 2026-05-11T20:25:59+00:00 | Vulnerability · Source |
| CVE-2021-47927 | redhat_vex | WordPress Plugin WP Symposium Pro 2021.10 Stored XSS via wps_admin_forum_add_name | known not affected: 1 | 2026-05-11T20:25:59+00:00 | Vulnerability · Source |
| CVE-2026-8208 | redhat_vex | CVE-2026-8208 | known not affected: 1 | 2026-05-11T20:25:57+00:00 | Vulnerability · Source |
| CVE-2026-8207 | redhat_vex | CVE-2026-8207 | known not affected: 1 | 2026-05-11T20:25:56+00:00 | Vulnerability · Source |
| CVE-2026-8153 | redhat_vex | Command injection in Dashboard Server interface | known not affected: 1 | 2026-05-11T20:25:56+00:00 | Vulnerability · Source |
| CVE-2026-6213 | redhat_vex | Remote Spark SparkView RCE | known not affected: 1 | 2026-05-11T20:25:55+00:00 | Vulnerability · Source |
| CVE-2026-44400 | redhat_vex | MailEnable Enterprise Premium < 10.55 Authorization Bypass via WebAdmin | known not affected: 1 | 2026-05-11T20:25:55+00:00 | Vulnerability · Source |
| CVE-2026-44336 | redhat_vex | PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection | known not affected: 1 | 2026-05-11T20:25:54+00:00 | Vulnerability · Source |
| CVE-2026-44313 | redhat_vex | LinkWarden: Server-Side Request Forgery (SSRF) in Link Creation via fetchTitleAndHeaders Function | known not affected: 1 | 2026-05-11T20:25:53+00:00 | Vulnerability · Source |
| CVE-2026-42601 | redhat_vex | ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView | known not affected: 1 | 2026-05-11T20:25:52+00:00 | Vulnerability · Source |
| CVE-2026-42605 | redhat_vex | AzuraCast: Path Traversal in `currentDirectory` Parameter Enables Remote Code Execution via Media Upload | known not affected: 1 | 2026-05-11T20:25:52+00:00 | Vulnerability · Source |
| CVE-2026-42562 | redhat_vex | Plainpad: Privilege Escalation via Writable Admin Field in Profile Update (Access Control) | known not affected: 1 | 2026-05-11T20:25:51+00:00 | Vulnerability · Source |
| CVE-2026-42574 | redhat_vex | apko dirFS has a symlink-following path traversal that allows multiple entry points to escape the build root | known not affected: 1 | 2026-05-11T20:25:51+00:00 | Vulnerability · Source |
| CVE-2026-42560 | redhat_vex | auth: Patreon provider assigns the same local user ID to every authenticated Patreon account, enabling cross‑user impersonation | known not affected: 1 | 2026-05-11T20:25:50+00:00 | Vulnerability · Source |
| CVE-2026-42354 | redhat_vex | Sentry: Improper authentication on SAML SSO process allows user identity linking | known not affected: 1 | 2026-05-11T20:25:50+00:00 | Vulnerability · Source |
| CVE-2026-42453 | redhat_vex | Termix: Command injection in extractArchive/compressFiles via double-quote escaping bypass | known not affected: 1 | 2026-05-11T20:25:50+00:00 | Vulnerability · Source |
| CVE-2026-42352 | redhat_vex | pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber | known not affected: 1 | 2026-05-11T20:25:49+00:00 | Vulnerability · Source |
| CVE-2026-42339 | redhat_vex | New API: SSRF Filter Bypass via 0.0.0.0 | known not affected: 1 | 2026-05-11T20:25:49+00:00 | Vulnerability · Source |
| CVE-2026-42298 | redhat_vex | Postiz: Arbitrary Code Execution and Token Exfiltration in pr-docker-build.yml via untrusted Dockerfile.dev | known not affected: 1 | 2026-05-11T20:25:49+00:00 | Vulnerability · Source |
| CVE-2026-42274 | redhat_vex | Heimdall: Authorization bypass via path normalization mismatch | known not affected: 1 | 2026-05-11T20:25:48+00:00 | Vulnerability · Source |
| CVE-2026-42287 | redhat_vex | Emlog: SQL Injection Vulnerability in log_model.php within addLog() and updateLog() Functions | known not affected: 1 | 2026-05-11T20:25:48+00:00 | Vulnerability · Source |
| CVE-2026-42189 | redhat_vex | Russh: Pre-auth DoS via unbounded allocation in keyboard-interactive auth | known not affected: 1 | 2026-05-11T20:25:47+00:00 | Vulnerability · Source |
| CVE-2026-41311 | redhat_vex | LiquidJS is vulnerable to Denial of Service via circular block reference in layout | known not affected: 1 | 2026-05-11T20:25:47+00:00 | Vulnerability · Source |
| CVE-2026-42261 | redhat_vex | PromptHub: Authenticated SSRF via IPv6 filter bypass in `POST /api/skills/fetch-remote` | known not affected: 1 | 2026-05-11T20:25:47+00:00 | Vulnerability · Source |
| CVE-2026-42212 | redhat_vex | SolidCAM-GPPL-IDE: XML External Entity (XXE) and billion-laughs DoS in VMID parser | known not affected: 1 | 2026-05-11T20:25:45+00:00 | Vulnerability · Source |
| CVE-2026-42193 | redhat_vex | Plunk: SNS webhook forgery | known not affected: 1 | 2026-05-11T20:25:45+00:00 | Vulnerability · Source |
| CVE-2026-42160 | redhat_vex | Data Space Portal: Incorrect Authorization and Client-Side Enforcement of Server-Side Security in ghcr.io/sovity/ds-portal-ce-backend | known not affected: 1 | 2026-05-11T20:25:44+00:00 | Vulnerability · Source |
| CVE-2022-50944 | redhat_vex | Aero CMS 0.0.1 PHP Code Injection via posts.php | known not affected: 1 | 2026-05-11T20:25:43+00:00 | Vulnerability · Source |
| CVE-2026-3828 | redhat_vex | CVE-2026-3828 | known not affected: 1 | 2026-05-11T20:25:43+00:00 | Vulnerability · Source |
| CVE-2021-47945 | redhat_vex | Argus Surveillance DVR 4.0 Unquoted Service Path Privilege Escalation | known not affected: 1 | 2026-05-11T20:25:42+00:00 | Vulnerability · Source |
| CVE-2021-47949 | redhat_vex | CyberPanel 2.1 Authenticated Remote Code Execution via Symlink Attack | known not affected: 1 | 2026-05-11T20:25:42+00:00 | Vulnerability · Source |
| CVE-2021-47943 | redhat_vex | TextPattern CMS 4.8.7 Remote Code Execution via File Upload | known not affected: 1 | 2026-05-11T20:25:41+00:00 | Vulnerability · Source |
| CVE-2021-47941 | redhat_vex | WordPress Plugin Survey & Poll 1.5.7.3 SQL Injection via sss_params | known not affected: 1 | 2026-05-11T20:25:41+00:00 | Vulnerability · Source |
| CVE-2021-47939 | redhat_vex | Evolution CMS 3.1.6 Authenticated Remote Code Execution via Module Creation | known not affected: 1 | 2026-05-11T20:25:41+00:00 | Vulnerability · Source |