VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
306114 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-39680 | redhat_vex | WordPress Diet Calorie Calculator plugin <= 1.1.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:48+00:00 | Vulnerability · Source |
| CVE-2026-39678 | redhat_vex | WordPress Pinpoint Booking System plugin <= 2.9.9.6.5 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:48+00:00 | Vulnerability · Source |
| CVE-2026-39682 | redhat_vex | WordPress linkPizza-Manager plugin <= 5.5.5 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:48+00:00 | Vulnerability · Source |
| CVE-2026-39676 | redhat_vex | WordPress Download Manager plugin <= 3.3.52 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:47+00:00 | Vulnerability · Source |
| CVE-2026-39672 | redhat_vex | WordPress ShipTime: Discounted Shipping Rates plugin <= 1.1.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:47+00:00 | Vulnerability · Source |
| CVE-2026-7219 | redhat_vex | Totolink N300RT formIpQoS buffer overflow | known not affected: 1 | 2026-04-29T14:48:46+00:00 | Vulnerability · Source |
| CVE-2026-7288 | redhat_vex | D-Link DIR-825M formVpnConfigSetup sub_4151FC buffer overflow | known not affected: 1 | 2026-04-29T14:48:46+00:00 | Vulnerability · Source |
| CVE-2026-7248 | redhat_vex | D-Link DI-8100 CGI Endpoint tgfile.htm tgfile_htm buffer overflow | known not affected: 1 | 2026-04-29T14:48:46+00:00 | Vulnerability · Source |
| CVE-2026-7240 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi setVpnAccountCfg os command injection | known not affected: 1 | 2026-04-29T14:48:46+00:00 | Vulnerability · Source |
| CVE-2026-7218 | redhat_vex | Totolink N300RT libapmib.so formWsc is_cmd_string_valid buffer overflow | known not affected: 1 | 2026-04-29T14:48:46+00:00 | Vulnerability · Source |
| CVE-2026-7106 | redhat_vex | Highland Software Custom Role Manager <= 1.0.0 - Authenticated (Subscriber+) Privilege Escalation | known not affected: 1 | 2026-04-29T14:48:45+00:00 | Vulnerability · Source |
| CVE-2026-7122 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi setUPnPCfg os command injection | known not affected: 1 | 2026-04-29T14:48:45+00:00 | Vulnerability · Source |
| CVE-2026-7203 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi setUrlFilterRules os command injection | known not affected: 1 | 2026-04-29T14:48:45+00:00 | Vulnerability · Source |
| CVE-2026-7202 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi setWiFiWpsStart os command injection | known not affected: 1 | 2026-04-29T14:48:45+00:00 | Vulnerability · Source |
| CVE-2026-7151 | redhat_vex | Tenda HG3 formIPv6Routing formUploadConfig stack-based overflow | known not affected: 1 | 2026-04-29T14:48:45+00:00 | Vulnerability · Source |
| CVE-2026-7139 | redhat_vex | Totolink A8000RU CGI cstecgi.cgi setWiFiAclRules os command injection | known not affected: 1 | 2026-04-29T14:48:45+00:00 | Vulnerability · Source |
| CVE-2026-41464 | redhat_vex | ProjeQtor < 12.4.4 Missing Authorization via objectDetail.php | known not affected: 1 | 2026-04-29T14:48:44+00:00 | Vulnerability · Source |
| CVE-2026-7097 | redhat_vex | Tenda F456 httpd webExcptypemanFilter fromwebExcptypemanFilter buffer overflow | known not affected: 1 | 2026-04-29T14:48:44+00:00 | Vulnerability · Source |
| CVE-2026-41364 | redhat_vex | OpenClaw < 2026.3.31 - Arbitrary File Write via Symlink Following in SSH Sandbox Tar Upload | known not affected: 1 | 2026-04-29T14:48:44+00:00 | Vulnerability · Source |
| CVE-2026-41370 | redhat_vex | OpenClaw < 2026.3.31 - Path Traversal via Inbound Channel Attachment Path in ACP Dispatch | known not affected: 1 | 2026-04-29T14:48:44+00:00 | Vulnerability · Source |
| CVE-2026-7082 | redhat_vex | Tenda F456 httpd WrlExtraSet formWrlExtraSet buffer overflow | known not affected: 1 | 2026-04-29T14:48:44+00:00 | Vulnerability · Source |
| CVE-2026-32395 | redhat_vex | WordPress Xpro Addons For Beaver Builder – Lite plugin <= 1.5.6 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:43+00:00 | Vulnerability · Source |
| CVE-2026-40784 | redhat_vex | WordPress FluentBoards plugin <= 1.91.2 - Insecure Direct Object References (IDOR) vulnerability | known not affected: 1 | 2026-04-29T14:48:43+00:00 | Vulnerability · Source |
| CVE-2025-14359 | redhat_vex | WordPress Oshine theme < 7.3.0 - Local File Inclusion vulnerability | known not affected: 1 | 2026-04-29T14:48:43+00:00 | Vulnerability · Source |
| CVE-2024-46382 | redhat_vex | CVE-2024-46382 | known not affected: 1 | 2026-04-29T14:48:43+00:00 | Vulnerability · Source |
| CVE-2026-39666 | redhat_vex | WordPress Hello Bar Popup Builder plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T14:48:43+00:00 | Vulnerability · Source |
| CVE-2026-40764 | redhat_vex | WordPress Contact Form by WPForms plugin <= 1.10.0.2 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-04-29T14:48:43+00:00 | Vulnerability · Source |
| CVE-2026-24070 | redhat_vex | Local Privilege Escalation via DYLIB Injection in Native Instruments Native Access | known not affected: 1 | 2026-04-29T14:48:43+00:00 | Vulnerability · Source |
| CVE-2026-39668 | redhat_vex | WordPress Book Previewer for Woocommerce plugin <= 1.0.6 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T14:48:43+00:00 | Vulnerability · Source |
| CVE-2026-40745 | redhat_vex | WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability | known not affected: 1 | 2026-04-29T14:48:43+00:00 | Vulnerability · Source |
| CVE-2025-6638 | redhat_vex | transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers | known affected: 62 | 2026-04-29T14:34:27+00:00 | Vulnerability · Source |
| CVE-2025-47933 | redhat_vex | argocd: Improper URL Sanitization in Argo CD Repository Page Allows Cross-Site Scripting (XSS) | fixed: 119 known affected: 2 known not affected: 4 | 2026-04-29T14:34:27+00:00 | Vulnerability · Source |
| CVE-2026-41677 | redhat_vex | rust-openssl: OpenSSL: rust-openssl: Information Disclosure Vulnerability in Password Callback | known not affected: 1 | 2026-04-29T09:00:15+00:00 | Vulnerability · Source |
| CVE-2024-40634 | redhat_vex | argocd: Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in Argo CD | fixed: 103 | 2026-04-29T07:53:01+00:00 | Vulnerability · Source |
| CVE-2019-10214 | redhat_vex | containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure | fixed: 325 known affected: 13 | 2026-04-29T07:52:46+00:00 | Vulnerability · Source |
| CVE-2026-1460 | redhat_vex | CVE-2026-1460 | known not affected: 1 | 2026-04-29T06:18:46+00:00 | Vulnerability · Source |
| CVE-2026-0918 | redhat_vex | Null Pointer Dereference in Tapo SmartCam HTTP Service on TP-Link Tapo C220 & C520WS | known not affected: 1 | 2026-04-29T06:18:46+00:00 | Vulnerability · Source |
| CVE-2026-40967 | redhat_vex | CVE-2026-40967 | known not affected: 1 | 2026-04-29T06:18:46+00:00 | Vulnerability · Source |
| CVE-2026-0711 | redhat_vex | CVE-2026-0711 | known not affected: 1 | 2026-04-29T06:18:46+00:00 | Vulnerability · Source |
| CVE-2026-38651 | redhat_vex | CVE-2026-38651 | known not affected: 1 | 2026-04-29T01:44:26+00:00 | Vulnerability · Source |
| CVE-2026-38948 | redhat_vex | CVE-2026-38948 | known not affected: 1 | 2026-04-29T01:44:26+00:00 | Vulnerability · Source |
| CVE-2026-38949 | redhat_vex | CVE-2026-38949 | known not affected: 1 | 2026-04-29T01:44:26+00:00 | Vulnerability · Source |
| CVE-2026-25002 | redhat_vex | WordPress LearnPress – Sepay Payment plugin <= 4.0.0 - Broken Authentication vulnerability | known not affected: 1 | 2026-04-29T01:44:24+00:00 | Vulnerability · Source |
| CVE-2026-37750 | redhat_vex | CVE-2026-37750 | known not affected: 1 | 2026-04-29T01:44:24+00:00 | Vulnerability · Source |
| CVE-2026-25423 | redhat_vex | WordPress Real 3D FlipBook plugin <= 4.19.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:44:24+00:00 | Vulnerability · Source |
| CVE-2025-58866 | redhat_vex | WordPress Site Info Plugin <= 1.1 - Sensitive Data Exposure Vulnerability | known not affected: 1 | 2026-04-29T01:44:23+00:00 | Vulnerability · Source |
| CVE-2025-58816 | redhat_vex | WordPress Product Carousel Slider for Elementor Plugin <= 2.1.3 - Broken Access Control Vulnerability | known not affected: 1 | 2026-04-29T01:44:23+00:00 | Vulnerability · Source |
| CVE-2025-58012 | redhat_vex | WordPress Content Mask plugin <= 1.8.5.3 - Insecure Direct Object References (IDOR) vulnerability | known not affected: 1 | 2026-04-29T01:44:22+00:00 | Vulnerability · Source |
| CVE-2025-58827 | redhat_vex | WordPress Job Board Manager Plugin <= 2.1.61 - Content Injection Vulnerability | known not affected: 1 | 2026-04-29T01:44:22+00:00 | Vulnerability · Source |
| CVE-2025-31003 | redhat_vex | WordPress Squeeze plugin <= 1.6 - Full Path Disclosure (FPD) vulnerability | known not affected: 1 | 2026-04-29T01:44:21+00:00 | Vulnerability · Source |