CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4290 matches found

vulnersOsv•added 2026/07/22 11:08 p.m.•16 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +973 more potentially affected by CVE-2026-64648 via next (>=16.0.0, <=16.2.10)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64648 Source advisory:...

6CVSS5.8AI score0.00338EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:06 p.m.•17 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +973 more potentially affected by CVE-2026-64647 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00317EPSS

SaveExploits0

Patchstack•added 2026/07/22 11:06 p.m.•22 views

NPM: Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

NPM: Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences vulnerability discovered by ? in WordPress Npm next versions = 13.0.0, 15.5.21...

6.3CVSS5.9AI score0.00317EPSS

SaveExploits0References6Affected Software1

vulnersOsv•added 2026/07/22 11:02 p.m.•17 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +973 more potentially affected by CVE-2026-64646 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00524EPSS

SaveExploits0

Snyk•added 2026/07/22 11:02 p.m.•37 views

Allocation of Resources Without Limits or Throttling

Overview next is a react framework. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the handleAction Server Actions path in the App Router Edge runtime. An attacker can exhaust server memory by sending an oversized Server Action request...

7.5CVSS6AI score0.00524EPSS

SaveExploits0References2

vulnersOsv•added 2026/07/22 11:02 p.m.•14 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +973 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.7AI score0.00414EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•16 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +973 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.7AI score0.00414EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•15 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +240 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)

next NPM version =15.5.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-64644 Source advisory: SNYK:JS-NEXT-18231604...

6.3CVSS5.7AI score0.00666EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +973 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.7AI score0.00666EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•13 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +240 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)

6.3CVSS5.7AI score0.00666EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•12 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +973 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.7AI score0.00666EPSS

SaveExploits0

Snyk•added 2026/07/22 11:00 p.m.•37 views

Insertion of Sensitive Information Into Sent Data

Overview next is a react framework. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in action-handler.ts and action-utils.ts. An attacker can enumerate internal Server Action IDs by sending crafted Next-Action requests or probing client-served...

6.3CVSS5.7AI score0.0051EPSS

SaveExploits0References2

vulnersOsv•added 2026/07/22 11:00 p.m.•14 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +973 more potentially affected by CVE-2026-64643 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.7AI score0.0051EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 10:59 p.m.•10 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +973 more potentially affected by CVE-2026-64642 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.8AI score0.00635EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 10:59 p.m.•12 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +973 more potentially affected by CVE-2026-64641 via next (>=16.0.0, <=16.2.10)

8.2CVSS5.7AI score0.00856EPSS

SaveExploits0

OSV•added 2026/07/22 9:46 p.m.•24 views

GHSA-G7HG-VRCF-MVMR Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator

Summary OcspServerCertificateValidator flags an out-of-date OCSP response but does not stop processing it, so an expired GOOD response is still reported as VALID, letting an on-path attacker replay a stale GOOD response to bypass revocation of a since-revoked certificate. Details In...

7.4CVSS6AI score0.00219EPSS

SaveExploits1References4

Github Security Blog•added 2026/07/22 9:46 p.m.•27 views

Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator

7.4CVSS6AI score0.00219EPSS

SaveExploits1References4Affected Software1

RedhatCVE•added 2026/07/22 3:41 p.m.•40 views

CVE-2026-13321

The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. Mitigation Disclaimer: The following mitigation notes are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools ...

8.6CVSS5.9AI score0.00207EPSS

SaveExploits0References3

OSV•added 2026/07/22 3:16 p.m.•15 views

ALPINE-CVE-2026-13321

The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1...

8.6CVSS5.8AI score0.00207EPSS

SaveExploits0References1

NVD•added 2026/07/22 2:17 p.m.•19 views

CVE-2026-46582

In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC secure based only on the RRSIG validation and stored into cache, before later validation treats it as bogus based on NSEC validation. When the resolvin...

3.7CVSS0.00189EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by