CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4340 matches found

vulnersOsv•added 2026/07/22 11:09 p.m.•14 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64649 Source advisory:...

8.3CVSS5.8AI score0.00459EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:09 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.8AI score0.00459EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:08 p.m.•16 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64648 via next (>=16.0.0, <=16.2.10)

6CVSS5.8AI score0.00338EPSS

SaveExploits0

Patchstack•added 2026/07/22 11:06 p.m.•22 views

NPM: Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

NPM: Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences vulnerability discovered by ? in WordPress Npm next versions = 13.0.0, 15.5.21...

6.3CVSS5.9AI score0.00317EPSS

SaveExploits0References6Affected Software1

vulnersOsv•added 2026/07/22 11:06 p.m.•17 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64647 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00317EPSS

SaveExploits0

Snyk•added 2026/07/22 11:02 p.m.•35 views

Allocation of Resources Without Limits or Throttling

Overview next is a react framework. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the handleAction Server Actions path in the App Router Edge runtime. An attacker can exhaust server memory by sending an oversized Server Action request...

7.5CVSS6AI score0.00524EPSS

SaveExploits0References2

vulnersOsv•added 2026/07/22 11:02 p.m.•17 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64646 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00524EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•14 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.7AI score0.00414EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•16 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.7AI score0.00414EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•13 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +241 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)

next NPM version =15.5.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-64644 Source advisory: OSV:GHSA-Q8WF-6R8G-63CH...

6.3CVSS5.7AI score0.00666EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•15 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +241 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)

6.3CVSS5.7AI score0.00666EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.7AI score0.00666EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•12 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.7AI score0.00666EPSS

SaveExploits0

Snyk•added 2026/07/22 11:00 p.m.•35 views

Insertion of Sensitive Information Into Sent Data

Overview next is a react framework. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in action-handler.ts and action-utils.ts. An attacker can enumerate internal Server Action IDs by sending crafted Next-Action requests or probing client-served...

6.3CVSS5.7AI score0.0051EPSS

SaveExploits0References2

vulnersOsv•added 2026/07/22 11:00 p.m.•14 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64643 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.7AI score0.0051EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 10:59 p.m.•10 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64642 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.8AI score0.00635EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 10:59 p.m.•12 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64641 via next (>=16.0.0, <=16.2.10)

8.2CVSS5.7AI score0.00856EPSS

SaveExploits0

Github Security Blog•added 2026/07/22 9:46 p.m.•27 views

Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator

Summary OcspServerCertificateValidator flags an out-of-date OCSP response but does not stop processing it, so an expired GOOD response is still reported as VALID, letting an on-path attacker replay a stale GOOD response to bypass revocation of a since-revoked certificate. Details In...

7.4CVSS6AI score0.00219EPSS

SaveExploits1References4Affected Software1

OSV•added 2026/07/22 9:46 p.m.•24 views

GHSA-G7HG-VRCF-MVMR Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator

7.4CVSS6AI score0.00219EPSS

SaveExploits1References4

RedhatCVE•added 2026/07/22 3:41 p.m.•39 views

CVE-2026-13321

The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. Mitigation Disclaimer: The following mitigation notes are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools ...

8.6CVSS5.9AI score0.00207EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by