Lucene search
+L

17 matches found

osv_root
osv_root
•added 2026/09/28 7:43 a.m.•30 views

ROOT-APP-NPM-CVE-2026-44576 CVE-2026-44576 in next - Patched by Root

Root has patched CVE-2026-44576 in the next package for Root:npm. Multiple fixed versions available...

5.4CVSS5.7AI score0.00295EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/07/06 12:00 a.m.•29 views

Linux Distros Unpatched Vulnerability : CVE-2026-44576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. From 14.2.0 to before 15.5.16 and 16.2.5, applications using React Server Components can ...

5.4CVSS5.9AI score0.00295EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/13 5:16 p.m.•66 views

CVE-2026-44576

Next.js is a React framework for building full-stack web applications. From 14.2.0 to before 15.5.16 and 16.2.5, applications using React Server Components can be vulnerable to cache poisoning when shared caches do not correctly partition response variants. Under affected conditions, an attacker...

5.4CVSS0.00295EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2026/05/13 4:57 p.m.•5 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 03-gs-ee-6 (0.3.5) +40671 more potentially affected by CVE-2026-44576 via next (>=14.2.0, <=15.5.15)

next NPM version =14.2.0, =0.1.0, =1.0.0, =0.1.0, =1.1.4 - 21guns 1.1.2 - 2bv2 1.4.8 and more Source cves: CVE-2026-44576 Source advisory: MEND:CVE-2026-44576...

5.4CVSS5.9AI score0.00295EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/05/11 3:54 p.m.•5 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 03-gs-ee-6 (0.3.5) +40671 more potentially affected by CVE-2026-44576 via next (>=14.2.0, <=15.5.15)

next NPM version =14.2.0, =0.1.0, =1.0.0, =0.1.0, =1.1.4 - 21guns 1.1.2 - 2bv2 1.4.8 and more Source cves: CVE-2026-44576 Source advisory: GHSA-WFC6-R584-VFW7...

5.4CVSS5.9AI score0.00295EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/05/11 3:54 p.m.•22 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 03-gs-ee-6 (0.3.5) +40671 more potentially affected by CVE-2026-44576 via next (>=14.2.0, <=15.5.15)

next NPM version =14.2.0, =0.1.0, =1.0.0, =0.1.0, =1.1.4 - 21guns 1.1.2 - 2bv2 1.4.8 and more Source cves: CVE-2026-44576 Source advisory: OSV:GHSA-WFC6-R584-VFW7...

5.4CVSS5.9AI score0.00295EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/05/11 3:54 p.m.•14 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +760 more potentially affected by CVE-2026-44576 via next (>=16.0.0, <=16.2.4)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44576 Source advisory:...

5.4CVSS5.9AI score0.00295EPSS
SaveExploits0
Circl
Circl
•added 2026/05/11 6:42 a.m.•55 views

CVE-2026-44576

creationtimestamp| type| source ---|---|--- 2026-05-11 06:42:58+00:00| published-proof-of-concept| https://t.me/htfgtps/1107 2026-07-09 03:00:04+00:00| seen| https://t.me/brutsecurity/2701 2026-07-10 00:00:11+00:00| seen| https://t.me/brutsecurity/2701 2026-07-11 09:00:04+00:00|...

5.4CVSS6AI score0.00295EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/05/09 12:00 a.m.•26 views

PT-2026-39418

Name of the Vulnerable Software and Affected Versions Next.js versions 14.2.0 through 15.5.15 Next.js versions 16.0.0 through 16.2.4 Description Applications using React Server Components RSC are susceptible to cache poisoning when shared caches fail to correctly partition response variants. An...

5.4CVSS5.9AI score0.00295EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
•added 2026/05/09 12:00 a.m.•39 views

PT-2026-39417

Name of the Vulnerable Software and Affected Versions Next.js versions 12.2.0 through 15.5.15 Next.js versions 16.0.0 through 16.2.4 Description An external client can send an x-nextjs-data header on a request to a path handled by middleware that returns a redirect. This causes the middleware or...

5.9CVSS5.4AI score0.00284EPSS
SaveExploits0References16
Circl
Circl
•added 2022/11/03 1:20 a.m.•24 views

CVE-2022-44576

creationtimestamp| type| source ---|---|--- 2022-11-03 01:20:00+00:00| seen| https://t.me/cibsecurity/52493...

4.8CVSS4.9AI score0.0055EPSS
SaveExploits0References1
NVD
NVD
•added 2022/11/02 10:15 p.m.•35 views

CVE-2022-44576

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in AgentEasy Properties plugin = 1.0.4 on WordPress...

4.8CVSS0.0055EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/11/02 10:15 p.m.•24 views

CVE-2022-44576

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in AgentEasy Properties plugin = 1.0.4 on WordPress...

4.8CVSS5.8AI score0.0055EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/11/02 9:05 p.m.•18 views

CVE-2022-44576 WordPress AgentEasy Properties plugin <= 1.0.4 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in AgentEasy Properties plugin = 1.0.4 on WordPress...

4.8CVSS4.8AI score0.0055EPSS
SaveExploits0References2
CVE
CVE
•added 2022/11/02 9:05 p.m.•87 views

CVE-2022-44576

The CVE-2022-44576 entry concerns the WordPress AgentEasy Properties plugin, affected versions up to 1.0.4. The root cause is a stored cross-site scripting (XSS) vulnerability due to insufficient sanitization/escaping of settings, exploitable by users with admin+ privileges (authentication requir...

4.8CVSS4.8AI score0.0055EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/02/21 7:33 p.m.•44 views

CVE-2021-44576

...

SaveExploits0
CVE
CVE
•added 2022/02/21 7:33 p.m.•148 views

CVE-2021-44576

CVE-2021-44576 is rejected/not used and does not represent an active vulnerability entry.

4.3AI score
SaveExploits0
Rows per page
Query Builder