CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3921 matches found

vulnersOsv•added 2026/07/23 2:31 p.m.•16 views

@chirpy-dev/analytics (0.0.1), @chirpy-dev/bootstrapper (0.1.0) +53 more potentially affected by unknown CVE via next-auth (>=4.0.0-beta.6, <=4.24.13)

next-auth NPM version =4.0.0-beta.6, =0.1.0, =1.9.0, =1.9.9, =0.1.0-0, =1.5.0, =0.0.2, =1.0.0, =1.0.0, =0.0.0-experimental-20231123101256, =5.1.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-NEXTAUTH-18306841...

5.7AI score

SaveExploits0

Snyk•added 2026/07/23 2:31 p.m.•28 views

Improper Verification of Source of a Communication Channel

Overview next-auth is an Authentication for Next.js Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper binding of OAuth check cookies to the provider that created them. An attacker can gain unauthorized access to a victim's...

7.6CVSS5.9AI score

SaveExploits0References4

NVD•added 2026/07/23 9:16 a.m.•15 views

CVE-2026-52686

The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...

3.7CVSS0.00162EPSS

SaveExploits0References1

GithubExploit•added 2026/07/23 3:45 a.m.•73 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 — React2Shell CVSS 10.0 CRITICAL | Pre-Auth...

10CVSS7.9AI score0.99802EPSS

SaveExploits392

Vulnrichment•added 2026/07/23 12:00 a.m.•9 views

CVE-2026-39155

Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where the next NSEC owner name can be computed incorrectly. This can create an overly broad authenticated denial interval, allowing downstream validating resolvers using aggressive negative caching to...

5.9AI score0.0022EPSS

SaveExploits0References2

Positive Technologies•added 2026/07/23 12:00 a.m.•12 views

PT-2026-71311

Name of the Vulnerable Software and Affected Versions @auth/core versions prior to 0.41.3 next-auth versions prior to 4.24.15 next-auth versions prior to 5.0.0-beta.32 Description The getToken function in the next-auth/jwt and @auth/core/jwt modules can throw an uncaught exception when processing...

7.5CVSS5.3AI score0.00877EPSS

SaveExploits0References19

CVE•added 2026/07/23 12:00 a.m.•37 views

CVE-2026-39155

Knot DNS versions before 3.4.10 and 3.5.x before 3.5.4 are impacted by a vulnerability in the mod-onlinesign component. The root cause is an incorrect computation of the next NSEC owner name , which creates an overly broad authenticated denial interval. This flaw allows downstream validating reso...

6.5CVSS5.4AI score0.0022EPSS

SaveExploits0References2

Debian CVE•added 2026/07/23 12:00 a.m.•29 views

CVE-2026-39155

6.5CVSS5.9AI score0.0022EPSS

SaveExploits0

Cvelist•added 2026/07/23 12:00 a.m.•43 views

CVE-2026-39155

0.0022EPSS

SaveExploits0References2

Positive Technologies•added 2026/07/23 12:00 a.m.•20 views

PT-2026-71920

Name of the Vulnerable Software and Affected Versions next-auth versions 5.0.0-beta.0 through 5.0.0-beta.31 Description Applications using the auth wrapper to gate access by checking only for the existence of the returned object can fail open during server configuration errors. In middleware, Rou...

9.1CVSS5.3AI score0.00643EPSS

SaveExploits0References12

EUVD•added 2026/07/23 12:00 a.m.•19 views

EUVD-2026-48433

5.3AI score0.0022EPSS

SaveExploits0References2

vulnersOsv•added 2026/07/22 11:09 p.m.•12 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64649 Source advisory:...

8.3CVSS5.8AI score0.00459EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:09 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.8AI score0.00459EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:08 p.m.•15 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64648 via next (>=16.0.0, <=16.2.10)

6CVSS5.8AI score0.00338EPSS

SaveExploits0

Patchstack•added 2026/07/22 11:06 p.m.•17 views

NPM: Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

NPM: Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences vulnerability discovered by ? in WordPress Npm next versions = 13.0.0, 15.5.21...

6.3CVSS5.3AI score0.00317EPSS

SaveExploits0References6Affected Software1

vulnersOsv•added 2026/07/22 11:06 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64647 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00317EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64646 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00524EPSS

SaveExploits0

Snyk•added 2026/07/22 11:02 p.m.•23 views

Allocation of Resources Without Limits or Throttling

Overview next is a react framework. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the handleAction Server Actions path in the App Router Edge runtime. An attacker can exhaust server memory by sending an oversized Server Action request...

7.5CVSS6.1AI score0.00524EPSS

SaveExploits0References2

vulnersOsv•added 2026/07/22 11:02 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.8AI score0.00414EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.8AI score0.00414EPSS

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by