CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3933 matches found

vulnersOsv•added 2026/05/11 3:54 p.m.•8 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +847 more potentially affected by CVE-2026-44575 +1 more via next (>=15.2.0, <=15.5.15)

next NPM version =15.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44575, CVE-2026-45109 Source advisory: SNYK:JS-NEXT-16638685...

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0

Snyk•added 2026/05/11 3:54 p.m.•24 views

Authentication Bypass Using an Alternate Path or Channel

Overview next is a react framework. Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel in the handling of segment-prefetch routes. An attacker can gain unauthorized access to protected content by crafting .rsc and segment-prefetch URLs tha...

8.7CVSS7.1AI score0.00761EPSS

SaveExploits0References2

vulnersOsv•added 2026/05/11 3:54 p.m.•10 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44575 via next (>=16.0.0, <=16.2.4)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44575 Source advisory:...

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•9 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44575 +1 more via next (>=16.0.0, <=16.2.4)

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•8 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +847 more potentially affected by CVE-2026-44575 via next (>=15.2.0, <=15.5.15)

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•9 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44574 via next (>=16.0.0, <=16.2.4)

8.1CVSS7.4AI score0.00667EPSS

SaveExploits2

vulnersOsv•added 2026/05/11 3:54 p.m.•9 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +353 more potentially affected by CVE-2026-44574 via next (>=15.4.0-canary.17, <=15.5.15)

next NPM version =15.4.0-canary.17, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44574 Source advisory: SNYK:JS-NEXT-16638679...

8.1CVSS7.4AI score0.00667EPSS

SaveExploits2

OSV•added 2026/05/11 3:54 p.m.•10 views

GHSA-492V-C6PP-MQQV Next.js has a Middleware / Proxy bypass through dynamic route parameter injection

Impact Applications that rely on middleware to protect dynamic routes can be vulnerable to authorization bypass. In affected deployments, specially crafted query parameters can alter the dynamic route value seen by the page while leaving the visible path unchanged, which can allow protected conte...

8.1CVSS7.3AI score0.00667EPSS

SaveExploits2References5

vulnersOsv•added 2026/05/11 3:54 p.m.•10 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +353 more potentially affected by CVE-2026-44574 via next (>=15.4.0-canary.17, <=15.5.15)

8.1CVSS7.4AI score0.00667EPSS

SaveExploits2

vulnersOsv•added 2026/05/11 3:54 p.m.•9 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44574 via next (>=16.0.0, <=16.2.4)

8.1CVSS7.4AI score0.00667EPSS

SaveExploits2

vulnersOsv•added 2026/05/11 3:53 p.m.•8 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44573 via next (>=16.0.0, <=16.2.4)

7.5CVSS7.2AI score0.00761EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:53 p.m.•7 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44573 via next (>=16.0.0, <=16.2.4)

7.5CVSS7.2AI score0.00761EPSS

SaveExploits1

Snyk•added 2026/05/11 3:18 p.m.•11 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the handling of PDUSessionResourceSetupResponse messages carrying AMF-UE-NGAP-ID. An attacker can redirect downlink user-plane traffic for any targeted UE to their own radio by sending a forged message with a...

7.1CVSS5.3AI score0.00269EPSS

SaveExploits0References3

vulnersOsv•added 2026/05/11 2:50 p.m.•8 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by unknown CVE via next (>=16.0.0, <=16.2.4)

5.7AI score

SaveExploits0

RedhatCVE•added 2026/05/09 2:21 a.m.•22 views

CVE-2025-63706

NPM package next-npm-version1.0.1 is vulnerable to Command injection...

9.8CVSS5.8AI score0.01523EPSS

SaveExploits0References1

Positive Technologies•added 2026/05/09 12:00 a.m.•32 views

PT-2026-39417

Name of the Vulnerable Software and Affected Versions Next.js versions 12.2.0 through 15.5.15 Next.js versions 16.0.0 through 16.2.4 Description An external client can send an x-nextjs-data header on a request to a path handled by middleware that returns a redirect. This causes the middleware or...

5.9CVSS5.6AI score0.00203EPSS

SaveExploits0References16

NVD•added 2026/05/08 2:16 p.m.•41 views

CVE-2026-43298

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip vcn poison irq release on VF VF doesn't enable VCN poison irq in VCNv2.5. Skip releasing it and avoid call trace during deinitialization. 71.913601 drm clean up the vf2pf work item 71.915088 ------------ cut here...

5.5CVSS0.0016EPSS

SaveExploits0References3

OSV•added 2026/05/08 1:31 p.m.•18 views

CVE-2026-43329 netfilter: flowtable: strictly check for maximum number of actions

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions The maximum number of flowtable hardware offload actions in IPv6 is: ethernet mangling 4 payload actions, 2 for each ethernet address SNAT 4 payload actions DNAT ...

7.8CVSS5.8AI score

SaveExploits0References43

NVD•added 2026/05/07 7:16 p.m.•36 views

CVE-2026-42214

Notepad Next is a cross-platform, reimplementation of Notepad++. Prior to version 0.14, NotepadNext's detectLanguageFromExtension function interpolates a file's extension directly into a Lua script without sanitization. An attacker can craft a filename whose extension contains Lua code, which...

7.8CVSS0.00281EPSS

SaveExploits1References3

Vulnrichment•added 2026/05/07 6:14 p.m.•17 views

CVE-2026-42214 Improper Control of Generation of Code ('Code Injection') in dail8859/NotepadNext

7.8CVSS6AI score0.00281EPSS

SaveExploits1References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by