CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3957 matches found

Vulnrichment•added 2026/07/23 12:00 a.m.•11 views

CVE-2026-39155

Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where the next NSEC owner name can be computed incorrectly. This can create an overly broad authenticated denial interval, allowing downstream validating resolvers using aggressive negative caching to...

5.8AI score0.0022EPSS

SaveExploits0References2

Debian CVE•added 2026/07/23 12:00 a.m.•31 views

CVE-2026-39155

6.5CVSS5.8AI score0.0022EPSS

SaveExploits0

EUVD•added 2026/07/23 12:00 a.m.•20 views

EUVD-2026-48433

5.3AI score0.0022EPSS

SaveExploits0References2

Cvelist•added 2026/07/23 12:00 a.m.•44 views

CVE-2026-39155

0.0022EPSS

SaveExploits0References2

Positive Technologies•added 2026/07/23 12:00 a.m.•20 views

PT-2026-71920

Name of the Vulnerable Software and Affected Versions next-auth versions 5.0.0-beta.0 through 5.0.0-beta.31 Description Applications using the auth wrapper to gate access by checking only for the existence of the returned object can fail open during server configuration errors. In middleware, Rou...

9.1CVSS5.8AI score0.00643EPSS

SaveExploits0References12

vulnersOsv•added 2026/07/22 11:09 p.m.•12 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64649 Source advisory:...

8.3CVSS5.8AI score0.00459EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:09 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.8AI score0.00459EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:08 p.m.•15 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64648 via next (>=16.0.0, <=16.2.10)

6CVSS5.8AI score0.00338EPSS

SaveExploits0

Patchstack•added 2026/07/22 11:06 p.m.•19 views

NPM: Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

NPM: Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences vulnerability discovered by ? in WordPress Npm next versions = 13.0.0, 15.5.21...

6.3CVSS5.3AI score0.00317EPSS

SaveExploits0References6Affected Software1

vulnersOsv•added 2026/07/22 11:06 p.m.•15 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64647 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00317EPSS

SaveExploits0

Snyk•added 2026/07/22 11:02 p.m.•29 views

Allocation of Resources Without Limits or Throttling

Overview next is a react framework. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the handleAction Server Actions path in the App Router Edge runtime. An attacker can exhaust server memory by sending an oversized Server Action request...

7.5CVSS6.1AI score0.00524EPSS

SaveExploits0References2

vulnersOsv•added 2026/07/22 11:02 p.m.•14 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64646 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00524EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.8AI score0.00414EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.8AI score0.00414EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•11 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00666EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•12 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00666EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•12 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +241 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)

next NPM version =15.5.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-64644 Source advisory: SNYK:JS-NEXT-18231604...

6.3CVSS5.8AI score0.00666EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•11 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +241 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)

6.3CVSS5.8AI score0.00666EPSS

SaveExploits0

Snyk•added 2026/07/22 11:00 p.m.•31 views

Insertion of Sensitive Information Into Sent Data

Overview next is a react framework. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in action-handler.ts and action-utils.ts. An attacker can enumerate internal Server Action IDs by sending crafted Next-Action requests or probing client-served...

6.3CVSS5.9AI score0.0051EPSS

SaveExploits0References2

vulnersOsv•added 2026/07/22 11:00 p.m.•14 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64643 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.0051EPSS

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by