CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4327 matches found

Positive Technologies•added 2026/07/23 12:00 a.m.•14 views

PT-2026-71311

Name of the Vulnerable Software and Affected Versions @auth/core versions prior to 0.41.3 next-auth versions prior to 4.24.15 next-auth versions prior to 5.0.0-beta.32 Description The getToken function in the next-auth/jwt and @auth/core/jwt modules can throw an uncaught exception when processing...

7.5CVSS5.8AI score0.00877EPSS

SaveExploits0References19

Cvelist•added 2026/07/23 12:00 a.m.•45 views

CVE-2026-39155

Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where the next NSEC owner name can be computed incorrectly. This can create an overly broad authenticated denial interval, allowing downstream validating resolvers using aggressive negative caching to...

0.0022EPSS

SaveExploits0References2

EUVD•added 2026/07/23 12:00 a.m.•21 views

EUVD-2026-48433

5.3AI score0.0022EPSS

SaveExploits0References2

Positive Technologies•added 2026/07/23 12:00 a.m.•20 views

PT-2026-71920

Name of the Vulnerable Software and Affected Versions next-auth versions 5.0.0-beta.0 through 5.0.0-beta.31 Description Applications using the auth wrapper to gate access by checking only for the existence of the returned object can fail open during server configuration errors. In middleware, Rou...

9.1CVSS5.8AI score0.00643EPSS

SaveExploits0References12

Vulnrichment•added 2026/07/23 12:00 a.m.•11 views

CVE-2026-39155

5.8AI score0.0022EPSS

SaveExploits0References2

CVE•added 2026/07/23 12:00 a.m.•39 views

CVE-2026-39155

Knot DNS versions before 3.4.10 and 3.5.x before 3.5.4 are impacted by a vulnerability in the mod-onlinesign component. The root cause is an incorrect computation of the next NSEC owner name , which creates an overly broad authenticated denial interval. This flaw allows downstream validating reso...

6.5CVSS5.8AI score0.0022EPSS

SaveExploits0References2

Positive Technologies•added 2026/07/23 12:00 a.m.•4 views

PT-2026-67356

Impact next-auth Auth.js v5 applications that gate access by checking only for the existence of the auth object — the pattern shown in the official session management / protecting resources guide — are affected. When the Auth.js configuration produces a server-side error, the auth object exposed ...

9.1CVSS5.9AI score

SaveExploits0References5

Debian CVE•added 2026/07/23 12:00 a.m.•33 views

CVE-2026-39155

6.5CVSS5.8AI score0.0022EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:09 p.m.•14 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64649 Source advisory:...

8.3CVSS5.8AI score0.00459EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:09 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.8AI score0.00459EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:08 p.m.•16 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64648 via next (>=16.0.0, <=16.2.10)

6CVSS5.8AI score0.00338EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:06 p.m.•17 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64647 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00317EPSS

SaveExploits0

Patchstack•added 2026/07/22 11:06 p.m.•20 views

NPM: Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

NPM: Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences vulnerability discovered by ? in WordPress Npm next versions = 13.0.0, 15.5.21...

6.3CVSS5.3AI score0.00317EPSS

SaveExploits0References6Affected Software1

vulnersOsv•added 2026/07/22 11:02 p.m.•17 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64646 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00524EPSS

SaveExploits0

Snyk•added 2026/07/22 11:02 p.m.•33 views

Allocation of Resources Without Limits or Throttling

Overview next is a react framework. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the handleAction Server Actions path in the App Router Edge runtime. An attacker can exhaust server memory by sending an oversized Server Action request...

7.5CVSS6.1AI score0.00524EPSS

SaveExploits0References2

vulnersOsv•added 2026/07/22 11:02 p.m.•16 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.8AI score0.00414EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•14 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.8AI score0.00414EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•12 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +241 more potentially affected by CVE-2026-64644 via next (>=15.5.0, <=15.5.20)

next NPM version =15.5.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-64644 Source advisory: OSV:GHSA-Q8WF-6R8G-63CH...

6.3CVSS5.8AI score0.00666EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•12 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00666EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +956 more potentially affected by CVE-2026-64644 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.8AI score0.00666EPSS

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by