CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

612529 matches found

Tenable Nessus•added 2026/07/23 12:00 a.m.•20 views

RHEL 9 : compat-openssl11 (RHSA-2026:44438)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:44438 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from th...

8.8CVSS7.1AI score0.03566EPSS

SaveExploits0References4

CVE•added 2026/07/22 11:30 p.m.•31 views

CVE-2026-16631

The CVE-2026-16631 entry concerns publint up to version 0.1.4 where the pack.js file in the package-manager Command Handler uses child_process.exec, enabling os command injection. Local attack required; exploit is public. A patch identified as adf2d9a09945fc98c85a2520a89f441d78b2dbd8 exists and s...

5.3CVSS5.4AI score0.00635EPSS

SaveExploits0References8

OSV•added 2026/07/22 11:30 p.m.•7 views

CVE-2026-16631 publint package-manager pack.js child_process.exec os command injection

A vulnerability was detected in publint up to 0.1.4. This impacts the function childprocess.exec of the file src/node/pack.js of the component package-manager Command Handler. The manipulation results in os command injection. Attacking locally is a requirement. The exploit is now public and may b...

4.8CVSS5.3AI score

SaveExploits0References10

Cvelist•added 2026/07/22 11:30 p.m.•44 views

CVE-2026-16631 publint package-manager pack.js child_process.exec os command injection

5.3CVSS0.00635EPSS

SaveExploits0References8

OSSF Malicious Packages•added 2026/07/22 11:22 p.m.•30 views

Malicious code in hardhat-gas-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f908ec767bb48d5cf889b1035fc89ff03d0422bfa043e3c361c4faf0002df95 On module load, the package schedules a randomized 5-15 second setTimeout that POSTs a JSON body containing os.hostname, os.userInfo.username,...

5.6AI score

SaveExploits0References2

OSV•added 2026/07/22 11:22 p.m.•11 views

MAL-2026-11020 Malicious code in hardhat-gas-tracker (npm)

5.6AI score

SaveExploits0References2

vulnersOsv•added 2026/07/22 11:20 p.m.•4 views

@n8n/n8n-nodes-langchain (2.32.0), n8n (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)

n8n-nodes-base NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.32.0 - n8n 2.32.0 Source cves: unknown CVE Source advisory: SNYK:JS-N8NNODESBASE-18322069...

5.4AI score

SaveExploits0

vulnersOsv•added 2026/07/22 11:20 p.m.•5 views

@n8n/n8n-nodes-langchain (2.32.0), n8n (2.32.0) potentially affected by unknown CVE via n8n-nodes-base (2.32.0)

5.4AI score

SaveExploits0

OSV•added 2026/07/22 11:14 p.m.•9 views

GHSA-89VP-JRXV-24W8 JupyterLab: PyPI extension blocklist package-name canonicalization bypass

JupyterLab's PyPI extension manager enforces blockedextensionsuris by comparing the requested install name to blocklist entries with a custom string normalization that is weaker than PyPI package-name canonicalization. An authenticated user can request a PyPI-equivalent spelling such as...

6.1CVSS6.1AI score0.00487EPSS

SaveExploits0References9

Github Security Blog•added 2026/07/22 11:14 p.m.•28 views

JupyterLab: PyPI extension blocklist package-name canonicalization bypass

6.1CVSS6.1AI score0.00487EPSS

SaveExploits0References9Affected Software1

vulnersOsv•added 2026/07/22 11:09 p.m.•3 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +932 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64649 Source advisory:...

8.3CVSS5.3AI score0.00872EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:09 p.m.•4 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +932 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.3AI score0.00872EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:08 p.m.•3 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +932 more potentially affected by CVE-2026-64648 via next (>=16.0.0, <=16.2.10)

6CVSS5.3AI score0.00336EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:06 p.m.•4 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +932 more potentially affected by CVE-2026-64647 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.3AI score0.00351EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:06 p.m.•3 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +932 more potentially affected by CVE-2026-64647 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.3AI score0.00351EPSS

SaveExploits0

Patchstack•added 2026/07/22 11:02 p.m.•12 views

NPM: Next.js: Unbounded Server Action payload in Edge runtime

NPM: Next.js: Unbounded Server Action payload in Edge runtime vulnerability discovered by ? in WordPress Npm next versions = 13.0.0, 15.5.21...

6.3CVSS5.3AI score0.00531EPSS

SaveExploits0References6Affected Software1

vulnersOsv•added 2026/07/22 11:02 p.m.•4 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +932 more potentially affected by CVE-2026-64646 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.3AI score0.00531EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•4 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +932 more potentially affected by CVE-2026-64646 via next (>=16.0.0, <=16.2.10)

6.3CVSS5.3AI score0.00531EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•3 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +932 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.3AI score0.00837EPSS

SaveExploits0

vulnersOsv•added 2026/07/22 11:02 p.m.•4 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +932 more potentially affected by CVE-2026-64645 via next (>=16.0.0, <=16.2.10)

8.3CVSS5.3AI score0.00837EPSS

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by