CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

11457 matches found

CNNVD•added 2026/05/12 12:00 a.m.•15 views

Apache Tomcat 安全漏洞

Apache Tomcat is a lightweight web application server developed by the Apache Foundation in the United States. It supports Servlet and JavaServer Page JSP technologies. Security vulnerabilities exist in versions of Apache Tomcat ranging from 11.0.0-M1 to 11.0.21, from 10.1.0-M1 to 10.1.54, from...

9.8CVSS5.8AI score0.01233EPSS

SaveExploits1References1

Github Security Blog•added 2026/05/11 9:31 p.m.•23 views

cowlib cow_http_te module: Uncontrolled Resource Consumption vulnerability allows Excessive Allocation

Uncontrolled Resource Consumption vulnerability in ninenines cowlib cowhttpte module allows Excessive Allocation. The chunked transfer-encoding parser in cowhttpte accepts an unbounded number of hex digits in the chunk-size field. Each digit causes a bignum multiplication Len 16 + digit, so parsi...

8.7CVSS5.8AI score0.00431EPSS

SaveExploits0References6Affected Software1

Cvelist•added 2026/05/11 9:05 p.m.•41 views

CVE-2026-43887 Outline: Stored XSS via Comment Mentions

Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.6.1, the Outline comment section permits users to mention other users; however, the backend does not validate or sanitize the href attribute associated with these mentions. As a result, potentially dangerous...

7.3CVSS0.00245EPSS

SaveExploits0References1

vulnersOsv•added 2026/05/11 7:37 p.m.•1 views

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.24), @bubblesjs/vue-ai-chart (>=0.0.3, <=0.0.4) +158 more potentially affected by CVE-2026-41159 via mermaid (>=11.0.0, <=11.14.0)

mermaid NPM version =11.0.0, =0.0.1-alpha.23, =0.0.3, =0.15.0, =0.35.0, =0.0.1-beta.1, =0.0.0-beta.1, =0.0.1, =0.0.1-alpha.0, =0.11.1, =0.11.2, =1.10.5, =15.1.25, =0.0.2, =0.0.10 and more Source cves: CVE-2026-41159 Source advisory: OSV:GHSA-87F9-HVMW-GH4P...

5.3CVSS5.3AI score0.00486EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 4:21 p.m.•2 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +850 more potentially affected by CVE-2026-45109 via next (>=15.2.0, <=15.5.16)

next NPM version =15.2.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-45109 Source advisory: OSV:GHSA-26HH-7CQF-HHC6...

7.5CVSS7.3AI score0.00569EPSS

SaveExploits0

Patchstack•added 2026/05/11 4:21 p.m.•24 views

NPM: Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

Incomplete Fix Follow-Up vulnerability discovered by ? in WordPress Npm next versions = 15.2.0, 15.5.18...

7.5CVSS5.8AI score0.00569EPSS

SaveExploits0References6Affected Software1

vulnersOsv•added 2026/05/11 4:16 p.m.•2 views

@hyorman/copilot-proxy-cli (1.0.4), @senoldogann/code-companion (>=0.1.38, <=0.1.56) +8 more potentially affected by CVE-2026-45033 via @github/copilot (>=1.0.12, <=1.0.40)

@github/copilot NPM version =1.0.12, =0.1.38, =0.12.6, =0.8.5, =0.6.0, =0.6.1, =0.6.8, =1.0.0, =2.0.0 - @vibe-forge/client 1.0.0 - bitbucket-copilot-pr-review 0.5.1 Source cves: CVE-2026-45033 Source advisory: SNYK:JS-GITHUBCOPILOT-16642141...

8.5CVSS7.4AI score0.0035EPSS

SaveExploits2

vulnersOsv•added 2026/05/11 4:12 p.m.•2 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +759 more potentially affected by CVE-2026-44572 via next (>=16.0.0, <=16.2.4)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44572 Source advisory:...

5.9CVSS4.7AI score0.00284EPSS

SaveExploits0

Patchstack•added 2026/05/11 3:57 p.m.•15 views

NPM: Next.js vulnerable to cross-site scripting in App Router applications using CSP nonces

NPM: Next.js vulnerable to cross-site scripting in App Router applications using CSP nonces vulnerability discovered by ? in WordPress Npm next versions = 13.4.0, 15.5.16...

4.7CVSS5.6AI score0.00222EPSS

SaveExploits1References5Affected Software1

vulnersOsv•added 2026/05/11 3:56 p.m.•2 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +759 more potentially affected by CVE-2026-44582 via next (>=16.0.0, <=16.2.4)

3.7CVSS4.7AI score0.00215EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:56 p.m.•2 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +759 more potentially affected by CVE-2026-44580 via next (>=16.0.0, <=16.2.4)

6.1CVSS6AI score0.00205EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:56 p.m.•3 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1370 more potentially affected by CVE-2026-44579 via next (>=15.0.0, <=15.5.15)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44579 Source advisory: SNYK:JS-NEXT-16638678...

7.5CVSS7.3AI score0.00746EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:54 p.m.•4 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +759 more potentially affected by CVE-2026-44576 via next (>=16.0.0, <=16.2.4)

5.4CVSS5.5AI score0.00295EPSS

SaveExploits0

Patchstack•added 2026/05/11 3:54 p.m.•19 views

NPM: Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes

NPM: Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes vulnerability discovered by ? in WordPress Npm next versions = 15.2.0, 15.5.16...

7.5CVSS5.8AI score0.01594EPSS

SaveExploits0References5Affected Software1

vulnersOsv•added 2026/05/11 3:54 p.m.•2 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +759 more potentially affected by CVE-2026-44574 via next (>=16.0.0, <=16.2.4)

8.1CVSS7.8AI score0.00636EPSS

SaveExploits2

vulnersOsv•added 2026/05/11 3:54 p.m.•3 views

47th (0.1.0), @0xchain/auth (>=0.0.1, <=1.1.0-beta.7) +354 more potentially affected by CVE-2026-44574 via next (>=15.4.0-canary.17, <=15.5.15)

next NPM version =15.4.0-canary.17, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44574 Source advisory: OSV:GHSA-492V-C6PP-MQQV...

8.1CVSS7.8AI score0.00636EPSS

SaveExploits2

Patchstack•added 2026/05/11 3:53 p.m.•16 views

NPM: Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n

NPM: Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n vulnerability discovered by ? in WordPress Npm next versions = 12.2.0, 15.5.16...

7.5CVSS5.8AI score0.0062EPSS

SaveExploits1References5Affected Software1

Patchstack•added 2026/05/11 2:50 p.m.•14 views

NPM: Facebook React has a Denial of Service Vulnerability in React Server Components

NPM: Facebook React has a Denial of Service Vulnerability in React Server Components discovered by ? in WordPress Npm react-server-dom-parcel versions = 19.0.0, 19.0.6...

7.5CVSS5.8AI score0.01533EPSS

SaveExploits1References5Affected Software1

CNNVD•added 2026/05/11 12:00 a.m.•17 views

MinIO 路径遍历漏洞

MinIO is an open-source object storage server developed by the American company MinIO. This product supports the creation of infrastructures for machine learning, analysis, and application data workloads. Versions of MinIO from RELEASE.2022-07-24T01-54-52Z to RELEASE.2026-04-14T21-32-45Z had a pa...

6.9CVSS5.8AI score0.09491EPSS

SaveExploits0References1

CNNVD•added 2026/05/11 12:00 a.m.•18 views

Wikimedia CheckUser 信息泄露漏洞

Wikimedia CheckUser is a advanced investigation tool of the Wikimedia Foundation designed to combat disruptive behavior. Versions of Wikimedia CheckUser from 1.45.0 to 1.45.2 contained a vulnerability related to information leakage, which resulted in sensitive information being exposed to...

7.5CVSS5.8AI score0.0028EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by