CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

12490 matches found

CNNVD•added 2026/05/12 12:00 a.m.•22 views

Apache Tomcat 输入验证错误漏洞

Apache Tomcat is a lightweight web application server developed by the Apache Foundation in the United States. It supports Servlet and JavaServer Page JSP technologies. Vulnerabilities exist in versions of Apache Tomcat from 11.0.0-M1 to 11.0.21, 10.1.0-M1 to 10.1.54, 9.0.0.M1 to 9.0.117, and...

9.8CVSS5.8AI score0.0168EPSS

SaveExploits0References1

Positive Technologies•added 2026/05/12 12:00 a.m.•25 views

PT-2026-40050

Cross-Site Request Forgery vulnerability allows an attacker to perform unauthorized actions via crafted web page. This issue affects Pandora FMS: from 777 through 800...

7.1CVSS5.8AI score0.00175EPSS

SaveExploits0References2

CNNVD•added 2026/05/12 12:00 a.m.•22 views

NanaZip 安全漏洞

NanaZip is a compression software open source by the M2-Team. Versions of NanaZip from 5.0.1252.0 to 6.0.1698.0 contained security vulnerabilities. These vulnerabilities stemmed from the recursive, depth-unlimited behavior of the nlohmann::json::parse and GetAllPaths functions in the Electron...

5.5CVSS5.8AI score0.00148EPSS

SaveExploits0References2

CNNVD•added 2026/05/12 12:00 a.m.•22 views

Modsecurity 数字错误漏洞

Modsecurity is an open-source web traffic security processing library developed by OWASP ModSecurity. Versions of Modsecurity from 3.0.0 to 3.0.15 contained a numerical error vulnerability. This vulnerability stemmed from an unsigned integer underflow, which led to unhandled exceptions and could...

8.2CVSS5.8AI score0.00486EPSS

SaveExploits1References1

CNNVD•added 2026/05/12 12:00 a.m.•19 views

Apache Tomcat 安全漏洞

Apache Tomcat is a lightweight web application server developed by the Apache Foundation in the United States. It supports Servlet and JavaServer Page JSP technologies. Security vulnerabilities exist in versions of Apache Tomcat ranging from 11.0.0-M1 to 11.0.21, from 10.1.0-M1 to 10.1.54, from...

9.8CVSS5.8AI score0.01326EPSS

SaveExploits1References1

Positive Technologies•added 2026/05/12 12:00 a.m.•21 views

PT-2026-40308

In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, when SoapServer is configured with SOAP PERSISTENCE SESSION, the handler object is persisted across requests via session storage. However, in the case SOAP requests results in an error, the...

9.8CVSS5.8AI score0.00531EPSS

SaveExploits0References3

Github Security Blog•added 2026/05/11 9:31 p.m.•26 views

cowlib cow_http_te module: Uncontrolled Resource Consumption vulnerability allows Excessive Allocation

Uncontrolled Resource Consumption vulnerability in ninenines cowlib cowhttpte module allows Excessive Allocation. The chunked transfer-encoding parser in cowhttpte accepts an unbounded number of hex digits in the chunk-size field. Each digit causes a bignum multiplication Len 16 + digit, so parsi...

8.7CVSS5.8AI score0.00793EPSS

SaveExploits0References6Affected Software1

Cvelist•added 2026/05/11 9:05 p.m.•47 views

CVE-2026-43887 Outline: Stored XSS via Comment Mentions

Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.6.1, the Outline comment section permits users to mention other users; however, the backend does not validate or sanitize the href attribute associated with these mentions. As a result, potentially dangerous...

7.3CVSS0.00435EPSS

SaveExploits0References1

vulnersOsv•added 2026/05/11 7:37 p.m.•6 views

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.24), @bubblesjs/vue-ai-chart (>=0.0.3, <=0.0.4) +157 more potentially affected by CVE-2026-41159 via mermaid (>=11.0.0, <=11.14.0)

mermaid NPM version =11.0.0, =0.0.1-alpha.23, =0.0.3, =0.15.0, =0.35.0, =0.0.1-beta.1, =0.0.0-beta.1, =0.1.0, =0.0.1, =0.0.1-alpha.0, =0.11.1, =0.11.2, =1.10.5, =15.1.25, =16.0.121 and more Source cves: CVE-2026-41159 Source advisory: OSV:GHSA-87F9-HVMW-GH4P...

5.3CVSS5.8AI score0.00549EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 4:21 p.m.•9 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +848 more potentially affected by CVE-2026-45109 via next (>=15.2.0, <=15.5.16)

next NPM version =15.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-45109 Source advisory: OSV:GHSA-26HH-7CQF-HHC6...

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0

Patchstack•added 2026/05/11 4:21 p.m.•30 views

NPM: Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

Incomplete Fix Follow-Up vulnerability discovered by ? in WordPress Npm next versions = 15.2.0, 15.5.18...

7.5CVSS5.8AI score0.00761EPSS

SaveExploits0References6Affected Software1

vulnersOsv•added 2026/05/11 4:16 p.m.•9 views

@hyorman/copilot-proxy-cli (1.0.4), @senoldogann/code-companion (>=0.1.38, <=0.1.56) +8 more potentially affected by CVE-2026-45033 via @github/copilot (>=1.0.12, <=1.0.40)

@github/copilot NPM version =1.0.12, =0.1.38, =0.12.6, =0.8.5, =0.6.0, =0.6.1, =0.6.8, =1.0.0, =2.0.0 - @vibe-forge/client 1.0.0 - bitbucket-copilot-pr-review 0.5.1 Source cves: CVE-2026-45033 Source advisory: SNYK:JS-GITHUBCOPILOT-16642141...

8.5CVSS7.3AI score0.00384EPSS

SaveExploits2

vulnersOsv•added 2026/05/11 4:12 p.m.•9 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44572 via next (>=16.0.0, <=16.2.4)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44572 Source advisory:...

5.9CVSS5.5AI score0.00203EPSS

SaveExploits0

Patchstack•added 2026/05/11 3:57 p.m.•18 views

NPM: Next.js vulnerable to cross-site scripting in App Router applications using CSP nonces

NPM: Next.js vulnerable to cross-site scripting in App Router applications using CSP nonces vulnerability discovered by ? in WordPress Npm next versions = 13.4.0, 15.5.16...

4.7CVSS5.5AI score0.00248EPSS

SaveExploits1References5Affected Software1

vulnersOsv•added 2026/05/11 3:56 p.m.•7 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44582 via next (>=16.0.0, <=16.2.4)

3.7CVSS5.5AI score0.00172EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:56 p.m.•10 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44580 via next (>=16.0.0, <=16.2.4)

6.1CVSS6.3AI score0.00253EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:56 p.m.•7 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1366 more potentially affected by CVE-2026-44579 via next (>=15.0.0, <=15.5.15)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44579 Source advisory: SNYK:JS-NEXT-16638678...

7.5CVSS7.2AI score0.00764EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:54 p.m.•11 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44576 via next (>=16.0.0, <=16.2.4)

5.4CVSS6AI score0.00304EPSS

SaveExploits0

Patchstack•added 2026/05/11 3:54 p.m.•22 views

NPM: Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes

NPM: Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes vulnerability discovered by ? in WordPress Npm next versions = 15.2.0, 15.5.16...

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0References5Affected Software1

vulnersOsv•added 2026/05/11 3:54 p.m.•9 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44574 via next (>=16.0.0, <=16.2.4)

8.1CVSS7.4AI score0.00667EPSS

SaveExploits2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by