CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

115775 matches found

vulnersOsv•added 2026/05/11 3:54 p.m.•10 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44575 via next (>=16.0.0, <=16.2.4)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44575 Source advisory:...

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•7 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +847 more potentially affected by CVE-2026-44575 via next (>=15.2.0, <=15.5.15)

next NPM version =15.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44575 Source advisory: OSV:GHSA-267C-6GRR-H53F...

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•8 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44575 +1 more via next (>=16.0.0, <=16.2.4)

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•9 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44574 via next (>=16.0.0, <=16.2.4)

8.1CVSS7.4AI score0.00667EPSS

SaveExploits2

vulnersOsv•added 2026/05/11 3:54 p.m.•9 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +353 more potentially affected by CVE-2026-44574 via next (>=15.4.0-canary.17, <=15.5.15)

next NPM version =15.4.0-canary.17, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44574 Source advisory: SNYK:JS-NEXT-16638679...

8.1CVSS7.4AI score0.00667EPSS

SaveExploits2

vulnersOsv•added 2026/05/11 3:54 p.m.•10 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +353 more potentially affected by CVE-2026-44574 via next (>=15.4.0-canary.17, <=15.5.15)

8.1CVSS7.4AI score0.00667EPSS

SaveExploits2

vulnersOsv•added 2026/05/11 3:54 p.m.•9 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44574 via next (>=16.0.0, <=16.2.4)

8.1CVSS7.4AI score0.00667EPSS

SaveExploits2

vulnersOsv•added 2026/05/11 3:53 p.m.•7 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44573 via next (>=16.0.0, <=16.2.4)

7.5CVSS7.2AI score0.00761EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:53 p.m.•8 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by CVE-2026-44573 via next (>=16.0.0, <=16.2.4)

7.5CVSS7.2AI score0.00761EPSS

SaveExploits1

Snyk•added 2026/05/11 3:53 p.m.•23 views

Incorrect Authorization

Overview next is a react framework. Affected versions of this package are vulnerable to Incorrect Authorization in the /next/data//.json route when i18n is configured and authorization is enforced via middleware or proxy. An attacker can gain unauthorized access to sensitive server-side-rendered...

8.2CVSS7.2AI score0.00761EPSS

SaveExploits1References2

vulnersOsv•added 2026/05/11 2:50 p.m.•8 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +756 more potentially affected by unknown CVE via next (>=16.0.0, <=16.2.4)

5.7AI score

SaveExploits0

vulnersOsv•added 2026/05/11 2:42 p.m.•6 views

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +2332 more potentially affected by CVE-2026-44902 via @opentelemetry/exporter-prometheus (>=0.9.0, <=0.216.0)

@opentelemetry/exporter-prometheus NPM version =0.9.0, =0.1.0, =0.1.0-dev.00aaa03, =0.1.1, =0.1.0, =0.0.1, =1.0.21, =0.0.1, =0.8.0, =0.1.1, =0.1.1, =0.1.1, =0.1.8, =0.1.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.0.68 and more Source cves: CVE-2026-44902 Source advisor...

7.5CVSS5.8AI score0.00486EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 2:42 p.m.•6 views

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +1531 more potentially affected by CVE-2026-44902 via @opentelemetry/auto-instrumentations-node (>=0.16.0, <=0.74.0)

@opentelemetry/auto-instrumentations-node NPM version =0.16.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.8.0, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.2.0, =0.2.0, =0.0.1, =0.3.4-0, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =5.0.1-staging.f17326334 and more Source cves:...

7.5CVSS5.8AI score0.00486EPSS

SaveExploits1

Vulnrichment•added 2026/05/11 2:40 p.m.•11 views

CVE-2026-44199 Wagtail: Improper permission handling when deleting form submissions

Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with limited access to form pages could delete submissions to form pages they don't have access to by crafting a form submission to delete submissions on a page they do have access to f...

6.5CVSS5.8AI score0.00299EPSS

SaveExploits0References1

EUVD•added 2026/05/11 12:32 p.m.•46 views

EUVD-2026-29049

ATutor is vulnerable to Reflected XSS in /install/install.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. Product is no longer actively supported. Maintainers of this project were notified early...

5.1CVSS6AI score0.00554EPSS

SaveExploits0References3

NVD•added 2026/05/11 10:16 a.m.•31 views

CVE-2026-6909

ATutor is vulnerable to Reflected XSS in /install/upgrade.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. Product is no longer actively supported. Maintainers of this project were notified early...

5.1CVSS0.00554EPSS

SaveExploits0References2

NVD•added 2026/05/11 10:16 a.m.•63 views

CVE-2026-6956

5.1CVSS0.00554EPSS

SaveExploits0References2

OSV•added 2026/05/11 9:40 a.m.•18 views

CVE-2026-6956 Reflected XSS in ATutor

5.1CVSS6.2AI score

SaveExploits0References5

Cvelist•added 2026/05/11 9:40 a.m.•85 views

CVE-2026-6956 Reflected XSS in ATutor

5.1CVSS0.00554EPSS

SaveExploits0References2

Positive Technologies•added 2026/05/11 12:00 a.m.•38 views

PT-2026-39717

Name of the Vulnerable Software and Affected Versions Bitwarden Server versions prior to 2026.4.1 Description An issue exists where master-password re-authentication is not required when retrieving or rotating an organization's SCIM API key. This allows an authenticated user with SCIM management...

8.6CVSS5.8AI score0.00707EPSS

SaveExploits1References10

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by