CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

115144 matches found

vulnersOsv•added 2026/05/11 3:56 p.m.•10 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +784 more potentially affected by CVE-2026-44582 via next (>=16.0.0, <=16.2.4)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44582 Source advisory:...

3.7CVSS5.4AI score0.00172EPSS

SaveExploits4

vulnersOsv•added 2026/05/11 3:56 p.m.•11 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +784 more potentially affected by CVE-2026-44580 via next (>=16.0.0, <=16.2.4)

6.1CVSS6.2AI score0.00253EPSS

SaveExploits0

Patchstack•added 2026/05/11 3:56 p.m.•17 views

NPM: Next.js has cross-site scripting in beforeInteractive scripts with untrusted input

NPM: Next.js has cross-site scripting in beforeInteractive scripts with untrusted input vulnerability discovered by ? in WordPress Npm next versions = 13.0.0, 15.5.16...

6.1CVSS6AI score0.00253EPSS

SaveExploits0References5Affected Software1

vulnersOsv•added 2026/05/11 3:56 p.m.•11 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +784 more potentially affected by CVE-2026-44579 via next (>=16.0.0, <=16.2.4)

7.5CVSS7.2AI score0.00764EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:56 p.m.•17 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1326 more potentially affected by CVE-2026-44579 via next (>=15.0.0, <=15.5.15)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44579 Source advisory: OSV:GHSA-MG66-MRH9-M8JX...

7.5CVSS7.2AI score0.00764EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:55 p.m.•11 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +784 more potentially affected by CVE-2026-44578 via next (>=16.0.0, <=16.2.4)

8.6CVSS7.7AI score0.01895EPSS

SaveExploits13

vulnersOsv•added 2026/05/11 3:54 p.m.•12 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +784 more potentially affected by CVE-2026-44576 via next (>=16.0.0, <=16.2.4)

5.4CVSS5.8AI score0.00304EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +784 more potentially affected by CVE-2026-44575 via next (>=16.0.0, <=16.2.4)

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•12 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +846 more potentially affected by CVE-2026-44575 via next (>=15.2.0, <=15.5.15)

next NPM version =15.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44575 Source advisory: OSV:GHSA-267C-6GRR-H53F...

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0

Patchstack•added 2026/05/11 3:54 p.m.•25 views

NPM: Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes

NPM: Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes vulnerability discovered by ? in WordPress Npm next versions = 15.2.0, 15.5.16...

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0References5Affected Software1

vulnersOsv•added 2026/05/11 3:54 p.m.•12 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +784 more potentially affected by CVE-2026-44574 via next (>=16.0.0, <=16.2.4)

8.1CVSS7.4AI score0.00667EPSS

SaveExploits4

vulnersOsv•added 2026/05/11 3:54 p.m.•12 views

3d-effect-cinema (>=0.1.0, <=0.4.1), 47th (0.1.0) +354 more potentially affected by CVE-2026-44574 via next (>=15.4.0-canary.17, <=15.5.15)

next NPM version =15.4.0-canary.17, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44574 Source advisory: SNYK:JS-NEXT-16638679...

8.1CVSS7.4AI score0.00667EPSS

SaveExploits4

vulnersOsv•added 2026/05/11 3:53 p.m.•10 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +784 more potentially affected by CVE-2026-44573 via next (>=16.0.0, <=16.2.4)

7.5CVSS7.2AI score0.00761EPSS

SaveExploits4

Snyk•added 2026/05/11 3:53 p.m.•36 views

Incorrect Authorization

Overview next is a react framework. Affected versions of this package are vulnerable to Incorrect Authorization in the /next/data//.json route when i18n is configured and authorization is enforced via middleware or proxy. An attacker can gain unauthorized access to sensitive server-side-rendered...

8.2CVSS7.2AI score0.00761EPSS

SaveExploits4References2

vulnersOsv•added 2026/05/11 2:50 p.m.•9 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +784 more potentially affected by unknown CVE via next (>=16.0.0, <=16.2.4)

5.8AI score

SaveExploits0

vulnersOsv•added 2026/05/11 2:42 p.m.•8 views

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +1450 more potentially affected by CVE-2026-44902 via @opentelemetry/auto-instrumentations-node (>=0.16.0, <=0.74.0)

@opentelemetry/auto-instrumentations-node NPM version =0.16.0, =0.1.0, =0.1.0-dev.00aaa03, =0.0.1, =0.8.0, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.2.0, =0.2.0, =0.0.1, =0.3.4-0, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =5.0.1-staging.f17326334 and more Source cves:...

7.5CVSS5.8AI score0.00486EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 2:42 p.m.•7 views

0perator (>=0.1.0, <=0.3.0), 0pflow (>=0.1.0-dev.00aaa03, <=0.1.0) +2219 more potentially affected by CVE-2026-44902 via @opentelemetry/exporter-prometheus (>=0.9.0, <=0.216.0)

@opentelemetry/exporter-prometheus NPM version =0.9.0, =0.1.0, =0.1.0-dev.00aaa03, =0.1.1, =0.1.0, =0.0.1, =1.0.21, =0.0.1, =0.8.0, =0.1.1, =0.1.1, =0.1.1, =0.1.8, =0.1.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.0.68 and more Source cves: CVE-2026-44902 Source advisor...

7.5CVSS5.8AI score0.00486EPSS

SaveExploits1

Vulnrichment•added 2026/05/11 2:40 p.m.•14 views

CVE-2026-44199 Wagtail: Improper permission handling when deleting form submissions

Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with limited access to form pages could delete submissions to form pages they don't have access to by crafting a form submission to delete submissions on a page they do have access to f...

6.5CVSS5.7AI score0.00299EPSS

SaveExploits0References1

EUVD•added 2026/05/11 12:32 p.m.•49 views

EUVD-2026-29049

ATutor is vulnerable to Reflected XSS in /install/install.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. Product is no longer actively supported. Maintainers of this project were notified early...

5.1CVSS6.1AI score0.00554EPSS

SaveExploits0References3

NVD•added 2026/05/11 10:16 a.m.•67 views

CVE-2026-6956

5.1CVSS0.00554EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by