CVE-2026-77761 Cross-Document Parser State Contamination in misp-stix

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and STIX 2 parser components maintained...

UBUNTU-CVE-2026-63379

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

UBUNTU-CVE-2026-63385

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

UBUNTU-CVE-2026-63383

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

UBUNTU-CVE-2026-63387

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

CVE-2026-63387

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

UBUNTU-CVE-2026-63388

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

UBUNTU-CVE-2026-63381

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

UBUNTU-CVE-2026-63495

Libevent is an event notification library. From 2.2.0-alpha-dev until...

CVE-2026-63379

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

UBUNTU-CVE-2026-63384

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

CVE-2026-63380

Libevent is an event notification library. Prior to 2.2.2-alpha, libev...

UBUNTU-CVE-2026-63380

Libevent is an event notification library. Prior to 2.2.2-alpha, libev...

UBUNTU-CVE-2026-63382

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...

CVE-2026-64972 Reflected XSS in ATutor

ATutor is vulnerable to Reflected XSS via popup parameter in preview.php. An authenticated attacker can inject a double quote into the popup parameter, break out of the attribute value, and append a new event handler such as onload. The related previewtop.php file sanitises these parameters, but...

CVE-2025-62306

HCL IntelliOps Event Management IEM is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could hinder incident response...

CVE-2025-62299

HCL IntelliOps Event Management IEM is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not be accessed with the attacker's original privileges...

CVE-2026-21784

HCL IntelliOps Event Management (IEM) ships with missing or insecure Cross-Origin Resource Sharing (CORS) headers, allowing unauthorized external origins to read application resources. CVSS 3.1 rates this MEDIUM (4.8), requiring high privileges and user interaction. No patch version, exploit, or ...

CVE-2026-21784 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by missing or insecure Cross-Origin Security headers. This issue makes the application's environment and resources susceptible to unauthorized external interaction and potential exploitation...