Lucene search
+L

6 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/24 12:00 a.m.•7 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124534 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c. evhttpdecodeuriinternal decodes...

9.2CVSS7.7AI score0.0055EPSS
SaveExploits0References8
OSV
OSV
•added 2026/08/20 6:16 p.m.•19 views

DEBIAN-CVE-2026-63385

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c. evhttpdecodeuriinternal decodes percent-encoded %00 bytes into literal NUL characters, which can cause downstream C string operations to truncate a path and bypass...

9.2CVSS7.8AI score0.0055EPSS
SaveExploits0References1
OSV
OSV
•added 2026/08/20 6:16 p.m.•11 views

AZL-97566 CVE-2026-63385 affecting package ntp for versions less than 4.2.8p17-3

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c. evhttpdecodeuriinternal decodes percent-encoded %00 bytes into literal NUL characters, which can cause downstream C string operations to truncate a path and bypass...

9.2CVSS7.8AI score0.0055EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/08/20 5:55 p.m.•13 views

CVE-2026-63385

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c. evhttpdecodeuriinternal decodes percent-encoded %00 bytes into literal NUL characters, which can cause downstream C string operations to truncate a path and bypass...

9.2CVSS7.8AI score0.0055EPSS
SaveExploits0
EUVD
EUVD
•added 2026/08/20 5:55 p.m.•15 views

EUVD-2026-63563

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c. evhttpdecodeuriinternal decodes percent-encoded %00 bytes into literal NUL characters, which can cause downstream C string operations to truncate a path and bypass...

9.2CVSS7.8AI score0.0055EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/20 12:00 a.m.•1 views

CVE-2026-63385: Inconsistent Interpretation of HTTP Requests

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c. evhttpdecodeuriinternal decodes percent-encoded %00 bytes into literal NUL characters, which can cause downstream C string operations to truncate a path and bypass...

9.2CVSS7.8AI score0.0055EPSS
SaveExploits0References2
Rows per page
Query Builder