Lucene search
+L

24701 matches found

OSV
OSV
added 2026/08/20 6:16 p.m.13 views

UBUNTU-CVE-2026-63495

Libevent is an event notification library. From 2.2.0-alpha-dev until 2.2.2-alpha, the libevent WebSocket server in ws.c accumulates fragmented frames in evws-incompleteframes without enforcing a total message-size limit. An unauthenticated remote client can repeatedly send fragmented WebSocket...

7.5CVSS7.2AI score0.00517EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/20 6:16 p.m.15 views

UBUNTU-CVE-2026-63380

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evwsnewsession enters its error path after evhttpstartws succeeds but buffereventenablelocking fails. evwsconnectionfree sees a non-null httpserver and unconditionally call...

5.7CVSS5.9AI score0.00113EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/20 4:08 p.m.12 views

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...

8.7CVSS6AI score0.00364EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/20 1:58 p.m.20 views

CVE-2026-64972 Reflected XSS in ATutor

ATutor is vulnerable to Reflected XSS via popup parameter in preview.php. An authenticated attacker can inject a double quote into the popup parameter, break out of the attribute value, and append a new event handler such as onload. The related previewtop.php file sanitises these parameters, but...

4.8CVSS5.4AI score
SaveExploits0References5
NVD
NVD
added 2026/08/20 1:16 p.m.12 views

CVE-2025-62306

HCL IntelliOps Event Management IEM is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could hinder incident response...

5CVSS0.00166EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/20 1:16 p.m.17 views

CVE-2025-62299

HCL IntelliOps Event Management IEM is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not be accessed with the attacker's original privileges...

6.6CVSS0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/20 12:18 p.m.39 views

CVE-2026-21784 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by missing or insecure Cross-Origin Security headers. This issue makes the application's environment and resources susceptible to unauthorized external interaction and potential exploitation...

4.8CVSS0.00142EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/20 12:18 p.m.21 views

CVE-2026-21784

HCL IntelliOps Event Management (IEM) ships with missing or insecure Cross-Origin Resource Sharing (CORS) headers, allowing unauthorized external origins to read application resources. CVSS 3.1 rates this MEDIUM (4.8), requiring high privileges and user interaction. No patch version, exploit, or ...

4.8CVSS5.3AI score0.00142EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/20 12:16 p.m.26 views

CVE-2025-62299

HCL IntelliOps Event Management (IEM) has a least-privilege violation allowing a privileged (PR:H) network attacker to access resources beyond their original privileges, with HIGH confidentiality impact. CVSS 6.6 MEDIUM; no exploitation details or fix version provided in the documents.

6.6CVSS5.3AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/20 12:14 p.m.31 views

CVE-2025-62300 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by a race condition. A "timing window" can occur where an attacker can modify the resource causing unpredictable behavior...

5.9CVSS0.00149EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/20 12:07 p.m.25 views

CVE-2025-62307

HCL IntelliOps Event Management (IEM) suffers from insufficient logging, weakening accountability, obscuring attack detection, and enabling privilege probing. CVSS 3.1 scores it MEDIUM (5.4) with network attack vector, low privileges required, and low confidentiality/integrity impact. No exploita...

5.4CVSS5.3AI score0.00183EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/20 12:07 p.m.15 views

EUVD-2025-210750

HCL IntelliOps Event Management IEM is affected by insufficient logging. Insufficient logging weakens accountability, obscures attack detection, and enables privilege probing...

5.4CVSS5.3AI score0.00183EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/20 8:16 a.m.15 views

CVE-2026-75948

Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 - The frontend "Submit an Event" form stores the image and file fields as raw strings with no output-side HTML-attribute escaping...

8.6CVSS0.0023EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/20 12:35 a.m.17 views

EUVD-2026-62968

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...

7.4CVSS5.3AI score0.00193EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/20 12:35 a.m.18 views

EUVD-2026-62967

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer REST API could configure a non-secure Hypertext Transfer Protocol HTTP Event Collector endpoint in Splunk Enterprise that causes the connector to send...

8.2CVSS5.3AI score0.00299EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/20 12:34 a.m.18 views

EUVD-2026-63127

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could cause an authenticated user to run arbitrary Search Processing Language SPL searches on their behalf through the Event Type Builder. This could expose all relevant data and stored credentials. Th...

5.9CVSS5.4AI score0.00206EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/19 10:17 p.m.14 views

CVE-2026-76403

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...

7.4CVSS0.00193EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 10:17 p.m.14 views

CVE-2026-76401

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer REST API could configure timestamp extraction with a crafted regular expression and matching event data to block a Kafka Connect worker thread, stopping event...

5.9CVSS0.00285EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 10:17 p.m.15 views

CVE-2026-76400

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer REST API and influence responses from a Hypertext Transfer Protocol HTTP Event Collector endpoint in Splunk Enterprise could cause the connector to retry faile...

5.9CVSS0.00285EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/19 10:17 p.m.13 views

CVE-2026-76400

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer REST API and influence responses from a Hypertext Transfer Protocol HTTP Event Collector endpoint in Splunk Enterprise could cause the connector to retry faile...

5.9CVSS5.6AI score
SaveExploits0References1
Rows per page
Query Builder