Lucene search
+L

24707 matches found

OSV
OSV
added 2026/08/20 6:16 p.m.10 views

UBUNTU-CVE-2026-63388

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...

8.4CVSS7.2AI score0.00142EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/08/20 6:16 p.m.15 views

CVE-2026-63388

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...

8.4CVSS7.2AI score0.00142EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/20 6:16 p.m.15 views

CVE-2026-63387

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsnametolabels formats a name-bearing DNS record at the end of the 64 KB stack buffer allocated by evdnsserverrequestformatresponse. The final-label check...

7CVSS7.3AI score0.00416EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/20 6:16 p.m.13 views

UBUNTU-CVE-2026-63495

Libevent is an event notification library. From 2.2.0-alpha-dev until 2.2.2-alpha, the libevent WebSocket server in ws.c accumulates fragmented frames in evws-incompleteframes without enforcing a total message-size limit. An unauthenticated remote client can repeatedly send fragmented WebSocket...

7.5CVSS7.2AI score0.00517EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/08/20 6:16 p.m.15 views

CVE-2026-63379

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent processes chunked HTTP trailers in http.c through evhttpreadtrailer and merges them into request headers. The fix introduces evhttpparseheadersimpl and a temporary trailer header list. An unauthenticated remote...

6.3CVSS6AI score0.00518EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/20 6:16 p.m.15 views

CVE-2026-63495

Libevent is an event notification library. From 2.2.0-alpha-dev until 2.2.2-alpha, the libevent WebSocket server in ws.c accumulates fragmented frames in evws-incompleteframes without enforcing a total message-size limit. An unauthenticated remote client can repeatedly send fragmented WebSocket...

7.5CVSS7.2AI score0.00517EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/20 6:16 p.m.13 views

CVE-2026-63380

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evwsnewsession enters its error path after evhttpstartws succeeds but buffereventenablelocking fails. evwsconnectionfree sees a non-null httpserver and unconditionally call...

5.7CVSS5.9AI score0.00113EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/20 6:16 p.m.15 views

UBUNTU-CVE-2026-63380

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evwsnewsession enters its error path after evhttpstartws succeeds but buffereventenablelocking fails. evwsconnectionfree sees a non-null httpserver and unconditionally call...

5.7CVSS5.9AI score0.00113EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/20 4:08 p.m.12 views

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...

8.7CVSS6AI score0.00364EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/20 1:58 p.m.20 views

CVE-2026-64972 Reflected XSS in ATutor

ATutor is vulnerable to Reflected XSS via popup parameter in preview.php. An authenticated attacker can inject a double quote into the popup parameter, break out of the attribute value, and append a new event handler such as onload. The related previewtop.php file sanitises these parameters, but...

4.8CVSS5.4AI score
SaveExploits0References5
NVD
NVD
added 2026/08/20 1:16 p.m.12 views

CVE-2025-62306

HCL IntelliOps Event Management IEM is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could hinder incident response...

5CVSS0.00166EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/20 1:16 p.m.17 views

CVE-2025-62299

HCL IntelliOps Event Management IEM is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not be accessed with the attacker's original privileges...

6.6CVSS0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/20 12:18 p.m.39 views

CVE-2026-21784 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by missing or insecure Cross-Origin Security headers. This issue makes the application's environment and resources susceptible to unauthorized external interaction and potential exploitation...

4.8CVSS0.00142EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/20 12:18 p.m.21 views

CVE-2026-21784

HCL IntelliOps Event Management (IEM) ships with missing or insecure Cross-Origin Resource Sharing (CORS) headers, allowing unauthorized external origins to read application resources. CVSS 3.1 rates this MEDIUM (4.8), requiring high privileges and user interaction. No patch version, exploit, or ...

4.8CVSS5.3AI score0.00142EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/20 12:16 p.m.26 views

CVE-2025-62299

HCL IntelliOps Event Management (IEM) has a least-privilege violation allowing a privileged (PR:H) network attacker to access resources beyond their original privileges, with HIGH confidentiality impact. CVSS 6.6 MEDIUM; no exploitation details or fix version provided in the documents.

6.6CVSS5.3AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/20 12:14 p.m.31 views

CVE-2025-62300 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by a race condition. A "timing window" can occur where an attacker can modify the resource causing unpredictable behavior...

5.9CVSS0.00149EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/20 12:07 p.m.25 views

CVE-2025-62307

HCL IntelliOps Event Management (IEM) suffers from insufficient logging, weakening accountability, obscuring attack detection, and enabling privilege probing. CVSS 3.1 scores it MEDIUM (5.4) with network attack vector, low privileges required, and low confidentiality/integrity impact. No exploita...

5.4CVSS5.3AI score0.00183EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/20 12:07 p.m.15 views

EUVD-2025-210750

HCL IntelliOps Event Management IEM is affected by insufficient logging. Insufficient logging weakens accountability, obscures attack detection, and enables privilege probing...

5.4CVSS5.3AI score0.00183EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/20 8:16 a.m.15 views

CVE-2026-75948

Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 - The frontend "Submit an Event" form stores the image and file fields as raw strings with no output-side HTML-attribute escaping...

8.6CVSS0.0023EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/20 12:35 a.m.17 views

EUVD-2026-62968

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...

7.4CVSS5.3AI score0.00193EPSS
SaveExploits0References2
Rows per page
Query Builder