CVE-2026-24679

creationtimestamp| type| source ---|---|--- 2026-02-10 15:21:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mejbb2c6z52a...

Security Bulletin: IBM Event Streams is vulnerable to a denial of service (CVE-2025-2240)

Summary IBM Event Streams is vulnerable to a denial of service due to an out‑of‑memory condition in smallrye-fault-tolerance. Vulnerability Details CVEID:CVE-2025-2240 DESCRIPTION: A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory OOM issue. This...

Security Bulletin: IBM Event Streams is vulnerable to information disclosure (CVE-2025-49574)

Summary IBM Event Streams is vulnerable to information disclosure due to improper handling of Vert.x duplicated contexts in Quarkus. Vulnerability Details CVEID:CVE-2025-49574 DESCRIPTION: Quarkus is a Cloud Native, Linux Container First framework for writing Java applications. In versions prior ...

CVE-2026-2217

A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/manageuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be us...

Security Bulletin: IBM Event Endpoint Management is vulnerable to improper input validation( CVE-2025-12758)

Summary IBM Event Endpoint Management is vulnerable to improper input validation due to incorrect Unicode string length calculation. Vulnerability Details CVEID:CVE-2025-12758 DESCRIPTION: Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More...

Security Bulletin: IBM Event Endpoint Management is vulnerable to command injection vulnerability (CVE-2025-64756)

Summary IBM Event Endpoint Management is vulnerable to command injection vulnerability due to Glob matches files. Vulnerability Details CVEID:CVE-2025-64756 DESCRIPTION: Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob...

GHSA-37CX-329C-33X3

creationtimestamp| type| source ---|---|--- 2026-02-10 02:10:05+00:00| seen| https://gist.github.com/alon710/a0764eb20d9f8956650b2167c18e15c7...

[SECURITY] Fedora 43 Update: rust-crypto-auditing-client-0.2.4-2.fc43

Event broker client for crypto-auditing project...

[SECURITY] Fedora 43 Update: rust-crypto-auditing-event-broker-0.2.4-2.fc43

Event broker for crypto-auditing project...

[SECURITY] Fedora 43 Update: rust-crypto-auditing-agent-0.2.4-3.fc43

Event collector agent for crypto-auditing project...

PT-2026-7470

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A security issue exists where an attacker with Event Log Reader S-1-5-32-573 privileges may be able to obtain proxy details, including the URL and proxy credentials, from PI to CONNECT event log file...

AVEVA PI to CONNECT Agent 日志信息泄露漏洞

AVEVA PI to CONNECT Agent is a data transfer component developed by the British company AVEVA. AVEVA PI to CONNECT Agent has a vulnerability related to log information leakage. This vulnerability arises from attackers who have access to event log reading capabilities, allowing them to obtain...

The vulnerability of the function qla24xx_handle_plogi_done_event() in the driver module drivers/scsi/qla2xxx/qla_init.c, a part of the Linux operating system’s SCSI device support driver, allows a hacker to cause a service failure.

The vulnerability of the qla24xxhandleplogidoneevent function in the drivers/scsi/qla2xxx/qlainit.c file of the Linux SCSI device support driver module is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

GHSA-7JX7-3846-M7W7

creationtimestamp| type| source ---|---|--- 2026-02-09 22:10:05+00:00| seen| https://gist.github.com/alon710/282df0d3c2c9c8c835a6fd15acd2475f...

CVE-2026-24683

FreeRDP is a free implementation of the Remote Desktop Protocol. ainputsendinputevent caches channelcallback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This...

CVE-2026-24683

FreeRDP vulnerability CVE-2026-24683 affects the FreeRDP Remote Desktop Protocol implementation where ainput_send_input_event caches channel_callback in a local variable and later uses it without synchronization. A concurrent channel close can free or reinitialize the callback, leading to a use-a...

CVE-2026-24683

FreeRDP is a free implementation of the Remote Desktop Protocol. ainputsendinputevent caches channelcallback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This...

CVE-2026-24683 FreeRDP has a heap-use-after-free in ainput_send_input_event

FreeRDP is a free implementation of the Remote Desktop Protocol. ainputsendinputevent caches channelcallback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This...

CVE-2026-24683 FreeRDP has a heap-use-after-free in ainput_send_input_event

FreeRDP is a free implementation of the Remote Desktop Protocol. ainputsendinputevent caches channelcallback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This...

CVE-2026-24343

creationtimestamp| type| source ---|---|--- 2026-02-09 15:24:09+00:00| seen| https://seclists.org/oss-sec/2026/q1/153 2026-02-09 16:45:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3megvi4cpd52b 2026-02-10 16:25:24+00:00| seen|...