PT-2026-93457

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Direct Rendering Manager DRM when PAGE FLIP EVENT is used and a signal is sent to the thread. Specifically, if an event is allocated in the prepare signaling...

PT-2026-93257

Name of the Vulnerable Software and Affected Versions EspoCRM versions prior to 10.0.9 Description The software uses the PHP rand function to generate tokens for lead-capture opt-in, event invitation, and campaign URLs. Because rand is not a cryptographically secure generator, remote...

Huawei HarmonyOS Permission Control Vulnerability (CNVD-2026-37868)

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a permission control vulnerability, which stems from a flaw in the event notification module’s permission management. Currently, no detailed details about thi...

PT-2026-93635

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A pointer dereference issue exists in the fsl-edma tracing component of the dmaengine. The fsl edma events store a pointer to a struct fsl edma engine in the ringbuffer, which is...

PT-2026-93655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free crash can occur in the tracing subsystem. The files show event filters and show event triggers do not take a reference to the trace array they are displaying...

PT-2026-93714

Name of the Vulnerable Software and Affected Versions ag-ui-protocol ag-ui version 1.0 Description A weakness in the Event Application Layer component allows remote exploitation. The issue occurs within the prepareRunAgentInput function located in the agent/agent.ts file, where manipulation of th...

Linux Distros Unpatched Vulnerability : CVE-2026-89994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: fsl-edma: tracing: no ptr dereference during log output The fsl edma events store a pointer to a struct fsledmaengine in the ringbuffer and dereferen...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in log4j-core

Summary IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in log4j-core Vulnerability Details CVEID:CVE-2026-34480 DESCRIPTION: Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/manual/layouts.htmlXmlLayout , in versions up to and including 2.25.3, fails t...

CVE-2026-83260

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Event Java PX. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise Oracle Agile PLM. While the vulnerability...

CVE-2026-83220

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: Event Publish and Subscribe. Supported versions that are affected are 23.6-26.7. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

CVE-2026-76821

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0, the JSON ingestion mapper's extractWithRegexp formula function compiled a user-supplied regular expression with the JavaScript RegExp engine in...

CVE-2026-62597

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Event Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle...

CVE-2026-83260

CVE-2026-83260 affects Oracle Agile PLM (component: Event Java PX ), version 9.3.6 . An easily exploitable vulnerability allows a high-privileged attacker with network access via T3 or IIOP to achieve full takeover of the product (CVSS 3.1: 9.1 CRITICAL ). Notably, the scope is changed , meaning ...

EUVD-2026-79612

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Event Java PX. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise Oracle Agile PLM. While the vulnerability...

CVE-2026-83220

Oracle Siebel CRM contains a vulnerability in the Siebel CRM Integration product, specifically in the Event Publish and Subscribe component, affecting supported versions 23.6 through 26.7 . The flaw allows an unauthenticated attacker with access to the physical communication segment attached to t...

CVE-2026-62597

Oracle Enterprise Manager Base Platform (component: Event Management ) versions 13.5 and 24.1 are affected by an easily exploitable vulnerability. A low-privileged attacker with network access via SOAP can compromise the platform, resulting in unauthorized creation, deletion, or modification of c...

EUVD-2026-79508

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Event Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle...

CVE-2026-53954 Bugsink: DOS using large numbers of event tags

Bugsink is a self-hosted error tracking tool. Prior to version 2.2.2, Bugsink stores every set of custom tags supplied with an incoming event, allowing a caller with a valid project DSN to submit an unusually large tag set and force excessive tag-row writes. Because Bugsink uses a single-writer...

CVE-2026-53954 Bugsink: DOS using large numbers of event tags

Bugsink is a self-hosted error tracking tool. Prior to version 2.2.2, Bugsink stores every set of custom tags supplied with an incoming event, allowing a caller with a valid project DSN to submit an unusually large tag set and force excessive tag-row writes. Because Bugsink uses a single-writer...

CVE-2026-53954 Bugsink: DOS using large numbers of event tags

Bugsink is a self-hosted error tracking tool. Prior to version 2.2.2, Bugsink stores every set of custom tags supplied with an incoming event, allowing a caller with a valid project DSN to submit an unusually large tag set and force excessive tag-row writes. Because Bugsink uses a single-writer...