Libevent

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an…CVE-2016-10195Libevent Project · 6.7% likely

   CWE-125

2. Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault)…CVE-2016-10196Libevent Project · 5.2% likely

   CWE-787

3. The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.CVE-2016-10197Libevent Project · 5.2% likely

   CWE-125

4. Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possib…CVE-2015-6525Libevent Project · 4.8% likely

   CWE-189

5. Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denia…CVE-2014-6272Libevent Project · 2.1% likely

   CWE-189

6. libevent evhttp: Multiple HTTP Parser Bugs Enable Request SmugglingCVE-2026-63382libevent · CVSS 9.2 · 2.0% likely

   CWE-444

7. Libevent: HTTP header handling bugs create risk of access control bypass.CVE-2026-63385libevent · CVSS 9.2 · 1.3% likely

   CWE-444

8. Libevent: Unbounded memory accumulation in WebSocket server via fragmented framesCVE-2026-63495libevent · CVSS 7.5 · 0.6% likely

   CWE-770

9. Libevent: HTTP Header smugglingCVE-2026-63379libevent · CVSS 6.3 · 0.5% likely

   CWE-444

10. Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value.CVE-2026-63384libevent · CVSS 8.7 · 0.5% likely

    CWE-190

11. Libevent: decode_tag_internal() can lead to out-of-bounds readCVE-2026-63383libevent · CVSS 8.7 · 0.5% likely

    CWE-125

12. Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server responseCVE-2026-63387libevent · CVSS 7 · 0.4% likely

    CWE-121

13. Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX acceptCVE-2026-63388libevent · CVSS 8.4 · 0.1% likely

    CWE-617

14. Libevent: Null Pointer Dereference in `evws_new_session`CVE-2026-63380libevent · CVSS 5.7 · 0.1% likely

    CWE-416

15. Libevent: Dangling Pointer in `evbuffer_add_buffer_reference`CVE-2026-63381libevent · CVSS 5.8 · 0.1% likely

    CWE-908

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.