collective

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

collective records in CISA KEV

No collective vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Acuity Cms 2 records LOW

Records

4 records

TI-2026-39801 CVE-2026-55099 · GHSA-cv84-9p8j-fj68

icalendar: Algorithmic Complexity in Equality

HIGH 72

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0063 Published 2026-08-25 Fixed in 7.1.3 CWE-400

TI-2026-53991 CVE-2026-77399

icalendar: Denial of service via unbounded VALARM REPEAT expansion

LOW 29

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00312 Published 2026-09-22 Fixed in 7.2.2 CWE-400

TI-2012-04038 CVE-2012-4745 · GHSA-56gp-6cr5-93g6

Cross-site scripting (XSS) vulnerability in admin/login.asp in Acuity CMS 2.6.2 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in admin/login.asp in Acuity CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01642 Published 2012-08-31 No fix listed CWE-79

TI-2005-04112 CVE-2005-4369 · GHSA-g6v2-6f4v-g5x2

Cross-site scripting (XSS) vulnerability in Acuity CMS 2.6.2 allows remote attackers to…

LOW 22

Cross-site scripting (XSS) vulnerability in Acuity CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly strSearchKeywords to browse.asp.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01177 Published 2005-12-20 No fix listed

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0