event vulnerability