Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2026/04/13 7:24 p.m.3 views

CVE-2026-39521

Server-Side Request Forgery SSRF vulnerability in Nelio Software Nelio Content nelio-content allows Server Side Request Forgery.This issue affects Nelio Content: from n/a through = 4.3.1...

4.9CVSS5.8AI score0.00032EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/10 4:5 a.m.0 views

EUVD-2025-39521

Malicious code in gilang-dodol29-apidev npm...

6.6AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-39521 Malicious code in wuthering (npm)

The package wuthering was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 8:12 p.m.6 views

CVE-2021-39521

An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function bitreadBB located in bits.c. It allows an attacker to cause Denial of Service...

6.5CVSS6.8AI score0.00239EPSS
Exploits1References1
NVD
NVD
added 2025/04/17 4:15 p.m.5 views

CVE-2025-39521

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashish Ajani Contact Form vCard Generator contact-form-vcard-generator allows Reflected XSS.This issue affects Contact Form vCard Generator: from n/a through = 2.4...

7.1CVSS0.00199EPSS
Exploits0References1
CVE
CVE
added 2025/04/17 3:46 p.m.47 views

CVE-2025-39521

CVE-2025-39521 is a reflected XSS in the WordPress plugin Contact Form vCard Generator (versions n/a through 2.4). The vulnerability arises from improper neutralization of input during web page generation, enabling reflected cross-site scripting. Public sources (CVE entries and Patchstack) confir...

7.1CVSS7.2AI score0.00199EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/17 3:46 p.m.5 views

CVE-2025-39521 WordPress Contact Form vCard Generator plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashish Ajani Contact Form vCard Generator contact-form-vcard-generator allows Reflected XSS.This issue affects Contact Form vCard Generator: from n/a through = 2.4...

7.1CVSS8.6AI score0.00199EPSS
Exploits0References1
Circl
Circl
added 2024/07/11 7:9 p.m.0 views

CVE-2024-39521

creationtimestamp| type| source ---|---|--- 2024-07-11 19:09:34+00:00| seen| https://t.me/cvedetector/668...

8.5CVSS4.8AI score0.00178EPSS
Exploits0References1
NVD
NVD
added 2024/07/11 4:15 p.m.12 views

CVE-2024-39521

An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated attacker with low privileges to escalate their privileges to 'root' leading to a full compromise of the system. The Junos OS Evolved CLI doesn't properly handle...

8.5CVSS0.00178EPSS
Exploits0References1
CVE
CVE
added 2024/07/11 3:57 p.m.65 views

CVE-2024-39521

The issue CVE-2024-39521 affects Juniper Networks Junos OS Evolved: the CLI mishandles command options under crafted parameter sets, enabling a local, authenticated user with low privileges to escalate to root on the shell and fully compromise the system. Affected versions include 21.1-EVOR1-EVO ...

8.5CVSS7.9AI score0.00178EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/07/11 3:57 p.m.16 views

CVE-2024-39521 Junos OS Evolved: CLI parameter processing issue allows privilege escalation

An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated attacker with low privileges to escalate their privileges to 'root' leading to a full compromise of the system. The Junos OS Evolved CLI doesn't properly handle...

8.5CVSS0.00178EPSS
Exploits0References1
Circl
Circl
added 2023/08/25 2:13 a.m.2 views

CVE-2023-39521

creationtimestamp| type| source ---|---|--- 2023-08-25 02:13:35+00:00| seen| https://t.me/cibsecurity/69163...

4.8CVSS4.9AI score0.00361EPSS
Exploits1References1
CVE
CVE
added 2023/08/24 10:40 p.m.62 views

CVE-2023-39521

CVE-2023-39521 affects Tuleap, where content in the Kanban and PV2 apps’ card fields is not properly escaped. The issue can be triggered when an agile dashboard administrator deletes a kanban with a malicious label, potentially allowing uncontrolled code execution. Affected products/versions: Tul...

4.8CVSS5.2AI score0.00361EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2023/08/24 10:40 p.m.10 views

CVE-2023-39521 Tuleap vulnerable to Cross-site Scripting on the success message of a kanban deletion

Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 14.11.99.28 and Tuleap Enterprise Edition prior to versions 14.10-6 and 14.11-3, content displayed in the "card fields" visible in the kanban and PV2 apps ...

4.8CVSS5.5AI score0.00361EPSS
Exploits1References4
NVD
NVD
added 2021/09/20 4:15 p.m.13 views

CVE-2021-39521

An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function bitreadBB located in bits.c. It allows an attacker to cause Denial of Service...

6.5CVSS0.00239EPSS
Exploits1References1
CVE
CVE
added 2021/09/20 3:26 p.m.51 views

CVE-2021-39521

Libredwg up to version 0.10.1.3751 contains a NULL pointer dereference in bit_read_BB() (bits.c), leading to Denial of Service. Affected component is the libredwg C library for DWG files. Impact is partial availability (DoS) as described in multiple sources. No exploit details are provided in the...

6.5CVSS6.3AI score0.00239EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder