Lucene search
K

29 matches found

Circl
Circl
added 2026/04/22 1:19 a.m.0 views

CVE-2026-5921

creationtimestamp| type| source ---|---|--- 2026-04-22 01:19:23+00:00| seen| Telegram/LUR06ONloRlViUIW27ojzHZG9BE33b4Dag-8VffcgXgN8 2026-04-22 02:17:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2glyrtmp2q...

9.5CVSS4.8AI score0.00079EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/01 6:0 a.m.4 views

CVE-2025-5921 SureForms < 1.7.2 - Reflected XSS

The SureForms WordPress plugin before 1.7.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against both authenticated and unauthenticated users...

0.00328EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/07/21 10:2 p.m.5 views

WordPress SureForms plugin < 1.7.2 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin SureForms versions 1.7.2...

5.8CVSS6.1AI score0.00328EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 5:42 p.m.7 views

CVE-2020-5921

in BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, Syn flood causes large number of MCPD context messages destined to secondary blades consuming memory leading to MCPD failure. This issue affects only VIPRION hosts with two...

7.5CVSS6.9AI score0.00647EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2025/05/19 12:0 a.m.8 views

Debian: Security Advisory (DSA-5921-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS9.3AI score0.00422EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/12/06 12:0 a.m.15 views

Palo Alto GlobalProtect Agent Privilege Escalation (CVE-2024-5921)

According to its self-reported version, the Palo Alto GlobalProtect Agent installed on the remote host is affected by a vulnerability as referenced in the CVE-2024-5921 advisory: - An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to...

8.8CVSS8.9AI score0.00376EPSS
Exploits2References2
Vulnrichment
Vulnrichment
added 2024/11/27 3:50 a.m.22 views

CVE-2024-5921 GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation

An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...

7.1CVSS9AI score0.00376EPSS
Exploits2References3
Circl
Circl
added 2024/11/26 1:45 a.m.9 views

CVE-2024-5921

creationtimestamp| type| source ---|---|--- 2024-11-26 01:45:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2024-5921 2024-11-26 04:36:37+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113547398128287677 2024-11-26 08:52:04+00:00| seen|...

8.8CVSS7.5AI score0.00376EPSS
Exploits2References22
NVD
NVD
added 2023/11/22 9:15 a.m.10 views

CVE-2023-5921

Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass. This issue affects Geodi: before 8.0.0.27396...

7.1CVSS0.00017EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/11/22 9:3 a.m.20 views

CVE-2023-5921 Function Bypass in Geodi

Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass. This issue affects Geodi: before 8.0.0.27396...

7.1CVSS7.2AI score0.00017EPSS
Exploits0References2
CVE
CVE
added 2023/11/22 9:3 a.m.44 views

CVE-2023-5921

CVE-2023-5921 affects DECE Software Geodi prior to version 8.0.0.27396. The issue is described as an improper enforcement of behavioral workflow that allows a functionality bypass . The material explicitly ties this to Geodi and a version boundary; no exploit details are provided. The recommended...

7.1CVSS7.1AI score0.00017EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/03/06 12:0 a.m.52 views

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : rsync vulnerabilities (USN-5921-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5921-1 advisory. Koen van Hove discovered that the rsync client incorrectly validated filenames returned by servers. If a user or automated system were...

7.4CVSS8.3AI score0.00923EPSS
Exploits1References2
F5 Networks
F5 Networks
added 2023/02/21 6:44 p.m.21 views

K00103216: BIG-IP VIPRION MCPD vulnerability CVE-2020-5921

Security Advisory Description SYN flood causes a large number of MCPD context messages destined to secondary blades consuming memory and leading to MCPD failure. CVE-2020-5921 Impact This issue affects only VIPRION hosts with two or more blades installed, including those with Virtual Clustered...

7.5CVSS7.3AI score0.00647EPSS
Exploits0Affected Software11
NVD
NVD
added 2020/08/26 4:15 p.m.12 views

CVE-2020-5921

in BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, Syn flood causes large number of MCPD context messages destined to secondary blades consuming memory leading to MCPD failure. This issue affects only VIPRION hosts with two...

7.5CVSS7.5AI score0.00647EPSS
Exploits0References1
CVE
CVE
added 2020/08/26 3:21 p.m.41 views

CVE-2020-5921

CVE-2020-5921 affects BIG-IP VIPRION multi-blade platforms (two or more blades). A SYN flood drives a flood of MCPD context messages to secondary blades, causing memory exhaustion and MCPD failure; single-blade VIPRION systems are not affected. Remediation is version-specific per F5 advisory K001...

7.5CVSS7.4AI score0.00647EPSS
Exploits0References1Affected Software11
Tenable Nessus
Tenable Nessus
added 2020/08/26 12:0 a.m.36 views

F5 Networks BIG-IP : BIG-IP VIPRION MCPD vulnerability (K00103216)

SYN flood causes a large number of MCPD context messages destined to secondary blades consuming memory and leading to MCPD failure. CVE-2020-5921 Impact This issue affects only VIPRION hosts with two or more blades installed, including those with Virtual Clustered Multiprocessing vCMP provisioned...

7.5CVSS7.3AI score0.00647EPSS
Exploits0References2
CVE
CVE
added 2019/03/12 9:0 p.m.55 views

CVE-2019-5921

CVE-2019-5921 affects Windows 7 and describes an untrusted search path vulnerability where a Trojan horse DLL could be loaded from the application directory, enabling arbitrary code execution when a program loads a DLL from the same directory. Root cause: DLL planting in the application directory...

7.8CVSS7.7AI score0.02214EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2018/10/09 12:0 a.m.53 views

HP Printers CSRF Vulnerability (Oct 2018)

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129000052 and other firmware versions. This vulnerability is known as cross-site request forgery CSRF, and could potentially be exploited remotely to allow elevation of privilege. Copyright C 2018...

8.8CVSS8.9AI score0.00206EPSS
Exploits0References1
NVD
NVD
added 2018/10/03 8:29 p.m.4 views

CVE-2018-5921

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege...

8.8CVSS8.7AI score0.00206EPSS
Exploits0References1
CVE
CVE
added 2018/10/03 8:0 p.m.44 views

CVE-2018-5921

CVE-2018-5921 is a CSRF vulnerability affecting certain HP printers and MFPs (firmware versions including 2405129_000052 and related FutureSmart platforms). The issue could allow remote elevation of privilege via cross-site request forgery, as described in HP’s security bulletin for Enterprise an...

8.8CVSS8.6AI score0.00206EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder