Lucene search
+L

7925 matches found

OSV
OSV
added 2025/07/03 12:00 a.m.5 views

OPENSUSE-SU-2025:15265-1 libprotobuf-lite31_1_0-31.1-1.1 on GA media

These are all security issues fixed in the libprotobuf-lite3110-31.1-1.1 package on the GA media of openSUSE Tumbleweed...

8.2CVSS6.7AI score0.00261EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/02 11:25 a.m.20 views

CVE-2025-4407

Insufficient Session Expiration vulnerability in ABB Lite Panel Pro.This issue affects Lite Panel Pro: through 1.0.1...

6.8CVSS6.5AI score0.00159EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/01 9:14 a.m.7 views

Malicious code in fb-error-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7df1010f67c9aa7b88340ac8b1041d477068c17370f2d9eaa865a75e3e21deb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSV
OSV
added 2025/07/01 9:14 a.m.6 views

MAL-2025-5497 Malicious code in fb-error-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7df1010f67c9aa7b88340ac8b1041d477068c17370f2d9eaa865a75e3e21deb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
NVD
NVD
added 2025/06/30 12:15 p.m.16 views

CVE-2025-4407

Insufficient Session Expiration vulnerability in ABB Lite Panel Pro.This issue affects Lite Panel Pro: through 1.0.1...

6.8CVSS0.00159EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/30 11:16 a.m.7 views

CVE-2025-4407 Application does not invalidate session after password reset

Insufficient Session Expiration vulnerability in ABB Lite Panel Pro.This issue affects Lite Panel Pro: through 1.0.1...

6.8CVSS6.6AI score0.00159EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/30 11:16 a.m.28 views

CVE-2025-4407

The CVE-2025-4407 entry concerns ABB Lite Panel Pro with an Insufficient Session Expiration flaw affecting versions up to and including 1.0.1. The issue, with adjacent network attack vector, low privileges required, and user interaction needed, could compromise confidentiality and integrity, unde...

6.8CVSS6.7AI score0.00159EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/30 11:16 a.m.21 views

CVE-2025-4407 Application does not invalidate session after password reset

Insufficient Session Expiration vulnerability in ABB Lite Panel Pro.This issue affects Lite Panel Pro: through 1.0.1...

6.8CVSS0.00159EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/30 6:00 a.m.41 views

CVE-2025-5730

CVE-2025-5730 affects the WordPress Contact Form Plugin prior to 1.1.29. The issue is caused by insufficient sanitization/escaping of certain plugin settings, allowing authenticated high-privilege users (e.g., contributors) to perform a Stored Cross-Site Scripting (XSS) attack. The vulnerability ...

4.3CVSS5.5AI score0.00206EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/06/30 12:00 a.m.11 views

ABB Lite Panel Pro 代码问题漏洞

ABB Lite Panel Pro is a human-machine interface product from ABB Switzerland. A code issue vulnerability exists in ABB Lite Panel Pro 1.0.1 and prior versions, which stems from insufficient session expiration...

6.8CVSS7AI score0.00159EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/06/30 12:00 a.m.9 views

PT-2025-27436 · Abb · Abb Lite Panel Pro

Name of the Vulnerable Software and Affected Versions: ABB Lite Panel Pro versions through 1.0.1 Description: The issue is related to Insufficient Session Expiration. This problem affects ABB Lite Panel Pro, allowing potential exploitation due to sessions not expiring as expected. Recommendations...

6.8CVSS6.3AI score0.00159EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/06/29 2:26 p.m.8 views

CVE-2025-53317

Cross-Site Request Forgery CSRF vulnerability in AcmeeDesign WPShapere - WordPress admin theme wpshapere-lite allows Stored XSS.This issue affects WPShapere - WordPress admin theme: from n/a through = 1.4.1...

7.1CVSS5.9AI score0.00109EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/27 2:15 p.m.10 views

CVE-2025-53317

Cross-Site Request Forgery CSRF vulnerability in AcmeeDesign WPShapere - WordPress admin theme wpshapere-lite allows Stored XSS.This issue affects WPShapere - WordPress admin theme: from n/a through = 1.4.1...

7.1CVSS0.00109EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/27 1:21 p.m.18 views

CVE-2025-53317 WordPress WPShapere Lite plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in AcmeeDesign WPShapere - WordPress admin theme wpshapere-lite allows Stored XSS.This issue affects WPShapere - WordPress admin theme: from n/a through = 1.4.1...

7.1CVSS0.00109EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/27 1:21 p.m.21 views

CVE-2025-53317

CVE-2025-53317 relates to AcmeeDesign WPShapere Lite

7.1CVSS5.9AI score0.00109EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/27 1:21 p.m.3 views

CVE-2025-53317 WordPress WPShapere Lite plugin <= 1.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in AcmeeDesign WPShapere Lite allows Stored XSS. This issue affects WPShapere Lite: from n/a through 1.4...

7.1CVSS7AI score0.00109EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/27 12:00 a.m.7 views

PT-2025-27214 · Acmeedesign · Wpshapere Lite

Name of the Vulnerable Software and Affected Versions: AcmeeDesign WPShapere Lite versions 1.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For AcmeeDesign WPShapere Lite versions 1.4 and earlier, update to a versio...

7.1CVSS6.8AI score0.00109EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/06/27 12:00 a.m.5 views

WordPress plugin WPShapere Lite 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

7.1CVSS6AI score0.00109EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/24 2:26 p.m.7 views

Malicious code in messaging-client-lite (npm)

The package communicates with a domain associated with malicious activity...

7AI score
SaveExploits0
CVE
CVE
added 2025/06/19 3:40 a.m.117 views

CVE-2025-4479

CVE-2025-4479 corresponds to a stored XSS flaw in the ElementsKit Lite/ElementsKit Elementor Addons and Templates WordPress plugin (versions

6.4CVSS5.7AI score0.00231EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder