Lucene search
+L

10588 matches found

Microsoft KB
Microsoft KB
•added 2025/06/10 7:00 a.m.•50 views

Description of the security update for SharePoint Enterprise Server 2016: June 10, 2025 (KB5002732)

None None...

8.8CVSS7AI score0.2116EPSS
SaveExploits2
Microsoft KB
Microsoft KB
•added 2025/06/10 7:00 a.m.•30 views

Description of the security update for SharePoint Enterprise Server 2016 Language Pack: June 10, 2025 (KB5002731)

None None...

7.8CVSS7AI score0.00653EPSS
SaveExploits0
SUSE Linux
SUSE Linux
•added 2025/06/10 5:33 a.m.•6 views

Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506001026 fixes several issues. The following security issues were fixed: CVE-2025-21680: pktgen: Avoid out-of-bounds access in getimixentries bsc1236701. CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmtremoveadvmonitorsync bsc1239096...

8.5CVSS7.7AI score0.00275EPSS
SaveExploits0References12
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/06/10 3:54 a.m.•8 views

Malicious code in jsons-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c23d84cb2201d919fefd3fa95fc777c80ed4adbb5e2fc87e1e1430bcb6edab6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2025/06/10 3:54 a.m.•8 views

MAL-2025-4839 Malicious code in jsons-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c23d84cb2201d919fefd3fa95fc777c80ed4adbb5e2fc87e1e1430bcb6edab6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/06/10 3:54 a.m.•0 views

Malware in jsons-pack

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/06/07 6:18 p.m.•28 views

CVE-2025-46258

Missing Authorization vulnerability in BdThemes Element Pack Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Element Pack Pro: from n/a before 8.0.0...

5.4CVSS8.5AI score0.00208EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/07 6:18 p.m.•30 views

CVE-2025-46257

Cross-Site Request Forgery CSRF vulnerability in BdThemes Element Pack Pro allows Cross Site Request Forgery.This issue affects Element Pack Pro: from n/a before 8.0.0...

4.3CVSS8.5AI score0.00143EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/05 6:15 p.m.•19 views

CVE-2025-46258

Missing Authorization vulnerability in BdThemes Element Pack Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Element Pack Pro: from n/a before 8.0.0...

5.4CVSS0.00208EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/06/05 6:15 p.m.•9 views

CVE-2025-46258

Missing Authorization vulnerability in BdThemes Element Pack Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Element Pack Pro: from n/a before 8.0.0...

5.4CVSS8.5AI score0.00208EPSS
SaveExploits0References3
NVD
NVD
•added 2025/06/05 6:15 p.m.•19 views

CVE-2025-46257

Cross-Site Request Forgery CSRF vulnerability in BdThemes Element Pack Pro allows Cross Site Request Forgery.This issue affects Element Pack Pro: from n/a before 8.0.0...

4.3CVSS0.00143EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/05 5:36 p.m.•13 views

CVE-2025-46258 WordPress Element Pack Pro Plugin < 8.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in BdThemes Element Pack Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Element Pack Pro: from n/a before 8.0.0...

5.4CVSS5.6AI score0.00208EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/05 5:36 p.m.•92 views

CVE-2025-46258

CVE-2025-46258 describes a Missing Authorization vulnerability in BdThemes Element Pack Pro for WordPress, where access controls are improperly configured. The issue affects Element Pack Pro versions prior to 8.0.0 and could permit unauthorized access due to weak authorization checks (Broken Acce...

5.4CVSS8.5AI score0.00208EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/05 5:36 p.m.•35 views

CVE-2025-46258 WordPress Element Pack Pro Plugin < 8.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in BdThemes Element Pack Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Element Pack Pro: from n/a before 8.0.0...

5.4CVSS0.00208EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/05 5:35 p.m.•31 views

CVE-2025-46257 WordPress Element Pack Pro Plugin < 8.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in BdThemes Element Pack Pro allows Cross Site Request Forgery.This issue affects Element Pack Pro: from n/a before 8.0.0...

4.3CVSS0.00143EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/05 5:35 p.m.•10 views

CVE-2025-46257 WordPress Element Pack Pro Plugin < 8.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in BdThemes Element Pack Pro allows Cross Site Request Forgery.This issue affects Element Pack Pro: from n/a before 8.0.0...

4.3CVSS4.7AI score0.00143EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/05 5:35 p.m.•69 views

CVE-2025-46257

BdThemes Element Pack Pro (WordPress) versions prior to 8.0.0 are affected by a Cross‑Site Request Forgery (CSRF) vulnerability. The issue stems from not adequately verifying that requests come from trusted users, enabling unauthorized actions on behalf of authenticated users. CVE-2025-46257 is d...

4.3CVSS8.5AI score0.00143EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/06/05 7:40 a.m.•23 views

Security Bulletin: Maximo AI Service Component: Spring Security Aspects may not correctly locate method security annotations on private methods.

Summary Security Bulletin: Maximo AI Service Component Component uses Spring Security Aspects may not correctly locate method security annotations on private methods.This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-41232...

9.1CVSS6.7AI score0.00619EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/06/05 12:00 a.m.•22 views

PT-2025-23945 · Unknown · Bdthemes Element Pack Pro

Name of the Vulnerable Software and Affected Versions: BdThemes Element Pack Pro versions prior to 8.0.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions prior t...

5.4CVSS9.2AI score0.00208EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/06/05 12:00 a.m.•19 views

PT-2025-23944 · Unknown · Bdthemes Element Pack Pro

Name of the Vulnerable Software and Affected Versions: BdThemes Element Pack Pro versions prior to 8.0.0 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions prior to 8.0.0, upda...

4.3CVSS9.3AI score0.00143EPSS
SaveExploits0References5
Rows per page
Query Builder