WordPress EasyBook premium theme <= 1.2.1 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by m0ze in WordPress EasyBook premium theme versions = 1.2.1. Solution Update the WordPress EasyBook premium theme to the latest available version at least 1.2.2...

WordPress CityBook premium theme <= 2.3.3 - Multiple vulnerabilities

Multiple vulnerabilities found by m0ze in WordPress CityBook premium theme versions = 2.3.3. Solution Update the WordPress CityBook premium theme to the latest available version at least 2.3.4...

CVE-2019-6856

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium see security notification for specific versions which could cause a Denial of Service when writing specific physical memory blocks using Modbus TCP...

CVE-2018-7794

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium see security notification for specific versions which could cause a Denial of Service when reading data with invalid index using Modbus TCP...

Design/Logic Flaw

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium see security notification for specific versions which could cause a Denial of Service when reading data with invalid index using Modbus TCP...

CVE-2018-7794

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium see security notification for specific versions which could cause a Denial of Service when reading data with invalid index using Modbus TCP...

CVE-2018-7794

CVE-2018-7794 affects Schneider Electric Modicon controllers (M580, M340, Quantum, Premium) with a CWE-754 weakness that can cause a Denial of Service when reading data with an invalid Modbus TCP index. Affected versions include M580 (pre-2.80), M340 (pre-3.01), Premium (pre-3.20), Quantum (pre-3...

CVE-2019-6857

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium see security notification for specific versions which could cause a Denial of Service of the controller when reading specific memory blocks using...

CVE-2019-6857

CVE-2019-6857 affects Schneider Electric Modicon controllers (M580, M340, Premium, Quantum). The vulnerability is CWE-754: Improper Check for Unusual or Exceptional Conditions, causing a denial-of-service when reading specific memory blocks via Modbus TCP. The ICSA-20-016-01 advisory lists affect...

CVE-2019-6857

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium see security notification for specific versions which could cause a Denial of Service of the controller when reading specific memory blocks using...

CVE-2019-6856

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium see security notification for specific versions which could cause a Denial of Service when writing specific physical memory blocks using Modbus TCP...

CVE-2019-6856

CVE-2019-6856 affects Schneider Electric Modicon controllers: M580, M340, Premium, and Quantum. Root cause is CWE-754 Improper Check for Unusual or Exceptional Conditions, causing a possible Denial of Service when writing certain physical memory blocks via Modbus TCP. Affected versions (per advis...

PT-2020-11217

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists that could cause a...

PT-2020-11216

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists that could cause a...

PT-2020-8981

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists that could cause a...

WordPress Extra premium theme <= 4.0.9 - Authenticated Code Injection vulnerability

Authenticated Code Injection vulnerability found in WordPress Extra premium theme versions = 4.0.9. Solution Update the WordPress Extra premium theme to the latest available version at least 4.0.10...

WordPress TownHub premium theme <= 1.0.5 - Unauthenticated Cross-Site Scripting (XSS) vulnerability

Unauthenticated Cross-Site Scripting XSS vulnerability found by m0ze in WordPress TownHub premium theme versions = 1.0.5. Solution Update the WordPress TownHub premium theme to the latest available version at least 1.0.6...

WordPress TownHub premium theme <= 1.0.5 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress TownHub premium theme versions = 1.0.5. Solution Update the WordPress TownHub premium theme to the latest available version at least 1.0.6...

CVE-2019-20000

The malware scan function in BullGuard Premium Protection 20.0.371.8 has a TOCTOU issue that enables a symbolic link attack, allowing privileged files to be deleted...

CVE-2019-20000

CVE-2019-20000 affects BullGuard Premium Protection 20.0.371.8. The vulnerability is a TOCTOU issue in the malware scan function that allows a symbolic-link attack, enabling privileged files to be deleted. Connected sources confirm the issue across Red Hat and CVE records, with no explicit exploi...