CVE-2024-33051

CVE-2024-33051 is a WLAN firmware issue (Qualcomm) causing a transient Denial of Service when processing TIM Information Elements from beacon frames due to a missing length check. The CVE entries (NVD, Red Hat, CVE List, CNVD-style feeds) consistently describe a buffer over-read/length-check omis...

WordPress Robo Gallery plugin <= 3.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Title vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Gallery Title vulnerability discovered by Tim Coen in WordPress Plugin Robo Gallery versions = 3.2.19...

WordPress Robo Gallery plugin <= 3.2.19 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title vulnerability

Authenticated Author+ Stored Cross-Site Scripting via Image Title vulnerability discovered by Tim Coen in WordPress Plugin Robo Gallery versions = 3.2.19...

Siemens TIM 1531 IRC Infinite Loop Vulnerability

The TIM 1531 IRC is a communication module for SIMATIC S7-1500, S7-400, S7-300. An infinite loop vulnerability exists in the Siemens TIM 1531 IRC, which can be exploited by an authenticated, remote attacker to create a denial of service condition by importing a specially crafted PKCS12 container...

Siemens TIM 1531 IRC Digit Type Error Conversion Vulnerability

The TIM 1531 IRC is a communication module for SIMATIC S7-1500, S7-400, S7-300. The Siemens TIM 1531 IRC suffers from a number type miscommunication vulnerability that can be exploited by an attacker to cause a denial of service condition on an affected device...

CVE-2022-40225

A vulnerability has been identified in SIPLUS TIM 1531 IRC 6AG1543-1MX00-7XE0 All versions V2.4.8, TIM 1531 IRC 6GK7543-1MX00-0XE0 All versions V2.4.8. Casting an internal value could lead to floating point exception under certain circumstances. This could allow an attacker to cause a denial of...

CVE-2022-40225

A vulnerability has been identified in SIPLUS TIM 1531 IRC 6AG1543-1MX00-7XE0 All versions V2.4.8, TIM 1531 IRC 6GK7543-1MX00-0XE0 All versions V2.4.8. Casting an internal value could lead to floating point exception under certain circumstances. This could allow an attacker to cause a denial of...

CVE-2023-50763

Siemens CVE-2023-50763 affects multiple Siemens/SIPLUS products (e.g., SIMATIC CP 1542SP-1 IRC/CP 1543SP-1, SIPLUS ET 200SP variants, TIM 1531 IRC) where the web server may loop infinitely when processing incomplete PKCS12 certificate chains. This authenticated remote vulnerability could allow a ...

Wordpress MetForm plugin <= 3.8.8 - Unauthenticated Sensitive Information Exposure vulnerability

Unauthenticated Sensitive Information Exposure vulnerability discovered by Tim Coen in WordPress Plugin Metform versions = 3.8.8...

Siemens TIM 1531 IRC

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

多款Siemens产品 安全漏洞

The TIM 1531 IRC is a communication module for SIMATIC S7-1500, S7-400, S7-300. An infinite loop vulnerability exists in the Siemens TIM 1531 IRC, which can be exploited by an authenticated, remote attacker to create a denial of service condition by importing a specially crafted PKCS12 container...

WordPress Popup Builder plugin <= 4.2.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom JS vulnerability

AuthenticatedContributor+ Stored Cross-Site Scripting via Custom JS vulnerability discovered by Tim Coen in WordPress Plugin Popup Builder versions = 4.2.7...

WordPress WP Table Builder plugin <= 1.4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Tim Coen in WordPress Plugin WP Table Builder versions = 1.4.14...

WordPress 3D FlipBook plugin <= 1.15.4 - Authenticated (Author+) Stored Cross-Site Scritping via Bookmark URL vulnerability

Authenticated Author+ Stored Cross-Site Scritping via Bookmark URL vulnerability discovered by Tim Coen in WordPress Plugin 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery versions = 1.15.4...

WordPress Drag and Drop Multiple File Upload – Contact Form 7 plugin <= 1.3.7.7 - Sensitive Information Exposure vulnerability

Sensitive Information Exposure vulnerability discovered by Tim Coen in WordPress Plugin Drag and Drop Multiple File Upload – Contact Form 7 versions = 1.3.7.7...

WordPress Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.6.8 - Unauthenticated Sensitive Information Exposure vulnerability

Unauthenticated Sensitive Information Exposure vulnerability discovered by Tim Coen in WordPress Plugin Contact Form 7 Database Addon – CFDB7 versions = 1.2.6.8...

WordPress WP-Members Membership Plugin plugin <= 3.4.9.3 - Unprotected Storage of Potentially Sensitive Files vulnerability

Unprotected Storage of Potentially Sensitive Files vulnerability discovered by Tim Coen in WordPress Plugin WP-Members versions = 3.4.9.3...

WordPress Contact Form Entries plugin <= 1.3.8 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Tim Coen in WordPress Plugin Contact Form Entries versions = 1.3.8...

WordPress Filebird Plugin <= 5.6.3 is vulnerable to Cross Site Scripting (XSS)

Software Filebird Type Plugin Vulnerable versions = 5.6.3 Fixed in 5.6.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2345 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID de3d3d4867b8 Credits Tim Coen Required privilege...

WordPress Enhanced Media Library plugin <= 2.8.9 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Tim Coen in WordPress Plugin Enhanced Media Library versions = 2.8.9...