CVE-2017-14797

Lack of Transport Encryption in the public API in Philips Hue Bridge BSB002 SW 1707040932 allows remote attackers to read API keys and consequently bypass the pushlink protection mechanism, and obtain complete control of the connected accessories by leveraging the ability to sniff HTTP traffic on...

CVE-2017-14797

The CVE-2017-14797 entry concerns Philips Hue Bridge BSB002 public API on firmware 1707040932, where a lack of transport encryption enables an attacker on the local intranet to sniff HTTP traffic and read API keys. This bypasses the pushlink protection and can, per cited sources, allow full contr...

PT-2017-13690

Name of the Vulnerable Software and Affected Versions Philips Hue Bridge BSB002 version 1707040932 Description The issue is related to a lack of transport encryption in the public API, allowing remote attackers to read API keys by sniffing HTTP traffic on the local intranet network. This can lead...

Cisco Meeting Server Traversal Using Relay NAT Server Unauthorized Access Vulnerability

Cisco Meeting Server formerly known as Acano Conferencing Server, CMS is the United States Cisco Cisco company's set of audio and video conferencing server software.Traversal Using Relay NAT TURN server is one of the multimedia application traversal server. A security vulnerability in the TURN...

PT-2017-12424

Name of the Vulnerable Software and Affected Versions Cisco Meeting Server CMS versions prior to 2.0.16 Cisco Meeting Server CMS versions prior to 2.1.11 Cisco Meeting Server CMS versions prior to 2.2.6 Description A vulnerability in the Traversal Using Relay NAT TURN server could allow an...

CVE-2017-12249: Exposure of Resource to Wrong Sphere

A vulnerability in the Traversal Using Relay NAT TURN server included with Cisco Meeting Server CMS could allow an authenticated, remote attacker to gain unauthenticated or unauthorized access to components of or sensitive information in an affected system. The vulnerability is due to an incorrec...

WordPress Bridge theme cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on PHP and MySQL servers.Bridge theme is one of the Wordpress themes. A cross-site scripting vulnerability exists in WordPress Bridge theme 11.2 an...

CVE-2017-13138

DOM based Cross-site scripting XSS vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript...

Cross site scripting

DOM based Cross-site scripting XSS vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript...

CVE-2017-13138

DOM based Cross-site scripting XSS vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript...

CVE-2017-13138

CVE-2017-13138 is a DOM-based Cross-Site Scripting (XSS) vulnerability in the Bridge WordPress theme. Affected product/version: Bridge theme before 11.2 (WordPress). Root cause: DOM XSS that allows remote attackers to inject arbitrary JavaScript. Impact: enables script injection in users’ browser...

CVE-2017-13138

DOM based Cross-site scripting XSS vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript...

PT-2017-12926

Name of the Vulnerable Software and Affected Versions Bridge theme versions prior to 11.2 Description A DOM based Cross-site scripting XSS issue allows remote attackers to inject arbitrary JavaScript. Recommendations For versions prior to 11.2, update to version 11.2 or later to resolve the issue...

CVE-2017-13138: Improper Neutralization of Input During Web Page Generation

DOM based Cross-site scripting XSS vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript...

openstack-neutron: iptables not active after update

A race-condition flaw was discovered in openstack-neutron where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an...

openstack-neutron: iptables not active after update

A race-condition flaw was discovered in openstack-neutron where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an...

openstack-neutron: iptables not active after update

A race-condition flaw was discovered in openstack-neutron where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an...

openstack-neutron: iptables not active after update

A race-condition flaw was discovered in openstack-neutron where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an...

Bridge Theme <= 11.1 - DOM Cross-Site Scripting (XSS)

The bridge WordPress theme was affected by a DOM Cross-Site Scripting XSS security vulnerability...

WordPress Bridge theme <=11.1 - DOM Cross-Site Scripting (XSS) vulnerability

WordPress Bridge theme 11.1 and earlier versions are vulnerable to DOM Cross-Site Scripting XSS vulnerability Solution Update the WordPress Bridge theme to the latest available version at least 11.2...