CVE-2017-5251

In version 1012 and prior of Insteon's Insteon Hub, the radio transmissions used for communication between the hub and connected devices are not encrypted...

CVE-2017-5251

CVE-2017-5251 affects Insteon Hub (version 1012 and prior). The vulnerability stems from radio transmissions between the hub and connected devices not being encrypted, exposing confidentiality and integrity of communications. The available sources do not provide exploitation details or a confirme...

CVE-2017-5251

In version 1012 and prior of Insteon's Insteon Hub, the radio transmissions used for communication between the hub and connected devices are not encrypted...

Philips Hue Bridge BSB002 public API security bypass vulnerability

Philips Hue Bridge BSB002 is a smart home lighting system from Philips in the Netherlands. public API is one of the public interfaces. A security vulnerability exists in the public API in the Philips Hue Bridge BSB002 using firmware version 1707040932, where the vulnerable program fails to encryp...

CVE-2017-7078

An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. The issue involves the "Mail Drafts" component. It allows remote attackers to obtain sensitive information by reading unintended cleartext transmissions...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. The issue involves the "Mail Drafts" component. It allows remote attackers to obtain sensitive information by reading unintended cleartext transmissions...

CVE-2017-7078

An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. The issue involves the "Mail Drafts" component. It allows remote attackers to obtain sensitive information by reading unintended cleartext transmissions...

NetApp Clustered Data ONTAP HTTPS Session Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from American NetApp. The system supports users to enhance the performance of enterprise applications and improve data center flexibility and so on. NetApp Clustered Data ONTAP suffers from an HTTPS session...

GLSA-201701-36 : Apache: Multiple vulnerabilities (httpoxy)

The remote host is affected by the vulnerability described in GLSA-201701-36 Apache: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Apache. Please review the CVE identifiers, upstream Apache Software Foundation documentation, and HTTPoxy website referenced below for...

Industrial Secure Routers EDR-810 EDR-G902 EDR-G903 - Insecure Configuration Management

Industrial Secure Routers EDR-810 EDR-G902 EDR-G903 - Insecure Configuration Management Title: Industrial Secure Routers - Insecure Configuration Management Type: Local/Remote Author: Nassim Asrir Author Company: HenceForth Impact: Insecure Configuration Management Risk: 4/5 Release Date:...

CVE-2016-2398

Comcast XFINITY Home Security System does not properly maintain base-station communication, which allows physically proximate attackers to defeat sensor functionality by interfering with ZigBee 2.4 GHz transmissions...

Vulnerability in Arbiter Systems GPS Clock

The Arbiter 1094B GPS Substation Clock is a high precision GPS timing and power measurement solution. A security vulnerability exists in the Arbiter 1094B GPS Substation Clock that could be exploited by an attacker to spoof GPS satellite broadcasts via specially crafted radio transmissions,...

CVE-2014-9194

Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service disruption via crafted radio transmissions that spoof GPS satellite broadcasts...

Design/Logic Flaw

Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service disruption via crafted radio transmissions that spoof GPS satellite broadcasts...

CVE-2014-9194 Arbiter Systems 1094B GPS Clock Insufficient Verification of Data Authenticity

Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service disruption via crafted radio transmissions that spoof GPS satellite broadcasts...

CVE-2014-9194

The CVE-2014-9194 issue affects Arbiter Systems’ 1094B GPS Substation Clock. The vulnerability is described as Insufficient Verification of Data Authenticity (CWE-345) allowing remote attackers to spoof GPS satellite broadcasts via crafted radio transmissions, leading to clock disruption or servi...

Code injection

Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not use encryption, which allows remote attackers to interfere with traffic control by replaying transmissions on a wireless network...

CVE-2014-5171

SAP HANA Extend Application Services XS does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network...

PT-2014-6310 · Sap · Sap Hana Extended Application Services

Name of the Vulnerable Software and Affected Versions: SAP HANA Extend Application Services XS affected versions not specified Description: The issue concerns the lack of encryption for transmissions in applications that use form-based authentication with SSL, allowing remote attackers to interce...

Critics Continue Pushing for Bigger Probe into Google Street View Practices

Privacy advocates continue urging for a wider federal investigation into Google Street View practices following Google’s $25,000 fine for stonewalling federal officials during an earlier probe of Wi-Fi snooping allegations. The Federal Communications Commission late last week gave the Internet...