Sign-up

VARIoT news about IoT security

Latest news

The news are found with our scripts for filtering search results.
Additional information about vulnerabilities, affected products and external identifiers are obtained with NLP and custom filters from found news.

Update Canonical Ubuntu Server: USN-7517-1: Linux kernel (Xilinx ZynqMP) vulnerabilities

Trust: 3.0

Fetched: June 13, 2025, 9:40 a.m., Published: Jan. 13, 7517, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Improving the Adoption of Physical Authentication Devices Through Enhanced Usable Security Features | SpringerLink

Trust: 3.0

Fetched: June 13, 2025, 9:34 a.m., Published: June 13, 2025, midnight
 Vulnerabilities: -

Understanding OWASP Top 10 - Mitigating Web Application Vulnerabilities

Trust: 3.5

Fetched: June 13, 2025, 9:33 a.m., Published: June 11, 2025, 10:12 a.m.
 Vulnerabilities: injection attack, cross-site scripting, request forgery...
Affected productsExternal IDs

Indian govt issues high-severity warning for MediaTek-powered devices: Here’s how to be safe

Trust: 4.0

Fetched: June 13, 2025, 9:32 a.m., Published: June 12, 2025, 1:35 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: oneplus model: oneplus
db: NVD ids: CVE-2025-20673, CVE-2025-20672

What is Domain Name System(DNS)? - GeeksforGeeks

Trust: 3.75

Fetched: June 13, 2025, 9:31 a.m., Published: Sept. 25, 2023, 4:26 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

The 10 Major Java Vulnerability Types that Threaten Your Software

Trust: 3.5

Fetched: June 13, 2025, 9:30 a.m., Published: June 10, 2025, midnight
 Vulnerabilities: injection attack, cross-site scripting, sql injection...
Affected productsExternal IDs
vendor: cups model: cups

CVE-2025-4338 Lantronix Device Installer Improper Restrictio... - vulnerability database | Vulners.com

Trust: 3.25

Fetched: June 13, 2025, 9:27 a.m., Published: May 22, 2025, 11 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-4338

Update Canonical Ubuntu Desktop: USN-7510-1: Linux kernel vulnerabilities

Trust: 3.25

Fetched: June 13, 2025, 9:27 a.m., Published: Jan. 13, 7510, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Critical SAP Vulnerability Exposes Enterprises | Trend Micro (UK)

Related entries in the VARIoT vulnerabilities database: VAR-202504-3437

Trust: 5.5

Fetched: June 13, 2025, 9:26 a.m., Published: June 12, 2025, midnight
 Vulnerabilities: command execution, file upload vulnerability, improper validation...
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend micro model: trend micro security
vendor: trend micro model: deep security
vendor: trend model: security
vendor: trend model: trend micro security
vendor: trend model: deep security
db: NVD ids: CVE-2025-31324

CVE-2025-20164: Privilege Elevation Vulnerability in Cisco Industrial Ethernet Switch Device Manager - Cybersecurity Exploit Tracker by Ameeba

Trust: 4.75

Fetched: June 13, 2025, 9:23 a.m., Published: May 17, 2025, 10:22 p.m.
 Vulnerabilities: privilege elevation
Affected productsExternal IDs
vendor: cisco model: industrial ethernet
vendor: cisco model: cisco ios
vendor: cisco model: ios software
vendor: cisco model: device manager
db: NVD ids: CVE-2025-20164

CISA KEV 警告 25/06/02：ScreenConnect／ASUS Router／Craft CMS を登録 - IoT OT Security News

Related entries in the VARIoT vulnerabilities database: VAR-202309-0729, VAR-202105-1346

Trust: 4.0

Fetched: June 13, 2025, 9:23 a.m., Published: June 2, 2025, 10:29 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: asus model: asus
vendor: asus model: router
db: NVD ids: CVE-2023-39780, CVE-2025-35939, CVE-2024-56145, CVE-2021-32030, CVE-2025-3935

U.S. CISA adds Wazuh, and WebDAV flaws to its Known Exploited Vulnerabilities catalog

Trust: 5.75

Fetched: June 13, 2025, 9:22 a.m., Published: June 12, 2025, 9:17 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: asus model: asus
vendor: asus model: routers
vendor: tp-link model: routers
vendor: huawei model: huawei
db: NVD ids: CVE-2025-24016, CVE-2025-33053

Microsoft 365 Copilot's Data Exposed - Hit by Zero-Click Vulnerability " TechWorm

Trust: 4.0

Fetched: June 13, 2025, 9:21 a.m., Published: June 12, 2025, 5:58 p.m.
 Vulnerabilities: injection attack
Affected productsExternal IDs
db: NVD ids: CVE-2025-32711

SSA-633269

Trust: 3.0

Fetched: June 13, 2025, 9:21 a.m., Published: June 3, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-41797

Update Microsoft SharePoint Server 2019: KB5002727 : resolves a Microsoft Word remote code execution vulnerability.

Trust: 4.25

Fetched: June 13, 2025, 9:20 a.m., Published: June 13, 2019, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-47168, CVE-2025-47169

Critical Windows Task Scheduler Flaw CVE-2025-33067 Exposes Millions to Privilege Escalation | Windows Forum

Trust: 4.5

Fetched: June 13, 2025, 9:16 a.m., Published: May 13, 2025, midnight
 Vulnerabilities: code execution, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2025-33067, CVE-2018-8440

Update Microsoft SharePoint Server 2016: KB5002731: Resolves a Microsoft Word remote code execution vulnerability.

Trust: 3.25

Fetched: June 13, 2025, 9:15 a.m., Published: June 13, 2016, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-47168, CVE-2025-47169

CVE-2025-23099: Critical Vulnerability in Samsung Mobile Processor Exynos 1480 and 2400 - Cybersecurity Exploit Tracker by Ameeba

Trust: 4.75

Fetched: June 13, 2025, 9:15 a.m., Published: June 9, 2025, 5:01 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: samsung model: exynos
vendor: samsung model: samsung mobile
db: NVD ids: CVE-2025-23099

Warning: Discontinued Amazon Cloud Cam Has Vulnerability (CVE-2025-6031), Exposing Your Network

Trust: 4.25

Fetched: June 13, 2025, 9:15 a.m., Published: June 13, 2025, 2:25 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-6031

Zero-Click Spyware Attacks Compromised iOS Devices Through iMessage Vulnerability - Cyber Kendra

Trust: 3.75

Fetched: June 13, 2025, 9:06 a.m., Published: March 18, 2001, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2025-43200