Sign-up

VARIoT news about IoT security

【Vulnerability Alert】GeoVision End-of-Life Devices - OS Command Injection

Trust: 4.75

Fetched: Nov. 22, 2024, 9:43 a.m., Published: Nov. 20, 2024, midnight
 Vulnerabilities: command injection, os command injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-11120

risk estimation study of native code vulnerabilities in Android applications | Journal of Cybersecurity | Oxford Academic

Trust: 3.25

Fetched: Nov. 22, 2024, 9:19 a.m., Published: Jan. 2, 2024, midnight
 Vulnerabilities: buffer overflow, code execution
Affected productsExternal IDs
vendor: lenovo model: updates
vendor: lenovo model: system
vendor: google model: android
vendor: samsung model: note
vendor: samsung model: mobile devices
vendor: samsung model: samsung
vendor: samsung model: mobile
vendor: motorola model: android
vendor: motorola model: motorola

Disclosure of 7 Android and Google Pixel Vulnerabilities | Oversecured Blog

Trust: 3.5

Fetched: Nov. 22, 2024, 9:14 a.m., Published: Nov. 7, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
vendor: google model: android
vendor: google model: pixel
db: NVD ids: CVE-2024-34719, CVE-2023-20963, CVE-2024-0017, CVE-2023-21292, CVE-2023-21383, CVE-2021-0600

Palo Alto Networks Fixes 2 Zero-Days in PAN-OS - Lansweeper

Trust: 5.5

Fetched: Nov. 20, 2024, 10:19 a.m., Published: Nov. 19, 2024, 3:14 p.m.
 Vulnerabilities: privilege escalation, authentication bypass
Affected productsExternal IDs
vendor: palo alto networks model: pan-os
vendor: palo alto networks model: networks
vendor: palo alto networks model: firewall
vendor: palo model: pan-os
vendor: palo model: networks
vendor: palo model: firewall
db: NVD ids: CVE-2024-9474, CVE-2024-0012

XillyUSB Device Endpoint Validation Vulnerability in Linux Kernel

Trust: 4.25

Fetched: Nov. 20, 2024, 10:18 a.m., Published: Nov. 12, 2024, midnight
 Vulnerabilities: endpoint validation vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2024-45011

CVE-2022-20931 Cisco Touch 10 Device Downgrade Attack Vulner... - vulnerability database | Vulners.com

Trust: 4.0

Fetched: Nov. 20, 2024, 10:17 a.m., Published: Nov. 15, 2024, 3:30 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco telepresence ce software
vendor: cisco model: telepresence ce software
vendor: cisco model: telepresence ce
vendor: cisco model: telepresence
vendor: cisco model: cisco telepresence
db: NVD ids: CVE-2022-20931

Update your iPhone, iPad, & Mac now to block security threats

Trust: 4.75

Fetched: Nov. 20, 2024, 10:15 a.m., Published: Nov. 13, 2024, midnight
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: apple model: software update
vendor: apple model: webkit
vendor: apple model: safari
vendor: apple model: ipad air
vendor: apple model: ipad
vendor: apple model: iphone
vendor: apple model: macos
db: NVD ids: CVE-2024-44308, CVE-2024-44309

Understanding the Vulnerabilities of the Diameter Protocol in 4G Networks

Trust: 5.5

Fetched: Nov. 20, 2024, 10:13 a.m., Published: Nov. 19, 2024, midnight
 Vulnerabilities: traffic interception, denial of service, information disclosure
Affected productsExternal IDs
vendor: trend model: security

What Is an Information Disclosure Vulnerability? [Examples]

Trust: 3.5

Fetched: Nov. 20, 2024, 10:13 a.m., Published: Nov. 6, 2024, midnight
 Vulnerabilities: improper access control, memory leak, information disclosure
Affected productsExternal IDs

The Critical Role of Vulnerability Testing in Modern Cybersecurity - History Tools

Trust: 3.25

Fetched: Nov. 20, 2024, 10:07 a.m., Published: Nov. 10, 2024, midnight
 Vulnerabilities: denial of service, code execution, authentication bypass...
Affected productsExternal IDs
vendor: essential model: phone
vendor: rising model: antivirus

Nvidia GPU driver addresses eight major high-severity vulnerabilities - Nvidia GPU owners should update ASAP | Tom's Hardware

Trust: 4.0

Fetched: Nov. 20, 2024, 10:06 a.m., Published: Oct. 28, 2024, 3:32 p.m.
 Vulnerabilities: denial of service, code execution, information disclosure
Affected productsExternal IDs

Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution

Trust: 3.5

Fetched: Nov. 20, 2024, 10:06 a.m., Published: Oct. 27, 2024, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

Mobile Endpoint Protection: Definition and Implementation

Trust: 3.5

Fetched: Nov. 20, 2024, 10:05 a.m., Published: Nov. 13, 2024, 2:49 p.m.
 Vulnerabilities: denial of service, sql injection
Affected productsExternal IDs
vendor: essential model: phone

GitLab Patches Critical HTML Injection Flaw Leading To XSS Attacks

Trust: 4.75

Fetched: Nov. 20, 2024, 10:04 a.m., Published: Oct. 24, 2024, 9:13 a.m.
 Vulnerabilities: denial of service, cross-site scripting
Affected productsExternal IDs
db: NVD ids: CVE-2024-8312, CVE-2024-6826

RCE Vulnerability in PAN-OS Exploited in-the-Wild

Trust: 5.75

Fetched: Nov. 20, 2024, 10:02 a.m., Published: Nov. 19, 2024, 3:54 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: palo alto networks model: pan-os
vendor: palo alto networks model: networks
vendor: palo model: pan-os
vendor: palo model: networks
db: NVD ids: CVE-2024-0012

Over 22,000 CyberPanel Servers at Risk from Critical Vulnerabilities Exploitation by PSAUX Ransomware - SOCRadar® Cyber Intelligence Inc.

Trust: 4.75

Fetched: Nov. 20, 2024, 10:01 a.m., Published: Oct. 30, 2024, 2 p.m.
 Vulnerabilities: command execution, code execution, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-51378, CVE-2024-51568, CVE-2024-51567

Data tables in the Microsoft Defender XDR advanced hunting schema - Microsoft Defender XDR | Microsoft Learn

Trust: 3.0

Fetched: Nov. 20, 2024, 9:56 a.m., Published: April 22, 2024, midnight
 Vulnerabilities: configuration attack
Affected productsExternal IDs

Apple Confirms Zero-Day Attacks Hitting macOS Systems | Hacker News

Trust: 3.25

Fetched: Nov. 20, 2024, 9:53 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos

Microsoft's new Quick Machine Recovery will remotely fix unbootable PCs

Trust: 4.25

Fetched: Nov. 20, 2024, 9:49 a.m., Published: Nov. 20, 2024, 5:30 a.m.
 Vulnerabilities: sql injection, privilege escalation, code execution...
Affected productsExternal IDs
vendor: palo model: networks
vendor: palo model: firewall
vendor: google model: chrome
vendor: google model: home
vendor: palo alto networks model: networks
vendor: palo alto networks model: firewall
vendor: trend model: security
vendor: trend model: password manager
vendor: trend micro model: security
vendor: trend micro model: password manager
vendor: blackberry model: link
vendor: blackberry model: blackberry
db: NVD ids: CVE-2024-9474, CVE-2024-0012, CVE-2024-38812, CVE-2024-38813, CVE-2024-21287

D-Link Urges Users to Replace VPN Routers Due to Unresolved RCE Vulnerability - VULNERA

Related entries in the VARIoT vulnerabilities database: VAR-202411-0293, VAR-202411-1173, VAR-202411-1034, VAR-202411-1056

Trust: 5.75

Fetched: Nov. 20, 2024, 9:48 a.m., Published: Nov. 19, 2024, 5:58 p.m.
 Vulnerabilities: code execution, command injection
Affected productsExternal IDs
vendor: d-link model: router
vendor: d-link model: dsr-250n firmware
vendor: d-link model: dsr-150
vendor: d-link model: dsr-250n
vendor: d-link model: dsr-250
vendor: d-link model: dsr-150n
db: NVD ids: CVE-2024-10914, CVE-2024-11066, CVE-2024-11068, CVE-2024-11067