Sign-up

VARIoT news about IoT security

Update Canonical Ubuntu Desktop: USN-6990-1: znc vulnerability

Trust: 3.25

Fetched: Nov. 5, 2024, 9:48 a.m., Published: Jan. 5, 6990, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Update Canonical Ubuntu Desktop: USN-7045-1: libppd vulnerability

Trust: 3.25

Fetched: Nov. 5, 2024, 9:47 a.m., Published: Jan. 5, 7045, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Multiple vulnerabilites in libexpat affecting PRC7000 | Bosch PSIRT

Trust: 4.0

Fetched: Nov. 5, 2024, 9:45 a.m., Published: Aug. 20, 2002, midnight
 Vulnerabilities: integer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2024-45492, CVE-2024-45490, CVE-2024-45491

Cisco - Security device manager Vulnerability Maturity Index CVE

Trust: 3.0

Fetched: Nov. 5, 2024, 9:44 a.m., Published: Nov. 1, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: device manager
vendor: cisco model: security device manager

CVE-2024-43897: Addressing GSO Checksum Validation Vulnerability in Linux Kernel

Trust: 3.0

Fetched: Nov. 5, 2024, 9:44 a.m., Published: Aug. 26, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-43897

iOS 18.1-New Update Warning Issued To All iPhone Users

Trust: 4.75

Fetched: Nov. 5, 2024, 9:43 a.m., Published: Oct. 31, 2024, 4:30 p.m.
 Vulnerabilities: information leakage
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: ipad
vendor: apple model: tvos
vendor: apple model: safari
vendor: apple model: iphone
vendor: apple model: watchos
vendor: apple model: webkit
vendor: apple model: ipad air
vendor: apple model: software update
db: NVD ids: CVE-2024-44255, CVE-2024-44239, CVE-2024-44244, CVE-2024-44261

CyberSecurity news about CVE-2024-7120

Trust: 5.25

Fetched: Nov. 5, 2024, 9:41 a.m., Published: Nov. 5, 2024, 1:04 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-7120

Microsoft Security Advisory CVE-2024-43484 | .NET Denial of Service Vulnerability · Issue #328 · dotnet/announcements

Trust: 5.0

Fetched: Nov. 5, 2024, 9:39 a.m., Published: Nov. 5, 2044, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2024-43484

CVE-2024-20475: Cisco SD-WAN vManage Cross-Site Scripting Vulnerability and Mitigation

Related entries in the VARIoT vulnerabilities database: VAR-202409-1826

Trust: 4.5

Fetched: Nov. 5, 2024, 9:39 a.m., Published: June 20, 2001, midnight
 Vulnerabilities: cross-site scripting, improper validation
Affected productsExternal IDs
vendor: cisco model: catalyst
vendor: cisco model: sd-wan vmanage
vendor: cisco model: sd-wan
vendor: cisco model: cisco sd-wan
vendor: cisco model: wan manager
db: NVD ids: CVE-2024-20475

Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491) - Blog | Tenable®

Trust: 4.75

Fetched: Nov. 5, 2024, 9:36 a.m., Published: Sept. 10, 2024, 6:21 p.m.
 Vulnerabilities: command execution, code execution, feature bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2024-37339, CVE-2024-43487, CVE-2024-38014, CVE-2024-37337, CVE-2024-26191, CVE-2024-37338, CVE-2024-37966, CVE-2024-26186, CVE-2024-37335, CVE-2024-38217, CVE-2024-37342, CVE-2024-43491, CVE-2024-38018, CVE-2024-38213, CVE-2024-38226, CVE-2024-37340

Microsoft Security Advisory CVE-2024-43483 | .NET Denial of Service Vulnerability · Issue #327 · dotnet/announcements

Trust: 5.0

Fetched: Nov. 5, 2024, 9:33 a.m., Published: Nov. 5, 2044, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2024-43483

Understanding and Mitigating CVE-2024-49390: A Local Privilege Escalation Vulnerability in Acronis Cyber Files

Trust: 5.0

Fetched: Nov. 5, 2024, 9:32 a.m., Published: Nov. 3, 2024, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2024-49390

Siemens InterMesh Subscriber Devices - vulnerability database | Vulners.com

Trust: 4.5

Fetched: Nov. 5, 2024, 9:31 a.m., Published: Oct. 29, 2024, noon
 Vulnerabilities: command injection, code execution, os command injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-47904, CVE-2024-47903, CVE-2024-47901, CVE-2024-47902

CVE-2024-45259 - vulnerability database | Vulners.com

Trust: 3.25

Fetched: Nov. 5, 2024, 9:30 a.m., Published: Oct. 24, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-45259

Hacked TP-Link routers at center of massive botnet used to attack Azure customers | TechSpot

Trust: 3.75

Fetched: Nov. 5, 2024, 9:22 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: tp-link model: routers

Critical Error Handling in Linux Kernel: MIPI I3C HCI Driver Vulnerability

Trust: 3.25

Fetched: Nov. 5, 2024, 9:21 a.m., Published: Nov. 11, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-47665

Fortinet Devices Under Active Threat Due to Zero Day Vulnerability

Trust: 5.25

Fetched: Nov. 5, 2024, 9:19 a.m., Published: Oct. 25, 2024, midnight
 Vulnerabilities: authentication issue
Affected productsExternal IDs
db: NVD ids: CVE-2024-47575

Some Samsung Exynos Devices Have Security Vulnerability Concerns

Trust: 3.75

Fetched: Nov. 5, 2024, 9:19 a.m., Published: Oct. 26, 2024, 10:40 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: galaxy
vendor: samsung model: exynos
vendor: samsung model: galaxy s10
vendor: samsung model: mobile
vendor: samsung model: note
vendor: samsung model: samsung galaxy
vendor: samsung model: galaxy note
vendor: samsung model: samsung
vendor: samsung model: note 10
db: NVD ids: CVE-2024-44068

Understanding CVE-2024-0029: Elevation of Privilege in Android 13

Trust: 5.0

Fetched: Nov. 5, 2024, 9:18 a.m., Published: Nov. 13, 2024, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2024-0029

Delta Electronics InfraSuite Device Master - vulnerability database | Vulners.com

Trust: 5.75

Fetched: Nov. 5, 2024, 9:18 a.m., Published: Oct. 29, 2024, noon
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security
db: NVD ids: CVE-2024-10456