Sign-up

VARIoT news about IoT security

Multiple Vulnerabilities in Ivanti Products Could Allow for Remote Code Execution

Trust: 3.0

Fetched: Jan. 28, 2025, 9:23 a.m., Published: Jan. 9, 2025, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

ScanNow UPn checks for vulnerabilities in Networks for Devices - UMA Technology

Trust: 3.75

Fetched: Jan. 28, 2025, 9:21 a.m., Published: Jan. 4, 2025, 2:55 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

Update Canonical Ubuntu Desktop: USN-7225-1: HTMLDOC vulnerabilities

Trust: 5.75

Fetched: Jan. 28, 2025, 9:20 a.m., Published: Jan. 28, 7225, midnight
 Vulnerabilities: denial of service, buffer overflow
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2024-46478, CVE-2022-34033, CVE-2024-45508, CVE-2022-28085, CVE-2022-0137, CVE-2022-34035, CVE-2022-24191, CVE-2022-27114, CVE-2022-0534

Update Canonical Ubuntu Desktop: USN-7221-1: Linux kernel (OEM) vulnerabilities

Trust: 4.25

Fetched: Jan. 28, 2025, 9:20 a.m., Published: Jan. 28, 7221, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2024-53238, CVE-2024-56757

Understanding and Mitigating CVE-2025-21207: Windows Cdpsvc Denial of Service Vulnerability

Trust: 4.0

Fetched: Jan. 28, 2025, 9:20 a.m., Published: Jan. 14, 2025, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2025-21207

Update Canonical Ubuntu Desktop: USN-7224-1: Cyrus IMAP Server vulnerabilities

Trust: 4.75

Fetched: Jan. 28, 2025, 9:19 a.m., Published: Jan. 28, 7224, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cyrus model: imap server
vendor: cyrus model: cyrus imap server
vendor: canonical model: ubuntu
db: NVD ids: CVE-2024-34055, CVE-2019-18928, CVE-2021-33582

Critical SonicWall Vulnerability Exploited In Attacks Execute Arbitrary OS Commands

Trust: 4.0

Fetched: Jan. 28, 2025, 9:19 a.m., Published: Jan. 23, 2025, 1:42 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: sonicwall model: sma1000
vendor: sonicwall model: sma 100
db: NVD ids: CVE-2025-23006

D-Link DIR-619L <= 2.06 Multiple Buffer Overflow Vulnerabilities (Nov 2024) (CVE-2024-33771, CVE-2024-33772, CVE-2024-33773...) - Vulnerability & Exploit Database

Related entries in the VARIoT vulnerabilities database: VAR-202405-4042, VAR-202405-4078

Trust: 6.0

Fetched: Jan. 28, 2025, 9:18 a.m., Published: Jan. 2, 2025, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: d-link model: dir-619l
db: NVD ids: CVE-2024-33772, CVE-2024-33773, CVE-2024-33771

Government Issues Urgent Warning for Chrome Users on Mac, Windows, and Chromebooks

Trust: 3.5

Fetched: Jan. 28, 2025, 9:17 a.m., Published: Jan. 27, 2025, 7:29 a.m.
 Vulnerabilities: code execution, denial of service
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome

D-Link DAP-1520 DoS Vulnerability (SAP10395) (CVE-2024-36831) - Vulnerability & Exploit Database

Related entries in the VARIoT vulnerabilities database: VAR-202412-0630

Trust: 3.0

Fetched: Jan. 28, 2025, 9:16 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-36831

D-Link DAP-1513 Multiple Vulnerabilities (Nov 2022) (CVE-2024-36832) - Vulnerability & Exploit Database

Related entries in the VARIoT vulnerabilities database: VAR-202412-0623

Trust: 3.0

Fetched: Jan. 28, 2025, 9:16 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-36832

Update Canonical Ubuntu Desktop: USN-7227-1: PCL vulnerability

Trust: 4.25

Fetched: Jan. 28, 2025, 9:16 a.m., Published: Jan. 28, 7227, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu

RouterSploit: Advanced Password Cracking Tool

Trust: 3.5

Fetched: Jan. 28, 2025, 9:15 a.m., Published: Jan. 9, 2025, midnight
 Vulnerabilities: weak password, default credentials
Affected productsExternal IDs

How to Pentest Your Home Network: Step-by-Step Security Guide [2025] - FROMDEV

Trust: 4.75

Fetched: Jan. 28, 2025, 9:15 a.m., Published: Jan. 18, 2025, 6:25 p.m.
 Vulnerabilities: default credentials, default password
Affected productsExternal IDs
vendor: wireshark model: wireshark

Update Canonical Ubuntu Desktop: USN-7220-1: Vim vulnerability

Trust: 4.25

Fetched: Jan. 28, 2025, 9:14 a.m., Published: Jan. 28, 7220, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu

Cisco Meeting Management REST API Privilege Escalation Vulnerability

Trust: 3.75

Fetched: Jan. 28, 2025, 9:12 a.m., Published: Jan. 22, 2025, 3:55 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: cisco meeting
vendor: cisco model: meeting management
vendor: cisco model: meeting

SonicWall says hackers are exploiting a new zero-day bug to breach customer networks | TechCrunch

Trust: 3.75

Fetched: Jan. 28, 2025, 9:12 a.m., Published: Jan. 27, 2025, 11:25 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: barracuda model: barracuda
vendor: palo alto networks model: networks
vendor: palo model: networks
vendor: sonicwall model: remote access
vendor: sonicwall model: sma1000
vendor: check point model: check point
db: NVD ids: CVE-2025-23006

Apple iOS < 18.3 Multiple Vulnerabilities (122066) | Tenable®

Related entries in the VARIoT vulnerabilities database: VAR-202501-3666

Trust: 3.0

Fetched: Jan. 28, 2025, 9:11 a.m., Published: Jan. 18, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-24161, CVE-2025-24141, CVE-2025-24117, CVE-2025-24124, CVE-2025-24126, CVE-2025-24107, CVE-2025-24104, CVE-2025-24137, CVE-2025-24128, CVE-2025-24160, CVE-2025-24127, CVE-2025-24085, CVE-2025-24113, CVE-2025-24143, CVE-2024-9956, CVE-2025-24177, CVE-2025-24158, CVE-2025-24166, CVE-2025-24154, CVE-2025-24086, CVE-2025-24129, CVE-2025-24123, CVE-2025-24150, CVE-2025-24131, CVE-2025-24145, CVE-2025-24149, CVE-2025-24159, CVE-2025-24162, CVE-2025-24163

Alienware m18 R2 System BIOS | Szczegóły sterownika | Dell Polska

Trust: 3.0

Fetched: Jan. 26, 2025, 9:35 a.m., Published: Jan. 14, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

System BIOS komputera Dell XPS 8940 | Szczegóły sterownika | Dell Polska

Trust: 3.25

Fetched: Jan. 26, 2025, 9:34 a.m., Published: Jan. 26, 8940, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios