Sign-up

VARIoT news about IoT security

Alienware m16 R1/m18 R1 System BIOS | Szczegóły sterownika | Dell Polska

Trust: 3.0

Fetched: Jan. 26, 2025, 9:33 a.m., Published: Jan. 13, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

Top CVEs & Vulnerabilities of December 2024 - Strobes Security

Trust: 4.5

Fetched: Jan. 26, 2025, 9:31 a.m., Published: Dec. 31, 2024, 6:03 a.m.
 Vulnerabilities: path traversal, system crash, denial of service...
Affected productsExternal IDs
db: NVD ids: CVE-2024-49112, CVE-2024-49117, CVE-2024-43602, CVE-2024-11667, CVE-2024-49118

U.S. CISA adds JQuery flaw to its Known Exploited Vulnerabilities catalog

Related entries in the VARIoT vulnerabilities database: VAR-202004-2199

Trust: 6.0

Fetched: Jan. 26, 2025, 9:29 a.m., Published: Jan. 23, 2025, 11:06 p.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: jquery model: jquery
db: NVD ids: CVE-2020-11023

WARNING: CRITICAL AUTHENTICATION BYPASS VULNERABILITY IN MOXA EDS-508A SERIES, PATCH IMMEDIATELY! | Cert

Trust: 4.25

Fetched: Jan. 26, 2025, 9:29 a.m., Published: Jan. 20, 2025, 3:04 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs

Update Canonical Ubuntu Server: USN-7224-1: Cyrus IMAP Server vulnerabilities

Trust: 4.75

Fetched: Jan. 26, 2025, 9:28 a.m., Published: Jan. 26, 7224, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cyrus model: cyrus imap server
vendor: cyrus model: imap server
vendor: canonical model: ubuntu
db: NVD ids: CVE-2021-33582, CVE-2024-34055, CVE-2019-18928

AXESS Auto Configuration Server - Denial of Service (CVE-2024-56316) - Y-Security GmbH

Trust: 3.0

Fetched: Jan. 26, 2025, 9:27 a.m., Published: Jan. 17, 2025, 5:12 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2024-56316

CVE-2024-43770: Bluetooth HID Device Vulnerability - DEC Solutions Group

Trust: 5.25

Fetched: Jan. 26, 2025, 9:27 a.m., Published: Jan. 22, 2025, 6:35 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-43770

New Mirai Malware Variant Targets AVTECH Cameras, Huawei Routers - Infosecurity Magazine

Related entries in the VARIoT vulnerabilities database: VAR-201803-1048

Trust: 3.75

Fetched: Jan. 26, 2025, 9:24 a.m., Published: Jan. 21, 2025, 5 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: huawei model: huawei
vendor: huawei model: hg532
db: NVD ids: CVE-2017-17215, CVE-2024-7029

AXESS Auto Configuration Server - Denial of Service (CVE-2024-56316) - Y-Security GmbH

Trust: 3.0

Fetched: Jan. 26, 2025, 9:24 a.m., Published: Jan. 17, 2025, 5:12 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2024-56316

Apache CXF Vulnerability Let Attackers Push Systems to DoS Condition

Trust: 3.75

Fetched: Jan. 26, 2025, 9:23 a.m., Published: Jan. 21, 2025, 1:37 p.m.
 Vulnerabilities: resource exhaustion, denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2025-23184

CVE-2025-23006: SonicWall Secure Mobile Access (SMA) 1000 Zero-Day Reportedly Exploited - Security Boulevard

Trust: 4.25

Fetched: Jan. 26, 2025, 9:23 a.m., Published: Jan. 23, 2025, 5:54 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: sonicwall model: secure mobile access
db: NVD ids: CVE-2025-23006

Cisco Meeting Management REST API Privilege Escalation Vulnerability

Trust: 3.75

Fetched: Jan. 26, 2025, 9:23 a.m., Published: Jan. 22, 2025, 3:55 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: meeting
vendor: cisco model: meeting management
vendor: cisco model: cisco meeting

CVE-2024-49732 : Local Privilege Escalation Vulnerability in Android Companion Device Manager | SecurityVulnerability.io

Trust: 3.25

Fetched: Jan. 26, 2025, 9:22 a.m., Published: Jan. 21, 2025, 11:15 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2024-49732

Update Canonical Ubuntu Server: USN-7227-1: PCL vulnerability

Trust: 4.25

Fetched: Jan. 26, 2025, 9:22 a.m., Published: Jan. 26, 7227, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu

How to Secure Your IoT Devices: A Comprehensive Guide to IoT Penetration Testing

Trust: 4.5

Fetched: Jan. 26, 2025, 9:20 a.m., Published: Dec. 30, 2024, 2 p.m.
 Vulnerabilities: default credentials
Affected productsExternal IDs
vendor: google model: google home
vendor: google model: home

Helldown Ransomware Exploiting Zyxel Devices Using Zero-Day Vulnerability

Trust: 5.0

Fetched: Jan. 26, 2025, 9:19 a.m., Published: Jan. 22, 2025, 1:35 p.m.
 Vulnerabilities: directory traversal
Affected productsExternal IDs
db: NVD ids: CVE-2024-11667

ClamAV OLE2 File Format Decryption Denial of Service Vulnerability

Trust: 4.75

Fetched: Jan. 26, 2025, 9:19 a.m., Published: Jan. 22, 2025, 3:55 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: clamav
vendor: clamav model: clamav

370+ Ivanti Connect Secure Exploiting Using 0-day Vulnerability (CVE-2025-0282)

Trust: 4.5

Fetched: Jan. 26, 2025, 9:19 a.m., Published: Jan. 24, 2025, 2:22 p.m.
 Vulnerabilities: buffer overflow, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-0282

Schneider Electric EV Charger Vulnerability: Risks and How to Protect Your Smart Home | Windows Forum

Trust: 4.75

Fetched: Jan. 26, 2025, 9:18 a.m., Published: May 26, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: wireshark model: wireshark
db: NVD ids: CVE-2024-8070

PAN-SA-2025-0003 Informational: PAN-OS BIOS and Bootloader Security Bulletin

Related entries in the VARIoT vulnerabilities database: VAR-202202-0009, VAR-202202-0147

Trust: 5.25

Fetched: Jan. 26, 2025, 9:17 a.m., Published: Jan. 23, 2025, 11:20 p.m.
 Vulnerabilities: buffer overflow, infinite loop vulnerability
Affected productsExternal IDs
vendor: palo model: networks
vendor: palo model: firewall
vendor: palo model: pan-os
vendor: palo alto networks model: networks
vendor: palo alto networks model: firewall
vendor: palo alto networks model: pan-os
db: NVD ids: CVE-2023-45232, CVE-2023-45234, CVE-2020-10713, CVE-2023-45235, CVE-2023-45236, CVE-2023-45237, CVE-2023-45231, CVE-2023-45233, CVE-2021-33627, CVE-2021-45970, CVE-2022-24030, CVE-2023-45229, CVE-2023-1017, CVE-2023-40238, CVE-2021-43323, CVE-2023-45230, CVE-2021-42060, CVE-2021-42554