Sign-up

VARIoT news about IoT security

Top 10 Malware Q3 2024

Trust: 3.75

Fetched: Nov. 17, 2024, 11:11 a.m., Published: Nov. 10, 2024, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: tesla model: model

Trust Matters: Uncovering Vulnerabilities in the Matter Protocol

Trust: 4.25

Fetched: Nov. 17, 2024, 11:10 a.m., Published: Nov. 14, 2024, midnight
 Vulnerabilities: injection attack
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: google model: home

A Vulnerability in Cisco Unified Industrial Wireless Software for Ultra-Reliable Wireless Backhaul Access Point Could Allow for Remote Code Execution

Trust: 4.25

Fetched: Nov. 17, 2024, 11:08 a.m., Published: Nov. 6, 2024, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

APT Hackers Leverage macOS Flutter Apps To Embed Malicious Codes on Devices

Trust: 3.0

Fetched: Nov. 17, 2024, 11:07 a.m., Published: Nov. 13, 2024, 3:01 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos

Palo Alto Warns of Hackers Exploiting RCE Flaw in Firewall

Trust: 3.5

Fetched: Nov. 17, 2024, 11:06 a.m., Published: Nov. 15, 2024, 2:50 a.m.
 Vulnerabilities: command execution
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: palo alto networks model: firewall
vendor: palo model: networks
vendor: palo model: firewall

Genzai: Secure Your IoT Devices with Automated Security Vulnerability Scanning

Trust: 3.0

Fetched: Nov. 17, 2024, 11:05 a.m., Published: Nov. 4, 2024, 7:52 a.m.
 Vulnerabilities: default credentials, default password
Affected productsExternal IDs

Major IT Vulnerabilities Reported In Fortinet, SonicWall, Grafana

Trust: 5.5

Fetched: Nov. 17, 2024, 11:04 a.m., Published: Nov. 4, 2024, 9:59 a.m.
 Vulnerabilities: file inclusion, local file inclusion, access control vulnerability...
Affected productsExternal IDs
vendor: sonicwall model: ssl vpn
vendor: sonicwall model: sonicos
db: NVD ids: CVE-2024-47575, CVE-2024-51567, CVE-2024-46483, CVE-2024-40766, CVE-2024-51568, CVE-2024-9264, CVE-2024-23113

Hacking Contest Targets AI Device Vulnerabilities, Hosted by Trend Micro - Hawkdive.com

Trust: 3.75

Fetched: Nov. 17, 2024, 11:03 a.m., Published: Oct. 22, 2024, 1:11 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security
vendor: trend model: micro trend micro
vendor: trend micro model: security
vendor: trend micro model: micro trend micro
vendor: trendmicro model: security
vendor: trendmicro model: micro trend micro
vendor: google model: home

U.S. CISA adds Microsoft SharePoint flaw to its Known Exploited Vulnerabilities catalog

Trust: 3.0

Fetched: Nov. 17, 2024, 10:55 a.m., Published: Oct. 23, 2024, 1:49 p.m.
 Vulnerabilities: input validation error
Affected productsExternal IDs
db: NVD ids: CVE-2024-38094

What Are Business Logic Vulnerabilities & 4 Ways to Prevent Them

Trust: 3.5

Fetched: Nov. 17, 2024, 10:53 a.m., Published: Nov. 4, 2024, midnight
 Vulnerabilities: sql injection, information disclosure, cross-site scripting
Affected productsExternal IDs

D-Link will not fix a critical vulnerability in discontinued NAS devices | TechSpot

Related entries in the VARIoT vulnerabilities database: VAR-202404-0070, VAR-202411-0293

Trust: 6.0

Fetched: Nov. 17, 2024, 10:49 a.m., Published: Nov. 11, 2024, midnight
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: d-link model: dns-340l
vendor: d-link model: dns-320lw
vendor: d-link model: dns-320
vendor: d-link model: dns-325
db: NVD ids: CVE-2024-3273, CVE-2024-10914

Exploited: Cisco, SharePoint, Chrome vulnerabilities - Help Net Security

Trust: 5.5

Fetched: Nov. 17, 2024, 10:49 a.m., Published: Oct. 25, 2024, 10:25 a.m.
 Vulnerabilities: cross-site scripting, data deserialization vulnerability, denial of service
Affected productsExternal IDs
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower
vendor: cisco model: firepower threat defense
vendor: google model: google chrome
vendor: google model: chrome
db: NVD ids: CVE-2024-20377, CVE-2024-20388, CVE-2024-20387, CVE-2024-38094, CVE-2024-4947, CVE-2024-20481

Edge Ai For Smart Sensors Vulnerability | Restackio

Trust: 3.0

Fetched: Nov. 17, 2024, 10:45 a.m., Published: Nov. 8, 2024, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

Cisco Unified Contact Center Management Portal Stored Cross-Site Scripting Vulnerability - Cisco

Trust: 4.25

Fetched: Nov. 17, 2024, 10:45 a.m., Published: Nov. 6, 2024, 10:18 a.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs

CVE-2024-8260: SMB Force-Authentication Vulnerability in OPA Could Lead to Credential Leakage - Blog | Tenable®

Trust: 3.75

Fetched: Nov. 17, 2024, 10:45 a.m., Published: Oct. 22, 2024, 1 p.m.
 Vulnerabilities: authentication vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2024-8260

Cisco 6800, 7800, 8800, and 9800 Series Phones with Multiplatform Firmware Stored Cross-Site Scripting Vulnerabilities

Trust: 4.75

Fetched: Nov. 17, 2024, 10:43 a.m., Published: Nov. 6, 2024, 3:51 p.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: cisco model: ip conference phone
vendor: cisco model: series
vendor: cisco model: 8831
vendor: cisco model: ip phone

CVE-2024-10456 Delta Electronics InfraSuite Device Master De... - vulnerability database | Vulners.com

Trust: 3.0

Fetched: Nov. 17, 2024, 10:43 a.m., Published: Oct. 30, 2024, 6:04 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-10456

Mitigating Risks From A to Z-Wave - Security Industry Association

Trust: 3.5

Fetched: Nov. 17, 2024, 10:42 a.m., Published: Sept. 30, 2019, 8:03 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: mesh model: mesh

U.S. CISA adds Fortinet FortiManager flaw to its Known Exploited Vulnerabilities catalog

Trust: 3.75

Fetched: Nov. 17, 2024, 10:42 a.m., Published: Oct. 24, 2024, 5:19 a.m.
 Vulnerabilities: authentication vulnerability, authentication flaw
Affected productsExternal IDs
db: NVD ids: CVE-2024-47575

Top 6 Most Common Vulnerabilities Found During Penetration Testing | aqua cloud

Trust: 3.75

Fetched: Nov. 17, 2024, 10:41 a.m., Published: May 2, 2023, 9:48 p.m.
 Vulnerabilities: default credentials, information disclosure, cross-site scripting...
Affected productsExternal IDs