Sign-up

VARIoT news about IoT security

Google Patches Kernel Zero-Day Vulnerability in Android, Amidst Targeted Exploits - VULNERA

Trust: 5.0

Fetched: Aug. 7, 2024, 9:24 a.m., Published: Aug. 5, 2024, 10:40 p.m.
 Vulnerabilities: use after free
Affected productsExternal IDs
vendor: google model: android
vendor: google model: pixel
db: NVD ids: CVE-2024-32896, CVE-2024-36971, CVE-2024-23350, CVE-2024-29748

CVE-2024-41910 - Poly Clariti Manager Cross-Site Scripting (XSS) Vulnerability

Trust: 5.25

Fetched: Aug. 7, 2024, 9:23 a.m., Published: Aug. 6, 2024, 2:16 p.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
db: NVD ids: CVE-2024-41910

Microsoft Outlook users should update the client ASAP | TechSpot

Trust: 4.0

Fetched: Aug. 7, 2024, 9:22 a.m., Published: Aug. 6, 2024, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-30103, CVE-2024-3802

Android vulnerability used in targeted attacks patched by Go... - vulnerability database | Vulners.com

Trust: 5.5

Fetched: Aug. 7, 2024, 9:21 a.m., Published: Aug. 6, 2024, 1:47 p.m.
 Vulnerabilities: use after free, code execution
Affected productsExternal IDs
vendor: samsung model: android phone
vendor: samsung model: mobile devices
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: google model: android
db: NVD ids: CVE-2024-36971

Samsung Takes Swift Action: August 2024 Update Bolsters Galaxy Device Security

Trust: 3.75

Fetched: Aug. 7, 2024, 9:21 a.m., Published: Aug. 7, 2024, 5:55 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: samsung model: galaxy
vendor: samsung model: android phone
vendor: google model: android
vendor: apple model: software update
db: NVD ids: CVE-2024-36971

Samsung Announces $1 Million Rewards for Arbitrary Code Execution Vulnerabilities

Trust: 4.75

Fetched: Aug. 7, 2024, 9:19 a.m., Published: Aug. 6, 2024, 3:10 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: knox
vendor: samsung model: mobile devices
vendor: samsung model: mobile
vendor: samsung model: galaxy
vendor: samsung model: samsung
vendor: samsung model: samsung mobile

CVE-2024-33897 - HMS Networks Cosy+ Certificate Signing Request Abuse Vulnerability

Trust: 3.0

Fetched: Aug. 7, 2024, 9:19 a.m., Published: Aug. 6, 2024, 2:16 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-33897

CVE-2024-5963 - Hitachi Device Manager Unquoted Executable Path Vulnerability

Trust: 4.0

Fetched: Aug. 7, 2024, 9:19 a.m., Published: Aug. 6, 2024, 3:15 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: hitachi model: device manager
vendor: hitachi model: hitachi device manager
db: NVD ids: CVE-2024-5963

Notes on ThroughTek Kalay Vulnerabilities and Their Impact on the IoT Ecosystem

Trust: 4.5

Fetched: Aug. 7, 2024, 9:18 a.m., Published: Aug. 3, 2024, midnight
 Vulnerabilities: command execution, code execution, buffer overflow
Affected productsExternal IDs
vendor: roku model: roku
db: NVD ids: CVE-2023-6322, CVE-2023-6321, CVE-2023-6323, CVE-2023-6324

Apple fixes Siri vulnerabilities that could have allowed sensitive data theft from locked device. Update now! | Malwarebytes

Trust: 3.75

Fetched: Aug. 7, 2024, 9:18 a.m., Published: July 31, 2024, 1:04 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: ipad
vendor: apple model: ipod touch
vendor: apple model: apple tv
vendor: apple model: safari
vendor: apple model: ipad air
vendor: apple model: software update
vendor: apple model: watch
vendor: apple model: iphone

SCADA Penetration Testing: What You Need to Know

Trust: 3.5

Fetched: Aug. 7, 2024, 9:16 a.m., Published: June 26, 2024, 7:01 p.m.
 Vulnerabilities: buffer overflow, denial of service
Affected productsExternal IDs
vendor: wireshark model: wireshark

CVE-2024-29972 - Exploits & Severity - Feedly

Trust: 5.5

Fetched: Aug. 7, 2024, 9:16 a.m., Published: June 4, 2024, midnight
 Vulnerabilities: os command injection, command injection
Affected productsExternal IDs
vendor: zyxel model: nas326
vendor: zyxel model: nas542
vendor: trend model: security
db: NVD ids: CVE-2024-29972

Google Fixes Zero-Day Kernel Vulnerability In Android Devices " TechWorm

Trust: 5.5

Fetched: Aug. 7, 2024, 9:15 a.m., Published: Aug. 6, 2024, 6 p.m.
 Vulnerabilities: code execution, information disclosure
Affected productsExternal IDs
vendor: google model: android
vendor: google model: pixel
db: NVD ids: CVE-2024-34727, CVE-2024-36971, CVE-2024-23350, CVE-2024-32896

New Vulnerability Discovered in Android Devices Raises Security Concerns - Monicamindful

Trust: 3.5

Fetched: Aug. 7, 2024, 9:15 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
vendor: google model: pixel
db: NVD ids: CVE-2024-32896, CVE-2024-54321

Security Command Center release notes | Google Cloud

Trust: 3.75

Fetched: Aug. 7, 2024, 9:12 a.m., Published: July 29, 2024, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: node.js model: node.js

Top 15 Cybersecurity Trends in 2024 to Secure Data

Trust: 5.5

Fetched: Aug. 7, 2024, 9:10 a.m., Published: July 4, 2024, 6 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: trend model: security
vendor: trend model: antivirus
vendor: tesla model: model
vendor: serve model: serve

Evaluate SNA Vulnerabilities with CVR - Cisco

Trust: 3.0

Fetched: Aug. 7, 2024, 9:09 a.m., Published: May 31, 2024, 1:15 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: serve model: serve

Critical Android Kernel Vulnerability Exposes Devices to Exploitation - Vulert

Trust: 5.5

Fetched: Aug. 7, 2024, 9:09 a.m., Published: Aug. 6, 2024, 9:23 a.m.
 Vulnerabilities: privilege escalation, code execution, information disclosure
Affected productsExternal IDs
vendor: google model: android
vendor: google model: pixel
db: NVD ids: CVE-2024-32896, CVE-2024-29748, CVE-2024-36971, CVE-2024-29745, CVE-2018-0824

Google just fixed 46 security flaws, including an actively exploited zero-day - update your Android phone now | Tom's Guide

Trust: 4.75

Fetched: Aug. 7, 2024, 9:07 a.m., Published: Aug. 6, 2024, 6:36 p.m.
 Vulnerabilities: use after free
Affected productsExternal IDs
vendor: samsung model: android phone
vendor: samsung model: samsung
vendor: google model: android
vendor: google model: pixel
db: NVD ids: CVE-2024-36971

Security Alert for Apple Device Users in India: Immediate Updates Advised

Trust: 4.75

Fetched: Aug. 6, 2024, 9:48 a.m., Published: Aug. 5, 2024, 7:19 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: apple model: watchos
vendor: apple model: macos
vendor: apple model: tvos
vendor: apple model: safari