Sign-up

VARIoT news about IoT security

Cisco AppDynamics Controller Cross-Site Scripting Vulnerability

Trust: 3.25

Fetched: March 10, 2024, 9:52 a.m., Published: March 6, 2024, 4:13 p.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs

What is Remote Code Execution (RCE) Vulnerability❓

Trust: 4.25

Fetched: March 10, 2024, 9:49 a.m., Published: May 10, 2024, midnight
 Vulnerabilities: buffer overflow, code execution, privilege escalation
Affected productsExternal IDs
vendor: apple model: watchos
vendor: apple model: macos
vendor: apple model: safari

QNAP critical auth bypass flaw in its NAS - patch now - Security - VHT Forum

Trust: 3.75

Fetched: March 10, 2024, 9:49 a.m., Published: Dec. 25, 2023, 4:09 a.m.
 Vulnerabilities: authentication bypass, command injection, sql injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-21899

Update now! ConnectWise ScreenConnect vulnerability needs your attention | Malwarebytes

Trust: 3.75

Fetched: March 10, 2024, 9:48 a.m., Published: Feb. 23, 2024, 1:37 p.m.
 Vulnerabilities: code execution, authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2024-1709

Cisco NX-OS Allocation of Resources Without Limits or Thrott... - vulnerability database | Vulners.com

Trust: 5.75

Fetched: March 10, 2024, 9:44 a.m., Published: March 8, 2024, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: nx-os software
vendor: cisco model: nx-os
vendor: cisco model: cisco nx-os
db: NVD ids: CVE-2024-20321

Authentication flaw - vulnerability database | Vulners.com

Trust: 4.25

Fetched: March 10, 2024, 9:44 a.m., Published: March 6, 2024, 5:15 p.m.
 Vulnerabilities: authentication flaw
Affected productsExternal IDs

CVE-2024-20345 - vulnerability database | Vulners.com

Trust: 5.25

Fetched: March 10, 2024, 9:43 a.m., Published: March 6, 2024, 5:15 p.m.
 Vulnerabilities: directory traversal
Affected productsExternal IDs
db: NVD ids: CVE-2024-20345

Critical iOS Update Fixes Zero-Day Vulnerabilities Exploited in Attacks - Cyber and Fraud Centre - Scotland

Related entries in the VARIoT vulnerabilities database: VAR-202301-1714, VAR-202302-1097

Trust: 4.0

Fetched: March 10, 2024, 9:37 a.m., Published: March 6, 2024, 1:21 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: iphone
vendor: apple model: safari
vendor: apple model: ipad
vendor: apple model: macos
vendor: apple model: ipod touch
db: NVD ids: CVE-2023-23513, CVE-2023-23529

Cisco Secure Client for Linux with ISE Posture Module Privilege Escalation Vulnerability

Trust: 3.0

Fetched: March 10, 2024, 9:31 a.m., Published: March 6, 2024, 4:13 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs

Cisco AppDynamics Controller Path Traversal Vulnerability

Trust: 3.25

Fetched: March 10, 2024, 9:30 a.m., Published: March 6, 2024, 4:13 p.m.
 Vulnerabilities: path traversal
Affected productsExternal IDs

Google Online Security Blog: Hardening cellular basebands in Android

Trust: 3.25

Fetched: March 10, 2024, 9:28 a.m., Published: Dec. 12, 2023, midnight
 Vulnerabilities: code execution, integer overflow
Affected productsExternal IDs
vendor: google model: android
vendor: trend model: security

Understanding CVE, Its Identifiers, Uses, and Challenges | Spiceworks - Spiceworks

Trust: 3.5

Fetched: March 10, 2024, 9:22 a.m., Published: Feb. 7, 2024, 7:22 a.m.
 Vulnerabilities: brute force attack, code execution, sql injection
Affected productsExternal IDs
db: NVD ids: CVE-2023-12345

Cisco Duo Authentication for Windows Logon and RDP Authentication Bypass Vulnerability

Trust: 4.25

Fetched: March 10, 2024, 9:19 a.m., Published: March 6, 2024, 4:13 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs

CISA's Advisory on Ivanti Vulnerabilities and Mitigation Challenges (CVE-2023-46805, CVE-2024-21887) - OP INNOVATE

Trust: 3.25

Fetched: March 10, 2024, 9:19 a.m., Published: Jan. 23, 2024, 10:42 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-21887, CVE-2023-46805

Details on Apple’s Shortcuts Vulnerability: A Deep Dive into CVE-2024-23204

Trust: 4.5

Fetched: March 10, 2024, 9:18 a.m., Published: March 4, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: watchos
vendor: apple model: mac os
vendor: apple model: macos
db: NVD ids: CVE-2024-23204

P3: MS Defender for Endpoint - Threat and Vulnerability Management (TVM) | Ammar Hasayen

Related entries in the VARIoT vulnerabilities database: VAR-201607-0116

Trust: 4.5

Fetched: March 8, 2024, 9:21 a.m., Published: Nov. 24, 2021, 9:33 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: trend model: security
vendor: trend model: antivirus
db: NVD ids: CVE-2016-4201

Microsoft finds new NETGEAR firmware vulnerabilities that could lead to identity theft and full system compromise | Microsoft Security Blog

Trust: 4.25

Fetched: March 8, 2024, 9:20 a.m., Published: June 30, 2021, midnight
 Vulnerabilities: request forgery, memory corruption, authentication bypass...
Affected productsExternal IDs
vendor: netgear model: router
vendor: netgear model: dgn2200v1

ERROR: The request could not be satisfied

Trust: 3.25

Fetched: March 8, 2024, 9:20 a.m., Published: March 8, 2023, midnight
 Vulnerabilities: configuration error
Affected productsExternal IDs

Security Vulnerabilities fixed in Firefox 123 - Mozilla

Trust: 3.0

Fetched: March 6, 2024, 9:23 a.m., Published: -
 Vulnerabilities: memory corruption
Affected productsExternal IDs

Samsung Publishes Full March 2024 Security Update Details and Device List

Related entries in the VARIoT vulnerabilities database: VAR-202312-0146, VAR-202312-0152, VAR-202312-0020, VAR-202402-0244

Trust: 5.5

Fetched: March 6, 2024, 9:23 a.m., Published: March 5, 2024, 5:52 a.m.
 Vulnerabilities: use after free, access control vulnerability, incorrect default permission...
Affected productsExternal IDs
vendor: google model: android
vendor: samsung model: note20
vendor: samsung model: galaxy
vendor: samsung model: samsung firmware
vendor: samsung model: samsung galaxy
db: NVD ids: CVE-2024-20833, CVE-2024-0049, CVE-2024-20007, CVE-2024-0047, CVE-2024-20011, CVE-2024-20832, CVE-2023-43536, CVE-2024-20834, CVE-2023-40081, CVE-2024-0048, CVE-2023-21135, CVE-2023-33058, CVE-2023-49667, CVE-2023-32842, CVE-2023-33076, CVE-2024-20009, CVE-2023-43534, CVE-2024-20836, CVE-2023-5091, CVE-2024-0046, CVE-2024-0052, CVE-2024-20010, CVE-2023-33046, CVE-2023-32841, CVE-2024-20835, CVE-2023-43522, CVE-2023-43520, CVE-2023-43513, CVE-2023-33060, CVE-2024-23717, CVE-2023-5643, CVE-2024-0053, CVE-2024-0051, CVE-2024-20831, CVE-2024-0050, CVE-2024-20006, CVE-2024-0039, CVE-2023-33072, CVE-2023-32843, CVE-2023-43516, CVE-2023-43518, CVE-2024-0044, CVE-2023-5249, CVE-2024-20003, CVE-2024-20830, CVE-2023-43523, CVE-2023-21234, CVE-2023-43533, CVE-2023-43519, CVE-2023-49668, CVE-2023-33049, CVE-2024-0045, CVE-2023-33057