Sign-up

VARIoT news about IoT security

QNAP warns its NAS devices are facing a critical security flaw - but a patch is available, so update now | TechRadar

Trust: 5.0

Fetched: March 12, 2024, 9:17 a.m., Published: March 11, 2024, 4:01 p.m.
 Vulnerabilities: code injection, arbitrary command execution, command execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-21900, CVE-2024-21899, CVE-2024-21901

QNAP Patches Critical Vulnerabilities Impacting NAS Devices (CVE-2024-21899, CVE-2024-21900, & CVE-2024-21901) - Qualys ThreatPROTECT

Trust: 5.0

Fetched: March 12, 2024, 9:16 a.m., Published: -
 Vulnerabilities: sql injection, authentication vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2024-21900, CVE-2024-21899, CVE-2024-21901

Security Advisory: Pure Response to CVE-2022-0847 "Dirty Pipe" - Pure Technical Services

Related entries in the VARIoT vulnerabilities database: VAR-202203-0043

Trust: 5.0

Fetched: March 10, 2024, 10:47 a.m., Published: March 9, 2022, 6:20 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: pure model: purity
db: NVD ids: CVE-2022-0847

Android Linux Wi-Fi Vulnerabilities: Protect Devices Today!

Trust: 5.0

Fetched: March 10, 2024, 10:46 a.m., Published: March 1, 2024, 2:36 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2023-52160, CVE-2023-52161

CVE-2024-21357 - Security Update Guide - Microsoft - Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Trust: 3.0

Fetched: March 10, 2024, 10:46 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-21357

Common Types Of Cybersecurity Threats And Vulnerabilities

Trust: 4.0

Fetched: March 10, 2024, 10:45 a.m., Published: Dec. 5, 2023, 9:25 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

iOS 17.4 Fixes Two Big iPhone Security Flaws | Lifehacker

Trust: 5.5

Fetched: March 10, 2024, 10:44 a.m., Published: March 6, 2024, 5:30 p.m.
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: ipad air
vendor: apple model: iphone
vendor: apple model: safari
vendor: apple model: ipad
db: NVD ids: CVE-2024-23225, CVE-2024-23256, CVE-2024-23296, CVE-2024-23243

20 Emerging Cybersecurity Trends to Watch Out in 2024

Trust: 4.5

Fetched: March 10, 2024, 10:41 a.m., Published: March 11, 2020, 4:32 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: trend model: security
vendor: trend model: antivirus

Security Engineer Unveils IoT Device Vulnerabilities Through Solar System Hack

Trust: 3.0

Fetched: March 10, 2024, 10:41 a.m., Published: March 1, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs

Are Your Smart Home Devices Spying On You? (Experts Say, Yes!) - Intech Group

Trust: 3.5

Fetched: March 10, 2024, 10:39 a.m., Published: Feb. 2, 2024, 10:38 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home

DSA-2022-035: Dell Wyse Device Agent Security Update for Multiple Vulnerabilities | Dell Swaziland

Related entries in the VARIoT vulnerabilities database: VAR-202202-0977, VAR-202202-0979, VAR-202202-0978

Trust: 4.75

Fetched: March 10, 2024, 10:38 a.m., Published: May 10, 2024, midnight
 Vulnerabilities: authentication vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2022-23157, CVE-2022-23158, CVE-2022-23156

CERT-EU - Critical Vulnerabilities in Microsoft Products

Trust: 5.0

Fetched: March 10, 2024, 10:38 a.m., Published: -
 Vulnerabilities: code injection, code execution, security feature bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2024-21410, CVE-2024-21413, CVE-2024-21315, CVE-2024-21412, CVE-2024-21351

Some Canon printers have seven critical security vulnerabilities - i-Sensys printer vulns rank at 9.8 severity | Tom's Hardware

Trust: 4.75

Fetched: March 10, 2024, 10:36 a.m., Published: Feb. 12, 2024, 2:06 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security

Roland - Support - Vulnerability Disclosure Policy - Vulnerability Disclosure Policy

Trust: 3.0

Fetched: March 10, 2024, 10:36 a.m., Published: March 1, 2024, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs

Steps to fix the CVE-2024-23836 vulnerability in the Intrusion Detection System

Trust: 3.0

Fetched: March 10, 2024, 10:35 a.m., Published: March 11, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-23836

Steps to fix the CVE-2024-23836 vulnerability in the Intrusion Detection System

Trust: 3.0

Fetched: March 10, 2024, 10:34 a.m., Published: March 4, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-23836

Configure Microsoft Defender for Endpoint on iOS features | Microsoft Learn

Trust: 3.0

Fetched: March 10, 2024, 10:33 a.m., Published: Dec. 18, 2020, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipad

Apple users urged to update devices after app vulnerability found to give attackers access to data, Latest Tech News - The New Paper

Trust: 3.0

Fetched: March 10, 2024, 10:33 a.m., Published: March 1, 2024, 1:40 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos

Apple Patches Two Zero-Day Flaws Exploited in the Wild

Trust: 4.75

Fetched: March 10, 2024, 10:32 a.m., Published: March 7, 2024, 6:49 a.m.
 Vulnerabilities: code execution, memory corruption
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: safari
vendor: apple model: macos
db: NVD ids: CVE-2024-5678, CVE-2024-1234

Steps to fix the CVE-2024-23836 vulnerability in the Intrusion Detection System

Trust: 3.0

Fetched: March 10, 2024, 10:32 a.m., Published: March 11, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-23836