VARIoT latest news about IoT security

Apple Releases Patch for Likely Exploited Zero-Day Vulnerability - Infosecurity Magazine Trust: 4.75 Fetched: Aug. 24, 2025, 9:46 a.m., Published: Aug. 22, 2025, 10:30 a.m.	Vulnerabilities: memory corruption

Affected products

External IDs

vendor:	apple	model:	macos
vendor:	apple	model:	webkit

db:

NVD

ids:

CVE-2025-43300

Apple Patches Zero-Click Vulnerability That Posed Risks For Crypto Users - FinanceFeeds Trust: 3.0 Fetched: Aug. 24, 2025, 9:46 a.m., Published: Aug. 22, 2025, 6:59 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

macos

Update Canonical Ubuntu Desktop: USN-7708-1: poppler vulnerability Trust: 4.25 Fetched: Aug. 24, 2025, 9:46 a.m., Published: Jan. 24, 7708, midnight	Vulnerabilities: denial of service

Affected products

External IDs

vendor:

canonical

model:

ubuntu

Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Sensitive Information Disclosure Vulnerability Trust: 5.0 Fetched: Aug. 24, 2025, 9:45 a.m., Published: Aug. 20, 2025, 3:53 p.m.	Vulnerabilities: information disclosure

Affected products

External IDs

vendor:	cisco	model:	cisco evolved programmable network manager
vendor:	cisco	model:	cisco prime infrastructure
vendor:	cisco	model:	prime infrastructure
vendor:	cisco	model:	evolved programmable network manager

Latest apple news today: Is Apple failing to protect users? Zero-Click vulnerability puts iPhones, iPads, Macs and Crypto wallets at risk - The Economic Times Trust: 3.25 Fetched: Aug. 24, 2025, 9:44 a.m., Published: Aug. 19, 2025, midnight	Vulnerabilities: memory corruption, code execution

Affected products

External IDs

vendor:	apple	model:	ipad
vendor:	apple	model:	macos
vendor:	apple	model:	iphone
vendor:	apple	model:	software update

Critical HashiCorp Vulnerability Execute Arbitrary Code on Underlying Host Trust: 3.5 Fetched: Aug. 24, 2025, 9:43 a.m., Published: Aug. 4, 2025, 10 a.m.	Vulnerabilities: file execution, privilege escalation, code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2025-6000

Patch or Disable: Containing Static Tundra Exploiting CVE-2018-0171 in Cisco Devices \| Windows Forum Related entries in the VARIoT vulnerabilities database: VAR-201803-1387 Trust: 4.25 Fetched: Aug. 24, 2025, 9:42 a.m., Published: Aug. 22, 2025, 8:42 a.m.	Vulnerabilities: buffer overflow, code execution

Affected products

External IDs

vendor:	cisco	model:	tftp server
vendor:	cisco	model:	routers
vendor:	cisco	model:	ios xe
vendor:	cisco	model:	cisco ios

db:

NVD

ids:

CVE-2018-0171

Apple Addresses Zero-Day Vulnerability Threatening Crypto Wallets Trust: 4.0 Fetched: Aug. 24, 2025, 9:42 a.m., Published: Aug. 23, 2025, 7:02 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

macos

db:

NVD

ids:

CVE-2025-43300

Apple patches zero-click exploit threatening crypto users - TradingView News India Trust: 3.0 Fetched: Aug. 24, 2025, 9:41 a.m., Published: Aug. 27, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

macos

Update Your Apple Devices ASAP to Patch This Major Security Flaw \| Lifehacker Trust: 4.0 Fetched: Aug. 24, 2025, 9:41 a.m., Published: Aug. 21, 2025, 6 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	ipad
vendor:	apple	model:	macos
vendor:	apple	model:	ipad air
vendor:	apple	model:	iphone
vendor:	apple	model:	software update

db:

NVD

ids:

CVE-2025-43300

Apple Patches Zero-Click Exploit Threatening Crypto Users Trust: 3.0 Fetched: Aug. 24, 2025, 9:41 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

macos

Apple Zero-Day CVE-2025-43300 Exploited Related entries in the VARIoT vulnerabilities database: VAR-202501-3666 Trust: 4.25 Fetched: Aug. 24, 2025, 9:40 a.m., Published: Aug. 24, 2025, 8 a.m.	Vulnerabilities: privilege escalation, memory corruption, code execution

Affected products

External IDs

vendor:	trend	model:	security
vendor:	apple	model:	ipad
vendor:	apple	model:	macos
vendor:	apple	model:	iphone

db:

NVD

ids:

CVE-2025-24201, CVE-2025-43300, CVE-2025-43200, CVE-2025-31201, CVE-2025-24200, CVE-2025-24085, CVE-2025-31200

10 common cybersecurity threats and attacks: 2025 update \| ConnectWise Trust: 4.5 Fetched: Aug. 22, 2025, 9:46 a.m., Published: Aug. 10, 2025, midnight	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	trend	model:	security
vendor:	essential	model:	phone

Google fixed two Qualcomm bugs that were actively exploited in the wild Trust: 5.75 Fetched: Aug. 22, 2025, 9:44 a.m., Published: Aug. 6, 2025, 6:03 a.m.	Vulnerabilities: memory corruption, authorization issue, code execution...

Affected products

External IDs

vendor:	google	model:	android
vendor:	google	model:	chrome

db:

NVD

ids:

CVE-2025-27038, CVE-2025-21479, CVE-2025-21480, CVE-2025-48530

Multiple Vulnerabilities in Tridium Niagara Framework Related entries in the VARIoT vulnerabilities database: VAR-202505-2694, VAR-202505-3274, VAR-202505-3468, VAR-202505-2532, VAR-202505-2874, VAR-202505-3074, VAR-202505-3817, VAR-202505-3275, VAR-202505-3992, VAR-202505-3461 Trust: 5.5 Fetched: Aug. 22, 2025, 9:44 a.m., Published: July 25, 2025, 1:37 p.m.	Vulnerabilities: denial of service, code execution

Affected products

External IDs

vendor:	tridium	model:	niagara
vendor:	tridium	model:	tridium niagara
vendor:	tridium	model:	niagara framework
vendor:	tridium	model:	framework

db:

NVD

ids:

CVE-2025-3937, CVE-2025-3941, CVE-2025-3936, CVE-2025-3938, CVE-2025-3942, CVE-2025-3943, CVE-2025-3945, CVE-2025-3939, CVE-2025-3940, CVE-2025-3944

Critical Firmware Vulnerabilities Exposes Millions Of Dell Laptops To Device Takeover And Malware Attacks - Cybernoz - Cybersecurity News Trust: 5.25 Fetched: Aug. 22, 2025, 9:43 a.m., Published: Aug. 6, 2025, 3:53 a.m.	Vulnerabilities: information leakage, buffer overflow, code execution

Affected products

External IDs

vendor:	dell	model:	latitude
vendor:	cisco	model:	series

db:

NVD

ids:

CVE-2025-24922, CVE-2025-24919, CVE-2025-24311, CVE-2025-25215, CVE-2025-25050

Burk Technology ARC Solo \| CISA Trust: 3.0 Fetched: Aug. 22, 2025, 9:43 a.m., Published: Aug. 1, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2025-5095

Linux kernel, Poppler, Python, WEBrick updates for Ubuntu Trust: 4.5 Fetched: Aug. 22, 2025, 9:42 a.m., Published: Aug. 22, 2025, 5:34 a.m.	Vulnerabilities: denial of service, request smuggling attack

Affected products

External IDs

vendor:

alsa

model:

alsa

db:

NVD

ids:

CVE-2025-21783, CVE-2025-21782, CVE-2025-21773, CVE-2025-6442, CVE-2025-21864, CVE-2024-57834, CVE-2024-54456, CVE-2025-38043, CVE-2025-38004, CVE-2025-21856, CVE-2025-21823, CVE-2025-21766, CVE-2025-21762, CVE-2025-21867, CVE-2025-21869, CVE-2025-21760, CVE-2025-21871, CVE-2025-38031, CVE-2025-21861, CVE-2025-21761, CVE-2025-38075, CVE-2025-38044, CVE-2025-21746, CVE-2024-50073, CVE-2025-21790, CVE-2025-38078, CVE-2024-49950, CVE-2025-21853, CVE-2025-8194, CVE-2025-21866, CVE-2025-21795, CVE-2025-21870, CVE-2024-58088, CVE-2025-21706, CVE-2025-50420, CVE-2025-38052, CVE-2025-21792, CVE-2025-21868, CVE-2025-21767, CVE-2025-21844, CVE-2024-58086, CVE-2025-21772, CVE-2025-21855, CVE-2025-38051, CVE-2025-21791, CVE-2025-21836, CVE-2025-21858, CVE-2024-58093, CVE-2025-38058, CVE-2025-21862, CVE-2024-58020, CVE-2023-52975, CVE-2025-21821, CVE-2025-21796, CVE-2025-21775, CVE-2025-38077, CVE-2025-38065, CVE-2025-21785, CVE-2025-21854, CVE-2025-21847, CVE-2025-21759, CVE-2025-21776, CVE-2025-38072, CVE-2025-21848, CVE-2025-38048, CVE-2025-21763, CVE-2025-21764, CVE-2025-21704, CVE-2025-38079, CVE-2025-21779, CVE-2025-21758, CVE-2025-21765, CVE-2023-52757, CVE-2025-21768, CVE-2025-21835, CVE-2025-21846, CVE-2025-21859, CVE-2025-21787, CVE-2025-6069, CVE-2025-21712, CVE-2025-21781, CVE-2025-21863, CVE-2024-57977, CVE-2025-21839, CVE-2025-38066, CVE-2025-38037, CVE-2025-37797, CVE-2025-38034, CVE-2024-38541, CVE-2025-38061, CVE-2025-38083, CVE-2024-52559, CVE-2025-21780, CVE-2024-54458, CVE-2025-38035, CVE-2025-21857, CVE-2025-38003, CVE-2025-21786, CVE-2025-21784, CVE-2025-21838, CVE-2025-38068, CVE-2025-21793

FBI alert: Russian cyber actors targeting Cisco devices ~ NetworkTigers Related entries in the VARIoT vulnerabilities database: VAR-201803-1387 Trust: 4.75 Fetched: Aug. 22, 2025, 9:41 a.m., Published: Aug. 21, 2025, noon	Vulnerabilities: code execution

Affected products

External IDs

vendor:	cisco	model:	ios xe
vendor:	cisco	model:	routers
vendor:	cisco	model:	cisco ios

db:

NVD

ids:

CVE-2018-0171

Apple discloses actively exploited zero-day affecting iOS, iPadOS and macOS \| CyberScoop Trust: 4.75 Fetched: Aug. 22, 2025, 9:39 a.m., Published: Aug. 21, 2025, 10:07 p.m.	Vulnerabilities: memory corruption

Affected products

External IDs

vendor:	apple	model:	software update
vendor:	apple	model:	macos

db:

NVD

ids:

CVE-2025-43300

VARIoT news about IoT security