Sign-up

VARIoT news about IoT security

Multiple Security Vulnerability Notifications on Apple Products - Security Boulevard

Trust: 4.25

Fetched: Sept. 20, 2023, 9:42 a.m., Published: Sept. 8, 2023, 8:33 a.m.
 Vulnerabilities: buffer overflow, code execution
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: watchos
db: NVD ids: CVE-2023-41064, CVE-2023-41061

About the security content of macOS Ventura 13.3 - Apple Support

Related entries in the VARIoT vulnerabilities database: VAR-202302-1169

Trust: 5.25

Fetched: Sept. 20, 2023, 9:42 a.m., Published: Sept. 13, 2023, midnight
 Vulnerabilities: memory corruption, use after free, memory initialization issue...
Affected productsExternal IDs
vendor: canary model: canary
vendor: trend micro model: security
vendor: apple model: webkit
vendor: apple model: safari
vendor: apple model: macos
vendor: apple model: icloud
vendor: trend model: security
db: NVD ids: CVE-2023-27966, CVE-2023-28212, CVE-2023-32358, CVE-2023-27968, CVE-2023-27932, CVE-2023-27947, CVE-2023-27963, CVE-2023-23526, CVE-2023-23535, CVE-2023-23538, CVE-2023-28199, CVE-2023-27956, CVE-2023-27949, CVE-2023-23537, CVE-2023-28211, CVE-2023-28190, CVE-2023-27948, CVE-2023-27961, CVE-2023-23523, CVE-2023-27928, CVE-2023-28213, CVE-2023-23532, CVE-2023-23542, CVE-2023-28214, CVE-2023-27935, CVE-2023-27941, CVE-2023-32370, CVE-2023-23527, CVE-2023-28181, CVE-2023-27953, CVE-2023-0288, CVE-2023-28200, CVE-2023-27955, CVE-2023-0512, CVE-2023-23534, CVE-2023-0051, CVE-2023-27965, CVE-2022-43552, CVE-2023-28195, CVE-2023-27937, CVE-2023-23533, CVE-2023-27950, CVE-2023-28198, CVE-2022-43551, CVE-2023-23514, CVE-2023-28201, CVE-2023-23536, CVE-2023-28209, CVE-2023-32356, CVE-2023-28179, CVE-2023-28188, CVE-2023-27931, CVE-2023-27952, CVE-2023-28189, CVE-2023-28178, CVE-2023-27943, CVE-2023-0054, CVE-2023-27951, CVE-2023-27936, CVE-2023-27939, CVE-2023-27944, CVE-2023-23525, CVE-2023-28215, CVE-2023-28187, CVE-2023-0433, CVE-2023-32435, CVE-2023-28180, CVE-2023-32426, CVE-2023-27957, CVE-2023-27933, CVE-2023-27958, CVE-2023-0049, CVE-2023-27954, CVE-2023-28182, CVE-2023-32362, CVE-2023-27962, CVE-2023-27969, CVE-2023-28210, CVE-2023-27946, CVE-2023-27934, CVE-2023-27942, CVE-2023-28192, CVE-2023-27929, CVE-2023-23543

The mystery of the CVEs that are not vulnerabilities

Trust: 4.75

Fetched: Sept. 20, 2023, 9:41 a.m., Published: Sept. 20, 2023, 8 a.m.
 Vulnerabilities: integer overflow
Affected productsExternal IDs
vendor: haxx model: curl
db: NVD ids: CVE-2020-19909

Security Policies: Protecting Your Computers & Network | Russ Harvey Consulting

Trust: 3.25

Fetched: Sept. 20, 2023, 9:40 a.m., Published: May 20, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: essential model: phone
vendor: trustwave model: secure web gateway
vendor: check point model: express
vendor: check point model: zonealarm
vendor: check point model: check point
vendor: google model: home
vendor: google model: google home
vendor: google model: wifi
vendor: google model: android
vendor: zoom model: client

Zero-Day Vulnerability | Breaking Cybersecurity News | The Hacker News

Trust: 3.0

Fetched: Sept. 20, 2023, 9:39 a.m., Published: Sept. 13, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome

Apple Releases Emergency Security Updates

Trust: 3.5

Fetched: Sept. 20, 2023, 9:35 a.m., Published: Sept. 8, 2023, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: macos
vendor: apple model: watchos

CVE-2023-37758 - CVE.report

Related entries in the VARIoT vulnerabilities database: VAR-202307-1597

Trust: 4.75

Fetched: Sept. 20, 2023, 9:32 a.m., Published: -
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: dlink model: dir-815
vendor: d-link model: dir-815
db: NVD ids: CVE-2023-37758

Zoom ZTP and AudioCodes Phones Vulnerable to Eavesdropping Attacks - CyberSec84 | Cybersecurity news.

Trust: 3.0

Fetched: Sept. 20, 2023, 9:31 a.m., Published: Aug. 12, 2023, 12:28 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: zoom model: client

CISA, Medtronic Urge Critical Patch of Cardiac Medical Device Tool Flaw - First Health Advisory

Trust: 3.75

Fetched: Sept. 20, 2023, 9:27 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs

Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution

Trust: 3.5

Fetched: Sept. 20, 2023, 9:26 a.m., Published: July 25, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

Samsung Smartphone Vulnerabilities Likely Exploited by Spyware Vendor Added to CISA ‘Must Patch’ List - VULNERA

Related entries in the VARIoT vulnerabilities database: VAR-202110-0167, VAR-202103-1332, VAR-202110-0169

Trust: 4.5

Fetched: Sept. 20, 2023, 9:22 a.m., Published: June 30, 2023, 12:42 p.m.
 Vulnerabilities: code execution, bounds access vulnerability, format string bug
Affected productsExternal IDs
vendor: d-link model: router
vendor: samsung model: samsung mobile
vendor: samsung model: mobile
vendor: google model: android
db: NVD ids: CVE-2021-25487, CVE-2021-25371, CVE-2021-25372, CVE-2023-21492, CVE-2021-25489, CVE-2021-25394, CVE-2021-25395

IoC scan scope in the registry

Trust: 3.25

Fetched: Sept. 20, 2023, 9:19 a.m., Published: -
 Vulnerabilities: file execution
Affected productsExternal IDs

Control the health of Windows devices - Windows Security | Microsoft Learn

Trust: 3.75

Fetched: Sept. 20, 2023, 9:12 a.m., Published: Aug. 11, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: essential model: phone

IoT Under Siege: The Anatomy of the Latest Mirai Campaign Leveraging Multiple IoT Exploits

Related entries in the VARIoT vulnerabilities database: VAR-202208-1439, VAR-202303-1268, VAR-202205-0957, VAR-202203-1289, VAR-202303-1196, VAR-201912-1012, VAR-202003-0963

Trust: 5.25

Fetched: Sept. 20, 2023, 9:10 a.m., Published: June 22, 2023, 6 a.m.
 Vulnerabilities: command execution, command injection, injection attack...
Affected productsExternal IDs
vendor: palo model: firewall
vendor: palo model: networks
vendor: vacron model: vacron nvr
vendor: tenda model: router
vendor: trend model: security
vendor: telesquare model: sdt-cw3b1
vendor: d-link model: dir-859
vendor: d-link model: router
vendor: d-link model: dwl-2600ap
vendor: palo alto networks model: firewall
vendor: palo alto networks model: networks
vendor: netgear model: dgn1000
vendor: netgear model: router
vendor: nagios model: nagios xi
db: NVD ids: CVE-2022-37061, CVE-2023-1389, CVE-2022-30525, CVE-2022-29303, CVE-2021-25296, CVE-2022-27002, CVE-2022-45699, CVE-2022-30023, CVE-2019-12725, CVE-2023-25280, CVE-2022-40005, CVE-2021-46422, CVE-2023-27240, CVE-2019-17621, CVE-2022-31499, CVE-2019-20500

Security Advisories | Bosch Security and Safety Systems I Global

Related entries in the VARIoT vulnerabilities database: VAR-202203-1707, VAR-202206-2162, VAR-202203-1929, VAR-202206-1805, VAR-202206-2178

Trust: 4.5

Fetched: Sept. 20, 2023, 9:10 a.m., Published: Sept. 20, 2023, midnight
 Vulnerabilities: buffer overflow, information disclosure
Affected productsExternal IDs
vendor: bosch model: divar ip all-in-one
vendor: bosch model: bvms
vendor: bosch model: divar ip 7000
vendor: bosch model: divar ip
db: NVD ids: CVE-2021-23850, CVE-2022-40184, CVE-2022-32534, CVE-2021-23842, CVE-2021-23851, CVE-2021-23843, CVE-2022-36301, CVE-2022-36302, CVE-2022-32535, CVE-2022-32536, CVE-2022-40183

September 12-19, 2023 CISA KEV Breakdown | 15 New Vulns

Related entries in the VARIoT vulnerabilities database: VAR-201505-0274, VAR-201704-1556, VAR-202206-0324, VAR-202206-0056, VAR-202201-1001, VAR-202303-1844, VAR-202206-0005, VAR-202303-1848, VAR-202206-0393

Trust: 5.25

Fetched: Sept. 20, 2023, 9:08 a.m., Published: Sept. 19, 2023, 11:32 p.m.
 Vulnerabilities: brute force attack, privilege escalation, code execution...
Affected productsExternal IDs
vendor: minio model: minio
vendor: cisco model: firepower
vendor: cisco model: clientless ssl vpn
vendor: cisco model: meeting
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower threat defense
vendor: google model: home
vendor: google model: google chrome
vendor: google model: chrome
vendor: google model: android
vendor: samsung model: samsung mobile
vendor: samsung model: mobile
vendor: samsung model: notes
vendor: apple model: macos
db: NVD ids: CVE-2014-8361, CVE-2017-6884, CVE-2022-31463, CVE-2023-36802, CVE-2023-36761, CVE-2022-31459, CVE-2022-22265, CVE-2023-20269, CVE-2023-26369, CVE-2020-28343, CVE-2023-28432, CVE-2023-4863, CVE-2022-31462, CVE-2023-28434, CVE-2022-31461, CVE-2023-35674

9 Best Network Scanners for 2023 (Paid & Free)

Trust: 3.5

Fetched: Sept. 20, 2023, 9:07 a.m., Published: April 24, 2020, 7:03 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: solarwinds model: network performance monitor
vendor: paessler model: prtg network monitor

CVE-2023-40221 - vulnerability database | Vulners.com

Trust: 3.75

Fetched: Sept. 19, 2023, 9:20 a.m., Published: Sept. 18, 2023, 8:15 p.m.
 Vulnerabilities: request forgery, cross-site scripting, code injection...
Affected productsExternal IDs
db: NVD ids: CVE-2023-41084, CVE-2023-38582, CVE-2023-39446, CVE-2023-39452, CVE-2023-40221, CVE-2023-41965, CVE-2023-38255

Critical Remote Code Execution Flaw Discovered in Thousands of Juniper Devices - VULNERA

Trust: 4.25

Fetched: Sept. 19, 2023, 9:19 a.m., Published: Sept. 18, 2023, 7:40 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-36845, CVE-2023-36846, CVE-2023-36844, CVE-2023-36847

CVE-2023-38802 PAN-OS: Denial-of-Service (DoS) Vulnerability in BGP Software

Trust: 3.5

Fetched: Sept. 19, 2023, 9:17 a.m., Published: Sept. 13, 2023, 4 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: palo model: networks
vendor: palo model: pan-os
vendor: palo alto networks model: networks
vendor: palo alto networks model: pan-os
db: NVD ids: CVE-2023-38802, CVE-2023-4481, CVE-2023-38283, CVE-2023-40457