VARIoT latest news about IoT security

Google Chrome - Security Vulnerabilities in 2023 Trust: 5.25 Fetched: Sept. 12, 2023, 9:20 a.m., Published: Sept. 12, 2023, midnight	Vulnerabilities: memory corruption, buffer overflow, heap corruption...

Affected products

External IDs

vendor:	google	model:	android
vendor:	google	model:	google chrome
vendor:	google	model:	chrome

db:

NVD

ids:

CVE-2021-30633, CVE-2023-4764, CVE-2023-4078, CVE-2023-4357, CVE-2021-4318, CVE-2023-3740, CVE-2023-4360, CVE-2023-3737, CVE-2021-4317, CVE-2023-3217, CVE-2023-3421, CVE-2023-4352, CVE-2022-4924, CVE-2021-37976, CVE-2022-3038, CVE-2023-4076, CVE-2021-37973, CVE-2023-4368, CVE-2023-2311, CVE-2021-21166, CVE-2022-4911, CVE-2021-4316, CVE-2022-4914, CVE-2023-4072, CVE-2020-6572, CVE-2023-4430, CVE-2021-37975, CVE-2019-5786, CVE-2020-16017, CVE-2022-4925, CVE-2020-15999, CVE-2022-4915, CVE-2023-2940, CVE-2022-4910, CVE-2023-3728, CVE-2023-4353, CVE-2021-30563, CVE-2023-3735, CVE-2021-4321, CVE-2023-4428, CVE-2023-2941, CVE-2022-4921, CVE-2023-4365, CVE-2023-2933, CVE-2021-30554, CVE-2023-3730, CVE-2022-4907, CVE-2022-4916, CVE-2022-0609, CVE-2023-4351, CVE-2023-2314, CVE-2023-2936, CVE-2023-2931, CVE-2023-4762, CVE-2023-4431, CVE-2022-4912, CVE-2023-4364, CVE-2023-4362, CVE-2023-3215, CVE-2023-2929, CVE-2021-4319, CVE-2021-4323, CVE-2023-3422, CVE-2023-4366, CVE-2023-2930, CVE-2022-4908, CVE-2023-3733, CVE-2023-4572, CVE-2023-4367, CVE-2022-2856, CVE-2021-4320, CVE-2022-4906, CVE-2023-2934, CVE-2022-4955, CVE-2022-4919, CVE-2023-4429, CVE-2023-3420, CVE-2023-3214, CVE-2023-4077, CVE-2023-3734, CVE-2023-2938, CVE-2022-4913, CVE-2023-3738, CVE-2023-3732, CVE-2022-4923, CVE-2023-4354, CVE-2022-4922, CVE-2023-2937, CVE-2019-13720, CVE-2022-4918, CVE-2023-3216, CVE-2023-3727, CVE-2023-4071, CVE-2023-4068, CVE-2023-4075, CVE-2023-4761, CVE-2023-3079, CVE-2023-4356, CVE-2023-4427, CVE-2023-4358, CVE-2023-3598, CVE-2023-4069, CVE-2022-4920, CVE-2022-4909, CVE-2023-4763, CVE-2021-4322, CVE-2023-4349, CVE-2023-4074, CVE-2023-4070, CVE-2023-2932, CVE-2023-4355, CVE-2023-2935, CVE-2021-30632, CVE-2022-4452, CVE-2023-2724, CVE-2021-4324, CVE-2023-2136, CVE-2022-4135

Update your iPhone: Apple just pushed out a significant security update - ABC News Trust: 3.0 Fetched: Sept. 12, 2023, 9:19 a.m., Published: Sept. 12, 2024, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

iphone

New Vulnerabilities Monday 11 September - CND News and Blog Trust: 4.0 Fetched: Sept. 12, 2023, 9:17 a.m., Published: Sept. 11, 2023, midnight	Vulnerabilities: denial of service

Affected products	External IDs

Cyber Threat Intelligence Coursera Quiz Answers - Networking Funda Trust: 3.25 Fetched: Sept. 12, 2023, 9:11 a.m., Published: Nov. 13, 2021, 8:20 p.m.	Vulnerabilities: sql injection, buffer overflow, cross-site scripting...

Affected products

External IDs

vendor:	trend	model:	antivirus
vendor:	trend	model:	security
vendor:	trend	model:	data loss prevention
vendor:	trend	model:	internet security

iOS 16.6.1 - update your iPhone now to prevent Pegasus from spying on you \| Tom's Guide Trust: 3.75 Fetched: Sept. 12, 2023, 9:10 a.m., Published: Sept. 10, 2023, 6:45 p.m.	Vulnerabilities: buffer overflow

Affected products

External IDs

vendor:	trend	model:	antivirus
vendor:	trend	model:	security
vendor:	trend	model:	internet security
vendor:	apple	model:	ipad
vendor:	apple	model:	iphone
vendor:	apple	model:	watch
vendor:	apple	model:	macos
vendor:	apple	model:	ipad air

Urgent Security Patches Released: Apple Targets Zero-Click iMessage Exploit - The Cybersecurity Daily News Related entries in the VARIoT vulnerabilities database: VAR-202302-1097 Trust: 5.0 Fetched: Sept. 12, 2023, 9:09 a.m., Published: Sept. 8, 2023, 8:05 a.m.	Vulnerabilities: buffer overflow

Affected products

External IDs

vendor:	apple	model:	ipad
vendor:	apple	model:	iphone
vendor:	apple	model:	watchos
vendor:	apple	model:	webkit
vendor:	apple	model:	watch
vendor:	apple	model:	macos
vendor:	apple	model:	ipad air

db:

NVD

ids:

CVE-2023-32409, CVE-2023-28205, CVE-2023-41061, CVE-2023-32434, CVE-2023-32439, CVE-2023-23529, CVE-2023-32435, CVE-2023-41064, CVE-2023-28206, CVE-2023-32373, CVE-2023-38606, CVE-2023-28204, CVE-2023-37450

About the security content of iOS 16.6.1 and iPadOS 16.6.1 - Apple Support Trust: 5.75 Fetched: Sept. 12, 2023, 9:09 a.m., Published: June 16, 2001, midnight	Vulnerabilities: buffer overflow, code execution

Affected products

External IDs

vendor:	apple	model:	ipad
vendor:	apple	model:	iphone
vendor:	apple	model:	ipad air

db:

NVD

ids:

CVE-2023-41064, CVE-2023-41061

Apple patches “clickless” 0-day image processing vulnerability in iOS, macOS \| Ars Technica Trust: 3.75 Fetched: Sept. 12, 2023, 9:08 a.m., Published: Sept. 7, 2023, 10:47 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	safari
vendor:	apple	model:	macos
vendor:	apple	model:	watchos

db:

NVD

ids:

CVE-2023-41064, CVE-2023-41061

iOS 16.6.1: iPhone users urged to install new software immediately after powerful security hole found \| The Independent Trust: 3.0 Fetched: Sept. 12, 2023, 9:05 a.m., Published: Sept. 9, 2023, 9:38 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

iphone

Cisco Releases Security Update for Actively Exploited Vulnerability CVE-2023-20269 - NHS Digital Trust: 3.75 Fetched: Sept. 12, 2023, 9:04 a.m., Published: Sept. 12, 2023, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

cisco

model:

series

db:

NVD

ids:

CVE-2023-20269

CVE-2023-36844 And Friends: RCE In Juniper Devices Trust: 4.25 Fetched: Sept. 10, 2023, 10:08 a.m., Published: Aug. 25, 2023, 9:34 a.m.	Vulnerabilities: command execution, injection attack, authentication error...

Affected products

External IDs

vendor:	sonicwall	model:	switch
vendor:	goahead	model:	webserver

db:

NVD

ids:

CVE-2023-36844, CVE-2023-36846, CVE-2023-36845

About the security content of iOS 16.5 and iPadOS 16.5 - Apple Support Trust: 4.25 Fetched: Sept. 10, 2023, 10:07 a.m., Published: Sept. 16, 2023, midnight	Vulnerabilities: authorization issue, buffer overflow, code execution

Affected products

External IDs

vendor:	trend micro	model:	security
vendor:	trend	model:	security
vendor:	apple	model:	webkit
vendor:	apple	model:	iphone
vendor:	apple	model:	ipad air
vendor:	apple	model:	ipad

db:

NVD

ids:

CVE-2023-32409, CVE-2023-32402, CVE-2023-32390, CVE-2023-28204, CVE-2023-32423, CVE-2023-32372, CVE-2023-32389, CVE-2023-32352, CVE-2023-32384, CVE-2023-32368, CVE-2023-32399, CVE-2023-32391, CVE-2023-32422, CVE-2023-32385, CVE-2023-34352, CVE-2023-32388, CVE-2023-32392, CVE-2023-32373, CVE-2023-32420, CVE-2023-32425, CVE-2023-27930, CVE-2023-32408, CVE-2023-32407, CVE-2023-32415, CVE-2023-32371, CVE-2023-32413, CVE-2023-32357, CVE-2023-32367, CVE-2023-32404, CVE-2023-32403, CVE-2023-32354, CVE-2023-32432, CVE-2023-32437, CVE-2023-32365, CVE-2023-32394, CVE-2023-32398, CVE-2023-32428, CVE-2023-32400, CVE-2023-32376, CVE-2023-28191, CVE-2023-32411, CVE-2023-28202, CVE-2023-32419, CVE-2023-32412

Top Cyber Security Interview Questions and Answers (2023) - InterviewBit Trust: 4.0 Fetched: Sept. 10, 2023, 10:06 a.m., Published: Sept. 4, 2023, midnight	Vulnerabilities: buffer overflow

Affected products	External IDs

Web Application Security: Common Threats and Best Practices Trust: 4.5 Fetched: Sept. 10, 2023, 10:05 a.m., Published: March 24, 2022, 10:47 a.m.	Vulnerabilities: request forgery, injection attack, cross-site scripting...

Affected products

External IDs

vendor:

node.js

model:

node.js

Weekly Vulnerability Recap - Sept 4, 2023 - Network Devices Hit Related entries in the VARIoT vulnerabilities database: VAR-202303-1844, VAR-202303-1848 Trust: 5.25 Fetched: Sept. 10, 2023, 9:59 a.m., Published: Sept. 5, 2023, 11:59 p.m.	Vulnerabilities: path traversal, code execution, authentication bypass

Affected products

External IDs

vendor:	minio	model:	minio
vendor:	cisco	model:	netscaler gateway
vendor:	cisco	model:	routers
vendor:	citrix	model:	gateway
vendor:	citrix	model:	netscaler adc
vendor:	citrix	model:	netscaler
vendor:	citrix	model:	netscaler gateway

db:

NVD

ids:

CVE-2023-34039, CVE-2023-36847, CVE-2023-3519, CVE-2023-36844, CVE-2023-32315, CVE-2023-28432, CVE-2023-36846, CVE-2023-36845, CVE-2023-33246, CVE-2023-20890, CVE-2023-28434

Threats to and Attacks on Routers - SCND - Cisco Certified Expert Trust: 3.5 Fetched: Sept. 10, 2023, 9:59 a.m., Published: Sept. 4, 2023, 12:02 a.m.	Vulnerabilities: session hijacking, password guessing, denial of service

Affected products

External IDs

vendor:	cisco	model:	router
vendor:	cisco	model:	routers

Securing Your Home Network: Essential Steps For A Safe Connected Environment Trust: 5.5 Fetched: Sept. 10, 2023, 9:58 a.m., Published: Aug. 14, 2023, midnight	Vulnerabilities: default password

Affected products

External IDs

vendor:

netgear

model:

router

Cisco Secure Firewall Threat Defense Compatibility Guide - Cisco Trust: 3.0 Fetched: Sept. 10, 2023, 9:56 a.m., Published: Sept. 7, 2023, 5:03 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	asa5545-x
vendor:	cisco	model:	asa5516-x
vendor:	cisco	model:	device manager
vendor:	cisco	model:	asa5555-x
vendor:	cisco	model:	asa5508-x
vendor:	cisco	model:	asa5512-x
vendor:	cisco	model:	firepower
vendor:	cisco	model:	series
vendor:	cisco	model:	asa5525-x
vendor:	cisco	model:	asa5515-x

21 Top Cyber Attacks You Should Know in 2023 Trust: 4.5 Fetched: Sept. 10, 2023, 9:54 a.m., Published: Sept. 10, 2023, midnight	Vulnerabilities: injection attack, brute force attack, denial of service...

Affected products

External IDs

vendor:

avast

model:

antivirus

About the security content of iOS 16.3 and iPadOS 16.3 - Apple Support Related entries in the VARIoT vulnerabilities database: VAR-202302-2240, VAR-202301-1717, VAR-202301-1718, VAR-202301-1708, VAR-202301-1710, VAR-202301-1704, VAR-202302-2045, VAR-202301-1715, VAR-202302-2044, VAR-202301-1703, VAR-202301-1713, VAR-202301-1706, VAR-202301-1707, VAR-202301-1711, VAR-202301-1721, VAR-202301-1722 Trust: 4.25 Fetched: Sept. 10, 2023, 9:52 a.m., Published: Sept. 16, 2023, midnight	Vulnerabilities: information disclosure, code execution, memory corruption

Affected products

External IDs

vendor:	trend micro	model:	security
vendor:	trend	model:	security
vendor:	apple	model:	ipad air
vendor:	apple	model:	safari
vendor:	apple	model:	ipad
vendor:	apple	model:	webkit
vendor:	apple	model:	iphone

db:

NVD

ids:

CVE-2023-23531, CVE-2023-41990, CVE-2023-23503, CVE-2023-23518, CVE-2023-23512, CVE-2023-23504, CVE-2023-23496, CVE-2023-23530, CVE-2023-28208, CVE-2023-23519, CVE-2022-0108, CVE-2023-32438, CVE-2023-32393, CVE-2023-23520, CVE-2023-23517, CVE-2023-23505, CVE-2023-23500, CVE-2023-23498, CVE-2023-23511, CVE-2023-23502, CVE-2023-23499

VARIoT news about IoT security