Sign-up

VARIoT news about IoT security

Can Your Alexa Be Hacked? Tips to Ensure Device Security

Trust: 3.25

Fetched: Nov. 21, 2023, 9:33 a.m., Published: May 21, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: home assistant model: home assistant
vendor: essential model: phone
vendor: check point model: check point

CVE-2023-46604 (Apache ActiveMQ) Vulnerability Exploited to Infect Systems With Cryptominers and Rootkits

Trust: 4.75

Fetched: Nov. 21, 2023, 9:23 a.m., Published: Nov. 20, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-46604, CVE-2023-4911

VARIoT latest news about IoT security

Trust: 3.0

Fetched: Nov. 21, 2023, 9:15 a.m., Published: Nov. 4, 2023, midnight
 Vulnerabilities: pointer dereference vulnerability, index error, information leak...
Affected productsExternal IDs

Cybersecurity Vulnerabilities: Types, Examples, and more

Trust: 3.75

Fetched: Nov. 21, 2023, 9:14 a.m., Published: Jan. 10, 2023, 11:13 a.m.
 Vulnerabilities: sql injection
Affected productsExternal IDs
vendor: manageengine model: network configuration manager

Controlling user access to the features of iOS devices

Trust: 3.25

Fetched: Nov. 21, 2023, 9:13 a.m., Published: April 21, 2019, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: icloud

CISA issues critical warning on Juniper device vulnerabilities | SISA Weekly Threat Watch

Trust: 5.0

Fetched: Nov. 21, 2023, 9:06 a.m., Published: Nov. 21, 2023, 7:34 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-34060, CVE-2023-36844, CVE-2023-36847

Vulnerability support in Microsoft Defender Vulnerability Management | Microsoft Learn

Related entries in the VARIoT vulnerabilities database: VAR-202211-0556, VAR-202211-0558, VAR-201912-0871, VAR-202309-0672, VAR-202211-0554, VAR-202211-0557, VAR-202005-1052, VAR-202203-0005, VAR-202111-1183

Trust: 3.75

Fetched: Nov. 21, 2023, 9:04 a.m., Published: June 27, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: netscaler gateway
vendor: siemens model: sinec nms
vendor: lenovo model: yoga
vendor: lenovo model: desktop
vendor: lenovo model: updates
vendor: lenovo model: thinkpad
db: NVD ids: CVE-2022-43946, CVE-2022-29893, CVE-2014-5455, CVE-2022-26845, CVE-2021-31693, CVE-2022-48435, CVE-2023-36884, CVE-2019-14568, CVE-2023-24329, CVE-2023-40481, CVE-2023-3935, CVE-2021-36234, CVE-2023-38831, CVE-2023-28759, CVE-2022-40011, CVE-2021-33159, CVE-2021-22514, CVE-2023-26258, CVE-2021-36283, CVE-2023-31102, CVE-2021-22500, CVE-2022-27497, CVE-2020-9484, CVE-2022-0778, CVE-2023-38545, CVE-2022-35909, CVE-2021-3519, CVE-2021-36324, CVE-2023-4373, CVE-2021-22499, CVE-2020-26941, CVE-2023-29338, CVE-2023-32558, CVE-2023-24881, CVE-2023-40477

As Citrix Urges Its Clients to Patch, Researchers Release an Exploit

Trust: 4.5

Fetched: Nov. 19, 2023, 9:27 a.m., Published: Oct. 25, 2023, 7:55 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: citrix model: gateway
vendor: citrix model: netscaler application delivery controller
vendor: citrix model: netscaler
vendor: citrix model: application delivery controller
db: NVD ids: CVE-2023-4966

Apple releases iOS 16.7.2 and iOS 15.8 security updates to patch old hardware | Ars Technica

Trust: 3.5

Fetched: Nov. 19, 2023, 9:25 a.m., Published: Oct. 25, 2023, 7:31 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: safari
vendor: apple model: macos
vendor: apple model: watchos
vendor: apple model: ipad air
vendor: apple model: ipod touch
vendor: apple model: ipad
vendor: apple model: iphone
db: NVD ids: CVE-2023-32434

System BIOS w wersji R5 do komputerów Alienware m15 | Szczegóły sterownika | Dell Polska

Trust: 3.25

Fetched: Nov. 19, 2023, 9:17 a.m., Published: Nov. 10, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

Resolved issues in Windows 10, version 21H2 | Microsoft Learn

Trust: 4.5

Fetched: Nov. 19, 2023, 9:15 a.m., Published: Nov. 17, 2023, 1:53 a.m.
 Vulnerabilities: access violation, security feature bypass, feature bypass
Affected productsExternal IDs
vendor: barco model: clickshare
db: NVD ids: CVE-2023-35311, CVE-2023-33151

Path traversal - vulnerability database | Vulners.com

Trust: 3.75

Fetched: Nov. 19, 2023, 9:14 a.m., Published: Nov. 9, 2023, 5:15 p.m.
 Vulnerabilities: path traversal
Affected productsExternal IDs
db: NVD ids: CVE-2023-45284, CVE-2023-45283

How to protect your organization from IoT malware | TechTarget

Trust: 3.5

Fetched: Nov. 19, 2023, 9:12 a.m., Published: Nov. 19, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: nokia model: impact

INTEL-SA-00950

Trust: 4.75

Fetched: Nov. 19, 2023, 9:10 a.m., Published: Nov. 14, 2023, 7:19 p.m.
 Vulnerabilities: denial of service, information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2023-23583

Remediation actions in Microsoft Defender XDR | Microsoft Learn

Trust: 3.0

Fetched: Nov. 19, 2023, 9:08 a.m., Published: Feb. 17, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

KB5032189 update for Windows 10 21H2 and 22H2 versions

Trust: 3.0

Fetched: Nov. 19, 2023, 9:07 a.m., Published: Nov. 17, 2023, 6:12 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-36033, CVE-2023-360337, CVE-2023-364008, CVE-2023-363979

34 WDM And WDF Models Vulnerable: Protect Your Devices - Security Boulevard

Trust: 3.0

Fetched: Nov. 19, 2023, 9:05 a.m., Published: Nov. 16, 2023, 9 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-20598, CVE-2023-35841

Threat Watch: iLeakage Vulnerability for Apple Devices

Trust: 3.0

Fetched: Nov. 17, 2023, 9:21 a.m., Published: Nov. 12, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: watch

7 useful hardware pen testing tools | TechTarget

Trust: 4.0

Fetched: Nov. 17, 2023, 9:19 a.m., Published: Nov. 7, 2023, midnight
 Vulnerabilities: injection attack
Affected productsExternal IDs
vendor: raspberry pi model: 3

SSA-617233

Related entries in the VARIoT vulnerabilities database: VAR-201908-0699, VAR-201908-0715, VAR-201908-0701, VAR-201908-0713, VAR-201908-0702, VAR-201908-0703, VAR-201908-0704, VAR-201908-0712, VAR-201908-0706

Trust: 4.5

Fetched: Nov. 17, 2023, 9:18 a.m., Published: Nov. 11, 2023, midnight
 Vulnerabilities: pointer dereference vulnerability, array index error, information leak...
Affected productsExternal IDs
db: NVD ids: CVE-2019-12259, CVE-2019-12258, CVE-2019-12260, CVE-2019-12256, CVE-2019-12261, CVE-2019-12262, CVE-2019-12263, CVE-2019-12255, CVE-2019-12265