Sign-up

VARIoT news about IoT security

KB5032189 update for Windows 10 21H2 and 22H2 versions

Trust: 3.0

Fetched: Nov. 19, 2023, 9:07 a.m., Published: Nov. 17, 2023, 6:12 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-36033, CVE-2023-360337, CVE-2023-364008, CVE-2023-363979

34 WDM And WDF Models Vulnerable: Protect Your Devices - Security Boulevard

Trust: 3.0

Fetched: Nov. 19, 2023, 9:05 a.m., Published: Nov. 16, 2023, 9 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-20598, CVE-2023-35841

Threat Watch: iLeakage Vulnerability for Apple Devices

Trust: 3.0

Fetched: Nov. 17, 2023, 9:21 a.m., Published: Nov. 12, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: watch

7 useful hardware pen testing tools | TechTarget

Trust: 4.0

Fetched: Nov. 17, 2023, 9:19 a.m., Published: Nov. 7, 2023, midnight
 Vulnerabilities: injection attack
Affected productsExternal IDs
vendor: raspberry pi model: 3

SSA-617233

Related entries in the VARIoT vulnerabilities database: VAR-201908-0699, VAR-201908-0715, VAR-201908-0701, VAR-201908-0713, VAR-201908-0702, VAR-201908-0703, VAR-201908-0704, VAR-201908-0712, VAR-201908-0706

Trust: 4.5

Fetched: Nov. 17, 2023, 9:18 a.m., Published: Nov. 11, 2023, midnight
 Vulnerabilities: pointer dereference vulnerability, array index error, information leak...
Affected productsExternal IDs
db: NVD ids: CVE-2019-12259, CVE-2019-12258, CVE-2019-12260, CVE-2019-12256, CVE-2019-12261, CVE-2019-12262, CVE-2019-12263, CVE-2019-12255, CVE-2019-12265

34 WDM And WDF Models Vulnerable: Protect Your Devices

Trust: 3.0

Fetched: Nov. 17, 2023, 9:08 a.m., Published: Nov. 9, 2023, 12:35 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-35841, CVE-2023-20598

Cisco IP Phone Stored Cross-Site Scripting Vulnerability - Cisco

Trust: 4.75

Fetched: Nov. 17, 2023, 9:06 a.m., Published: Nov. 15, 2023, 10:05 a.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: cisco model: unified sip phone
vendor: cisco model: unified ip phone
vendor: cisco model: unified sip phone 3905
vendor: cisco model: ip phone

Cisco Identity Services Engine Vulnerabilities - Cisco

Trust: 3.0

Fetched: Nov. 17, 2023, 9:05 a.m., Published: Nov. 15, 2023, 10:05 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: identity services engine
vendor: cisco model: cisco identity services engine

23-051 (November 14, 2023) - Threat Encyclopedia

Trust: 4.0

Fetched: Nov. 15, 2023, 10:09 a.m., Published: Nov. 14, 2023, midnight
 Vulnerabilities: code execution, cross-site scripting, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2023-41249, CVE-2023-4347, CVE-2023-41265, CVE-2023-42120, CVE-2023-46604, CVE-2023-42123, CVE-2023-2164, CVE-2023-23840

Vulnerability in QTS, QuTS hero, and QuTScloud - Security Advisory | QNAP (US)

Trust: 3.0

Fetched: Nov. 15, 2023, 10:08 a.m., Published: May 6, 2023, midnight
 Vulnerabilities: os command injection, command injection
Affected productsExternal IDs

System BIOS komputera Alienware Aurora Ryzen Edition | Szczegóły sterownika | Dell Polska

Trust: 3.25

Fetched: Nov. 15, 2023, 10:07 a.m., Published: Nov. 9, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

Cerber Ransomware Exploits Atlassian Confluence Vulnerability CVE-2023-22518

Trust: 4.25

Fetched: Nov. 15, 2023, 10:06 a.m., Published: Nov. 10, 2023, midnight
 Vulnerabilities: authentication bypass, code execution, authorization vulnerability
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security
db: NVD ids: CVE-2023-22518, CVE-2023-022518

iLeakage: New Safari Exploit Impacts Apple iPhones and Macs with A- and M-Series CPUs

Trust: 4.5

Fetched: Nov. 15, 2023, 10:05 a.m., Published: Oct. 26, 2023, 4:49 p.m.
 Vulnerabilities: information leakage
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: safari
vendor: apple model: webkit
db: NVD ids: CVE-2022-40982, CVE-2023-20583, CVE-2023-20569

D-LINK SQL Injection Vulnerability Let Attacker Escalate Privileges

Related entries in the VARIoT vulnerabilities database: VAR-202310-1140

Trust: 5.25

Fetched: Nov. 15, 2023, 10 a.m., Published: Oct. 28, 2023, 1:51 p.m.
 Vulnerabilities: sql injection
Affected productsExternal IDs
vendor: d-link model: dar-7000
db: NVD ids: CVE-2023-42406

Dell G15 5511 System BIOS | Szczegóły sterownika | Dell Polska

Trust: 3.25

Fetched: Nov. 15, 2023, 10 a.m., Published: Nov. 14, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

IT Security Standard: Network Configuration Compliance - Information Security - Cal Poly, San Luis Obispo

Trust: 3.0

Fetched: Nov. 15, 2023, 9:58 a.m., Published: Nov. 14, 2023, midnight
 Vulnerabilities: configuration error
Affected productsExternal IDs

Cisco releases security fix for widely-exploited IOS XE software vulnerability | Cybersecurity Dive

Related entries in the VARIoT vulnerabilities database: VAR-202103-0773

Trust: 4.0

Fetched: Nov. 15, 2023, 9:57 a.m., Published: Oct. 20, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco ios
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe
vendor: cisco model: ios xe software
db: NVD ids: CVE-2023-20198, CVE-2023-20273, CVE-2021-1435

Alienware m15 R7/m17 R5 System BIOS | Szczegóły sterownika | Dell Polska

Trust: 3.0

Fetched: Nov. 15, 2023, 9:57 a.m., Published: Nov. 10, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

Dell G15 5515 System BIOS | Szczegóły sterownika | Dell Polska

Trust: 3.25

Fetched: Nov. 15, 2023, 9:56 a.m., Published: Nov. 14, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

Dell Inspiron 3515 and Vostro 3515 System BIOS | Szczegóły sterownika | Dell Polska

Trust: 3.25

Fetched: Nov. 15, 2023, 9:55 a.m., Published: Nov. 15, 3515, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios