Sign-up

VARIoT news about IoT security

An In-Depth Look at ICS Vulnerabilities Part 1

Trust: 4.0

Fetched: June 1, 2022, 8:58 a.m., Published: March 30, 2022, midnight
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2021-30116

Java Spring vulnerabilities | AT&T Alien Labs

Related entries in the VARIoT vulnerabilities database: VAR-202203-1506

Trust: 4.75

Fetched: June 1, 2022, 8:58 a.m., Published: June 2, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-22965, CVE-2022-22963

Record High Number of Zero-Day Vulnerabilities, Numbers May Be Owed to Improved Detection Says Mandiant and Google - CPO Magazine

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: April 25, 2022, 6:19 a.m.
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: apple model: safari
vendor: apple model: webkit
vendor: google model: android

BIG-IP and BIG-IQ SCP vulnerability CVE-2022-26340

Related entries in the VARIoT vulnerabilities database: VAR-202205-0222

Trust: 3.25

Fetched: June 1, 2022, 8:58 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-26340

OESIS Framework May 25, 2022 Release | OPSWAT

Related entries in the VARIoT vulnerabilities database: VAR-201901-1456, VAR-202010-1520, VAR-202205-0624, VAR-202205-0625, VAR-202205-0841, VAR-202205-0904, VAR-202205-0626, VAR-202205-0900, VAR-202205-0896, VAR-202205-0417, VAR-201807-1618, VAR-202010-1499

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: node.js model: node.js
vendor: check point model: check point
vendor: check point model: zonealarm
db: NVD ids: CVE-2020-8251, CVE-2022-28239, CVE-2022-28251, CVE-2022-28244, CVE-2021-23972, CVE-2022-28250, CVE-2022-28252, CVE-2022-28261, CVE-2022-28267, CVE-2019-0545, CVE-2020-8252, CVE-2021-23974, CVE-2022-28260, CVE-2020-9979, CVE-2022-23267, CVE-2022-28263, CVE-2020-8201, CVE-2022-28268, CVE-2022-28837, CVE-2022-28256, CVE-2021-37851, CVE-2022-29117, CVE-2022-28257, CVE-2022-28253, CVE-2021-36613, CVE-2022-29148, CVE-2021-3254, CVE-2022-28264, CVE-2022-28240, CVE-2022-23742, CVE-2022-28258, CVE-2022-28246, CVE-2022-28248, CVE-2022-28255, CVE-2022-29145, CVE-2022-30557, CVE-2022-28259, CVE-2022-29354, CVE-2021-27351, CVE-2022-28245, CVE-2021-21341, CVE-2022-29928, CVE-2022-29927, CVE-2019-10219, CVE-2022-23743, CVE-2022-28266, CVE-2022-28243, CVE-2022-28247, CVE-2022-28265, CVE-2021-36614, CVE-2022-28269, CVE-2022-29929, CVE-2021-43066, CVE-2018-8356, CVE-2022-28241, CVE-2022-28262, CVE-2022-28818, CVE-2020-9992, CVE-2021-3611, CVE-2022-28242, CVE-2022-28838, CVE-2022-28249, CVE-2022-28254

The Top 15 Most Routinely Exploited Vulnerabilities of 2021

Related entries in the VARIoT vulnerabilities database: VAR-201906-0815, VAR-202112-0566, VAR-202008-0248

Trust: 5.5

Fetched: June 1, 2022, 8:58 a.m., Published: June 15, 2022, midnight
 Vulnerabilities: privilege escalation, code execution, security bypass...
Affected productsExternal IDs
vendor: qnap model: qnap qts
db: NVD ids: CVE-2021-26858, CVE-2021-34473, CVE-2018-13379, CVE-2021-26855, CVE-2021-34523, CVE-2021-44228, CVE-2021-40539, CVE-2021-26857, CVE-2019-11510, CVE-2021-31207, CVE-2020-1472, CVE-2021-27065

Critical "Access:7" Supply Chain Vulnerabilities Impact ATMs, Medical and IoT Devices - Patabook Technology

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: March 8, 2022, 11:30 a.m.
 Vulnerabilities: buffer overflow, code execution, information disclosure...
Affected productsExternal IDs
db: NVD ids: CVE-2022-25248, CVE-2022-25247, CVE-2022-25246, CVE-2022-25251, CVE-2022-25250, CVE-2022-25249, CVE-2022-25252

9 Open Source Intelligence (OSINT) Tools for Penetration Testing

Trust: 3.75

Fetched: June 1, 2022, 8:58 a.m., Published: Sept. 3, 2019, 7:33 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome

CVE-2022-29591 Tenda TX9 Pro 22.03.02.10 devices have a SetNet...

Related entries in the VARIoT vulnerabilities database: VAR-202205-0858

Trust: 3.25

Fetched: June 1, 2022, 8:58 a.m., Published: June 9, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-29591

Responsibility for health and medical device cybersecurity must be shared - Washington Times

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: June 1, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: essential model: phone
vendor: delegate model: delegate

Microsoft March 2022 Patch Tuesday: 71 vulnerabilities fixed | ZDNet

Related entries in the VARIoT vulnerabilities database: VAR-202203-0090

Trust: 4.75

Fetched: June 1, 2022, 8:58 a.m., Published: March 1, 2022, midnight
 Vulnerabilities: privilege escalation, denial of service, security feature bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2022-21990, CVE-2022-24502, CVE-2022-22006, CVE-2022-24512, CVE-2022-24508, CVE-2022-24501, CVE-2022-23277, CVE-2022-24459

Android phones are vulnerable to a years-old bug - Is your phone at risk?

Trust: 4.75

Fetched: June 1, 2022, 8:58 a.m., Published: April 25, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: iphone
vendor: google model: android
vendor: check point model: check point

IT Security News - Cybersecurity news aggregated

Trust: 3.75

Fetched: June 1, 2022, 8:58 a.m., Published: June 1, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

20 BEST Cyber Security Software Tools (May 2022 List)

Trust: 3.25

Fetched: June 1, 2022, 8:58 a.m., Published: May 28, 2022, 11:22 a.m.
 Vulnerabilities: sql injection, injection attack
Affected productsExternal IDs
vendor: ring model: ring
vendor: google model: home
vendor: google model: android
vendor: wireshark model: wireshark

Armis Discovers "TLStorm 2.0," Five Critical Vulnerabilities in Network Switches, Organizations Around the World at Risk

Related entries in the VARIoT vulnerabilities database: VAR-202203-0237

Trust: 5.25

Fetched: June 1, 2022, 8:58 a.m., Published: May 3, 2022, 10 a.m.
 Vulnerabilities: memory corruption, code execution
Affected productsExternal IDs
vendor: aruba model: web management portal
vendor: palo model: networks
vendor: extremenetworks model: ers3500
db: NVD ids: CVE-2022-23677, CVE-2022-29861, CVE-2022-22805, CVE-2022-29860, CVE-2022-23676

How to Protect Your Network From Device-Related Vulnerabilities

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: May 12, 2022, 10:26 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

Critical Veeam backup vulnerabilities exposed Windows users to ransomware assault | TechRadar

Trust: 3.75

Fetched: June 1, 2022, 8:58 a.m., Published: March 17, 2022, 3:05 p.m.
 Vulnerabilities: privilege escalation, denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2022-26503, CVE-2022-26500, CVE-2022-26501

Google Chrome Vulnerability: CVE-2022-1480 Use after free in Device API

Trust: 5.0

Fetched: June 1, 2022, 8:58 a.m., Published: June 6, 2022, midnight
 Vulnerabilities: use after free
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
db: NVD ids: CVE-2022-1480

EnemyBot malware adds new exploits to target CMS servers and Android devices - My Blog

Related entries in the VARIoT vulnerabilities database: VAR-202205-0394, VAR-201810-0936, VAR-202112-0566, VAR-202007-1393, VAR-201710-0139, VAR-201502-0201, VAR-202202-0832, VAR-202203-0233, VAR-202112-0562, VAR-201905-0651

Trust: 5.5

Fetched: June 1, 2022, 8:58 a.m., Published: May 31, 2022, midnight
 Vulnerabilities: default credentials, command injection, code injection
Affected productsExternal IDs
vendor: d-link model: router
vendor: netgear model: router
vendor: netgear model: dgn1000
vendor: google model: android
vendor: dbltek model: dbltek
db: NVD ids: CVE-2022-1388, CVE-2021-4039, CVE-2018-10823, CVE-2021-44228, CVE-2022-22954, CVE-2020-17456, CVE-2021-36356, CVE-2020-5902, CVE-2014-9118, CVE-2021-35064, CVE-2015-2051, CVE-2020-7961, CVE-2022-25075, CVE-2018-16763, CVE-2022-22947, CVE-2021-45046, CVE-2017-18368

Packaged zero-day vulnerabilities on Android used for cyber surveillance attacks | TechRepublic

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: May 20, 2022, 1:26 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security
vendor: google model: android
vendor: google model: pixel
vendor: google model: chrome
vendor: samsung model: samsung galaxy
vendor: samsung model: mobile
vendor: samsung model: galaxy
vendor: samsung model: samsung
db: NVD ids: CVE-2021-38003, CVE-2021-1048, CVE-2021-38000, CVE-2021-37973, CVE-2021-37976