Sign-up

VARIoT news about IoT security

New Axis OS Security Research Aided by Transparent Design

Trust: 4.75

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Oct. 5, 2021, 3 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: axis model: communications
vendor: axis model: axis
vendor: axis model: ip cameras
vendor: axis communications model: communications
vendor: axis communications model: axis
vendor: axis communications model: ip cameras

Microsoft : Security vulnerabilities

Related entries in the VARIoT vulnerabilities database: VAR-202111-0789, VAR-202111-0697, VAR-202111-0473, VAR-202111-0660

Trust: 3.75

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Jan. 1, 2021, midnight
 Vulnerabilities: information disclosure, feature bypass, memory corruption...
Affected productsExternal IDs
db: NVD ids: CVE-2021-41372, CVE-2021-41367, CVE-2021-41375, CVE-2021-41373, CVE-2021-43208, CVE-2021-42322, CVE-2021-41374, CVE-2021-42298, CVE-2021-42285, CVE-2021-42306, CVE-2021-42304, CVE-2021-42305, CVE-2021-41349, CVE-2021-42288, CVE-2021-42284, CVE-2021-42323, CVE-2021-43221, CVE-2021-42300, CVE-2021-42297, CVE-2021-42302, CVE-2021-41379, CVE-2021-42274, CVE-2021-43220, CVE-2021-41371, CVE-2021-42321, CVE-2021-41376, CVE-2021-42276, CVE-2021-42280, CVE-2021-42278, CVE-2021-43209, CVE-2021-41366, CVE-2021-42286, CVE-2021-38631, CVE-2021-42301, CVE-2021-42308, CVE-2021-42282, CVE-2021-42303, CVE-2021-41377, CVE-2021-42291, CVE-2009-1234, CVE-2021-42292, CVE-2021-41368, CVE-2021-41370, CVE-2021-42279, CVE-2021-41378, CVE-2021-42283, CVE-2021-42275, CVE-2021-42316, CVE-2021-43211, CVE-2021-26444, CVE-2021-42296, CVE-2021-42287, CVE-2021-42319, CVE-2021-42277

Unpatched Unauthorized File Read Vulnerability Affects Microsoft Windows OS

Related entries in the VARIoT vulnerabilities database: VAR-202108-1005, VAR-202111-0697

Trust: 4.0

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Nov. 30, 2021, 9:11 a.m.
 Vulnerabilities: information disclosure, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2021-24084, CVE-2021-34484, CVE-2021-41379

0patch Blog: Micropatching Unpatched Local Privilege Escalation in Mobile Device Management Service (CVE-2021-24084 / 0day)

Trust: 4.5

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Nov. 26, 2021, midnight
 Vulnerabilities: information disclosure, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2021-24084

HP patches bugs in over 150 printer models

Trust: 3.0

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Nov. 30, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-39238, CVE-2021-39237

These 19 issues on EMUI 11 and 13 other versions got fixed with December 2021 patch - Huawei Update

Related entries in the VARIoT vulnerabilities database: VAR-202111-1767, VAR-202202-0422, VAR-202202-0423, VAR-202112-0224, VAR-202202-1310, VAR-202202-0420, VAR-202112-0944, VAR-202112-0943, VAR-202202-0421, VAR-202202-1311, VAR-202202-1312, VAR-202112-0344, VAR-202111-1769, VAR-202112-0333, VAR-202111-1763, VAR-202111-1765, VAR-202110-1864, VAR-202112-0345, VAR-202201-1016

Trust: 5.5

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Nov. 28, 2021, 5:06 a.m.
 Vulnerabilities: integer overflow, input verification vulnerability, system crash...
Affected productsExternal IDs
vendor: huawei model: hisuite
vendor: huawei model: emui
vendor: huawei model: huawei
db: NVD ids: CVE-2021-37133, CVE-2021-37115, CVE-2021-37107, CVE-2021-37096, CVE-2021-39992, CVE-2021-39994, CVE-2021-39996, CVE-2021-39998, CVE-2021-39991, CVE-2021-39986, CVE-2021-37109, CVE-2021-37074, CVE-2021-39974, CVE-2021-37043, CVE-2021-37118, CVE-2021-37112, CVE-2021-37125, CVE-2021-37069, CVE-2021-39993

Google warns of data-stealing macOS bug | IT PRO

Related entries in the VARIoT vulnerabilities database: VAR-202108-1374

Trust: 3.5

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Jan. 14, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: safari
db: NVD ids: CVE-2021-30869

Vulnerabilities detected in over 150 HP printer models, now patched

Trust: 5.75

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Dec. 1, 2021, 8:11 a.m.
 Vulnerabilities: memory corruption, code execution
Affected productsExternal IDs
vendor: hewlett-packard model: laserjet
db: NVD ids: CVE-2021-39238, CVE-2021-39237

Microsoft Security Bulletins: November 2021

Related entries in the VARIoT vulnerabilities database: VAR-202111-0660, VAR-202111-0697

Trust: 4.75

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Nov. 14, 2021, midnight
 Vulnerabilities: request forgery, cross-site request forgery, cross-site scripting...
Affected productsExternal IDs
db: NVD ids: CVE-2021-41372, CVE-2021-41377, CVE-2021-42296, CVE-2021-41368, CVE-2021-42274, CVE-2021-42319, CVE-2021-42285, CVE-2021-42280, CVE-2021-38665, CVE-2021-38631, CVE-2021-42276, CVE-2021-42278, CVE-2021-38666, CVE-2021-41367, CVE-2021-43208, CVE-2021-42277, CVE-2021-42286, CVE-2021-42291, CVE-2021-42322, CVE-2021-42275, CVE-2021-41366, CVE-2021-41371, CVE-2021-41379, CVE-2021-42284, CVE-2021-42288, CVE-2021-41370, CVE-2021-41349, CVE-2021-40442, CVE-2021-3711, CVE-2021-42283, CVE-2021-42292, CVE-2021-42305, CVE-2021-42282, CVE-2021-43209, CVE-2021-42316, CVE-2021-42298, CVE-2021-42321, CVE-2021-36957, CVE-2021-41356, CVE-2021-42287, CVE-2021-41378, CVE-2021-26443, CVE-2021-42279

0patch beats Microsoft to fix serious local privilege escalation vulnerability in Windows

Trust: 3.75

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Nov. 29, 2021, 1:42 p.m.
 Vulnerabilities: information disclosure, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2021-24084

Identified High Risk Vulnerabilities in the CATIE Web… | Bishop Fox

Trust: 4.25

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Dec. 2, 2021, midnight
 Vulnerabilities: information disclosure
Affected productsExternal IDs

Multiple Bugs Enable Eavesdropping on 37% of Android Phones - Infosecurity Magazine

Trust: 3.75

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Nov. 24, 2021, 11 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: check point model: check point
vendor: vivo model: vivo
db: NVD ids: CVE-2021-0662, CVE-2021-0663, CVE-2021-0661, CVE-2021-0673

Several critical vulnerabilities, $$$ for hacker info and new attack vectors - Vulners Blog

Related entries in the VARIoT vulnerabilities database: VAR-202111-0579, VAR-202111-0609

Trust: 5.0

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Dec. 13, 2021, 8:26 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2021-1924, CVE-2021-0889, CVE-2021-42694, CVE-2021-22205, CVE-2021-43267, CVE-2021-42574, CVE-2021-0930, CVE-2021-1975, CVE-2021-1048, CVE-2021-0918

Hackers are Exploiting Zero-Day Flaw in macOS: Google Warns | Cyware Alerts - Hacker News

Related entries in the VARIoT vulnerabilities database: VAR-202104-0612, VAR-201912-0480, VAR-202108-1374

Trust: 3.25

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Nov. 15, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-1789, CVE-2019-8506, CVE-2021-30869

TOR Vulnerability Allows Attackers to View Exact Timestamp a User Connected to a v2 Onion Address

Trust: 3.0

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Nov. 21, 2021, 3:17 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-39246

If You Have an HP Printer, Install this Patch Right Now

Trust: 3.75

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Nov. 30, 2021, 5:20 p.m.
 Vulnerabilities: code execution, buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2021-39237, CVE-2021-39238

Millions of Wi-Fi routers at risk as hundreds of security vulnerabilities discovered | Technology News,The Indian Express

Trust: 4.75

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Dec. 4, 2021, 4:26 a.m.
 Vulnerabilities: default credentials
Affected productsExternal IDs
vendor: d-link model: router
vendor: asus model: asus
vendor: asus model: router
vendor: tp-link model: routers
vendor: netgear model: router

Top 10 Threat Modeling Tools in 2021 | Toolbox It-security

Trust: 3.5

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Dec. 7, 2021, midnight
 Vulnerabilities: information disclosure, denial of service
Affected productsExternal IDs
vendor: essential model: phone

What Is Hacking? Types of Hackers and Examples

Trust: 4.75

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Sept. 25, 2021, 8:33 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: serve model: serve

Zoom security issues: Everything that's gone wrong (so far) | Tom's Guide

Trust: 3.25

Fetched: Dec. 6, 2021, 2:33 p.m., Published: Dec. 7, 2021, 8:02 p.m.
 Vulnerabilities: code execution, encryption issue
Affected productsExternal IDs
vendor: cisco model: small business
vendor: cisco model: webex
vendor: cisco model: cisco webex
vendor: cisco model: series
vendor: cisco model: meeting
vendor: check point model: check point
vendor: zoom model: zoom client
vendor: zoom model: zoom
vendor: zoom model: client
vendor: trend micro model: antivirus
vendor: trend micro model: security
vendor: trend model: antivirus
vendor: trend model: security
vendor: apple model: macos
vendor: apple model: ipad
vendor: apple model: iphone
vendor: google model: chrome os
vendor: google model: home
vendor: google model: chrome
vendor: google model: android