Sign-up

VARIoT news about IoT security

The Top 15 Most Routinely Exploited Vulnerabilities of 2021

Related entries in the VARIoT vulnerabilities database: VAR-201906-0815, VAR-202112-0566, VAR-202008-0248

Trust: 5.5

Fetched: June 1, 2022, 8:58 a.m., Published: June 15, 2022, midnight
 Vulnerabilities: privilege escalation, code execution, security bypass...
Affected productsExternal IDs
vendor: qnap model: qnap qts
db: NVD ids: CVE-2021-26858, CVE-2021-34473, CVE-2018-13379, CVE-2021-26855, CVE-2021-34523, CVE-2021-44228, CVE-2021-40539, CVE-2021-26857, CVE-2019-11510, CVE-2021-31207, CVE-2020-1472, CVE-2021-27065

Critical "Access:7" Supply Chain Vulnerabilities Impact ATMs, Medical and IoT Devices - Patabook Technology

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: March 8, 2022, 11:30 a.m.
 Vulnerabilities: buffer overflow, code execution, information disclosure...
Affected productsExternal IDs
db: NVD ids: CVE-2022-25248, CVE-2022-25247, CVE-2022-25246, CVE-2022-25251, CVE-2022-25250, CVE-2022-25249, CVE-2022-25252

9 Open Source Intelligence (OSINT) Tools for Penetration Testing

Trust: 3.75

Fetched: June 1, 2022, 8:58 a.m., Published: Sept. 3, 2019, 7:33 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome

CVE-2022-29591 Tenda TX9 Pro 22.03.02.10 devices have a SetNet...

Related entries in the VARIoT vulnerabilities database: VAR-202205-0858

Trust: 3.25

Fetched: June 1, 2022, 8:58 a.m., Published: June 9, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-29591

Responsibility for health and medical device cybersecurity must be shared - Washington Times

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: June 1, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: essential model: phone
vendor: delegate model: delegate

Microsoft March 2022 Patch Tuesday: 71 vulnerabilities fixed | ZDNet

Related entries in the VARIoT vulnerabilities database: VAR-202203-0090

Trust: 4.75

Fetched: June 1, 2022, 8:58 a.m., Published: March 1, 2022, midnight
 Vulnerabilities: privilege escalation, denial of service, security feature bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2022-21990, CVE-2022-24502, CVE-2022-22006, CVE-2022-24512, CVE-2022-24508, CVE-2022-24501, CVE-2022-23277, CVE-2022-24459

Android phones are vulnerable to a years-old bug - Is your phone at risk?

Trust: 4.75

Fetched: June 1, 2022, 8:58 a.m., Published: April 25, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: iphone
vendor: google model: android
vendor: check point model: check point

IT Security News - Cybersecurity news aggregated

Trust: 3.75

Fetched: June 1, 2022, 8:58 a.m., Published: June 1, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

20 BEST Cyber Security Software Tools (May 2022 List)

Trust: 3.25

Fetched: June 1, 2022, 8:58 a.m., Published: May 28, 2022, 11:22 a.m.
 Vulnerabilities: sql injection, injection attack
Affected productsExternal IDs
vendor: ring model: ring
vendor: google model: home
vendor: google model: android
vendor: wireshark model: wireshark

Armis Discovers "TLStorm 2.0," Five Critical Vulnerabilities in Network Switches, Organizations Around the World at Risk

Related entries in the VARIoT vulnerabilities database: VAR-202203-0237

Trust: 5.25

Fetched: June 1, 2022, 8:58 a.m., Published: May 3, 2022, 10 a.m.
 Vulnerabilities: memory corruption, code execution
Affected productsExternal IDs
vendor: aruba model: web management portal
vendor: palo model: networks
vendor: extremenetworks model: ers3500
db: NVD ids: CVE-2022-23677, CVE-2022-29861, CVE-2022-22805, CVE-2022-29860, CVE-2022-23676

How to Protect Your Network From Device-Related Vulnerabilities

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: May 12, 2022, 10:26 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

Critical Veeam backup vulnerabilities exposed Windows users to ransomware assault | TechRadar

Trust: 3.75

Fetched: June 1, 2022, 8:58 a.m., Published: March 17, 2022, 3:05 p.m.
 Vulnerabilities: privilege escalation, denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2022-26503, CVE-2022-26500, CVE-2022-26501

Google Chrome Vulnerability: CVE-2022-1480 Use after free in Device API

Trust: 5.0

Fetched: June 1, 2022, 8:58 a.m., Published: June 6, 2022, midnight
 Vulnerabilities: use after free
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
db: NVD ids: CVE-2022-1480

EnemyBot malware adds new exploits to target CMS servers and Android devices - My Blog

Related entries in the VARIoT vulnerabilities database: VAR-202205-0394, VAR-201810-0936, VAR-202112-0566, VAR-202007-1393, VAR-201710-0139, VAR-201502-0201, VAR-202202-0832, VAR-202203-0233, VAR-202112-0562, VAR-201905-0651

Trust: 5.5

Fetched: June 1, 2022, 8:58 a.m., Published: May 31, 2022, midnight
 Vulnerabilities: default credentials, command injection, code injection
Affected productsExternal IDs
vendor: d-link model: router
vendor: netgear model: router
vendor: netgear model: dgn1000
vendor: google model: android
vendor: dbltek model: dbltek
db: NVD ids: CVE-2022-1388, CVE-2021-4039, CVE-2018-10823, CVE-2021-44228, CVE-2022-22954, CVE-2020-17456, CVE-2021-36356, CVE-2020-5902, CVE-2014-9118, CVE-2021-35064, CVE-2015-2051, CVE-2020-7961, CVE-2022-25075, CVE-2018-16763, CVE-2022-22947, CVE-2021-45046, CVE-2017-18368

Packaged zero-day vulnerabilities on Android used for cyber surveillance attacks | TechRepublic

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: May 20, 2022, 1:26 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security
vendor: google model: android
vendor: google model: pixel
vendor: google model: chrome
vendor: samsung model: samsung galaxy
vendor: samsung model: mobile
vendor: samsung model: galaxy
vendor: samsung model: samsung
db: NVD ids: CVE-2021-38003, CVE-2021-1048, CVE-2021-38000, CVE-2021-37973, CVE-2021-37976

Trio of Flaws Allows Remote Takeover of Some APC UPS Devices | Decipher

Related entries in the VARIoT vulnerabilities database: VAR-202203-0236, VAR-202203-0237, VAR-202203-0235

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: March 7, 2022, midnight
 Vulnerabilities: buffer overflow, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-22806, CVE-2022-22805, CVE-2022-0715

These D-Link Routers Are Vulnerable To Remote Hacks And Should Be Retired Immediately | HotHardware

Related entries in the VARIoT vulnerabilities database: VAR-202202-1281

Trust: 6.0

Fetched: June 1, 2022, 8:58 a.m., Published: April 12, 2022, 4:54 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: d-link model: dir-830l
vendor: d-link model: dir-810l
vendor: d-link model: router
vendor: d-link model: dir-820l
vendor: d-link model: dir-836l
vendor: d-link model: dir-826l
db: NVD ids: CVE-2021-45382

UAE authority warns of Zoom vulnerabilities that compromise users' devices

Trust: 3.0

Fetched: June 1, 2022, 8:58 a.m., Published: May 28, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: zoom model: zoom

Log4Shell Ranked Top Exploited Vulnerability of 2021 by Agencies - HS Today

Trust: 4.5

Fetched: June 1, 2022, 8:58 a.m., Published: April 27, 2022, 6:08 p.m.
 Vulnerabilities: file reading vulnerability, memory corruption, security feature bypass...
Affected productsExternal IDs
vendor: zoho model: manageengine adselfservice plus
vendor: pulse secure model: pulse connect secure
vendor: pulse secure model: connect secure
vendor: pulse model: secure pulse connect secure
vendor: accellion model: accellion file transfer appliance
vendor: accellion model: file transfer appliance

15 Most Exploited Vulnerabilities in 2021

Related entries in the VARIoT vulnerabilities database: VAR-201906-0815, VAR-202112-0566, VAR-202008-0248

Trust: 5.5

Fetched: June 1, 2022, 8:58 a.m., Published: April 29, 2022, 12:46 p.m.
 Vulnerabilities: security bypass, security feature bypass, code execution...
Affected productsExternal IDs
vendor: pulse model: secure pulse connect secure
vendor: pulse secure model: pulse connect secure
vendor: pulse secure model: connect secure
db: NVD ids: CVE-2021-26858, CVE-2021-34473, CVE-2020-0688, CVE-2021-34523, CVE-2021-26855, CVE-2018-13379, CVE-2021-44228, CVE-2021-40539, CVE-2021-26857, CVE-2019-11510, CVE-2021-31207, CVE-2020-1472, CVE-2021-27065, CVE-2021-21972, CVE-2021-26084