Sign-up

VARIoT news about IoT security

Vulnerability in QVR - Security Advisory | QNAP (US)

Trust: 3.25

Fetched: June 9, 2022, 12:45 p.m., Published: May 6, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-27588

Some Android Devices May Have Media File Security Vulnerability | Computer Technologies

Related entries in the VARIoT vulnerabilities database: VAR-202112-0901

Trust: 5.0

Fetched: June 9, 2022, 12:44 p.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: check point model: check point
db: NVD ids: CVE-2021-0675, CVE-2021-30351, CVE-2021-0674

Intel reveals a whole load of hardware security issues, so patch now | TechRadar

Trust: 3.25

Fetched: June 6, 2022, 1:14 p.m., Published: May 14, 2022, 3:05 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs

Unpatched DNS Vulnerability Affecting Millions of IoT Devices and Routers | New Jersey Cybersecurity & Communications Integration Cell

Trust: 3.0

Fetched: June 6, 2022, 1:13 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: axis model: communications

Micorosoft has warned of dangerous vulnerabilities in pre-installed applications on millions of Android devices

Trust: 3.75

Fetched: June 6, 2022, 1:13 p.m., Published: May 30, 2022, 6:29 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2021-42599, CVE-2021-42600, CVE-2021-42601, CVE-2021-42598

Some Android Devices May Have Media File Security Vulnerability | Computer Breakthrough

Related entries in the VARIoT vulnerabilities database: VAR-202112-0901

Trust: 5.0

Fetched: June 6, 2022, 1:13 p.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: check point model: check point
db: NVD ids: CVE-2021-30351, CVE-2021-0674, CVE-2021-0675

Hackers have found a new way to smuggle malware onto your device | TechRadar

Trust: 3.0

Fetched: June 6, 2022, 1:11 p.m., Published: May 23, 2022, 12:26 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2017-11882

Multiple Vulnerabilities in QTS, QuTS hero, and QuTScloud - Security Advisory | QNAP

Trust: 4.75

Fetched: June 6, 2022, 1:11 p.m., Published: May 6, 2022, midnight
 Vulnerabilities: open redirect vulnerability, command injection, cross-site scripting
Affected productsExternal IDs
db: NVD ids: CVE-2021-44053, CVE-2021-44051, CVE-2021-44052, CVE-2021-44054

The May 2022 Patch Tuesday addresses 10 LDAP Remote Code Execution vulnerabilities (Critical, CVSSv3 9.8) - The things that are better left unspoken

Trust: 4.25

Fetched: June 6, 2022, 1:10 p.m., Published: May 10, 2022, 5:58 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-22012, CVE-2022-29137, CVE-2022-29141, CVE-2022-22013, CVE-2022-29129, CVE-2022-22014, CVE-2022-29130, CVE-2022-29131, CVE-2022-29128, CVE-2022-29139

Zyxel warns of vulnerabilities in firewalls, AP controllers and access points (May 24, 2022) | Born's Tech and Windows World

Related entries in the VARIoT vulnerabilities database: VAR-202205-1788, VAR-202205-1787, VAR-202205-1789, VAR-202205-1790

Trust: 5.75

Fetched: June 6, 2022, 1:10 p.m., Published: May 25, 2022, 2:19 p.m.
 Vulnerabilities: authentication bypass, command injection, cross-site scripting...
Affected productsExternal IDs
vendor: zyxel model: usg40
db: NVD ids: CVE-2022-0734, CVE-2022-0910, CVE-2022-26532, CVE-2022-26531

Government Agency Flags Several Vulnerabilities In Chrome Browser, Advises Update

Trust: 3.75

Fetched: June 6, 2022, 1:09 p.m., Published: May 2, 2022, 6:31 p.m.
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome

Vulnerability in QVR - Security Advisory | QNAP (UK)

Trust: 3.25

Fetched: June 6, 2022, 1:08 p.m., Published: May 6, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-27588

Hackers can unlock your phone, smart locks and even your car by exploiting this vulnerability | Tom's Guide

Trust: 3.75

Fetched: June 6, 2022, 1:06 p.m., Published: May 19, 2022, 9:21 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: kwikset model: kevo
vendor: tesla model: model
vendor: tesla model: model 3

Armis Discovers "TLStorm 2.0," Five Critical Vulnerabilities in Network Switches, Organizations Around the World at Risk

Related entries in the VARIoT vulnerabilities database: VAR-202203-0237

Trust: 5.25

Fetched: June 6, 2022, 1:05 p.m., Published: May 3, 2022, 10 a.m.
 Vulnerabilities: code execution, memory corruption
Affected productsExternal IDs
vendor: palo model: networks
vendor: extremenetworks model: ers3500
vendor: aruba model: web management portal
db: NVD ids: CVE-2022-22805, CVE-2022-29861, CVE-2022-23677, CVE-2022-23676, CVE-2022-29860

Researchers Devise Malware That Runs When an iPhone is Powered Off - ExtremeTech

Trust: 3.0

Fetched: June 6, 2022, 1:05 p.m., Published: May 18, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

VMware vulnerabilities under attack, CISA urges action

Trust: 4.0

Fetched: June 6, 2022, 1:05 p.m., Published: May 19, 2022, midnight
 Vulnerabilities: authentication bypass, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2022-22973, CVE-2022-22960, CVE-2022-22954, CVE-2022-22972

NCC Warns of Damaging Vulnerabilities in AVAST & AVG Antivirus on Mobile Devices without Automatic Update - TechnologyMirror

Trust: 4.75

Fetched: June 6, 2022, 1:04 p.m., Published: May 23, 2022, 7:33 a.m.
 Vulnerabilities: code execution, privilege escalation
Affected productsExternal IDs
vendor: avast model: antivirus
db: NVD ids: CVE-2022-26522, CVE-2022-26523

Threat Brief: VMware Vulnerabilities Exploited in the Wild (CVE-2022-22954 and Others)

Related entries in the VARIoT vulnerabilities database: VAR-201803-1048

Trust: 4.25

Fetched: June 2, 2022, 9:22 a.m., Published: May 20, 2022, 6 a.m.
 Vulnerabilities: privilege escalation, code execution
Affected productsExternal IDs
vendor: palo alto networks model: firewall
vendor: palo alto networks model: networks
vendor: palo model: firewall
vendor: palo model: networks
db: NVD ids: CVE-2022-22956, CVE-2022-22957, CVE-2022-22961, CVE-2022-22958, CVE-2022-22960, CVE-2022-22972, CVE-2022-22954, CVE-2022-22959, CVE-2022-22973, CVE-2017-17215, CVE-2022-22955

Update now! Multiple vulnerabilities patched in Google Chrome | Malwarebytes Labs

Trust: 5.5

Fetched: June 2, 2022, 9:22 a.m., Published: May 25, 2022, 11 a.m.
 Vulnerabilities: use after free
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome
db: NVD ids: CVE-2022-1853

Multiple vulnerabilities present in VMware products | Cyber.gov.au

Trust: 5.25

Fetched: June 2, 2022, 9:22 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-22972, CVE-2022-22973, CVE-2022-22954, CVE-2022-22960