Sign-up

VARIoT news about IoT security

Exploring a New Class of Kernel Exploit Primitive - Microsoft Security Response Center

Trust: [3.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: June 7, 2022, midnight
 Vulnerabilities: privilege escalation, information disclosure, denial of service...
Affected productsExternal IDs

CVE-2022-21992 - Security Update Guide - Microsoft - Windows Mobile Device Management Remote Code Execution Vulnerability

Trust: [4.25, []]

Fetched: May 13, 2022, 10:50 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-21992

Medical, IoT Devices From Many Manufacturers Affected by 'Access:7' Vulnerabilities | SecurityWeek.Com

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 6, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

Medical and IoT Devices From More Than 100 Vendors Vulnerable to Attack

Trust: [5.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 8, 2022, 7:32 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-25252, CVE-2022-25249, CVE-2022-25250, CVE-2022-25246, CVE-2022-25251, CVE-2022-25247

7 New Vulnerabilities Threaten Supply Chain, Medical Device Security

Trust: [4.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 8, 2022, 1 p.m.
 Vulnerabilities: information disclosure, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-25247, CVE-2022-25246

New Supply Chain Vulnerabilities Impact Medical and IoT Devices - Forescout

Trust: [3.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 8, 2022, 3:05 p.m.
 Vulnerabilities: buffer overflow, information disclosure, directory traversal...
Affected productsExternal IDs
db: NVD ids: CVE-2022-25252, CVE-2022-25249, CVE-2022-25250, CVE-2022-25247, CVE-2022-25251, CVE-2022-25248, CVE-2022-25246

national vulnerability database

Related entries in the VARIoT vulnerabilities database: VAR-201906-0768

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: -
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
db: NVD ids: CVE-2018-18472, CVE-2022-27226, CVE-2021-26256, CVE-2022-25192, CVE-2021-44141

OESIS Framework March 24, 2022 Release | OPSWAT

Related entries in the VARIoT vulnerabilities database: VAR-202009-1442, VAR-202203-0117

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2020-8927, CVE-2022-27207, CVE-2022-27196, CVE-2022-27201, CVE-2021-20257, CVE-2022-22600

Finding Veeam Backup & Replication instances

Trust: [4.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 15, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-26501, CVE-2022-26500

Vulnerability in Windows 10! - Tekno Patch

Trust: [3.25, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 4, 2022, 8:24 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2019-0797

11 Authorization Best Practices | Teleport

Trust: [3.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 22, 2022, midnight
 Vulnerabilities: path traversal, directory traversal, cross-site request forgery...
Affected productsExternal IDs

Top 50 Cyber Security Interview Questions and Answers in 2022 | Edureka

Trust: [3.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Dec. 11, 2021, 1:30 p.m.
 Vulnerabilities: code execution, code injection, brute force attack...
Affected productsExternal IDs

What is Network Scanning and how does it work?

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 15, 2022, 12:55 p.m.
 Vulnerabilities: -
Affected productsExternal IDs

CVE-2022-0854 | Linux Kernel DMA Subsystem swiotlb.c DMA_FROM_DEVICE memory leak

Trust: [3.25, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 3, 2022, midnight
 Vulnerabilities: memory leak
Affected productsExternal IDs
db: NVD ids: CVE-2022-0854

Security vulnerability: CVE-2022-25636, a heap out of bounds write in the Linux kernel. | Support | SUSE

Trust: [3.25, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 12, 2022, midnight
 Vulnerabilities: memory access flaw
Affected productsExternal IDs
db: NVD ids: CVE-2022-25636

What Is SpringShell? What We Know About the SpringShell Vulnerability [Updated] - Flashpoint

Related entries in the VARIoT vulnerabilities database: VAR-202203-1506

Trust: [4.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 30, 2022, 6:23 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-22965, CVE-2022-22963, CVE-2022-27772

CyRC Vulnerability Analysis: Spring4Shell and CVE-2022-22963

Related entries in the VARIoT vulnerabilities database: VAR-202203-1506

Trust: [4.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 30, 2022, 11:52 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-22963, CVE-2022-22965

Security Vulnerabilities Found in ClickHouse Open-Source Software

Trust: [4.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 15, 2022, 6:04 p.m.
 Vulnerabilities: information leakage, buffer overflow, code execution...
Affected productsExternal IDs
db: NVD ids: CVE-2021-42390, CVE-2021-42387, CVE-2021-42391, CVE-2021-43305, CVE-2021-43304, CVE-2021-42388, CVE-2021-42389

Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution | New York State Office of Information Technology Services

Trust: [3.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 15, 2022, 9:22 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

Western Digital fixes security vulnerability in EdgeRover for Windows and macOS - gHacks Tech News

Trust: [4.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 21, 2022, 3:46 p.m.
 Vulnerabilities: denial of service, directory traversal, privilege escalation...
Affected productsExternal IDs
db: NVD ids: CVE-2022-22988