Sign-up

VARIoT news about IoT security

Authentication flaw - vulnerability database | Vulners.com

Trust: 4.25

Fetched: March 10, 2024, 9:44 a.m., Published: March 6, 2024, 5:15 p.m.
 Vulnerabilities: authentication flaw
Affected productsExternal IDs

CVE-2024-20345 - vulnerability database | Vulners.com

Trust: 5.25

Fetched: March 10, 2024, 9:43 a.m., Published: March 6, 2024, 5:15 p.m.
 Vulnerabilities: directory traversal
Affected productsExternal IDs
db: NVD ids: CVE-2024-20345

Critical iOS Update Fixes Zero-Day Vulnerabilities Exploited in Attacks - Cyber and Fraud Centre - Scotland

Related entries in the VARIoT vulnerabilities database: VAR-202301-1714, VAR-202302-1097

Trust: 4.0

Fetched: March 10, 2024, 9:37 a.m., Published: March 6, 2024, 1:21 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: iphone
vendor: apple model: safari
vendor: apple model: ipad
vendor: apple model: macos
vendor: apple model: ipod touch
db: NVD ids: CVE-2023-23513, CVE-2023-23529

Cisco Secure Client for Linux with ISE Posture Module Privilege Escalation Vulnerability

Trust: 3.0

Fetched: March 10, 2024, 9:31 a.m., Published: March 6, 2024, 4:13 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs

Cisco AppDynamics Controller Path Traversal Vulnerability

Trust: 3.25

Fetched: March 10, 2024, 9:30 a.m., Published: March 6, 2024, 4:13 p.m.
 Vulnerabilities: path traversal
Affected productsExternal IDs

Google Online Security Blog: Hardening cellular basebands in Android

Trust: 3.25

Fetched: March 10, 2024, 9:28 a.m., Published: Dec. 12, 2023, midnight
 Vulnerabilities: code execution, integer overflow
Affected productsExternal IDs
vendor: google model: android
vendor: trend model: security

Understanding CVE, Its Identifiers, Uses, and Challenges | Spiceworks - Spiceworks

Trust: 3.5

Fetched: March 10, 2024, 9:22 a.m., Published: Feb. 7, 2024, 7:22 a.m.
 Vulnerabilities: brute force attack, code execution, sql injection
Affected productsExternal IDs
db: NVD ids: CVE-2023-12345

Cisco Duo Authentication for Windows Logon and RDP Authentication Bypass Vulnerability

Trust: 4.25

Fetched: March 10, 2024, 9:19 a.m., Published: March 6, 2024, 4:13 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs

CISA's Advisory on Ivanti Vulnerabilities and Mitigation Challenges (CVE-2023-46805, CVE-2024-21887) - OP INNOVATE

Trust: 3.25

Fetched: March 10, 2024, 9:19 a.m., Published: Jan. 23, 2024, 10:42 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-21887, CVE-2023-46805

Details on Apple’s Shortcuts Vulnerability: A Deep Dive into CVE-2024-23204

Trust: 4.5

Fetched: March 10, 2024, 9:18 a.m., Published: March 4, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: watchos
vendor: apple model: mac os
vendor: apple model: macos
db: NVD ids: CVE-2024-23204

P3: MS Defender for Endpoint - Threat and Vulnerability Management (TVM) | Ammar Hasayen

Related entries in the VARIoT vulnerabilities database: VAR-201607-0116

Trust: 4.5

Fetched: March 8, 2024, 9:21 a.m., Published: Nov. 24, 2021, 9:33 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: trend model: security
vendor: trend model: antivirus
db: NVD ids: CVE-2016-4201

Microsoft finds new NETGEAR firmware vulnerabilities that could lead to identity theft and full system compromise | Microsoft Security Blog

Trust: 4.25

Fetched: March 8, 2024, 9:20 a.m., Published: June 30, 2021, midnight
 Vulnerabilities: request forgery, memory corruption, authentication bypass...
Affected productsExternal IDs
vendor: netgear model: router
vendor: netgear model: dgn2200v1

ERROR: The request could not be satisfied

Trust: 3.25

Fetched: March 8, 2024, 9:20 a.m., Published: March 8, 2023, midnight
 Vulnerabilities: configuration error
Affected productsExternal IDs

Security Vulnerabilities fixed in Firefox 123 - Mozilla

Trust: 3.0

Fetched: March 6, 2024, 9:23 a.m., Published: -
 Vulnerabilities: memory corruption
Affected productsExternal IDs

Samsung Publishes Full March 2024 Security Update Details and Device List

Related entries in the VARIoT vulnerabilities database: VAR-202312-0146, VAR-202312-0152, VAR-202312-0020, VAR-202402-0244

Trust: 5.5

Fetched: March 6, 2024, 9:23 a.m., Published: March 5, 2024, 5:52 a.m.
 Vulnerabilities: use after free, access control vulnerability, incorrect default permission...
Affected productsExternal IDs
vendor: google model: android
vendor: samsung model: note20
vendor: samsung model: galaxy
vendor: samsung model: samsung firmware
vendor: samsung model: samsung galaxy
db: NVD ids: CVE-2024-20833, CVE-2024-0049, CVE-2024-20007, CVE-2024-0047, CVE-2024-20011, CVE-2024-20832, CVE-2023-43536, CVE-2024-20834, CVE-2023-40081, CVE-2024-0048, CVE-2023-21135, CVE-2023-33058, CVE-2023-49667, CVE-2023-32842, CVE-2023-33076, CVE-2024-20009, CVE-2023-43534, CVE-2024-20836, CVE-2023-5091, CVE-2024-0046, CVE-2024-0052, CVE-2024-20010, CVE-2023-33046, CVE-2023-32841, CVE-2024-20835, CVE-2023-43522, CVE-2023-43520, CVE-2023-43513, CVE-2023-33060, CVE-2024-23717, CVE-2023-5643, CVE-2024-0053, CVE-2024-0051, CVE-2024-20831, CVE-2024-0050, CVE-2024-20006, CVE-2024-0039, CVE-2023-33072, CVE-2023-32843, CVE-2023-43516, CVE-2023-43518, CVE-2024-0044, CVE-2023-5249, CVE-2024-20003, CVE-2024-20830, CVE-2023-43523, CVE-2023-21234, CVE-2023-43533, CVE-2023-43519, CVE-2023-49668, CVE-2023-33049, CVE-2024-0045, CVE-2023-33057

Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways | CISA

Trust: 3.5

Fetched: March 6, 2024, 9:19 a.m., Published: March 6, 2023, midnight
 Vulnerabilities: authentication bypass, code execution, command injection...
Affected productsExternal IDs
db: NVD ids: CVE-2024-21888, CVE-2024-21887, CVE-2023-46805, CVE-2024-22024, CVE-2024-21893

NMAP Vulnerability Scan: How To Easily Run And Assess Risk

Trust: 3.75

Fetched: March 5, 2024, 9:18 a.m., Published: Feb. 26, 2024, 9 p.m.
 Vulnerabilities: default credentials
Affected productsExternal IDs
vendor: wireshark model: wireshark

Android Security Bulletin-March 2024 | Android Open Source Project

Related entries in the VARIoT vulnerabilities database: VAR-202312-2038, VAR-202312-1510, VAR-202403-0345

Trust: 4.25

Fetched: March 5, 2024, 9:17 a.m., Published: March 5, 2024, midnight
 Vulnerabilities: code execution, information disclosure, denial of service
Affected productsExternal IDs
vendor: samsung model: notes
vendor: samsung model: mobile
vendor: huawei model: huawei
vendor: google model: pixel
vendor: google model: android
vendor: motorola model: android
vendor: motorola model: motorola
db: NVD ids: CVE-2023-40081, CVE-2024-20020, CVE-2024-20026, CVE-2024-0053, CVE-2023-43548, CVE-2024-20005, CVE-2024-0050, CVE-2023-43549, CVE-2023-33042, CVE-2024-0049, CVE-2023-6241, CVE-2024-20023, CVE-2024-0047, CVE-2023-48425, CVE-2023-33105, CVE-2024-0045, CVE-2024-20022, CVE-2023-28578, CVE-2024-0052, CVE-2024-20025, CVE-2024-20027, CVE-2024-23717, CVE-2024-0048, CVE-2024-0044, CVE-2023-48424, CVE-2023-6143, CVE-2024-20028, CVE-2024-0051, CVE-2023-43539, CVE-2024-0046, CVE-2024-20024, CVE-2024-0039, CVE-2023-33066

Exploitation of Pulse Connect Secure Vulnerabilities | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202102-0809

Trust: 4.25

Fetched: March 5, 2024, 9:10 a.m., Published: March 5, 2023, midnight
 Vulnerabilities: factory default setting, authentication bypass
Affected productsExternal IDs
vendor: pulse secure model: connect secure
vendor: pulse secure model: pulse connect secure
db: NVD ids: CVE-2021-22900, CVE-2020-8243, CVE-2020-8260, CVE-2021-22893, CVE-2021-22894, CVE-2021-22984, CVE-2021-22899, CVE-2019-11510

CVE-2023-4966 (CitrixBleed): Invalidate Active or Persistent Sessions To Prevent Further Compromise - Blog | Tenable®

Trust: 4.75

Fetched: March 3, 2024, 9:22 a.m., Published: Dec. 6, 2023, 6:44 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: citrix model: application delivery controller
vendor: citrix model: netscaler application delivery controller
vendor: citrix model: gateway
vendor: citrix model: netscaler
vendor: citrix model: netscaler adc
vendor: citrix model: netscaler gateway
db: NVD ids: CVE-2023-4966