Jony Ive reportedly discussing new AI hardware project with OpenAI CEO
Jony Ive became famous for his role as Chief Design Officer at Apple, as he was responsible for many important projects at the company. Ive left Apple in 2019 to found his own design firm, LoveFrom, and has since worked with partners such as Airbnb and Ferrari. According to a new report, Ive is now discussing the project of a new “AI hardware” with Sam Altman, CEO of OpenAI. more…

Read more »

Here’s how to disable ‘Click wallpaper to reveal desktop’ on macOS Sonoma
Apple on Tuesday released macOS Sonoma to the public, and the update brings multiple new features – including some minor ones. One thing users have probably noticed after installing the update is the new “Click wallpaper to reveal desktop” option that comes enabled by default and, as the name suggests, it hides all windows when you click on the wallpaper. If you’re annoyed by this new feature, don’t worry, there’s a way to turn it off. more…

Read more »

BLUETTI has some essential tips for weathering hurricane season (+ up to $2000 off)
If you live in a hurricane zone, home energy storage innovator BLUETTI is sharing some essential tips here to help keep you safe in major storms. more…

Read more »

iOS 17.0.2 patch now available to all iPhones
A small software update that Apple initially released only for the iPhone 15 series can now be installed by any recent iPhone. iOS 17.0.2 fixes a data-transfer problem between iPhones, and also includes other bug fixes. iPadOS 17.0.2 is also available for tablets and takes care of some of the same bugs. Bug for for […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

iOS 17.0.2 released for all iPhones, fixing setup transfer bug
Macworld Apple has released iOS 17.0.2 and iPadOS 17.0.2, after making the update available only to iPhone 15 models on Friday, September 22. This update includes the important security fixes from 17.0.1, also released on September 22, but fixes another important bug for new iPhone buyers. Some users who bought new iPhone 15 models discovered that they were not able to transfer data from their old iPhone during the setup process. They should have been prompted to update to iOS 17.0.2 on their new iPhone 15 or 15 Pro as part of the setup process, after which the transfer would work, but for some users this didn’t happen (or took an unusually long time) and they had to connect the iPhone to a Mac to download the update. Restoring from an iCloud backup always worked, but you get a faster and more complete transfer directly from your old device. The iOS 17.0.02 update fixes this bug for iPhones, while iPadOS 17.0.2 fixes the same setup data transfer bug for iPads. To update your iPhone or iPad, open the Settings app, then General  > Software Update, and tap Update Now. To accompany this update, watchOS 10.0.2 has been released for Apple Watch Series 9 and Apple Watch Ultra 2. That update can be installed through the Watch app. iOS

Read more »

Pre-order 'Resident Evil 4' for iPhone, iPad, or Mac today, pay $60 at launch for full unlock
Apple's push into AAA gaming included an announcement that "Resident Evil 4" was coming to iPhone, and it is now available to pre-order for free.'Resident Evil 4' coming to iPhone, iPad, and MacCapcom's Resident Evil 4 and Resident Evil Village are coming to iPhone and iPad later in 2023. Both games have popped up on the App Store as free downloads, but an in-app purchase will be required to unlock the full game. Read more...

Read more »

Apple releases iOS 17.0.2 and iPadOS 17.0.2
Apple on Tuesday released iOS 17.0.2 and iPadOS 17.0.2 which fix an issue that may prevent transferring data directly from another iPhone… The post appeared first on MacDailyNews.

Read more »

macOS 14 Sonoma Now Available
Apple has released macOS 14 Sonoma, and you can upgrade compatible Macs now. The features aren’t likely life-changing, but nor are they causing significant compatibility issues. Read on for more details and upgrade advice.

Read more »

Here’s how the all-new Apple Watch Weather app in watchOS 10 looks and works [Gallery]
Arriving with watchOS 10 is a redesigned Weather app that looks great, includes more weather metrics, and makes better use of the Apple Watch display to show more information. Follow along for how the new Apple Watch weather app works in watchOS 10. more…

Read more »

The most advanced smart scale from Withings cleared by FDA [U: Now available]
Smart health device pioneer Withings has been delivering more and more capable over the last 15 years. Today the company has announced it’s received FDA clearance for its most advanced scale yet. Body Scan comes with a 6-lead ECG, segmental body composition readings, nerve activity assessments, Apple Health support, and more. Update 9/26: The Withings Body Scan is now available in the US. more…

Read more »

Own a 4K eye in the sky with nearly 50% off this high-tech drone
Get the Ninja Dragon Blade K 4K Drone for just $86.99 for a limited time. It's good for all ages, and it captures remarkable high-def video. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple's Eddy Cue says Google is default search engine because it is the 'best'
Google and Apple may disagree on fundamental issues like user privacy, but SVP Eddy Cue sees Google Search as the only viable option.Google is under investigation for antitrustMore information surrounding Apple's and Google's deal to make Google Search the default on iPhone is coming to light. Google is undergoing an antitrust investigation with a public bench trial, and Apple SVP Eddy Cue is a witness. Read more...

Read more »

Tested: Anker’s new 10,000 mAh power bank is perfect for iPhone 15 with integrated USB-C cable
Revealed just last month, Anker launched a new collection of gear in anticipation of Apple’s switch to USB-C for iPhone 15. The new handsets have officially arrived with that universal port in tow, and today, we’re taking a hands-on look at what is now . Meet the new Anker Nano USB-C Power Bank. more…

Read more »

Apple releases iOS & iPadOS 17.0.2, watchOS 10.0.2 to select devices
The iOS 17.0.2, iPadOS 17.0.2, and watchOS 10.0.2 are available with bug fixes related to initial device setup and data transfer.iOS 17.0.2 updateSmall operating system point updates tend to include critical security and bug fixes that can't wait for a full release. Since there isn't any sign of iOS 17.1 releasing anytime soon, Apple is updating at smaller increments. Read more...

Read more »

Apple introduces global developer resource for labs, sessions, and workshops
On Tuesday, Apple introduced Meet with Apple Experts, a new global resource for the Apple developer community to easily find and participate… The post appeared first on MacDailyNews.

Read more »

iPhone 15 Pro Max has second-best smartphone camera in the world
The iPhone 15 Pro Max has the best camera of any iPhone, according to DxOMark, with it scoring well enough to have the second-best camera system in the world.iPhone 15 Pro Max's Telephoto cameraAs part of the battery of hot takes, first impressions, reviews, and benchmarks that follow Apple's iPhone releases, the cameras in the newest models are given scrutiny by DxOMark. For 2023, the iPhone 15 Pro Max was selected to go under the microscope first. Read more...

Read more »

U.S. FTC files antitrust lawsuit against Amazon
The U.S. Federal Trade Commission (FTC) filed an antitrust lawsuit against Amazon.com on Tuesday, and asked the court to consider… The post appeared first on MacDailyNews.

Read more »

Eddy Cue defends Google search deal despite privacy concerns: ‘The iPhone is a much more private device’ than Android
Eddy Cue, Apple’s senior vice president of Services, took the stand as expected today in the Department of Justice’s antitrust lawsuit against Google. As we first reported would be the case, much of Cue’s testimony centered on Apple’s reasoning for choosing Google as the default search engine on iPhone, iPad, and Mac. more…

Read more »

Apple releases updated iOS 17.0.2 build for all iPhones to fix data transfer bug
Apple last week had to quickly release a software update for iPhone 15 models as users were experiencing issues when transferring data from one iPhone to another. While most users got the iOS 17.0.1 update last Thursday, those with iPhone 15 got iOS 17.0.2. Today, Apple is rolling out an updated build of iOS 17.0.2 – this time for all compatible iPhone models. more…

Read more »

9to5Mac Daily: September 26, 2023 – FineWoven complaints mount, iPhone 16 rumors begin
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by WaterMinder: The best way to track your daily water intake, now with interactive widgets, an all-new Apple Watch app, StandBy support, and more. more…

Read more »

Should you install macOS Sonoma on your Mac?
macOS 14 is now available for all users and comes with new features like interactive widgets, Game Mode, 100+ wallpapers/screen savers, and more. But should you install macOS Sonoma on your Mac right away? Follow along for some advice to pick the best choice for your situation. more…

Read more »

Safari 17 with enhanced Private Browsing out now for macOS Ventura, macOS Monterey
Apple has released an update for Safari, bringing it to version 17, with users of macOS Ventura and macOS Monterey able to install it without needing to update to macOS Sonoma.Safari with Apple's Private BrowsingTimed to join the update to macOS Sonoma, the introduction of Safari 17 updates Apple's macOS web browser adds some much-needed features to the surfing tool. Read more...

Read more »

iPhone 15 Pro Max takes top video spot, second overall in DXOMARK camera test
DXOMARK, known for their in-depth camera reviews, has tested the iPhone 15 Pro Max. Apple’s latest flagship phone manages to snag several top scores, with excellent stabilization, color, and video, but the large gap in the field of view between the main sensor and telephoto lens and a few other drawbacks leave it with a second place overall, with its score of 154. more…

Read more »

Apple releases macOS Sonoma 14.0
macOS Sonoma is now available as a free software update, bringing a rich set of new features to the Mac that make work and play even… The post appeared first on MacDailyNews.

Read more »

Apple releases Studio Display firmware 17 with camera feature updates
Apple has issued a new firmware for the Studio Display, bringing the operating system for the premium screen to version 17 and introducing some new camera elements.Apple Studio DisplayReleased to coincide with a similar update bringing macOS Sonoma to the public, version 17 of the Apple Studio Display firmware can now be installed onto the monitor. Read more...

Read more »

Apple Defends Google Search Deal in Court: 'There Wasn't a Valid Alternative'
An anonymous reader shares a report: Eddy Cue, in a dark suit, peered down at the monitor in front of him. The screens in the Washington, DC, courtroom had briefly malfunctioned and left witnesses with only binders, but now the tech was up and running -- showing an image of three iPhones, each demonstrating a part of the phone's setup process. Cue squinted down at the screen. "The resolution on this is terrible," he said. "You should get a Mac." That got some laughs in an otherwise staid and quiet courtroom. Judge Amit Mehta, presiding over the case, leaned into his microphone and responded, "If Apple would like to make a donation..." That got even bigger laughs. Then everybody got back down to business. Cue was on the stand as a witness in US v. Google, the landmark antitrust trial over Google's search business. Cue is one of the highest-profile witnesses in the case so far, in part because the deal between Google and Apple -- which makes Google the default search engine on all Apple devices and pays Apple billions of dollars a year -- is central to the US Department of Justice's case against Google. Cue had two messages: Apple believes in protecting its users' privacy, and it also believes in Google. Whether those two statements can be simultaneously true became the question of the day. Apple is in court because of something called the Information Services Agreement, or ISA: a deal that makes Googleâ(TM)s search engine the default on Apple's products. The ISA has been in place since 2002, but Cue was responsible for negotiating its current iteration with Google CEO Sundar Pichai in 2016. In testimony today, the Justice Department grilled Cue about the specifics of the deal. When the two sides renegotiated, Cue said on the stand, Apple wanted a higher percentage of the revenue Google made from Apple users it directed toward the search engine. [...] Meagan Bellshaw, a Justice Department lawyer, asked Cue if he would have walked away from the deal if the two sides couldn't agree on a revenue-share figure. Cue said he'd never really considered that an option: "I always felt like it was in Google's best interest, and our best interest, to get a deal done." Cue also argued that the deal was about more than economics and that Apple never seriously considered switching to another provider or building its own search product. "Certainly there wasn't a valid alternative to Google at the time," Cue said. He said there still isn't one. Read more of this story at Slashdot.

Read more »

EU Commissioner demands Apple open its ecosystem to rivals
EU industry chief Thierry Breton on Tuesday demanded that Apple must open up the company's vaunted walled garden - its ecosystem… The post appeared first on MacDailyNews.

Read more »

Apple updates Studio Display firmware to enable new camera features
Alongside the release of macOS Sonoma to the public today, Apple has also pushed a new firmware version to the Studio Display. Apple says that this Studio Display update includes changes to the camera, plus other stability improvements. more…

Read more »

Here’s a great way to get your personal information off the internet
With data breaches and identity theft on the rise, now's the time to use Incogni to remove your sensitive personal data from the internet. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

macOS Sonoma includes these 61 security fixes
macOS Sonoma has officially launched with new features and improvements like interactive widgets, Game Mode, all-new wallpapers, and more. But one of the important behind-the-scenes changes is dozens of security fixes. Here are the 61 security patches that come with macOS 14.0. more…

Read more »

LastPass: ‘Horse Gone Barn Bolted’ is Strong Password
The password manager service LastPass is now forcing some of its users to pick longer master passwords. LastPass says the changes are needed to ensure all customers are protected by their latest security improvements. But critics say the move is little more than a public relations stunt that will do nothing to help countless early adopters whose password vaults were exposed in a 2022 breach at LastPass.

Read more »

Who’s Behind the 8Base Ransomware Website?
The victim shaming website operated by the cybercriminals behind 8Base -- currently one of the more active ransomware groups -- was until earlier today leaking quite a bit of information that the crime group probably did not intend to be made public. The leaked data suggests that at least some of website's code was written by a 36-year-old programmer residing in the capital city of Moldova.

Read more »

Vulnerability Summary for the Week of September 11, 2023
  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info wibu -- codemeter_runtime   A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system. 2023-09-13 10 CVE-2023-3935MISCMISC sap -- businessobjects_business_intelligence SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, under certain condition allows an authenticated attacker to view sensitive information which is otherwise restricted. On successful exploitation, the attacker can completely compromise the application causing high impact on confidentiality, integrity, and availability. 2023-09-12 9.9 CVE-2023-40622MISCMISC dlink -- dir-619l_firmware Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login. 2023-09-11 9.8 CVE-2020-19319MISC dlink -- dir-619l_firmware Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login. 2023-09-11 9.8 CVE-2020-19320MISCMISC mofinetwork -- mofi4500-4gxelte-v2_firmware An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass the authentication and execute arbitrary code via crafted HTTP request. 2023-09-08 9.8 CVE-2021-27715MISCMISC rockwell_automation -- factorytalk_view Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted malicious packets.  The device has the functionality, through a CIP class, to execute exported functions from libraries.  There is a routine that restricts it to execute specific functions from two dynamic link library files.  By using a CIP class, an attacker can upload a self-made library to the device which allows the attacker to bypass the security check and execute any code written in the function. 2023-09-12 9.8 CVE-2023-2071MISC xxyopen -- novel-plus novel-plus 3.6.2 is vulnerable to SQL Injection. 2023-09-11 9.8 CVE-2023-30058MISCMISC tsplus -- tsplus_remote_access An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%TSplusClientswww. 2023-09-11 9.8 CVE-2023-31067MISCMISC tsplus -- tsplus_remote_access An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%TSplusUserDesktopthemes. 2023-09-11 9.8 CVE-2023-31068MISCMISC google -- android In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 9.8 CVE-2023-35681MISCMISC phpjabbers -- cleaning_business_software In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accounts. 2023-09-11 9.8 CVE-2023-36140MISCMISC trendylogics -- crypto_currency_tracker Incorrect access control in the User Registration page of Crypto Currency Tracker (CCT) before v9.5 allows unauthenticated attackers to register as an Admin account via a crafted POST request. 2023-09-08 9.8 CVE-2023-37759MISCMISCMISC adobe -- coldfusion   Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. 2023-09-14 9.8 CVE-2023-38204MISC conemu_project -- conemu ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to arbitrary code execution. This is related to an incomplete fix for CVE-2022-46387. 2023-09-12 9.8 CVE-2023-39150MISCMISC golang -- go The go.mod toolchain directive, introduced in Go 1.21, can be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module. This applies to modules downloaded using the "go" command from the module proxy, as well as modules downloaded directly using VCS software. 2023-09-08 9.8 CVE-2023-39320MISCMISCMISCMISC dlink -- dir-816_firmware D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis. 2023-09-12 9.8 CVE-2023-39637MISCMISCMISCMISC arris -- tg852g_firmware An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value by observing a beacon frame. 2023-09-11 9.8 CVE-2023-40039MISCMISCMISC dedecms -- dedecms DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/module_make.php. 2023-09-12 9.8 CVE-2023-40784MISCMISC opencart -- opencart OpenCart v4.0.2.2 is vulnerable to Brute Force Attack. 2023-09-12 9.8 CVE-2023-40834MISCMISC schoolmate -- schoolmate Schoolmate 1.3 is vulnerable to SQL Injection in the variable schoolname from Database at ~header.php. 2023-09-11 9.8 CVE-2023-40944MISC sourcecodester -- doctor_appointment_system Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctorsmyDetails.php. 2023-09-11 9.8 CVE-2023-40945MISC schoolmate -- schoolmate Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php. 2023-09-11 9.8 CVE-2023-40946MISC zoo_management_system_project -- zoo_management_system Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields. 2023-09-08 9.8 CVE-2023-41615MISCMISCMISC jeecg -- jeecg_boot Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show. 2023-09-08 9.8 CVE-2023-42268MISC hutool -- hutool hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray. 2023-09-08 9.8 CVE-2023-42276MISC hutool -- hutool hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath. 2023-09-08 9.8 CVE-2023-42277MISC imoulife -- life The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component. This relates to the com.mm.android.easy4ip.MainActivity activity. JavaScript execution is enabled in the WebView, and direct web content loading occurs. 2023-09-11 9.8 CVE-2023-42470MISCMISCMISC wave-ai -- wave The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. It contains a manifest entry that exports the wave.ai.browser.ui.splash.SplashScreen activity. This activity uses a WebView component to display web content and doesn't adequately validate or sanitize the URI or any extra data passed in the intent by a third-party application (with no permissions). 2023-09-11 9.8 CVE-2023-42471MISCMISCMISC sourcecodester -- simple_membership_system A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file account_edit_query.php. The manipulation of the argument admin_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239254 is the identifier assigned to this vulnerability. 2023-09-09 9.8 CVE-2023-4845MISCMISCMISC sourcecodester -- simple_book_catalog_app A vulnerability classified as critical was found in SourceCodester Simple Book Catalog App 1.0. Affected by this vulnerability is an unknown functionality of the file delete_book.php. The manipulation of the argument delete leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239257 was assigned to this vulnerability. 2023-09-09 9.8 CVE-2023-4848MISCMISCMISC sourcecodester -- online_tours_&_travels_management_system A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file booking.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239351. 2023-09-10 9.8 CVE-2023-4866MISCMISCMISC sourcecodester -- contact_manager_app A vulnerability classified as critical was found in SourceCodester Contact Manager App 1.0. This vulnerability affects unknown code of the file delete.php. The manipulation of the argument contact/contactName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239356. 2023-09-10 9.8 CVE-2023-4871MISCMISCMISC sourcecodester -- contact_manager_app A vulnerability, which was classified as critical, has been found in SourceCodester Contact Manager App 1.0. This issue affects some unknown processing of the file add.php. The manipulation of the argument contact/contactName leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239357 was assigned to this vulnerability. 2023-09-10 9.8 CVE-2023-4872MISCMISCMISC byzoro -- smart_s45f_firmware A vulnerability, which was classified as critical, was found in Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-239358 is the identifier assigned to this vulnerability. 2023-09-10 9.8 CVE-2023-4873MISCMISCMISC mintplexlabs -- anythingllm Relative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. 2023-09-11 9.8 CVE-2023-4897MISCMISC adobe -- commerce   Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution. 2023-09-12 9.1 CVE-2022-24093MISC ibm -- security_directory_server IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view or write to arbitrary files on the system. IBM X-Force ID: 228579. 2023-09-08 9.1 CVE-2022-33164MISCMISC dlink -- dir-605l_firmware Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows authorized attackers execute arbitrary code via sending crafted data to the webserver service program. 2023-09-11 8.8 CVE-2020-19318MISC redhat -- decision_manager A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This flaw allows an authenticated attacker to construct malicious serialized objects (usually called gadgets) and achieve code execution on the server. 2023-09-11 8.8 CVE-2022-1415MISCMISCMISC microsoft -- azure_devops   Azure DevOps Server Remote Code Execution Vulnerability 2023-09-12 8.8 CVE-2023-33136MISC google -- android In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 8.8 CVE-2023-35658MISCMISC google -- android In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 8.8 CVE-2023-35673MISCMISC google -- android In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 8.8 CVE-2023-35684MISCMISC govee -- home Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially crafted site, the attacker can execute JavaScript in context of WebView or steal sensitive user data by displaying phishing content. 2023-09-11 8.8 CVE-2023-3612MISC microsoft -- sharepoint_server   Microsoft SharePoint Server Elevation of Privilege Vulnerability 2023-09-12 8.8 CVE-2023-36764MISC microsoft -- windows_11   Windows Themes Remote Code Execution Vulnerability 2023-09-12 8.8 CVE-2023-38146MISC microsoft -- multiple_products   Windows Miracast Wireless Display Remote Code Execution Vulnerability 2023-09-12 8.8 CVE-2023-38147MISC microsoft -- multiple_products   Internet Connection Sharing (ICS) Remote Code Execution Vulnerability 2023-09-12 8.8 CVE-2023-38148MISC netis-systems -- wf2409e_firmware An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface. 2023-09-11 8.8 CVE-2023-38829MISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application server responds with sensitive information about the server. This could allow an attacker to directly access the database. 2023-09-12 8.8 CVE-2023-40726MISC idreamsoft -- icms icms 7.0.16 is vulnerable to Cross Site Request Forgery (CSRF). 2023-09-08 8.8 CVE-2023-40953MISCMISC wordpress -- wordpress   The BAN Users plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.5.3 due to a missing capability check on the 'w3dev_save_ban_user_settings_callback' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify the plugin settings to access the ban and unban functionality and set the role of the unbanned user. 2023-09-13 8.8 CVE-2023-4153MISCMISCMISC wordpress -- wordpress   The Simplr Registration Form Plus+ plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 2.4.5. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for authenticated attackers with subscriber-level permissions or above to change user passwords and potentially take over administrator accounts. 2023-09-13 8.8 CVE-2023-4213MISCMISC mozilla -- firefox Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occured when allocating too much private shader memory on mac OS. This bug only affects Firefox on macOS. Other operating systems are unaffected. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 8.8 CVE-2023-4582MISCMISCMISCMISC mozilla -- thunderbird Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2. 2023-09-11 8.8 CVE-2023-4584MISCMISCMISCMISCMISCMISC mozilla -- thunderbird Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 8.8 CVE-2023-4585MISCMISCMISCMISC wibu -- codemeter_runtime   A Improper Privilege Management vulnerability through an incorrect use of privileged APIs in CodeMeter Runtime versions prior to 7.60c allow a local, low privileged attacker to use an API call for escalation of privileges in order gain full admin access on the host system. 2023-09-13 8.8 CVE-2023-4701MISCMISC hitachi_energy -- asset_suite A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password validation in T214. This vulnerability can be exploited by an authenticated user per-forming an Equipment Tag Out holder action (Accept, Release, and Clear) for another user and entering an arbitrary password in the holder action confirmation dialog box. Despite entering an arbitrary password in the confirmation box, the system will execute the selected holder action. 2023-09-11 8.8 CVE-2023-4816MISC sourcecodester -- take-note_app A vulnerability has been found in SourceCodester Take-Note App 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239350 is the identifier assigned to this vulnerability. 2023-09-09 8.8 CVE-2023-4865MISCMISCMISC sourcecodester -- contact_manager_app A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239353 was assigned to this vulnerability. 2023-09-10 8.8 CVE-2023-4868MISCMISCMISC sourcecodester -- contact_manager_app A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file update.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-239354 is the identifier assigned to this vulnerability. 2023-09-10 8.8 CVE-2023-4869MISCMISCMISC mintplexlabs -- anything-llm SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. 2023-09-12 8.8 CVE-2023-4899MISCMISC wordpress -- wordpress   The Login with phone number plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.8. This is due to missing nonce validation on the 'lwp_update_password_action' function. This makes it possible for unauthenticated attackers to change user password via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2023-09-13 8.8 CVE-2023-4916MISCMISC mozilla -- firefox On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer overflow potentially leaking sensitive data that could have led to a sandbox escape. *This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2. 2023-09-11 8.6 CVE-2023-4576MISCMISCMISCMISCMISCMISC siemens -- spectrum_power_7   A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q3). The affected product assigns improper access rights to the update script. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges. 2023-09-14 8.2 CVE-2023-38557MISC hichip -- shenzhen_hichip_vision_technology_firmware Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through sending a crafted multicast message in a local network. 2023-09-11 8.1 CVE-2022-23382MISC openpmix -- openpmix OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0. 2023-09-09 8.1 CVE-2023-41915MISCCONFIRMCONFIRM microsoft -- exchange_server   Microsoft Exchange Server Remote Code Execution Vulnerability 2023-09-12 8 CVE-2023-36744MISC microsoft -- exchange_server   Microsoft Exchange Server Remote Code Execution Vulnerability 2023-09-12 8 CVE-2023-36745MISC microsoft -- exchange_server   Microsoft Exchange Server Remote Code Execution Vulnerability 2023-09-12 8 CVE-2023-36756MISC microsoft -- exchange_server   Microsoft Exchange Server Spoofing Vulnerability 2023-09-12 8 CVE-2023-36757MISC foxconn -- live_update_utility An issue was discovered in MmMapIoSpace routine in Foxconn Live Update Utility 2.1.6.26, allows local attackers to escalate privileges. 2023-09-11 7.8 CVE-2020-24088MISCMISCMISC adobe -- indesign Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28831MISC adobe -- indesign Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28832MISC adobe -- indesign Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28833MISC adobe -- incopy Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28834MISC adobe -- incopy Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28835MISC adobe -- incopy Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28836MISC adobe -- acrobat_reader Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-34224MISC adobe -- acrobat_reader Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-34227MISC adobe -- acrobat_reader   Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-13 7.8 CVE-2023-26369MISC microsoft -- multiple_products   Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-35355MISC google -- android In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35665MISCMISC google -- android In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35666MISCMISC google -- android In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35667MISCMISC google -- android In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35669MISCMISC google -- android In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35670MISCMISC google -- android In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35674MISCMISC google -- android In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35676MISCMISC google -- android In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. 2023-09-11 7.8 CVE-2023-35682MISCMISC google -- android In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35687MISCMISC microsoft -- 3d_viewer   3D Viewer Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36739MISC microsoft -- 3d_viewer   3D Viewer Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36740MISC microsoft -- visual_studio   Visual Studio Code Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36742MISC microsoft -- visual_studio   Visual Studio Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-36758MISC microsoft -- 3d_viewer   3D Viewer Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36760MISC microsoft -- office   Microsoft Office Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-36765MISC microsoft -- excel   Microsoft Excel Information Disclosure Vulnerability 2023-09-12 7.8 CVE-2023-36766MISC microsoft -- 3d_builder   3D Builder Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36770MISC microsoft -- 3d_builder   3D Builder Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36771MISC microsoft -- 3d_builder   3D Builder Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36772MISC microsoft -- 3d_builder 3D Builder Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36773MISC microsoft -- .net   .NET Framework Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36788MISC microsoft -- visual_studio   Visual Studio Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36792MISC microsoft -- visual_studio   Visual Studio Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36793MISC microsoft -- visual_studio   Visual Studio Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36794MISC microsoft -- visual_studio   Visual Studio Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36796MISC microsoft -- multiple_products   Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-36802MISC microsoft -- multiple_products   Windows GDI Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-36804MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application is vulnerable to stack-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20818) 2023-09-12 7.8 CVE-2023-38070MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20824) 2023-09-12 7.8 CVE-2023-38071MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20825) 2023-09-12 7.8 CVE-2023-38072MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application contains a type confusion vulnerability while parsing WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20826) 2023-09-12 7.8 CVE-2023-38073MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application contains a type confusion vulnerability while parsing WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20840) 2023-09-12 7.8 CVE-2023-38074MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted WRL files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-20842) 2023-09-12 7.8 CVE-2023-38075MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21041) 2023-09-12 7.8 CVE-2023-38076MISC microsoft -- multiple_products   Windows Kernel Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38139MISC microsoft -- multiple_products   Windows Kernel Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38141MISC microsoft -- multiple_products   Windows Kernel Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38142MISC microsoft -- multiple_products   Windows Common Log File System Driver Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38143MISC microsoft -- multiple_products   Windows Common Log File System Driver Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38144MISC microsoft -- windows_11   Windows Kernel Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38150MISC microsoft -- multiple_products   Windows GDI Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38161MISC microsoft -- windows_defender_security_intelligence_updates Windows Defender Attack Surface Reduction Security Feature Bypass 2023-09-12 7.8 CVE-2023-38163MISC ibm -- qradar_wincollect IBM QRadar WinCollect Agent 10.0 through 10.1.6, when installed to run as ADMIN or SYSTEM, is vulnerable to a local escalation of privilege attack that a normal user could utilize to gain SYSTEM permissions. IBM X-Force ID: 262542. 2023-09-08 7.8 CVE-2023-38736MISCMISC raidenftpd -- raidenftpd Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server name field of the Step by step setup wizard. 2023-09-11 7.8 CVE-2023-39063MISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application uses weak outdated application signing mechanism. This could allow an attacker to tamper the application code. 2023-09-12 7.8 CVE-2023-40727MISC siemens -- parasolid   A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.253), Parasolid V35.1 (All versions < V35.1.184), Parasolid V36.0 (All versions < V36.0.142). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21263) 2023-09-12 7.8 CVE-2023-41032MISC siemens -- parasolid   A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.260), Parasolid V35.1 (All versions < V35.1.246), Parasolid V36.0 (All versions < V36.0.156). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21266) 2023-09-12 7.8 CVE-2023-41033MISC siemens -- parasolid   A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to memory corruption while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. 2023-09-12 7.8 CVE-2023-41846MISC apple -- macos The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13.2, iOS 15.7.8 and iPadOS 15.7.8, watchOS 9.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Big Sur 11.7.9, macOS Monterey 12.6.8. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1. 2023-09-12 7.8 CVE-2023-41990MISCMISCMISCMISCMISCMISCMISC hashicorp -- terraform Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously crafted Terraform configuration. This vulnerability is fixed in Terraform 1.5.7. 2023-09-08 7.8 CVE-2023-4782MISC microsoft -- dynamics_265_for_finance_and_operations   Dynamics Finance and Operations Cross-site Scripting Vulnerability 2023-09-12 7.6 CVE-2023-36800MISC dlink -- dir-619l_firmware An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing remote attackers to restart router via the M-search request ST parameter. No authentication required 2023-09-11 7.5 CVE-2020-19323MISCMISC ibm -- aspera_faspex IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather or persuade a naive user to supply sensitive information. IBM X-Force ID: 222567. 2023-09-08 7.5 CVE-2022-22401MISCMISC siemens -- multiple_products   The ANSI C OPC UA SDK contains an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate. 2023-09-12 7.5 CVE-2023-28831MISC microsoft -- azure_kubernetes_service   Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability 2023-09-12 7.5 CVE-2023-29332MISC ibm -- aspera_faspex IBM Aspera Faspex 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. IBM X-Force ID: 254268. 2023-09-08 7.5 CVE-2023-30995MISCMISC tsplus -- tsplus_remote_access An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML source code of the login page. 2023-09-11 7.5 CVE-2023-31069MISCMISC quboworld -- smart_plug_10a_firmware An issue was discovered in Qubo Smart Plug 10A version HSP02_01_01_14_SYSTEM-10A, allows attackers to cause a denial of service (DoS) via Wi-Fi deauthentication. 2023-09-11 7.5 CVE-2023-36161MISC aptosfoundation -- aptos CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json. 2023-09-08 7.5 CVE-2023-36184MISCMISCMISCMISC microsoft -- outlook   Microsoft Outlook Information Disclosure Vulnerability 2023-09-12 7.5 CVE-2023-36763MISC samsung -- exynos_9810_firmware An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos Mobile Processor, Automotive Processor, and Modem - Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123). In the Shannon MM Task, Missing validation of a NULL pointer can cause abnormal termination via a malformed NR MM packet. 2023-09-08 7.5 CVE-2023-37368MISC samsung -- exynos_980_firmware An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor (Exynos 980, Exynos 850, Exynos 2100, and Exynos W920). Improper handling of length parameter inconsistency can cause incorrect packet filtering. 2023-09-08 7.5 CVE-2023-37377MISC microsoft -- multiple_products   Windows TCP/IP Denial of Service Vulnerability 2023-09-12 7.5 CVE-2023-38149MISC microsoft -- multiple_products   DHCP Server Service Denial of Service Vulnerability 2023-09-12 7.5 CVE-2023-38162MISC adobe -- coldfusion   Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction. 2023-09-14 7.5 CVE-2023-38205MISC golang -- go Processing an incomplete post-handshake message for a QUIC connection can cause a panic. 2023-09-08 7.5 CVE-2023-39321MISCMISCMISCMISC golang -- go QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With fix, connections now consistently reject messages larger than 65KiB in size. 2023-09-08 7.5 CVE-2023-39322MISCMISCMISCMISC hexo -- hexo Hexo up to v7.0.0 (RC2) was discovered to contain an arbitrary file read vulnerability. 2023-09-08 7.5 CVE-2023-39584MISCMISCMISC buffalo -- terastation_nas_5410r_firmware An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest account function. 2023-09-08 7.5 CVE-2023-39620MISCMISC arm -- trusted_firmware-m In Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator, when the CryptoCell PSA Driver software Interface is selected, and the Authenticated Encryption with Associated Data Chacha20-Poly1305 algorithm is used, with the single-part verification function (defined during the build-time configuration phase) implemented with a dedicated function (i.e., not relying on usage of multipart functions), the buffer comparison during the verification of the authentication tag does not happen on the full 16 bytes but just on the first 4 bytes, thus leading to the possibility that unauthenticated payloads might be identified as authentic. This affects TF-Mv1.6.0, TF-Mv1.6.1, TF-Mv1.7.0, and TF-Mv1.8. 2023-09-08 7.5 CVE-2023-40271MISCMISC apple -- macos This issue was addressed with improved state management of S/MIME encrypted emails. This issue is fixed in macOS Monterey 12.6.8. A S/MIME encrypted email may be inadvertently sent unencrypted. 2023-09-12 7.5 CVE-2023-40440MISC jeecg -- jeecg_boot Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection. 2023-09-08 7.5 CVE-2023-41578MISC dairy_farm_shop_management_system -- dairy_farm_shop_management_system Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilities in the Login function via the Username and Password parameters. 2023-09-08 7.5 CVE-2023-41594MISCMISCMISC hutool -- hutool hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse(). 2023-09-08 7.5 CVE-2023-42278MISC mozilla -- multiple_products When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 7.5 CVE-2023-4583MISCMISCMISCMISC sourcecodester -- simple_membership_system A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been classified as critical. This affects an unknown part of the file club_edit_query.php. The manipulation of the argument club_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239253 was assigned to this vulnerability. 2023-09-08 7.5 CVE-2023-4844MISCMISCMISC sourcecodester -- simple_membership_system A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file delete_member.php. The manipulation of the argument mem_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239255. 2023-09-09 7.5 CVE-2023-4846MISCMISCMISC inure -- inure Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92. 2023-09-10 7.5 CVE-2023-4876MISCMISC inure -- inure Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92. 2023-09-10 7.5 CVE-2023-4877MISCMISC mintplexlabs -- anything-llm Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. 2023-09-12 7.5 CVE-2023-4898MISCMISC cecil -- cecil Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1. 2023-09-12 7.5 CVE-2023-4914MISCMISC adobe -- acrobat_dc Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.3 CVE-2019-16470MISC adobe -- acrobat_dc Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.3 CVE-2019-16471MISC microsoft -- multiple_products   Microsoft Word Remote Code Execution Vulnerability 2023-09-12 7.3 CVE-2023-36762MISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). User credentials are found in memory as plaintext. An attacker could perform a memory dump, and get access to credentials, and use it for impersonation. 2023-09-12 7.3 CVE-2023-40724MISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application stores sensitive application data in an external insecure storage. This could allow an attacker to alter content, leading to arbitrary code execution or denial-of-service condition. 2023-09-12 7.3 CVE-2023-40728MISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application lacks security control to prevent unencrypted communication without HTTPS. An attacker who managed to gain machine-in-the-middle position could manipulate or steal confidential information. 2023-09-12 7.3 CVE-2023-40729MISC sap -- businessobjects_business_intelligence_platform Due to insufficient file type validation, SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) - version 420, allows a report creator to upload files from local system into the report over the network. When uploading the image file, an authenticated attacker could intercept the request, modify the content type and the extension to read and modify sensitive data causing a high impact on confidentiality and integrity of the application. 2023-09-12 7.3 CVE-2023-42472MISCMISC microsoft -- azure_hdinsights Azure HDInsight Apache Ambari Elevation of Privilege Vulnerability 2023-09-12 7.2 CVE-2023-38156MISC zohocorp -- manageengine_admanager_plus Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine. 2023-09-11 7.2 CVE-2023-38743MISC insyde -- iscflashx64.sys An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and copy memory is mishandled. This could cause memory corruption or a system crash. 2023-09-08 7.1 CVE-2021-33834MISCMISC sap -- businessobjects SAP BusinessObjects Suite Installer - version 420, 430, allows an attacker within the network to create a directory under temporary directory and link it to a directory with operating system files. On successful exploitation the attacker can delete all the operating system files causing a limited impact on integrity and completely compromising the availability of the system. 2023-09-12 7.1 CVE-2023-40623MISCMISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application lacks sufficient authorization checks. This could allow an attacker to access confidential information, perform administrative functions, or lead to a denial-of-service condition. 2023-09-12 7.1 CVE-2023-40730MISC linux -- kernel A stack based out-of-bounds write flaw was found in the netfilter subsystem in the Linux kernel. If the expression length is a multiple of 4 (register size), the `nft_exthdr_eval` family of functions writes 4 NULL bytes past the end of the `regs` argument, leading to stack corruption and potential information disclosure or a denial of service. 2023-09-11 7.1 CVE-2023-4881MISCMISC n-able -- take_control BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PROGRAMDATA%GetSupportService_N-CentralPushUpdates, leading to arbitrary file deletion. 2023-09-11 7 CVE-2023-27470MISC microsoft -- windows_server_2012 Windows MSHTML Platform Security Feature Bypass Vulnerability 2023-09-12 7 CVE-2023-36805MISC microsoft -- azure_devops   Azure DevOps Server Remote Code Execution Vulnerability 2023-09-12 7 CVE-2023-38155MISC Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info solarwinds -- solarwinds_platform   The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges. 2023-09-13 6.8 CVE-2023-23840MISCMISC solarwinds -- solarwinds_platform   The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges. 2023-09-13 6.8 CVE-2023-23845MISCMISC microsoft -- visual_studio   Visual Studio Elevation of Privilege Vulnerability 2023-09-12 6.7 CVE-2023-36759MISC xpand-it -- write-back_manager Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and predictable symmetric encryption keys for license generation and validation. 2023-09-12 6.5 CVE-2023-27169MISCMISCMISCMISC microsoft -- .net/visual_studio   .NET Core and Visual Studio Denial of Service Vulnerability 2023-09-12 6.5 CVE-2023-36799MISC apache -- airflow Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a URL, which could lead to unmasking the secret configuration of the task that otherwise would be masked in the UI. Users are strongly advised to upgrade to version 2.7.1 or later which has removed the vulnerability. 2023-09-12 6.5 CVE-2023-40712MISCMISCMISC mozilla -- thunderbird When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4573MISCMISCMISCMISCMISCMISC mozilla -- thunderbird When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4574MISCMISCMISCMISCMISCMISC mozilla -- thunderbird When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4575MISCMISCMISCMISCMISCMISC mozilla -- thunderbird When `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to entering the function, which could potentially have led to an exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4577MISCMISCMISCMISC mozilla -- thunderbird When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling `convertToRuntimeErrorAndClear`. A path in the function could attempt to allocate memory when none is available which would have caused a newly created Out of Memory exception to be mishandled as a Syntax Error. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4578MISCMISCMISCMISC mozilla -- thunderbird Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4580MISCMISCMISCMISC mutt -- mutt Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2

Read more »

FBI Hacker Dropped Stolen Airbus Data on 9/11
In December 2022, KrebsOnSecurity broke the news that a cybercriminal using the handle "USDoD" had infiltrated the FBI's vetted information sharing network InfraGard, and was selling the contact information for all 80,000 members. The FBI responded by reverifying all InfraGard members and by seizing the cybercrime forum where the data was being sold. But on Sept. 11, 2023, USDoD resurfaced after a lengthy absence to leak sensitive employee data stolen from the aerospace giant Airbus, while promising to visit the same treatment on top U.S. defense contractors.

Read more »

Red Hat Security Advisory 2023-5071-01
- Libcap is a library for getting and setting POSIX.1e draft 15 capabilities. Issues addressed include integer overflow and memory leak vulnerabilities.

Read more »

Adobe, Apple, Google & Microsoft Patch 0-Day Bugs
Microsoft today issued software updates to fix at least five dozen security holes in Windows and supported software, including patches for two zero-day vulnerabilities that are already being exploited. Also, Adobe, Google Chrome and Apple iOS users may have their own zero-day patching to do.

Read more »

Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach
In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Since then, a steady trickle of six-figure cryptocurrency heists targeting security-conscious people throughout the tech industry has led some security experts to conclude that crooks likely have succeeded at cracking open some of the stolen LastPass vaults.

Read more »

Why is .US Being Used to Phish So Many of Us?
Domain names ending in “.US” — the top-level domain for the United States — are among the most prevalent in phishing scams, new research shows. This is noteworthy because .US is overseen by the U.S. government, which is frequently the target of phishing domains ending in .US. Also, .US domains are only supposed to be available to U.S. citizens and to those who can demonstrate that they have a physical presence in the United States.

Read more »

U.S. Hacks QakBot, Quietly Removes Botnet Infections
The U.S. government today announced a coordinated crackdown against QakBot, a complex malware family used by multiple cybercrime groups to lay the groundwork for ransomware infections. The international law enforcement operation involved seizing control over the botnet's online infrastructure, and quietly removing the Qakbot malware from tens of thousands of infected Microsoft Windows computer systems.

Read more »

Vulnerability Summary for the Week of August 21, 2023
  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info qemu -- qemu The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code on the host via execute a malformed program in the guest OS. 2023-08-22 10 CVE-2022-36648MISC c-ares -- c-ares Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c. 2023-08-22 9.8 CVE-2020-22217MISC flac_project -- flac Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder. 2023-08-22 9.8 CVE-2020-22219MISC leeco -- letv_x43_firmware An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN02C080080B04121S, allows attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). 2023-08-21 9.8 CVE-2020-28715MISCMISC gnu -- gnu_scientific_library A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_stats_quantile_from_sorted_data of the library may lead to unexpected application termination or arbitrary code execution. 2023-08-22 9.8 CVE-2020-35357MISCMISC libjpeg-turbo -- libjpeg-turbo libjpeg-turbo version 2.0.90 is vulnerable to a heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c. 2023-08-22 9.8 CVE-2021-29390MISC json-c_project -- json-c An issue was discovered in json-c through 0.15-20200726. A stack-buffer-overflow exists in the function parseit located in json_parse.c. It allows an attacker to cause code Execution. 2023-08-22 9.8 CVE-2021-32292MISC dpic_project -- dpic dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y 2023-08-22 9.8 CVE-2021-33388MISC dpic_project -- dpic dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421. 2023-08-22 9.8 CVE-2021-33390MISC terra-master -- terramaster_operating_system TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instantiation to the api.php?mobile/createRaid URI. (Shell metacharacters can be placed in raidtype because popen is used without any sanitization.) The credentials from CVE-2022-24990 exploitation can be used. 2023-08-20 9.8 CVE-2022-24989MISCMISCMISCMISCMISC pandorafms -- pandora_fms Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue ( unrestricted file upload ) to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prior versions on all platforms. 2023-08-22 9.8 CVE-2023-24517MISC danfoss -- ak-sm_800a_firmware Due to improper input validation, a remote attacker could execute arbitrary commands on the target system. 2023-08-21 9.8 CVE-2023-25915MISCMISC nodejs -- node.js The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js. 2023-08-21 9.8 CVE-2023-32002MISC elecom -- lan-w300n/rs_firmware Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allow an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. 2023-08-18 9.8 CVE-2023-32626MISCMISC e-excellence -- u-office_force   e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service. 2023-08-25 9.8 CVE-2023-32757MISC elecom -- lan-wh300andgpe_firmware Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions, LAN-W300N/P all versions, LAN-WH450N/GP all versions, LAN-WH300AN/DGP all versions, LAN-WH300N/DGP all versions, and LAN-WH300ANDGPE all versions. 2023-08-18 9.8 CVE-2023-35991MISCMISC langchain -- langchain An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter. 2023-08-22 9.8 CVE-2023-36281MISCMISC ivanti -- mobileiron_sentry A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration. 2023-08-21 9.8 CVE-2023-38035MISC ibm -- robotic_process_automation IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an LDAP directory. IBM X-Force ID: 262481. 2023-08-22 9.8 CVE-2023-38734MISCMISC jerryscript -- jerryscript Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scanner-until.c. 2023-08-21 9.8 CVE-2023-38961MISC elecom -- wrc-x1800gs-b_firmware Buffer overflow vulnerability in WRC-X1800GS-B v1.13 and earlier, WRC-X1800GSA-B v1.13 and earlier, and WRC-X1800GSH-B v1.13 and earlier allows an unauthenticated attacker to execute arbitrary code. 2023-08-18 9.8 CVE-2023-39454MISCMISC totolink -- x5000r_firmware TOTOLINK X5000R_V9.1.0cu.2089_B20211224 and X5000R_V9.1.0cu.2350_B20230313 were discovered to contain a remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function. 2023-08-21 9.8 CVE-2023-39617MISC totolink -- x5000r_firmware TOTOLINK X5000R B20210419 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg interface. 2023-08-21 9.8 CVE-2023-39618MISC gabrieleventuri -- pandasai An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function. 2023-08-21 9.8 CVE-2023-39660MISCMISC dlink -- dir-842_firmware D-Link DIR-842 fw_revA_1-02_eu_multi_20151008 was discovered to contain multiple buffer overflows in the fgets function via the acStack_120 and acStack_220 parameters. 2023-08-18 9.8 CVE-2023-39666MISCMISCMISC tenda -- ac6_firmware Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets. 2023-08-18 9.8 CVE-2023-39670MISCMISC dlink -- dir-880l_a1_firmware D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function FUN_0001be68. 2023-08-18 9.8 CVE-2023-39671MISCMISCMISC tenda -- wh450a_firmware Tenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets. 2023-08-18 9.8 CVE-2023-39672MISCMISC tenda -- ac15_firmware Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34(). 2023-08-18 9.8 CVE-2023-39673MISCMISC dlink -- dir-880l_a1_firmware D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function fgets. 2023-08-18 9.8 CVE-2023-39674MISCMISCMISC tp-link -- tl-wr940n_v2_firmware TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm. 2023-08-21 9.8 CVE-2023-39747MISC dlink -- dap-2660_firmware D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /adv_resource. This vulnerability is exploited via a crafted GET request. 2023-08-21 9.8 CVE-2023-39749MISCMISC dlink -- dap-2660_firmware D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the f_ipv6_enable parameter at /bsc_ipv6. This vulnerability is exploited via a crafted POST request. 2023-08-21 9.8 CVE-2023-39750MISCMISC tp-link -- tl-wr941nd_v6_firmware TP-Link TL-WR941ND V6 were discovered to contain a buffer overflow via the pSize parameter at /userRpm/PingIframeRpm. 2023-08-21 9.8 CVE-2023-39751MISC nvki -- intelligent_broadband_subscriber_gateway N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection vulnerability via the a_passwd parameter at /portal/user-register.php. 2023-08-21 9.8 CVE-2023-39807MISCMISC nvki -- intelligent_broadband_subscriber_gateway N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root password which allows attackers to login with root privileges via the SSH service. 2023-08-21 9.8 CVE-2023-39808MISCMISC nvki -- intelligent_broadband_subscriber_gateway N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a command injection vulnerability via the system_hostname parameter at /manage/network-basic.php. 2023-08-21 9.8 CVE-2023-39809MISCMISC elecom -- wrc-f1167acf_firmware OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions, WRC-1167GHBK2 all versions, WRC-1750GHBK2-I all versions, and WRC-1750GHBK-E all versions. 2023-08-18 9.8 CVE-2023-40069MISCMISC fobybus -- social-media-skeleton Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly manage the lifecycle of a user's session. Social media skeleton releases prior to 1.0.5 did not properly limit manage user session lifecycles. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this vulnerability. 2023-08-18 9.8 CVE-2023-40174MISCMISC puma -- puma Puma is a Ruby/Rack web server built for parallelism. Prior to versions 6.3.1 and 5.6.7, puma exhibited incorrect behavior when parsing chunked transfer encoding bodies and zero-length Content-Length headers in a way that allowed HTTP request smuggling. Severity of this issue is highly dependent on the nature of the web site using puma is. This could be caused by either incorrect parsing of trailing fields in chunked transfer encoding bodies or by parsing of blank/zero-length Content-Length headers. Both issues have been addressed and this vulnerability has been fixed in versions 6.3.1 and 5.6.7. Users are advised to upgrade. There are no known workarounds for this vulnerability. 2023-08-18 9.8 CVE-2023-40175MISCMISC devolutions -- remote_desktop_manager Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature. 2023-08-21 9.8 CVE-2023-4373MISC wordpress -- wordpress   The Donation Forms by Charitable plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.7.0.12 due to insufficient restriction on the 'update_core_user' function. This makes it possible for unauthenticated attackers to specify their user role by supplying the 'role' parameter during a registration. 2023-08-23 9.8 CVE-2023-4404MISCMISC credit_lite_project -- credit_lite A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4. Affected by this vulnerability is an unknown functionality of the file /portal/reports/account_statement of the component POST Request Handler. The manipulation of the argument date1/date2 leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-237511. 2023-08-18 9.8 CVE-2023-4407MISCMISCMISC totolink -- ex1200l_firmware A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023. This affects the function setDiagnosisCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237513 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 9.8 CVE-2023-4410MISCMISCMISC totolink -- ex1200l_firmware A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-237514 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 9.8 CVE-2023-4411MISCMISCMISC totolink -- ex1200l_firmware A vulnerability was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This issue affects the function setWanCfg. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237515. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 9.8 CVE-2023-4412MISCMISCMISC beijing_baichuo -- smart_s85f_management_platform A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237517 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 9.8 CVE-2023-4414MISCMISCMISC sourcecodester -- inventory_management_system A vulnerability, which was classified as critical, has been found in SourceCodester Inventory Management System 1.0. This issue affects some unknown processing of the file app/action/edit_update.php. The manipulation of the argument user_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237557 was assigned to this vulnerability. 2023-08-20 9.8 CVE-2023-4436MISCMISCMISC sourcecodester -- inventory_management_system A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/search_sell_paymen_report.php. The manipulation of the argument customer leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-237558 is the identifier assigned to this vulnerability. 2023-08-20 9.8 CVE-2023-4437MISCMISCMISC sourcecodester -- inventory_management_system A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file app/ajax/search_sales_report.php. The manipulation of the argument customer leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237559. 2023-08-20 9.8 CVE-2023-4438MISCMISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been classified as critical. This affects an unknown part of the file appointment.php. The manipulation of the argument sheduledate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237561 was assigned to this vulnerability. 2023-08-20 9.8 CVE-2023-4440MISCMISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /patient/appointment.php. The manipulation of the argument sheduledate leads to sql injection. The attack can be initiated remotely. VDB-237562 is the identifier assigned to this vulnerability. 2023-08-21 9.8 CVE-2023-4441MISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been rated as critical. This issue affects some unknown processing of the file vmpatientbooking-complete.php. The manipulation of the argument userid/apponum/scheduleid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237563. 2023-08-21 9.8 CVE-2023-4442MISCMISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0/5.0.12. Affected is an unknown function of the file vmdoctoredit-doc.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237564. 2023-08-21 9.8 CVE-2023-4443MISCMISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is an unknown functionality of the file vmpatientedit-user.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237565 was assigned to this vulnerability. 2023-08-21 9.8 CVE-2023-4444MISCMISCMISC mini -- mini-tmall A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20230811. Affected by this issue is some unknown functionality of the file product/1/1?test=1&test2=2&. The manipulation of the argument orderBy leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237566 is the identifier assigned to this vulnerability. 2023-08-21 9.8 CVE-2023-4445MISCMISCMISC openrapid -- rapidcms A vulnerability, which was classified as critical, was found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file template/default/category.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237567. 2023-08-21 9.8 CVE-2023-4446MISCMISCMISC openrapid -- rapidcms A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. This vulnerability affects unknown code of the file admin/article-chat.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237568. 2023-08-21 9.8 CVE-2023-4447MISCMISCMISC openrapid -- rapidcms A vulnerability was found in OpenRapid RapidCMS 1.3.1 and classified as critical. This issue affects some unknown processing of the file admin/run-movepass.php. The manipulation of the argument password/password2 leads to weak password recovery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 4dff387283060961c362d50105ff8da8ea40bcbe. It is recommended to apply a patch to fix this issue. The identifier VDB-237569 was assigned to this vulnerability. 2023-08-21 9.8 CVE-2023-4448MISCMISCMISCMISC jeecg -- jimureport A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-237571. 2023-08-21 9.8 CVE-2023-4450MISCMISCMISC typora -- typora DOM-based XSS in updater/update.html in Typora before 1.6.7 on Windows and Linux allows a crafted markdown file to run arbitrary JavaScript code in the context of Typora main window via loading typora://app/typemark/updater/update.html in tag. This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora. 2023-08-19 9.6 CVE-2023-2317MISCMISC marktext -- marktext DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScript code to run in the context of MarkText main window. This vulnerability can be exploited if a user copies text from a malicious webpage and paste it into MarkText. 2023-08-19 9.6 CVE-2023-2318MISCMISC luxsoft -- luxcal_web_calendar SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote unauthenticated attacker to execute arbitrary queries against the database and obtain or alter the information in it. 2023-08-21 9.1 CVE-2023-39939MISCMISCMISC hdfgroup -- hdf5 Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file. 2023-08-22 8.8 CVE-2020-18232MISC hdfgroup -- hdf5 Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file. 2023-08-22 8.8 CVE-2020-18494MISC gnu -- binutils An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service. 2023-08-22 8.8 CVE-2020-19726MISCMISC freeimage_project -- freeimage Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafted ico file. 2023-08-22 8.8 CVE-2020-24292MISC freeimage_project -- freeimage Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafted psd file. 2023-08-22 8.8 CVE-2020-24293MISC freeimage_project -- freeimage Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine() in FreeImage 3.19.0 [r1859] allows remote attackers to ru narbitrary code via use of crafted psd file. 2023-08-22 8.8 CVE-2020-24295MISC cesanta -- mongoose Buffer overflow in mg_resolve_from_hosts_file in Mongoose 6.18, when reading from a crafted hosts file. 2023-08-22 8.8 CVE-2020-25887MISC freeimage_project -- freeimage A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp. 2023-08-22 8.8 CVE-2021-40265MISC sass-lang -- libsass Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function. 2023-08-22 8.8 CVE-2022-26592MISC geomatika -- isigeo_web An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to execute commands. 2023-08-22 8.8 CVE-2023-23564MISCMISCMISC opensuse -- libeconf A stack overflow vulnerability exists in function econf_writeFile in file atlibeconf/lib/libeconf.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code. 2023-08-22 8.8 CVE-2023-30078MISCMISCMISC opensuse -- libeconf A stack overflow vulnerability exists in function read_file in atlibeconf/lib/getfilecontents.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code. 2023-08-22 8.8 CVE-2023-30079MISCMISCMISC microsoft -- edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2023-08-21 8.8 CVE-2023-36787MISC elecom -- lan-w451ngr_firmware LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service. 2023-08-18 8.8 CVE-2023-38132MISCMISC boidcms -- boidcms File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code via the GIF header component. 2023-08-21 8.8 CVE-2023-38836MISCMISC online_shopping_portal_project -- online_shopping_portal Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks. 2023-08-18 8.8 CVE-2023-38890MISC elecom -- wrc-1467ghbk-a_firmware Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console. 2023-08-18 8.8 CVE-2023-39445MISCMISC elecom -- wrc-600ghbk-a_firmware OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions. 2023-08-18 8.8 CVE-2023-39455MISCMISC elecom -- wrc-f1167acf_firmware OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allow an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. 2023-08-18 8.8 CVE-2023-39944MISCMISC elecom -- wab-s600-ps_firmware OS command injection vulnerability in WAB-S600-PS all versions, and WAB-S300 all versions allow an authenticated user to execute an arbitrary OS command by sending a specially crafted request. 2023-08-18 8.8 CVE-2023-40072MISCMISC fobybus -- social-media-skeleton Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. A Cross-site request forgery (CSRF) attack is a type of malicious attack whereby an attacker tricks a victim into performing an action on a website that they do not intend to do. This can be done by sending the victim a malicious link or by exploiting a vulnerability in the website. Prior to version 1.0.5 Social media skeleton did not properly restrict CSRF attacks. This has been addressed in version 1.0.5 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2023-08-18 8.8 CVE-2023-40172MISCMISC happysoft -- nbs&happysoftwechat A vulnerability, which was classified as critical, has been found in NBS&HappySoftWeChat 1.1.6. Affected by this issue is some unknown functionality. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237512. 2023-08-18 8.8 CVE-2023-4409MISCMISCMISC ruijienetworks -- rg-ew1200g_firmware A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237518 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 8.8 CVE-2023-4415MISCMISCMISC google -- chrome Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2023-08-23 8.8 CVE-2023-4429MISCMISCMISC google -- chrome Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2023-08-23 8.8 CVE-2023-4430MISCMISCMISC sourcecodester -- free_and_open_source_inventory_management_system A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php?page=member. The manipulation of the argument columns[0][data] leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-237570 is the identifier assigned to this vulnerability. 2023-08-21 8.8 CVE-2023-4449MISCMISCMISC spice-space -- spice-server An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product. There is a security vulnerablility that can restart KVMvirtual machine without any authorization. It is not yet known if there will be other other effects. 2023-08-22 8.6 CVE-2020-23793MISC microsoft -- microsoft_edge   Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2023-08-26 8.3 CVE-2023-36741MISC google -- chrome Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) 2023-08-23 8.1 CVE-2023-4428MISCMISCMISC google -- chrome Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) 2023-08-23 8.1 CVE-2023-4431MISCMISCMISC elecom -- lan-wh300n/re_firmware Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console. 2023-08-18 8 CVE-2023-38576MISCMISC exiv2 -- exiv2 Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file. 2023-08-22 7.8 CVE-2020-18831MISCMISC microsoft -- z3 There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempts to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution. 2023-08-22 7.8 CVE-2020-19725MISC freeimage_project -- freeimage Buffer Overflow vulnerability in function C_IStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. 2023-08-22 7.8 CVE-2020-21426MISC freeimage_project -- freeimage Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. 2023-08-22 7.8 CVE-2020-21427MISC freeimage_project -- freeimage Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. 2023-08-22 7.8 CVE-2020-21428MISC ogg_video_tools_project -- ogg_video_tools Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file. 2023-08-22 7.8 CVE-2020-21722MISCMISC ogg_video_tools_project -- ogg_video_tools Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file. 2023-08-22 7.8 CVE-2020-21724MISCMISC artifex -- ghostscript Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF document. 2023-08-22 7.8 CVE-2020-21890MISC gnu -- binutils Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c. 2023-08-22 7.8 CVE-2022-44840MISC gnu -- binutils Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c. 2023-08-22 7.8 CVE-2022-45703MISC 7-zip -- p7zip p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. 2023-08-22 7.8 CVE-2022-47069MISC gnu -- binutils An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads which may cause a denial of service or other unspecified impacts. 2023-08-22 7.8 CVE-2022-47673MISC gnu -- binutils An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c. 2023-08-22 7.8 CVE-2022-47695MISC gnu -- binutils An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function compare_symbols. 2023-08-22 7.8 CVE-2022-47696MISC berkaygediz -- o_blog SQL injection vulnerability in berkaygediz O_Blog v.1.0 allows a local attacker to escalate privileges via the secure_file_priv component. 2023-08-21 7.8 CVE-2023-38899MISCMISCMISCMISC openvpn -- openvpn Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet. 2023-08-22 7.5 CVE-2020-20813MISC postgresql -- postgresql An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. 2023-08-22 7.5 CVE-2020-21469MISC libssh2 -- libssh2 An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory. 2023-08-22 7.5 CVE-2020-22218MISC memcached -- memcached Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted meta command. 2023-08-22 7.5 CVE-2020-22570MISC freedesktop -- poppler Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input. 2023-08-22 7.5 CVE-2020-23804MISC realtek -- rtl8812au_firmware An issue was discovered in function nl80211_send_chandef in rtl8812au v5.6.4.2 allows attackers to cause a denial of service. 2023-08-22 7.5 CVE-2020-26652MISC linux -- kernel A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgacon_invert_region() function. 2023-08-22 7.5 CVE-2020-27418MISCMISC gnu -- binutils GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak. 2023-08-22 7.5 CVE-2020-35342MISC vsftpd_project -- vsftpd VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed. 2023-08-22 7.5 CVE-2021-30047MISC dpic_project -- dpic dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y. 2023-08-22 7.5 CVE-2021-32420MISCMISC dpic_project -- dpic dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y. 2023-08-22 7.5 CVE-2021-32421MISCMISC dpic_project -- dpic dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array. 2023-08-22 7.5 CVE-2021-32422MISCMISC imagemagick -- imagemagick An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c. 2023-08-22 7.5 CVE-2021-40211MISC gnu -- binutils Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37. 2023-08-22 7.5 CVE-2021-46174MISC python -- python The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service. 2023-08-22 7.5 CVE-2022-25024MISCMISCMISCMISC radare -- radare2 A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28068MISC radare -- radare2 A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28069MISC radare -- radare2 A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28070MISC radare -- radare2 A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28071MISC radare -- radare2 A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28072MISC radare -- radare2 A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28073MISC imagemagick -- imagemagick A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command. 2023-08-22 7.5 CVE-2022-48541MISC python -- python A use-after-free exists in Python through 3.9 via heappushpop in heapq. 2023-08-22 7.5 CVE-2022-48560MISC cryptopp -- crypto++ Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to memory outside of the allocation if the allocated memory was not 16-byte aligned. NOTE: this issue exists because the CVE-2019-14318 fix was intentionally removed for functionality reasons. 2023-08-22 7.5 CVE-2022-48570MISCMISC memcached -- memcached memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP. 2023-08-22 7.5 CVE-2022-48571MISC cisco -- secure_endpoint_private_cloud A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a logic error in the memory management of an affected device. An attacker could exploit this vulnerability by submitting a crafted AutoIt file to be scanned by ClamAV on the affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to restart unexpectedly, resulting in a DoS condition. 2023-08-18 7.5 CVE-2023-20212MISC danfoss -- ak-sm_800a_firmware Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information. 2023-08-21 7.5 CVE-2023-25913MISCMISC danfoss -- ak-sm_800a_firmware Due to improper restriction, attackers could retrieve and read system files of the underlying server through the XML interface. 2023-08-21 7.5 CVE-2023-25914MISCMISC e-excellence -- u-office_force   e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. An unauthenticated remote attacker can exploit this vulnerability to read arbitrary system files but can’t control system or disrupt service. 2023-08-25 7.5 CVE-2023-32756MISC wordpress -- wordpress The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a crafted URL, bypassing the protection offered. 2023-08-21 7.5 CVE-2023-3604MISC qt -- qt In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a situation in which a prefix is greater than a length. 2023-08-20 7.5 CVE-2023-37369MISCMISCMLIST kidus -- minimati SQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain sensitive information via theID parameter in the fulldelete.php component. 2023-08-18 7.5 CVE-2023-38839MISC weaviate -- weaviate An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function. 2023-08-21 7.5 CVE-2023-38976MISC ntsc-crt_project -- ntsc-crt NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmp_rw.c because a file's width, height, and BPP are not validated. NOTE: the vendor's perspective is "this main application was not intended to be a well-tested program, it's just something to demonstrate it works and for the user to see how to integrate it into their own programs." 2023-08-18 7.5 CVE-2023-39125MISC northgrid -- proself Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote unauthenticated attacker to log in to the product's Control Panel and perform an unintended operation. 2023-08-18 7.5 CVE-2023-39415MISCMISCMISC dlink -- dir-880l_a1_firmware D-Link DIR-880 A1_FW107WWb08 was discovered to contain a NULL pointer dereference in the function FUN_00010824. 2023-08-18 7.5 CVE-2023-39669MISCMISCMISC tp-link -- tl-wr940n_v2_firmware TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via the component /userRpm/AccessCtrlAccessRulesRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. 2023-08-21 7.5 CVE-2023-39745MISC tp-link -- tl-wr1041n_v2_firmware An issue in the component /userRpm/NetworkCfgRpm of TP-Link TL-WR1041N V2 allows attackers to cause a Denial of Service (DoS) via a crafted GET request. 2023-08-21 7.5 CVE-2023-39748MISC tenda -- ac8v4_firmware Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the save_virtualser_data function. 2023-08-21 7.5 CVE-2023-39784MISCMISC tenda -- ac8v4_firmware Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the set_qosMib_list function. 2023-08-21 7.5 CVE-2023-39785MISCMISC tenda -- ac8v4_firmware Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sscanf function. 2023-08-21 7.5 CVE-2023-39786MISCMISC fobybus -- social-media-skeleton Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Prior to version 1.0.5 Social media skeleton did not properly salt passwords leaving user passwords susceptible to cracking should an attacker gain access to hashed passwords. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this issue. 2023-08-18 7.5 CVE-2023-40173MISCMISCMISC veilid -- veilid Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service (out-of-memory abort) via crafted packet data, as exploited in the wild in August 2023. 2023-08-20 7.5 CVE-2023-40711MISC typora -- typora Improper path handling in Typora before 1.6.7 on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora. 2023-08-19 7.4 CVE-2023-2316MISCMISC northgrid -- proself Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands. 2023-08-18 7.2 CVE-2023-39416MISCMISCMISC mcafee -- safe_connect McAfee Safe Connect before 2.16.1.126 may allow an adversary with system privileges to achieve privilege escalation by loading arbitrary DLLs. 2023-08-21 7.2 CVE-2023-40352CONFIRMMISC oracle -- apache_xml_graphics_batik Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later. 2023-08-22 7.1 CVE-2022-44729MISCMISCMISCMISC obsidian -- obsidian Improper path handling in Obsidian desktop before 1.2.8 on Windows, Linux and macOS allows a crafted webpage to access local files and exfiltrate them to remote web servers via "app://local/". This vulnerability can be exploited if a user opens a malicious markdown file in Obsidian, or copies text from a malicious webpage and paste it into Obsidian. 2023-08-19 7.1 CVE-2023-2110MISCMISC unity -- parsec Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User" mode. The application intentionally launches DLLs from a user-owned directory but intended to always perform integrity verification of those DLLs. This affects Parsec Loader versions through 8. Parsec Loader 9 is a fixed version. 2023-08-20 7 CVE-2023-37250MISCMISCCONFIRM Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info phplist -- phplist An issue was discovered in phpList 3.6.12. Due to an access error, it was possible to manipulate and edit data of the system's super admin, allowing one to perform an account takeover of the user with super-admin permission. 2023-08-18 6.7 CVE-2023-27576MISC webassembly -- binaryen A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as. 2023-08-22 6.5 CVE-2020-18378MISC webassembly -- binaryen Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-opt. 2023-08-22 6.5 CVE-2020-18382MISC exempi_project -- exempi Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted audio file with ID3V2 frame. 2023-08-22 6.5 CVE-2020-18651MISCMISC exempi_project -- exempi Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file. 2023-08-22 6.5 CVE-2020-18652MISCMISC freedesktop -- poppler Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause a denial of service. 2023-08-22 6.5 CVE-2020-18839MISC gnu -- ncurses Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19185MISC gnu -- ncurses Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19186MISC gnu -- ncurses Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19187MISC gnu -- ncurses Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19188MISC gnu -- ncurses Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19189MISC gnu -- ncurses Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19190MISC freeimage_project -- freeimage Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a denial of service via crafted PFM file. 2023-08-22 6.5 CVE-2020-22524MISC libraw -- libraw Buffer Overflow vulnerability in LibRaw::stretch() function in librawsrcpostprocessingaspect_ratio.cpp. 2023-08-22 6.5 CVE-2020-22628MISC freeimage_project -- freeimage Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to cuase a denial of service via opening of crafted psd file. 2023-08-22 6.5 CVE-2020-24294MISC freeimage_project -- freeimage A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp. 2023-08-22 6.5 CVE-2021-40262MISC freeimage_project -- freeimage NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImage_CloneTag function inFreeImageTag.cpp. 2023-08-22 6.5 CVE-2021-40264MISC freeimage_project -- freeimage FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference. 2023-08-22 6.5 CVE-2021-40266MISC upx_project -- upx Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx function. 2023-08-22 6.5 CVE-2021-46179MISC freedesktop -- poppler An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream check before saving an embedded file. 2023-08-22 6.5 CVE-2022-37051MISCMISC freedesktop -- poppler A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject. 2023-08-22 6.5 CVE-2022-37052MISCMISC libtiff -- libtiff An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file. 2023-08-22 6.5 CVE-2022-40090MISCMISC python -- python read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format. 2023-08-22 6.5 CVE-2022-48564MISC geomatika -- isigeo_web An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to obtain sensitive database content via SQL Injection. 2023-08-22 6.5 CVE-2023-23563MISCMISCMISC pandorafms -- pandora_fms Server-Side Request Forgery (SSRF) vulnerability in API checker of Pandora FMS. Application does not have a check on the URL scheme used while retrieving API URL. Rather than validating the http/https scheme, the application allows other scheme such as file, which could allow a malicious user to fetch internal file content. This issue affects Pandora FMS v767 version and prior versions on all platforms. 2023-08-22 6.5 CVE-2023-24515MISC typora -- typora Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora. 2023-08-19 6.5 CVE-2023-2971MISC tp-link -- tapo An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message. 2023-08-22 6.5 CVE-2023-38906MISCMISC tp-link -- tapo An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the TSKEP authentication function. 2023-08-22 6.5 CVE-2023-38908MISCMISCMISC tp-link -- tapo An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the IV component in the AES128-CBC function. 2023-08-22 6.5 CVE-2023-38909MISCMISCMISC oracle -- apache_nifi Apache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS access in several Processors and Controller Services with connection URL validation that does not provide sufficient protection against crafted inputs. An authenticated and authorized user can bypass connection URL validation using custom input formatting. The resolution enhances connection URL validation and introduces validation for additional related properties. Upgrading to Apache NiFi 1.23.1 is the recommended mitigation. 2023-08-18 6.5 CVE-2023-40037MISCMISCMISC devolutions -- remote_desktop_manager Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in the duplication write process. 2023-08-21 6.5 CVE-2023-4417MISC wallabag -- wallabag Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3. 2023-08-21 6.5 CVE-2023-4455MISCMISC redhat -- openshift_logging A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached. 2023-08-21 6.5 CVE-2023-4456MISCMISC samsung -- sww-3400rw_firmware A reflected cross site scripting (XSS) vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bin/command.cgi 2023-08-22 6.1 CVE-2020-22181MISCMISC nagios -- nagios_xi Cross Site Scripting (XSS) in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request. 2023-08-22 6.1 CVE-2020-23992MISC cacti -- cacti Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php. 2023-08-22 6.1 CVE-2022-41444MISC cacti -- cacti A reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML in the "ref" parameter at auth_changepassword.php. 2023-08-22 6.1 CVE-2022-48547MISC pandorafms -- pandora_fms Cross-site Scripting (XSS) vulnerability in Visual Console Module of Pandora FMS could be used to hijack admin users session cookie values, carry out phishing attacks, etc. This issue affects Pandora FMS v767 version and prior versions on all platforms. 2023-08-22 6.1 CVE-2023-24514MISC wordpress -- wordpress Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in UX-themes Flatsome plugin

Read more »

9th-generation 10.2″ iPads on sale for $50-$60 off MSRP, starting at $269, free 1-2 day shipping
B&H Photo has Apple's 9th generation 10.2" WiFi iPads on sale for $50-$60 off MSRP with prices available starting at $269. Their prices are the lowest new prices available for iPads anywhere. Free 1-2 day shipping is available to most US addresses: The post first appeared on MacPrices.net.

Read more »

Apple has the iPad mini 6 in stock today for $80-$100 off MSRP, Certified Refurbished
Apple has the 8.3″ WiFi iPad mini 6 in stock and available for $80-$100 off MSRP, Certified Refurbished, each including free shipping. Prices start at $419. Each iPad features a new outer case and includes Apple’s standard one-year warranty: The post first appeared on MacPrices.net.

Read more »

Apple has restocked M2 Mac minis starting at $509, ranging up to $200 off MSRP, Certified Refurbished
Apple has M2-powered Mac minis available again in their Certified Refurbished section starting at $509 and ranging up to $200 off MSRP. Each mini comes with Apple’s one-year warranty, and shipping is free. The following models are in stock today: The post first appeared on MacPrices.net.

Read more »

New promo at AT&T: $300 off any Apple Watch 9 or Ultra 2 when you buy 2 and add a line of service
AT&T is offering Apple Watch Series 9 and Ultra 2 models for $300 off MSRP when you purchase two Watches with AT&T service and add at least one new line... The post New promo at AT&T: $300 off any Apple Watch 9 or Ultra 2 when you buy 2 and add a line of service first appeared on MacPrices.net.

Read more »

Introducing AppleSurfer at MacPrices: All your Apple headline news on one page
Scan all the headlines from Apple and over a dozen major Apple websites on our new page, AppleSurfer. Paying homage to the now defunct MacSurfer website, we update AppleSurfer hourly, 24/7, with headline news links from all the major Mac and Apple websites as an easy to read list on one page. We also show you how recent each post went live. The post first appeared on MacPrices.net.

Read more »

Get a new 15″ M2 MacBook Air for $200 off MSRP with current sales
Get a new 15" M2 MacBook Air for $200 off MSRP with current sales... The post first appeared on MacPrices.net.

Read more »

10th generation Apple iPads on sale for $60 off MSRP, starting at $269
Amazon has Apple's 9th generation 10.2" iPads on sale for $60 off MSRP with prices available starting at $269. Their prices are the lowest new prices available for iPads anywhere: The post first appeared on MacPrices.net.

Read more »

Apple iPad Airs back on sale for $100 off MSRP at Amazon
Amazon has 10.9″ M1 WiFi iPad Airs on sale again for $100 off Apple’s MSRP, with prices starting at $499. Each includes free shipping. Their prices are the lowest available among the Apple retailers we track: The post first appeared on MacPrices.net.

Read more »

New low price: 13″ M2 MacBook Pro for $1049, $250 off Apple’s MSRP
Amazon has the Space Gray 13″ MacBook Pro with an Apple M2 CPU and 256GB of storage in stock and on sale today for $250 off MSRP. Their price is the lowest we’ve seen for this configuration from any Apple retailer. The post first appeared on MacPrices.net.

Read more »

Apple AirPods 2 with USB-C now in stock and on sale for $50 off MSRP, only $199
Amazon has Apple’s 2023 AirPods Pro with USB-C now in stock and on sale for $199.99 including free shipping. Their price is $50 off MSRP, and it’s currently the lowest price available for new AirPods Pro among the retailers we track. Delivery is expected as soon as September 26th. The post first appeared on MacPrices.net.

Read more »

New low prices: Apple’s 15″ M2 MacBook Airs with 512GB of storage for $1249, $250 off MSRP
Amazon has 15" MacBook Airs with M2 CPUs and 512GB of storage in stock and on sale for $1249 shipped. That's $250 off Apple's MSRP, and it's the lowest price available for these M2-powered MacBook Airs: The post first appeared on MacPrices.net.

Read more »

New low price: Clearance 16″ Apple MacBook Pro with 32-core M1 Max GPU for $1100 off original MSRP
B&H Photo has clearance 16″ M1 Max MacBook Pros, 10-core CPU/32-core GPU/1TB SSD/Space Gray or Silver, in stock today for $2399 including free 1-2 day delivery to most US addresses. Their price is $1100 off Apple’s original MSRP, and it’s the lowest price for this configuration among the retailers we track: The post first appeared on MacPrices.net.

Read more »