How to move your data to a new iPhone 15 or iPhone 15 Pro
If you're moving from an old iPhone to a new iPhone 15, there are steps you need to take to make sure all of your data comes with you. Here's how to get it done.Make the move to your new iPhone as smooth and quick as possibleYou can set up a new iPhone as exactly that, a completely new iPhone without any previous data like documents, or settings such as email accounts. That's what you have to do if it's your first smartphone, and there are reasons you could prefer to do that anyway. Read more...

Read more »

First iPhone 15 pre-orders begin arriving, lines form at Apple Stores around the world
As the clock turns to September 22 around the world, the iPhone 15 and iPhone 15 Pro launch is in full swing. The first pre-orders have started arriving to lucky buyers and lines are forming at Apple Stores around the world. Apple has also published a new press release celebrating the launch of the iPhone 15, Apple Watch Series 9, and Apple Watch Ultra 2… more…

Read more »

Check out what pro photographers accomplish with iPhone 15 Pro Max
Professional photographers Stephen Wilkes and Reuben Wu share their experience shooting images with iPhone 15 Pro Max, praising the upgrades.iPhone 15 ProThe camera system is one of the most important updates in Apple's iPhone each year. For 2023, the iPhone 15 Pro Max received an upgraded telephoto lens capable of 5x zoom. Read more...

Read more »

Apple published a new Press Release
Apple just published a new Press Release:iPhone 15 lineup and new Apple Watch lineup arrive worldwide

Read more »

Apple releases iOS 17.0.1
Apple on Thursday released iOS 17.0.1 which provides important bug fixes and security updates and is recommended for all users… The post appeared first on MacDailyNews.

Read more »

Apple uses hidden watermarks on iPhone 15 boxes to verify authenticity
Extra precautions have been taken for iPhone 15 boxes that give retail employees and buyers a new way to verify the device is real — but you'll need a UV light.iPhone 15 ProScammers attempt to sell fake iPhones by using convincing replicated device packaging. Apple has added a new invisible watermarking system in an attempt to eliminate this practice. Read more...

Read more »

BLUETTI’s new EP800 energy storage system will keep your whole house powered up
Energy storage leader BLUETTI has unveiled its latest innovation, the EP800 energy storage system, which empowers homeowners during blackouts – and it even works off the grid. more…

Read more »

Apple reduces raises given to retail employees after weak iPhone quarter
The smartphone market and general economy have slowed down post-pandemic, and Apple is reacting with a lower raise for employees in 2023 versus 2022.Apple ParkThe pandemic created an inflated consumer economy, especially around consumer electronics. Devices like the iPhone and iPad sold fast, providing more profits for Apple to trickle down to employees via bonuses and raises. Read more...

Read more »

USB-C on iPhone 15: Everything you need to know
Apple's new iPhone 15 and iPhone 15 Pro each have a USB-C port, but the capabilities of this port differ between models. Here's what you need to know.Apple finally shifted from Lightning to USB-C with the iPhone 15 lineup. For better or worse, this universal port allows users to change to a new cable standard, but there's a lot of nuance in how USB-C works and the specs available.The iPhone 15 and iPhone 15 Plus have USB 2.0 Type-C ports capable of 480Mbps data transfer. The iPhone 15 Pro and iPhone 15 Pro Max have a USB 3.2 Gen 2 Type-C port capable of 10Gbps. All models still fast charge with 20W or greater USB PD adapters, up to 27W. Read more...

Read more »

Bloomberg: Apple handing out smaller raises to retail employees this year
Apple is slowing the rate of raises it is giving to retail employees this year, according to a new report from Bloomberg. The report explains that Apple has revealed “average annual raises” of roughly 4% for this year, returning to what was normal before raises increased last year. more…

Read more »

iPhone 15 boxes have new security mechanism to prove authenticity
There are a lot of scams out there involving Apple products, and it’s no different with the iPhone. This year, with the iPhone 15, Apple seems to have implemented a new security mechanism based on UV light to prove the authenticity of the device and help people not be scammed when buying an iPhone from an unknown store. more…

Read more »

Google Takes a Snarky Shot at Apple Over RCS in Its Latest Ad
An anonymous reader shares a report: Google has been trying to publicly pressure Apple into adopting the GSMA's RCS (Rich Communications Service) messaging protocol for a long time now, with nothing to show for it. As a matter of fact, Apple CEO Tim Cook seemed to completely dismiss the idea when he answered a question on the subject by saying that consumers should buy their moms an iPhone. Google and its Android platform aren't giving up that easily and they've just released a snarky ad to continue criticizing Apple's preferred messaging platform. The ad's called "iPager" and mimics Apple's marketing language to reveal a retro-styled beeper, indicating that Apple's behind the curve with its chosen messaging platform. The spot states that the iPager uses "outdated messaging tech" to "text with Android," citing many of the perceived disadvantages of sticking with SMS technology when communicating with Android phones. Google didn't invent this comparison whole-cloth, as the 30-year-old SMS tech actually dates back to old-school pagers. Read more of this story at Slashdot.

Read more »

Incomplete disclosures by Apple and Google create “huge blindspot” for 0-day hunters
No one mentioned that libwebp, a library found in millions of apps, was a 0-day origin.

Read more »

How to Restore the Slack Workspace Sidebar
Has your Slack interface changed recently, dropping the workspace sidebar in favor of another one that replicates capabilities available in the channel sidebar? Read on for the trick necessary to bring back a permanent sidebar of your workspaces.

Read more »

9to5Mac Daily: September 21, 2023 – iPhone 15 gaming, iOS 17 complaints
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by Urban Armor Gear: Elevated Rugged Tech Protection. Elevate Your iPhone 15 Protection with UAG’s Latest Rugged Cases. more…

Read more »

Folding travel charger tops off iPhone, Apple Watch and AirPods at once
Get the Adam Elements Mag 3 Magnetic 3-in-1 Foldable Travel Charging Station for just $75.97, and keep your Apple devices juiced up anywhere. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

J.P. Morgan analyst sees positive signs on iPhone 15 demand
According to J.P. Morgan, Apple is seeing solid demand for more than just the higher-end iPhone 15 Pro and flagship iPhone 15 Pro Max… The post appeared first on MacDailyNews.

Read more »

Threads finally adds option to let users easily switch between accounts
Meta has been trying to add much-requested features to Threads as quickly as possible. After launching keyword search earlier this month, the latest update to the Threads app now finally lets users switch between different accounts without having to log out and log in again. more…

Read more »

What’s more carbon neutral than the Apple Watch Series 9 Sport Loop? The band you already have
Apple says that the aluminum Apple Watch Series 9 is its first carbon neutral product. You need to pair it with the new Sport Loop for it to be fully carbon neutral though. That makes it interesting that Apple didn’t add one new band option this year: no band at all. more…

Read more »

The New FineWoven iPhone Cases Are 'Very Bad'
Several Slashdot readers have shared this report: Folks, what you've heard so far is true. Apple's new FineWoven iPhone cases and accessories are bad. Like, really bad. I've been puzzling over them for the past week, looking at them from different angles. Picking them up, setting them down, petting them. Seven days later, I still can't make sense of them and have no other choice but to say it out loud: FineWoven is very bad. FineWoven is a new fabric option you'll find on iPhone 15 cases, AirTag holders, and MagSafe wallets. Apple calls it a "luxurious and durable microtwill." It's silky, almost slippery to the touch, and costs $59 for any of the phone cases, $35 for an AirTag holder, and $99 for one of the new watch bands -- not the most expensive phone cases you can buy, but pretty darn pricey. Apple is pitching them as a premium replacement of sorts for the leather accessories it discontinued. The company won't sell leather iPhone cases and straps anymore because making them at Apple's scale "has a significant carbon footprint," according to Lisa Jackson, the company's environmental policy VP. That's fair; as my colleague Justine Calma puts it, "Cattle are a big source of greenhouse gas emissions because cows burp out methane, which is even more potent than CO2 when it comes to its ability to trap heat on the planet." If you want a fancy first-party iPhone case, then your new, more sustainable option would be FineWoven. But FineWoven is very much not the premium material that leather is. When I popped the MagSafe wallet out of its box, I could clearly see some places where it was already showing wear along the edges. Little bits of lint immediately caught on the fabric, too. And then there's the fingernail test. Read more of this story at Slashdot.

Read more »

iPhone 15 camera vs 15 Pro camera: What sets them apart?
Many of the differences between the iPhone 15 and 15 Pro come down to the new camera systems. As the name implies, the Pro devices offer the most advanced cameras but 15 and 15 Plus still have very capable systems. However, new this year, iPhone 15 Pro Max stands on its own as the only model with 5x optical zoom. Let’s dig into everything that’s different between the iPhone 15 camera vs 15 Pro camera. more…

Read more »

Apple Watch Series 9 comes out Friday, but you still can’t buy the Magnetic Link band
Here’s a bit of a mystery: it’s the eve of Apple Watch Series 9 launch day, and you still can’t order the new Magnetic Link band. The product page has been live since the September 12 event ended, but it still shows up as unavailable. If you try to configure an Apple Watch Series 9 with the Magnetic Link when ordering, the checkout flow stops and says to “check back later for availability.” more…

Read more »

Download the new iPhone 15 and iPhone 15 Pro wallpapers right here
Apple on Tuesday announced the iPhone 15 and iPhone 15 Pro. The new devices come with a lot of changes, such as a refreshed design, Dynamic Island for the entire lineup, and USB-C port for the first time. But they also have new wallpapers – and you can download them right here for your current device. Update: The iPhone 15 Pro wallpapers have multiple versions for different states (such as Lock and Home Screen). We’ve added the alternative versions here. more…

Read more »

How to leave the iOS 17 beta program
With iOS 17 now available to all, you might no longer want to be enrolled in Apple’s beta program. Here's how to pull your iPhone out. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Will iPhone 14 cases fit the iPhone 15?
The new iPhone 15 and iPhone 15 Pro are here, and the first pre-orders are about to be on their way to buyers. If you’re preparing for your iPhone 15 by doing some accessory shopping, there’s an important tidbit to keep in mind: iPhone 14 cases will not fit your new iPhone 15. more…

Read more »

OS Security Updates Address Three More Exploited Vulnerabilities
Updates for macOS 13 Ventura, macOS 12 Monterey, iOS 17 and 16, iPadOS 17 and 16, and watchOS 10 and 9 fix a trio of security vulnerabilities likely being used to install the NSO Group's Pegasus spyware. Install the updates soon.

Read more »

Apple assembler Luxshare’s iPhone production in China doubled year over year
Apple supplier Luxshare Precision Industry is producing three models of the iPhone 15 series in China this year, and the business has… The post appeared first on MacDailyNews.

Read more »

In new interview, Eddy Cue shares how he thinks about Apple’s growing sports ambitions
In a new GQ interview with Eddy Cue, the Apple exec shares his take on the success of the Apple-MLS deal so far and some commentary on the future of Apple’s contribution to the sports industry. Cue seems emboldened by the initial response to MLS Season Pass and keen to capitalize on the momentum since Lionel Messi joined the league. You do get the sense though that Apple is on the hunt for something even bigger, when the right deal comes around … more…

Read more »

Headway Premium drops to only $59.97, making it affordable to engage in self-growth
Elevate your learning habits with bite-sized learning in the Headway app, now on sale for 80% off through September 24.Headway Premium for only $59.97 from StackSocial.Headway makes it easy to read nonfiction bestsellers thanks to its 15-minute summarized breakdown, allowing you to read countless books to help you achieve your goals. Whether you want to build a business or kick bad habits, Headway's Premium subscription for $59.97 is the way to go. Read more...

Read more »

Apple releases spate of new OS bug fixes alongside final macOS Sonoma beta
Apple followed up its recent iOS 17 and iPadOS 17 releases with security and bug-fix updates plus the likely last macOS Sonoma beta. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Who’s Behind the 8Base Ransomware Website?
The victim shaming website operated by the cybercriminals behind 8Base -- currently one of the more active ransomware groups -- was until earlier today leaking quite a bit of information that the crime group probably did not intend to be made public. The leaked data suggests that at least some of website's code was written by a 36-year-old programmer residing in the capital city of Moldova.

Read more »

Vulnerability Summary for the Week of September 11, 2023
  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info wibu -- codemeter_runtime   A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system. 2023-09-13 10 CVE-2023-3935MISCMISC sap -- businessobjects_business_intelligence SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, under certain condition allows an authenticated attacker to view sensitive information which is otherwise restricted. On successful exploitation, the attacker can completely compromise the application causing high impact on confidentiality, integrity, and availability. 2023-09-12 9.9 CVE-2023-40622MISCMISC dlink -- dir-619l_firmware Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login. 2023-09-11 9.8 CVE-2020-19319MISC dlink -- dir-619l_firmware Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login. 2023-09-11 9.8 CVE-2020-19320MISCMISC mofinetwork -- mofi4500-4gxelte-v2_firmware An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass the authentication and execute arbitrary code via crafted HTTP request. 2023-09-08 9.8 CVE-2021-27715MISCMISC rockwell_automation -- factorytalk_view Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted malicious packets.  The device has the functionality, through a CIP class, to execute exported functions from libraries.  There is a routine that restricts it to execute specific functions from two dynamic link library files.  By using a CIP class, an attacker can upload a self-made library to the device which allows the attacker to bypass the security check and execute any code written in the function. 2023-09-12 9.8 CVE-2023-2071MISC xxyopen -- novel-plus novel-plus 3.6.2 is vulnerable to SQL Injection. 2023-09-11 9.8 CVE-2023-30058MISCMISC tsplus -- tsplus_remote_access An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%TSplusClientswww. 2023-09-11 9.8 CVE-2023-31067MISCMISC tsplus -- tsplus_remote_access An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%TSplusUserDesktopthemes. 2023-09-11 9.8 CVE-2023-31068MISCMISC google -- android In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 9.8 CVE-2023-35681MISCMISC phpjabbers -- cleaning_business_software In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accounts. 2023-09-11 9.8 CVE-2023-36140MISCMISC trendylogics -- crypto_currency_tracker Incorrect access control in the User Registration page of Crypto Currency Tracker (CCT) before v9.5 allows unauthenticated attackers to register as an Admin account via a crafted POST request. 2023-09-08 9.8 CVE-2023-37759MISCMISCMISC adobe -- coldfusion   Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. 2023-09-14 9.8 CVE-2023-38204MISC conemu_project -- conemu ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to arbitrary code execution. This is related to an incomplete fix for CVE-2022-46387. 2023-09-12 9.8 CVE-2023-39150MISCMISC golang -- go The go.mod toolchain directive, introduced in Go 1.21, can be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module. This applies to modules downloaded using the "go" command from the module proxy, as well as modules downloaded directly using VCS software. 2023-09-08 9.8 CVE-2023-39320MISCMISCMISCMISC dlink -- dir-816_firmware D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis. 2023-09-12 9.8 CVE-2023-39637MISCMISCMISCMISC arris -- tg852g_firmware An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value by observing a beacon frame. 2023-09-11 9.8 CVE-2023-40039MISCMISCMISC dedecms -- dedecms DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/module_make.php. 2023-09-12 9.8 CVE-2023-40784MISCMISC opencart -- opencart OpenCart v4.0.2.2 is vulnerable to Brute Force Attack. 2023-09-12 9.8 CVE-2023-40834MISCMISC schoolmate -- schoolmate Schoolmate 1.3 is vulnerable to SQL Injection in the variable schoolname from Database at ~header.php. 2023-09-11 9.8 CVE-2023-40944MISC sourcecodester -- doctor_appointment_system Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctorsmyDetails.php. 2023-09-11 9.8 CVE-2023-40945MISC schoolmate -- schoolmate Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php. 2023-09-11 9.8 CVE-2023-40946MISC zoo_management_system_project -- zoo_management_system Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields. 2023-09-08 9.8 CVE-2023-41615MISCMISCMISC jeecg -- jeecg_boot Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show. 2023-09-08 9.8 CVE-2023-42268MISC hutool -- hutool hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray. 2023-09-08 9.8 CVE-2023-42276MISC hutool -- hutool hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath. 2023-09-08 9.8 CVE-2023-42277MISC imoulife -- life The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component. This relates to the com.mm.android.easy4ip.MainActivity activity. JavaScript execution is enabled in the WebView, and direct web content loading occurs. 2023-09-11 9.8 CVE-2023-42470MISCMISCMISC wave-ai -- wave The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. It contains a manifest entry that exports the wave.ai.browser.ui.splash.SplashScreen activity. This activity uses a WebView component to display web content and doesn't adequately validate or sanitize the URI or any extra data passed in the intent by a third-party application (with no permissions). 2023-09-11 9.8 CVE-2023-42471MISCMISCMISC sourcecodester -- simple_membership_system A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file account_edit_query.php. The manipulation of the argument admin_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239254 is the identifier assigned to this vulnerability. 2023-09-09 9.8 CVE-2023-4845MISCMISCMISC sourcecodester -- simple_book_catalog_app A vulnerability classified as critical was found in SourceCodester Simple Book Catalog App 1.0. Affected by this vulnerability is an unknown functionality of the file delete_book.php. The manipulation of the argument delete leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239257 was assigned to this vulnerability. 2023-09-09 9.8 CVE-2023-4848MISCMISCMISC sourcecodester -- online_tours_&_travels_management_system A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file booking.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239351. 2023-09-10 9.8 CVE-2023-4866MISCMISCMISC sourcecodester -- contact_manager_app A vulnerability classified as critical was found in SourceCodester Contact Manager App 1.0. This vulnerability affects unknown code of the file delete.php. The manipulation of the argument contact/contactName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239356. 2023-09-10 9.8 CVE-2023-4871MISCMISCMISC sourcecodester -- contact_manager_app A vulnerability, which was classified as critical, has been found in SourceCodester Contact Manager App 1.0. This issue affects some unknown processing of the file add.php. The manipulation of the argument contact/contactName leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239357 was assigned to this vulnerability. 2023-09-10 9.8 CVE-2023-4872MISCMISCMISC byzoro -- smart_s45f_firmware A vulnerability, which was classified as critical, was found in Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-239358 is the identifier assigned to this vulnerability. 2023-09-10 9.8 CVE-2023-4873MISCMISCMISC mintplexlabs -- anythingllm Relative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. 2023-09-11 9.8 CVE-2023-4897MISCMISC adobe -- commerce   Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution. 2023-09-12 9.1 CVE-2022-24093MISC ibm -- security_directory_server IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view or write to arbitrary files on the system. IBM X-Force ID: 228579. 2023-09-08 9.1 CVE-2022-33164MISCMISC dlink -- dir-605l_firmware Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows authorized attackers execute arbitrary code via sending crafted data to the webserver service program. 2023-09-11 8.8 CVE-2020-19318MISC redhat -- decision_manager A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This flaw allows an authenticated attacker to construct malicious serialized objects (usually called gadgets) and achieve code execution on the server. 2023-09-11 8.8 CVE-2022-1415MISCMISCMISC microsoft -- azure_devops   Azure DevOps Server Remote Code Execution Vulnerability 2023-09-12 8.8 CVE-2023-33136MISC google -- android In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 8.8 CVE-2023-35658MISCMISC google -- android In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 8.8 CVE-2023-35673MISCMISC google -- android In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 8.8 CVE-2023-35684MISCMISC govee -- home Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially crafted site, the attacker can execute JavaScript in context of WebView or steal sensitive user data by displaying phishing content. 2023-09-11 8.8 CVE-2023-3612MISC microsoft -- sharepoint_server   Microsoft SharePoint Server Elevation of Privilege Vulnerability 2023-09-12 8.8 CVE-2023-36764MISC microsoft -- windows_11   Windows Themes Remote Code Execution Vulnerability 2023-09-12 8.8 CVE-2023-38146MISC microsoft -- multiple_products   Windows Miracast Wireless Display Remote Code Execution Vulnerability 2023-09-12 8.8 CVE-2023-38147MISC microsoft -- multiple_products   Internet Connection Sharing (ICS) Remote Code Execution Vulnerability 2023-09-12 8.8 CVE-2023-38148MISC netis-systems -- wf2409e_firmware An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface. 2023-09-11 8.8 CVE-2023-38829MISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application server responds with sensitive information about the server. This could allow an attacker to directly access the database. 2023-09-12 8.8 CVE-2023-40726MISC idreamsoft -- icms icms 7.0.16 is vulnerable to Cross Site Request Forgery (CSRF). 2023-09-08 8.8 CVE-2023-40953MISCMISC wordpress -- wordpress   The BAN Users plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.5.3 due to a missing capability check on the 'w3dev_save_ban_user_settings_callback' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify the plugin settings to access the ban and unban functionality and set the role of the unbanned user. 2023-09-13 8.8 CVE-2023-4153MISCMISCMISC wordpress -- wordpress   The Simplr Registration Form Plus+ plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 2.4.5. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for authenticated attackers with subscriber-level permissions or above to change user passwords and potentially take over administrator accounts. 2023-09-13 8.8 CVE-2023-4213MISCMISC mozilla -- firefox Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occured when allocating too much private shader memory on mac OS. This bug only affects Firefox on macOS. Other operating systems are unaffected. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 8.8 CVE-2023-4582MISCMISCMISCMISC mozilla -- thunderbird Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2. 2023-09-11 8.8 CVE-2023-4584MISCMISCMISCMISCMISCMISC mozilla -- thunderbird Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 8.8 CVE-2023-4585MISCMISCMISCMISC wibu -- codemeter_runtime   A Improper Privilege Management vulnerability through an incorrect use of privileged APIs in CodeMeter Runtime versions prior to 7.60c allow a local, low privileged attacker to use an API call for escalation of privileges in order gain full admin access on the host system. 2023-09-13 8.8 CVE-2023-4701MISCMISC hitachi_energy -- asset_suite A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password validation in T214. This vulnerability can be exploited by an authenticated user per-forming an Equipment Tag Out holder action (Accept, Release, and Clear) for another user and entering an arbitrary password in the holder action confirmation dialog box. Despite entering an arbitrary password in the confirmation box, the system will execute the selected holder action. 2023-09-11 8.8 CVE-2023-4816MISC sourcecodester -- take-note_app A vulnerability has been found in SourceCodester Take-Note App 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239350 is the identifier assigned to this vulnerability. 2023-09-09 8.8 CVE-2023-4865MISCMISCMISC sourcecodester -- contact_manager_app A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239353 was assigned to this vulnerability. 2023-09-10 8.8 CVE-2023-4868MISCMISCMISC sourcecodester -- contact_manager_app A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file update.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-239354 is the identifier assigned to this vulnerability. 2023-09-10 8.8 CVE-2023-4869MISCMISCMISC mintplexlabs -- anything-llm SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. 2023-09-12 8.8 CVE-2023-4899MISCMISC wordpress -- wordpress   The Login with phone number plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.8. This is due to missing nonce validation on the 'lwp_update_password_action' function. This makes it possible for unauthenticated attackers to change user password via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2023-09-13 8.8 CVE-2023-4916MISCMISC mozilla -- firefox On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer overflow potentially leaking sensitive data that could have led to a sandbox escape. *This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2. 2023-09-11 8.6 CVE-2023-4576MISCMISCMISCMISCMISCMISC siemens -- spectrum_power_7   A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q3). The affected product assigns improper access rights to the update script. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges. 2023-09-14 8.2 CVE-2023-38557MISC hichip -- shenzhen_hichip_vision_technology_firmware Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through sending a crafted multicast message in a local network. 2023-09-11 8.1 CVE-2022-23382MISC openpmix -- openpmix OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0. 2023-09-09 8.1 CVE-2023-41915MISCCONFIRMCONFIRM microsoft -- exchange_server   Microsoft Exchange Server Remote Code Execution Vulnerability 2023-09-12 8 CVE-2023-36744MISC microsoft -- exchange_server   Microsoft Exchange Server Remote Code Execution Vulnerability 2023-09-12 8 CVE-2023-36745MISC microsoft -- exchange_server   Microsoft Exchange Server Remote Code Execution Vulnerability 2023-09-12 8 CVE-2023-36756MISC microsoft -- exchange_server   Microsoft Exchange Server Spoofing Vulnerability 2023-09-12 8 CVE-2023-36757MISC foxconn -- live_update_utility An issue was discovered in MmMapIoSpace routine in Foxconn Live Update Utility 2.1.6.26, allows local attackers to escalate privileges. 2023-09-11 7.8 CVE-2020-24088MISCMISCMISC adobe -- indesign Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28831MISC adobe -- indesign Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28832MISC adobe -- indesign Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28833MISC adobe -- incopy Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28834MISC adobe -- incopy Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28835MISC adobe -- incopy Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28836MISC adobe -- acrobat_reader Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-34224MISC adobe -- acrobat_reader Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-34227MISC adobe -- acrobat_reader   Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-13 7.8 CVE-2023-26369MISC microsoft -- multiple_products   Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-35355MISC google -- android In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35665MISCMISC google -- android In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35666MISCMISC google -- android In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35667MISCMISC google -- android In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35669MISCMISC google -- android In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35670MISCMISC google -- android In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35674MISCMISC google -- android In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35676MISCMISC google -- android In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. 2023-09-11 7.8 CVE-2023-35682MISCMISC google -- android In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35687MISCMISC microsoft -- 3d_viewer   3D Viewer Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36739MISC microsoft -- 3d_viewer   3D Viewer Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36740MISC microsoft -- visual_studio   Visual Studio Code Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36742MISC microsoft -- visual_studio   Visual Studio Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-36758MISC microsoft -- 3d_viewer   3D Viewer Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36760MISC microsoft -- office   Microsoft Office Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-36765MISC microsoft -- excel   Microsoft Excel Information Disclosure Vulnerability 2023-09-12 7.8 CVE-2023-36766MISC microsoft -- 3d_builder   3D Builder Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36770MISC microsoft -- 3d_builder   3D Builder Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36771MISC microsoft -- 3d_builder   3D Builder Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36772MISC microsoft -- 3d_builder 3D Builder Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36773MISC microsoft -- .net   .NET Framework Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36788MISC microsoft -- visual_studio   Visual Studio Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36792MISC microsoft -- visual_studio   Visual Studio Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36793MISC microsoft -- visual_studio   Visual Studio Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36794MISC microsoft -- visual_studio   Visual Studio Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36796MISC microsoft -- multiple_products   Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-36802MISC microsoft -- multiple_products   Windows GDI Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-36804MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application is vulnerable to stack-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20818) 2023-09-12 7.8 CVE-2023-38070MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20824) 2023-09-12 7.8 CVE-2023-38071MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20825) 2023-09-12 7.8 CVE-2023-38072MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application contains a type confusion vulnerability while parsing WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20826) 2023-09-12 7.8 CVE-2023-38073MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application contains a type confusion vulnerability while parsing WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20840) 2023-09-12 7.8 CVE-2023-38074MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted WRL files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-20842) 2023-09-12 7.8 CVE-2023-38075MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21041) 2023-09-12 7.8 CVE-2023-38076MISC microsoft -- multiple_products   Windows Kernel Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38139MISC microsoft -- multiple_products   Windows Kernel Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38141MISC microsoft -- multiple_products   Windows Kernel Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38142MISC microsoft -- multiple_products   Windows Common Log File System Driver Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38143MISC microsoft -- multiple_products   Windows Common Log File System Driver Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38144MISC microsoft -- windows_11   Windows Kernel Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38150MISC microsoft -- multiple_products   Windows GDI Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38161MISC microsoft -- windows_defender_security_intelligence_updates Windows Defender Attack Surface Reduction Security Feature Bypass 2023-09-12 7.8 CVE-2023-38163MISC ibm -- qradar_wincollect IBM QRadar WinCollect Agent 10.0 through 10.1.6, when installed to run as ADMIN or SYSTEM, is vulnerable to a local escalation of privilege attack that a normal user could utilize to gain SYSTEM permissions. IBM X-Force ID: 262542. 2023-09-08 7.8 CVE-2023-38736MISCMISC raidenftpd -- raidenftpd Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server name field of the Step by step setup wizard. 2023-09-11 7.8 CVE-2023-39063MISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application uses weak outdated application signing mechanism. This could allow an attacker to tamper the application code. 2023-09-12 7.8 CVE-2023-40727MISC siemens -- parasolid   A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.253), Parasolid V35.1 (All versions < V35.1.184), Parasolid V36.0 (All versions < V36.0.142). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21263) 2023-09-12 7.8 CVE-2023-41032MISC siemens -- parasolid   A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.260), Parasolid V35.1 (All versions < V35.1.246), Parasolid V36.0 (All versions < V36.0.156). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21266) 2023-09-12 7.8 CVE-2023-41033MISC siemens -- parasolid   A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to memory corruption while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. 2023-09-12 7.8 CVE-2023-41846MISC apple -- macos The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13.2, iOS 15.7.8 and iPadOS 15.7.8, watchOS 9.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Big Sur 11.7.9, macOS Monterey 12.6.8. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1. 2023-09-12 7.8 CVE-2023-41990MISCMISCMISCMISCMISCMISCMISC hashicorp -- terraform Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously crafted Terraform configuration. This vulnerability is fixed in Terraform 1.5.7. 2023-09-08 7.8 CVE-2023-4782MISC microsoft -- dynamics_265_for_finance_and_operations   Dynamics Finance and Operations Cross-site Scripting Vulnerability 2023-09-12 7.6 CVE-2023-36800MISC dlink -- dir-619l_firmware An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing remote attackers to restart router via the M-search request ST parameter. No authentication required 2023-09-11 7.5 CVE-2020-19323MISCMISC ibm -- aspera_faspex IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather or persuade a naive user to supply sensitive information. IBM X-Force ID: 222567. 2023-09-08 7.5 CVE-2022-22401MISCMISC siemens -- multiple_products   The ANSI C OPC UA SDK contains an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate. 2023-09-12 7.5 CVE-2023-28831MISC microsoft -- azure_kubernetes_service   Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability 2023-09-12 7.5 CVE-2023-29332MISC ibm -- aspera_faspex IBM Aspera Faspex 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. IBM X-Force ID: 254268. 2023-09-08 7.5 CVE-2023-30995MISCMISC tsplus -- tsplus_remote_access An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML source code of the login page. 2023-09-11 7.5 CVE-2023-31069MISCMISC quboworld -- smart_plug_10a_firmware An issue was discovered in Qubo Smart Plug 10A version HSP02_01_01_14_SYSTEM-10A, allows attackers to cause a denial of service (DoS) via Wi-Fi deauthentication. 2023-09-11 7.5 CVE-2023-36161MISC aptosfoundation -- aptos CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json. 2023-09-08 7.5 CVE-2023-36184MISCMISCMISCMISC microsoft -- outlook   Microsoft Outlook Information Disclosure Vulnerability 2023-09-12 7.5 CVE-2023-36763MISC samsung -- exynos_9810_firmware An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos Mobile Processor, Automotive Processor, and Modem - Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123). In the Shannon MM Task, Missing validation of a NULL pointer can cause abnormal termination via a malformed NR MM packet. 2023-09-08 7.5 CVE-2023-37368MISC samsung -- exynos_980_firmware An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor (Exynos 980, Exynos 850, Exynos 2100, and Exynos W920). Improper handling of length parameter inconsistency can cause incorrect packet filtering. 2023-09-08 7.5 CVE-2023-37377MISC microsoft -- multiple_products   Windows TCP/IP Denial of Service Vulnerability 2023-09-12 7.5 CVE-2023-38149MISC microsoft -- multiple_products   DHCP Server Service Denial of Service Vulnerability 2023-09-12 7.5 CVE-2023-38162MISC adobe -- coldfusion   Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction. 2023-09-14 7.5 CVE-2023-38205MISC golang -- go Processing an incomplete post-handshake message for a QUIC connection can cause a panic. 2023-09-08 7.5 CVE-2023-39321MISCMISCMISCMISC golang -- go QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With fix, connections now consistently reject messages larger than 65KiB in size. 2023-09-08 7.5 CVE-2023-39322MISCMISCMISCMISC hexo -- hexo Hexo up to v7.0.0 (RC2) was discovered to contain an arbitrary file read vulnerability. 2023-09-08 7.5 CVE-2023-39584MISCMISCMISC buffalo -- terastation_nas_5410r_firmware An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest account function. 2023-09-08 7.5 CVE-2023-39620MISCMISC arm -- trusted_firmware-m In Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator, when the CryptoCell PSA Driver software Interface is selected, and the Authenticated Encryption with Associated Data Chacha20-Poly1305 algorithm is used, with the single-part verification function (defined during the build-time configuration phase) implemented with a dedicated function (i.e., not relying on usage of multipart functions), the buffer comparison during the verification of the authentication tag does not happen on the full 16 bytes but just on the first 4 bytes, thus leading to the possibility that unauthenticated payloads might be identified as authentic. This affects TF-Mv1.6.0, TF-Mv1.6.1, TF-Mv1.7.0, and TF-Mv1.8. 2023-09-08 7.5 CVE-2023-40271MISCMISC apple -- macos This issue was addressed with improved state management of S/MIME encrypted emails. This issue is fixed in macOS Monterey 12.6.8. A S/MIME encrypted email may be inadvertently sent unencrypted. 2023-09-12 7.5 CVE-2023-40440MISC jeecg -- jeecg_boot Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection. 2023-09-08 7.5 CVE-2023-41578MISC dairy_farm_shop_management_system -- dairy_farm_shop_management_system Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilities in the Login function via the Username and Password parameters. 2023-09-08 7.5 CVE-2023-41594MISCMISCMISC hutool -- hutool hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse(). 2023-09-08 7.5 CVE-2023-42278MISC mozilla -- multiple_products When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 7.5 CVE-2023-4583MISCMISCMISCMISC sourcecodester -- simple_membership_system A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been classified as critical. This affects an unknown part of the file club_edit_query.php. The manipulation of the argument club_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239253 was assigned to this vulnerability. 2023-09-08 7.5 CVE-2023-4844MISCMISCMISC sourcecodester -- simple_membership_system A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file delete_member.php. The manipulation of the argument mem_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239255. 2023-09-09 7.5 CVE-2023-4846MISCMISCMISC inure -- inure Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92. 2023-09-10 7.5 CVE-2023-4876MISCMISC inure -- inure Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92. 2023-09-10 7.5 CVE-2023-4877MISCMISC mintplexlabs -- anything-llm Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. 2023-09-12 7.5 CVE-2023-4898MISCMISC cecil -- cecil Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1. 2023-09-12 7.5 CVE-2023-4914MISCMISC adobe -- acrobat_dc Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.3 CVE-2019-16470MISC adobe -- acrobat_dc Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.3 CVE-2019-16471MISC microsoft -- multiple_products   Microsoft Word Remote Code Execution Vulnerability 2023-09-12 7.3 CVE-2023-36762MISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). User credentials are found in memory as plaintext. An attacker could perform a memory dump, and get access to credentials, and use it for impersonation. 2023-09-12 7.3 CVE-2023-40724MISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application stores sensitive application data in an external insecure storage. This could allow an attacker to alter content, leading to arbitrary code execution or denial-of-service condition. 2023-09-12 7.3 CVE-2023-40728MISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application lacks security control to prevent unencrypted communication without HTTPS. An attacker who managed to gain machine-in-the-middle position could manipulate or steal confidential information. 2023-09-12 7.3 CVE-2023-40729MISC sap -- businessobjects_business_intelligence_platform Due to insufficient file type validation, SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) - version 420, allows a report creator to upload files from local system into the report over the network. When uploading the image file, an authenticated attacker could intercept the request, modify the content type and the extension to read and modify sensitive data causing a high impact on confidentiality and integrity of the application. 2023-09-12 7.3 CVE-2023-42472MISCMISC microsoft -- azure_hdinsights Azure HDInsight Apache Ambari Elevation of Privilege Vulnerability 2023-09-12 7.2 CVE-2023-38156MISC zohocorp -- manageengine_admanager_plus Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine. 2023-09-11 7.2 CVE-2023-38743MISC insyde -- iscflashx64.sys An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and copy memory is mishandled. This could cause memory corruption or a system crash. 2023-09-08 7.1 CVE-2021-33834MISCMISC sap -- businessobjects SAP BusinessObjects Suite Installer - version 420, 430, allows an attacker within the network to create a directory under temporary directory and link it to a directory with operating system files. On successful exploitation the attacker can delete all the operating system files causing a limited impact on integrity and completely compromising the availability of the system. 2023-09-12 7.1 CVE-2023-40623MISCMISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application lacks sufficient authorization checks. This could allow an attacker to access confidential information, perform administrative functions, or lead to a denial-of-service condition. 2023-09-12 7.1 CVE-2023-40730MISC linux -- kernel A stack based out-of-bounds write flaw was found in the netfilter subsystem in the Linux kernel. If the expression length is a multiple of 4 (register size), the `nft_exthdr_eval` family of functions writes 4 NULL bytes past the end of the `regs` argument, leading to stack corruption and potential information disclosure or a denial of service. 2023-09-11 7.1 CVE-2023-4881MISCMISC n-able -- take_control BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PROGRAMDATA%GetSupportService_N-CentralPushUpdates, leading to arbitrary file deletion. 2023-09-11 7 CVE-2023-27470MISC microsoft -- windows_server_2012 Windows MSHTML Platform Security Feature Bypass Vulnerability 2023-09-12 7 CVE-2023-36805MISC microsoft -- azure_devops   Azure DevOps Server Remote Code Execution Vulnerability 2023-09-12 7 CVE-2023-38155MISC Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info solarwinds -- solarwinds_platform   The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges. 2023-09-13 6.8 CVE-2023-23840MISCMISC solarwinds -- solarwinds_platform   The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges. 2023-09-13 6.8 CVE-2023-23845MISCMISC microsoft -- visual_studio   Visual Studio Elevation of Privilege Vulnerability 2023-09-12 6.7 CVE-2023-36759MISC xpand-it -- write-back_manager Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and predictable symmetric encryption keys for license generation and validation. 2023-09-12 6.5 CVE-2023-27169MISCMISCMISCMISC microsoft -- .net/visual_studio   .NET Core and Visual Studio Denial of Service Vulnerability 2023-09-12 6.5 CVE-2023-36799MISC apache -- airflow Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a URL, which could lead to unmasking the secret configuration of the task that otherwise would be masked in the UI. Users are strongly advised to upgrade to version 2.7.1 or later which has removed the vulnerability. 2023-09-12 6.5 CVE-2023-40712MISCMISCMISC mozilla -- thunderbird When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4573MISCMISCMISCMISCMISCMISC mozilla -- thunderbird When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4574MISCMISCMISCMISCMISCMISC mozilla -- thunderbird When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4575MISCMISCMISCMISCMISCMISC mozilla -- thunderbird When `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to entering the function, which could potentially have led to an exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4577MISCMISCMISCMISC mozilla -- thunderbird When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling `convertToRuntimeErrorAndClear`. A path in the function could attempt to allocate memory when none is available which would have caused a newly created Out of Memory exception to be mishandled as a Syntax Error. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4578MISCMISCMISCMISC mozilla -- thunderbird Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4580MISCMISCMISCMISC mutt -- mutt Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2

Read more »

FBI Hacker Dropped Stolen Airbus Data on 9/11
In December 2022, KrebsOnSecurity broke the news that a cybercriminal using the handle "USDoD" had infiltrated the FBI's vetted information sharing network InfraGard, and was selling the contact information for all 80,000 members. The FBI responded by reverifying all InfraGard members and by seizing the cybercrime forum where the data was being sold. But on Sept. 11, 2023, USDoD resurfaced after a lengthy absence to leak sensitive employee data stolen from the aerospace giant Airbus, while promising to visit the same treatment on top U.S. defense contractors.

Read more »

Red Hat Security Advisory 2023-5071-01
- Libcap is a library for getting and setting POSIX.1e draft 15 capabilities. Issues addressed include integer overflow and memory leak vulnerabilities.

Read more »

Adobe, Apple, Google & Microsoft Patch 0-Day Bugs
Microsoft today issued software updates to fix at least five dozen security holes in Windows and supported software, including patches for two zero-day vulnerabilities that are already being exploited. Also, Adobe, Google Chrome and Apple iOS users may have their own zero-day patching to do.

Read more »

Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach
In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Since then, a steady trickle of six-figure cryptocurrency heists targeting security-conscious people throughout the tech industry has led some security experts to conclude that crooks likely have succeeded at cracking open some of the stolen LastPass vaults.

Read more »

Why is .US Being Used to Phish So Many of Us?
Domain names ending in “.US” — the top-level domain for the United States — are among the most prevalent in phishing scams, new research shows. This is noteworthy because .US is overseen by the U.S. government, which is frequently the target of phishing domains ending in .US. Also, .US domains are only supposed to be available to U.S. citizens and to those who can demonstrate that they have a physical presence in the United States.

Read more »

U.S. Hacks QakBot, Quietly Removes Botnet Infections
The U.S. government today announced a coordinated crackdown against QakBot, a complex malware family used by multiple cybercrime groups to lay the groundwork for ransomware infections. The international law enforcement operation involved seizing control over the botnet's online infrastructure, and quietly removing the Qakbot malware from tens of thousands of infected Microsoft Windows computer systems.

Read more »

Vulnerability Summary for the Week of August 21, 2023
  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info qemu -- qemu The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code on the host via execute a malformed program in the guest OS. 2023-08-22 10 CVE-2022-36648MISC c-ares -- c-ares Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c. 2023-08-22 9.8 CVE-2020-22217MISC flac_project -- flac Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder. 2023-08-22 9.8 CVE-2020-22219MISC leeco -- letv_x43_firmware An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN02C080080B04121S, allows attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). 2023-08-21 9.8 CVE-2020-28715MISCMISC gnu -- gnu_scientific_library A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_stats_quantile_from_sorted_data of the library may lead to unexpected application termination or arbitrary code execution. 2023-08-22 9.8 CVE-2020-35357MISCMISC libjpeg-turbo -- libjpeg-turbo libjpeg-turbo version 2.0.90 is vulnerable to a heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c. 2023-08-22 9.8 CVE-2021-29390MISC json-c_project -- json-c An issue was discovered in json-c through 0.15-20200726. A stack-buffer-overflow exists in the function parseit located in json_parse.c. It allows an attacker to cause code Execution. 2023-08-22 9.8 CVE-2021-32292MISC dpic_project -- dpic dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y 2023-08-22 9.8 CVE-2021-33388MISC dpic_project -- dpic dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421. 2023-08-22 9.8 CVE-2021-33390MISC terra-master -- terramaster_operating_system TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instantiation to the api.php?mobile/createRaid URI. (Shell metacharacters can be placed in raidtype because popen is used without any sanitization.) The credentials from CVE-2022-24990 exploitation can be used. 2023-08-20 9.8 CVE-2022-24989MISCMISCMISCMISCMISC pandorafms -- pandora_fms Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue ( unrestricted file upload ) to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prior versions on all platforms. 2023-08-22 9.8 CVE-2023-24517MISC danfoss -- ak-sm_800a_firmware Due to improper input validation, a remote attacker could execute arbitrary commands on the target system. 2023-08-21 9.8 CVE-2023-25915MISCMISC nodejs -- node.js The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js. 2023-08-21 9.8 CVE-2023-32002MISC elecom -- lan-w300n/rs_firmware Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allow an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. 2023-08-18 9.8 CVE-2023-32626MISCMISC e-excellence -- u-office_force   e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service. 2023-08-25 9.8 CVE-2023-32757MISC elecom -- lan-wh300andgpe_firmware Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions, LAN-W300N/P all versions, LAN-WH450N/GP all versions, LAN-WH300AN/DGP all versions, LAN-WH300N/DGP all versions, and LAN-WH300ANDGPE all versions. 2023-08-18 9.8 CVE-2023-35991MISCMISC langchain -- langchain An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter. 2023-08-22 9.8 CVE-2023-36281MISCMISC ivanti -- mobileiron_sentry A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration. 2023-08-21 9.8 CVE-2023-38035MISC ibm -- robotic_process_automation IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an LDAP directory. IBM X-Force ID: 262481. 2023-08-22 9.8 CVE-2023-38734MISCMISC jerryscript -- jerryscript Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scanner-until.c. 2023-08-21 9.8 CVE-2023-38961MISC elecom -- wrc-x1800gs-b_firmware Buffer overflow vulnerability in WRC-X1800GS-B v1.13 and earlier, WRC-X1800GSA-B v1.13 and earlier, and WRC-X1800GSH-B v1.13 and earlier allows an unauthenticated attacker to execute arbitrary code. 2023-08-18 9.8 CVE-2023-39454MISCMISC totolink -- x5000r_firmware TOTOLINK X5000R_V9.1.0cu.2089_B20211224 and X5000R_V9.1.0cu.2350_B20230313 were discovered to contain a remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function. 2023-08-21 9.8 CVE-2023-39617MISC totolink -- x5000r_firmware TOTOLINK X5000R B20210419 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg interface. 2023-08-21 9.8 CVE-2023-39618MISC gabrieleventuri -- pandasai An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function. 2023-08-21 9.8 CVE-2023-39660MISCMISC dlink -- dir-842_firmware D-Link DIR-842 fw_revA_1-02_eu_multi_20151008 was discovered to contain multiple buffer overflows in the fgets function via the acStack_120 and acStack_220 parameters. 2023-08-18 9.8 CVE-2023-39666MISCMISCMISC tenda -- ac6_firmware Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets. 2023-08-18 9.8 CVE-2023-39670MISCMISC dlink -- dir-880l_a1_firmware D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function FUN_0001be68. 2023-08-18 9.8 CVE-2023-39671MISCMISCMISC tenda -- wh450a_firmware Tenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets. 2023-08-18 9.8 CVE-2023-39672MISCMISC tenda -- ac15_firmware Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34(). 2023-08-18 9.8 CVE-2023-39673MISCMISC dlink -- dir-880l_a1_firmware D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function fgets. 2023-08-18 9.8 CVE-2023-39674MISCMISCMISC tp-link -- tl-wr940n_v2_firmware TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm. 2023-08-21 9.8 CVE-2023-39747MISC dlink -- dap-2660_firmware D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /adv_resource. This vulnerability is exploited via a crafted GET request. 2023-08-21 9.8 CVE-2023-39749MISCMISC dlink -- dap-2660_firmware D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the f_ipv6_enable parameter at /bsc_ipv6. This vulnerability is exploited via a crafted POST request. 2023-08-21 9.8 CVE-2023-39750MISCMISC tp-link -- tl-wr941nd_v6_firmware TP-Link TL-WR941ND V6 were discovered to contain a buffer overflow via the pSize parameter at /userRpm/PingIframeRpm. 2023-08-21 9.8 CVE-2023-39751MISC nvki -- intelligent_broadband_subscriber_gateway N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection vulnerability via the a_passwd parameter at /portal/user-register.php. 2023-08-21 9.8 CVE-2023-39807MISCMISC nvki -- intelligent_broadband_subscriber_gateway N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root password which allows attackers to login with root privileges via the SSH service. 2023-08-21 9.8 CVE-2023-39808MISCMISC nvki -- intelligent_broadband_subscriber_gateway N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a command injection vulnerability via the system_hostname parameter at /manage/network-basic.php. 2023-08-21 9.8 CVE-2023-39809MISCMISC elecom -- wrc-f1167acf_firmware OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions, WRC-1167GHBK2 all versions, WRC-1750GHBK2-I all versions, and WRC-1750GHBK-E all versions. 2023-08-18 9.8 CVE-2023-40069MISCMISC fobybus -- social-media-skeleton Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly manage the lifecycle of a user's session. Social media skeleton releases prior to 1.0.5 did not properly limit manage user session lifecycles. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this vulnerability. 2023-08-18 9.8 CVE-2023-40174MISCMISC puma -- puma Puma is a Ruby/Rack web server built for parallelism. Prior to versions 6.3.1 and 5.6.7, puma exhibited incorrect behavior when parsing chunked transfer encoding bodies and zero-length Content-Length headers in a way that allowed HTTP request smuggling. Severity of this issue is highly dependent on the nature of the web site using puma is. This could be caused by either incorrect parsing of trailing fields in chunked transfer encoding bodies or by parsing of blank/zero-length Content-Length headers. Both issues have been addressed and this vulnerability has been fixed in versions 6.3.1 and 5.6.7. Users are advised to upgrade. There are no known workarounds for this vulnerability. 2023-08-18 9.8 CVE-2023-40175MISCMISC devolutions -- remote_desktop_manager Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature. 2023-08-21 9.8 CVE-2023-4373MISC wordpress -- wordpress   The Donation Forms by Charitable plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.7.0.12 due to insufficient restriction on the 'update_core_user' function. This makes it possible for unauthenticated attackers to specify their user role by supplying the 'role' parameter during a registration. 2023-08-23 9.8 CVE-2023-4404MISCMISC credit_lite_project -- credit_lite A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4. Affected by this vulnerability is an unknown functionality of the file /portal/reports/account_statement of the component POST Request Handler. The manipulation of the argument date1/date2 leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-237511. 2023-08-18 9.8 CVE-2023-4407MISCMISCMISC totolink -- ex1200l_firmware A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023. This affects the function setDiagnosisCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237513 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 9.8 CVE-2023-4410MISCMISCMISC totolink -- ex1200l_firmware A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-237514 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 9.8 CVE-2023-4411MISCMISCMISC totolink -- ex1200l_firmware A vulnerability was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This issue affects the function setWanCfg. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237515. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 9.8 CVE-2023-4412MISCMISCMISC beijing_baichuo -- smart_s85f_management_platform A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237517 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 9.8 CVE-2023-4414MISCMISCMISC sourcecodester -- inventory_management_system A vulnerability, which was classified as critical, has been found in SourceCodester Inventory Management System 1.0. This issue affects some unknown processing of the file app/action/edit_update.php. The manipulation of the argument user_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237557 was assigned to this vulnerability. 2023-08-20 9.8 CVE-2023-4436MISCMISCMISC sourcecodester -- inventory_management_system A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/search_sell_paymen_report.php. The manipulation of the argument customer leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-237558 is the identifier assigned to this vulnerability. 2023-08-20 9.8 CVE-2023-4437MISCMISCMISC sourcecodester -- inventory_management_system A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file app/ajax/search_sales_report.php. The manipulation of the argument customer leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237559. 2023-08-20 9.8 CVE-2023-4438MISCMISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been classified as critical. This affects an unknown part of the file appointment.php. The manipulation of the argument sheduledate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237561 was assigned to this vulnerability. 2023-08-20 9.8 CVE-2023-4440MISCMISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /patient/appointment.php. The manipulation of the argument sheduledate leads to sql injection. The attack can be initiated remotely. VDB-237562 is the identifier assigned to this vulnerability. 2023-08-21 9.8 CVE-2023-4441MISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been rated as critical. This issue affects some unknown processing of the file vmpatientbooking-complete.php. The manipulation of the argument userid/apponum/scheduleid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237563. 2023-08-21 9.8 CVE-2023-4442MISCMISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0/5.0.12. Affected is an unknown function of the file vmdoctoredit-doc.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237564. 2023-08-21 9.8 CVE-2023-4443MISCMISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is an unknown functionality of the file vmpatientedit-user.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237565 was assigned to this vulnerability. 2023-08-21 9.8 CVE-2023-4444MISCMISCMISC mini -- mini-tmall A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20230811. Affected by this issue is some unknown functionality of the file product/1/1?test=1&test2=2&. The manipulation of the argument orderBy leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237566 is the identifier assigned to this vulnerability. 2023-08-21 9.8 CVE-2023-4445MISCMISCMISC openrapid -- rapidcms A vulnerability, which was classified as critical, was found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file template/default/category.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237567. 2023-08-21 9.8 CVE-2023-4446MISCMISCMISC openrapid -- rapidcms A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. This vulnerability affects unknown code of the file admin/article-chat.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237568. 2023-08-21 9.8 CVE-2023-4447MISCMISCMISC openrapid -- rapidcms A vulnerability was found in OpenRapid RapidCMS 1.3.1 and classified as critical. This issue affects some unknown processing of the file admin/run-movepass.php. The manipulation of the argument password/password2 leads to weak password recovery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 4dff387283060961c362d50105ff8da8ea40bcbe. It is recommended to apply a patch to fix this issue. The identifier VDB-237569 was assigned to this vulnerability. 2023-08-21 9.8 CVE-2023-4448MISCMISCMISCMISC jeecg -- jimureport A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-237571. 2023-08-21 9.8 CVE-2023-4450MISCMISCMISC typora -- typora DOM-based XSS in updater/update.html in Typora before 1.6.7 on Windows and Linux allows a crafted markdown file to run arbitrary JavaScript code in the context of Typora main window via loading typora://app/typemark/updater/update.html in tag. This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora. 2023-08-19 9.6 CVE-2023-2317MISCMISC marktext -- marktext DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScript code to run in the context of MarkText main window. This vulnerability can be exploited if a user copies text from a malicious webpage and paste it into MarkText. 2023-08-19 9.6 CVE-2023-2318MISCMISC luxsoft -- luxcal_web_calendar SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote unauthenticated attacker to execute arbitrary queries against the database and obtain or alter the information in it. 2023-08-21 9.1 CVE-2023-39939MISCMISCMISC hdfgroup -- hdf5 Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file. 2023-08-22 8.8 CVE-2020-18232MISC hdfgroup -- hdf5 Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file. 2023-08-22 8.8 CVE-2020-18494MISC gnu -- binutils An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service. 2023-08-22 8.8 CVE-2020-19726MISCMISC freeimage_project -- freeimage Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafted ico file. 2023-08-22 8.8 CVE-2020-24292MISC freeimage_project -- freeimage Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafted psd file. 2023-08-22 8.8 CVE-2020-24293MISC freeimage_project -- freeimage Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine() in FreeImage 3.19.0 [r1859] allows remote attackers to ru narbitrary code via use of crafted psd file. 2023-08-22 8.8 CVE-2020-24295MISC cesanta -- mongoose Buffer overflow in mg_resolve_from_hosts_file in Mongoose 6.18, when reading from a crafted hosts file. 2023-08-22 8.8 CVE-2020-25887MISC freeimage_project -- freeimage A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp. 2023-08-22 8.8 CVE-2021-40265MISC sass-lang -- libsass Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function. 2023-08-22 8.8 CVE-2022-26592MISC geomatika -- isigeo_web An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to execute commands. 2023-08-22 8.8 CVE-2023-23564MISCMISCMISC opensuse -- libeconf A stack overflow vulnerability exists in function econf_writeFile in file atlibeconf/lib/libeconf.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code. 2023-08-22 8.8 CVE-2023-30078MISCMISCMISC opensuse -- libeconf A stack overflow vulnerability exists in function read_file in atlibeconf/lib/getfilecontents.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code. 2023-08-22 8.8 CVE-2023-30079MISCMISCMISC microsoft -- edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2023-08-21 8.8 CVE-2023-36787MISC elecom -- lan-w451ngr_firmware LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service. 2023-08-18 8.8 CVE-2023-38132MISCMISC boidcms -- boidcms File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code via the GIF header component. 2023-08-21 8.8 CVE-2023-38836MISCMISC online_shopping_portal_project -- online_shopping_portal Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks. 2023-08-18 8.8 CVE-2023-38890MISC elecom -- wrc-1467ghbk-a_firmware Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console. 2023-08-18 8.8 CVE-2023-39445MISCMISC elecom -- wrc-600ghbk-a_firmware OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions. 2023-08-18 8.8 CVE-2023-39455MISCMISC elecom -- wrc-f1167acf_firmware OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allow an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. 2023-08-18 8.8 CVE-2023-39944MISCMISC elecom -- wab-s600-ps_firmware OS command injection vulnerability in WAB-S600-PS all versions, and WAB-S300 all versions allow an authenticated user to execute an arbitrary OS command by sending a specially crafted request. 2023-08-18 8.8 CVE-2023-40072MISCMISC fobybus -- social-media-skeleton Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. A Cross-site request forgery (CSRF) attack is a type of malicious attack whereby an attacker tricks a victim into performing an action on a website that they do not intend to do. This can be done by sending the victim a malicious link or by exploiting a vulnerability in the website. Prior to version 1.0.5 Social media skeleton did not properly restrict CSRF attacks. This has been addressed in version 1.0.5 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2023-08-18 8.8 CVE-2023-40172MISCMISC happysoft -- nbs&happysoftwechat A vulnerability, which was classified as critical, has been found in NBS&HappySoftWeChat 1.1.6. Affected by this issue is some unknown functionality. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237512. 2023-08-18 8.8 CVE-2023-4409MISCMISCMISC ruijienetworks -- rg-ew1200g_firmware A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237518 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 8.8 CVE-2023-4415MISCMISCMISC google -- chrome Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2023-08-23 8.8 CVE-2023-4429MISCMISCMISC google -- chrome Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2023-08-23 8.8 CVE-2023-4430MISCMISCMISC sourcecodester -- free_and_open_source_inventory_management_system A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php?page=member. The manipulation of the argument columns[0][data] leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-237570 is the identifier assigned to this vulnerability. 2023-08-21 8.8 CVE-2023-4449MISCMISCMISC spice-space -- spice-server An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product. There is a security vulnerablility that can restart KVMvirtual machine without any authorization. It is not yet known if there will be other other effects. 2023-08-22 8.6 CVE-2020-23793MISC microsoft -- microsoft_edge   Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2023-08-26 8.3 CVE-2023-36741MISC google -- chrome Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) 2023-08-23 8.1 CVE-2023-4428MISCMISCMISC google -- chrome Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) 2023-08-23 8.1 CVE-2023-4431MISCMISCMISC elecom -- lan-wh300n/re_firmware Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console. 2023-08-18 8 CVE-2023-38576MISCMISC exiv2 -- exiv2 Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file. 2023-08-22 7.8 CVE-2020-18831MISCMISC microsoft -- z3 There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempts to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution. 2023-08-22 7.8 CVE-2020-19725MISC freeimage_project -- freeimage Buffer Overflow vulnerability in function C_IStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. 2023-08-22 7.8 CVE-2020-21426MISC freeimage_project -- freeimage Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. 2023-08-22 7.8 CVE-2020-21427MISC freeimage_project -- freeimage Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. 2023-08-22 7.8 CVE-2020-21428MISC ogg_video_tools_project -- ogg_video_tools Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file. 2023-08-22 7.8 CVE-2020-21722MISCMISC ogg_video_tools_project -- ogg_video_tools Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file. 2023-08-22 7.8 CVE-2020-21724MISCMISC artifex -- ghostscript Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF document. 2023-08-22 7.8 CVE-2020-21890MISC gnu -- binutils Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c. 2023-08-22 7.8 CVE-2022-44840MISC gnu -- binutils Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c. 2023-08-22 7.8 CVE-2022-45703MISC 7-zip -- p7zip p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. 2023-08-22 7.8 CVE-2022-47069MISC gnu -- binutils An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads which may cause a denial of service or other unspecified impacts. 2023-08-22 7.8 CVE-2022-47673MISC gnu -- binutils An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c. 2023-08-22 7.8 CVE-2022-47695MISC gnu -- binutils An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function compare_symbols. 2023-08-22 7.8 CVE-2022-47696MISC berkaygediz -- o_blog SQL injection vulnerability in berkaygediz O_Blog v.1.0 allows a local attacker to escalate privileges via the secure_file_priv component. 2023-08-21 7.8 CVE-2023-38899MISCMISCMISCMISC openvpn -- openvpn Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet. 2023-08-22 7.5 CVE-2020-20813MISC postgresql -- postgresql An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. 2023-08-22 7.5 CVE-2020-21469MISC libssh2 -- libssh2 An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory. 2023-08-22 7.5 CVE-2020-22218MISC memcached -- memcached Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted meta command. 2023-08-22 7.5 CVE-2020-22570MISC freedesktop -- poppler Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input. 2023-08-22 7.5 CVE-2020-23804MISC realtek -- rtl8812au_firmware An issue was discovered in function nl80211_send_chandef in rtl8812au v5.6.4.2 allows attackers to cause a denial of service. 2023-08-22 7.5 CVE-2020-26652MISC linux -- kernel A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgacon_invert_region() function. 2023-08-22 7.5 CVE-2020-27418MISCMISC gnu -- binutils GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak. 2023-08-22 7.5 CVE-2020-35342MISC vsftpd_project -- vsftpd VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed. 2023-08-22 7.5 CVE-2021-30047MISC dpic_project -- dpic dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y. 2023-08-22 7.5 CVE-2021-32420MISCMISC dpic_project -- dpic dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y. 2023-08-22 7.5 CVE-2021-32421MISCMISC dpic_project -- dpic dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array. 2023-08-22 7.5 CVE-2021-32422MISCMISC imagemagick -- imagemagick An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c. 2023-08-22 7.5 CVE-2021-40211MISC gnu -- binutils Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37. 2023-08-22 7.5 CVE-2021-46174MISC python -- python The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service. 2023-08-22 7.5 CVE-2022-25024MISCMISCMISCMISC radare -- radare2 A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28068MISC radare -- radare2 A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28069MISC radare -- radare2 A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28070MISC radare -- radare2 A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28071MISC radare -- radare2 A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28072MISC radare -- radare2 A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28073MISC imagemagick -- imagemagick A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command. 2023-08-22 7.5 CVE-2022-48541MISC python -- python A use-after-free exists in Python through 3.9 via heappushpop in heapq. 2023-08-22 7.5 CVE-2022-48560MISC cryptopp -- crypto++ Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to memory outside of the allocation if the allocated memory was not 16-byte aligned. NOTE: this issue exists because the CVE-2019-14318 fix was intentionally removed for functionality reasons. 2023-08-22 7.5 CVE-2022-48570MISCMISC memcached -- memcached memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP. 2023-08-22 7.5 CVE-2022-48571MISC cisco -- secure_endpoint_private_cloud A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a logic error in the memory management of an affected device. An attacker could exploit this vulnerability by submitting a crafted AutoIt file to be scanned by ClamAV on the affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to restart unexpectedly, resulting in a DoS condition. 2023-08-18 7.5 CVE-2023-20212MISC danfoss -- ak-sm_800a_firmware Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information. 2023-08-21 7.5 CVE-2023-25913MISCMISC danfoss -- ak-sm_800a_firmware Due to improper restriction, attackers could retrieve and read system files of the underlying server through the XML interface. 2023-08-21 7.5 CVE-2023-25914MISCMISC e-excellence -- u-office_force   e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. An unauthenticated remote attacker can exploit this vulnerability to read arbitrary system files but can’t control system or disrupt service. 2023-08-25 7.5 CVE-2023-32756MISC wordpress -- wordpress The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a crafted URL, bypassing the protection offered. 2023-08-21 7.5 CVE-2023-3604MISC qt -- qt In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a situation in which a prefix is greater than a length. 2023-08-20 7.5 CVE-2023-37369MISCMISCMLIST kidus -- minimati SQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain sensitive information via theID parameter in the fulldelete.php component. 2023-08-18 7.5 CVE-2023-38839MISC weaviate -- weaviate An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function. 2023-08-21 7.5 CVE-2023-38976MISC ntsc-crt_project -- ntsc-crt NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmp_rw.c because a file's width, height, and BPP are not validated. NOTE: the vendor's perspective is "this main application was not intended to be a well-tested program, it's just something to demonstrate it works and for the user to see how to integrate it into their own programs." 2023-08-18 7.5 CVE-2023-39125MISC northgrid -- proself Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote unauthenticated attacker to log in to the product's Control Panel and perform an unintended operation. 2023-08-18 7.5 CVE-2023-39415MISCMISCMISC dlink -- dir-880l_a1_firmware D-Link DIR-880 A1_FW107WWb08 was discovered to contain a NULL pointer dereference in the function FUN_00010824. 2023-08-18 7.5 CVE-2023-39669MISCMISCMISC tp-link -- tl-wr940n_v2_firmware TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via the component /userRpm/AccessCtrlAccessRulesRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. 2023-08-21 7.5 CVE-2023-39745MISC tp-link -- tl-wr1041n_v2_firmware An issue in the component /userRpm/NetworkCfgRpm of TP-Link TL-WR1041N V2 allows attackers to cause a Denial of Service (DoS) via a crafted GET request. 2023-08-21 7.5 CVE-2023-39748MISC tenda -- ac8v4_firmware Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the save_virtualser_data function. 2023-08-21 7.5 CVE-2023-39784MISCMISC tenda -- ac8v4_firmware Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the set_qosMib_list function. 2023-08-21 7.5 CVE-2023-39785MISCMISC tenda -- ac8v4_firmware Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sscanf function. 2023-08-21 7.5 CVE-2023-39786MISCMISC fobybus -- social-media-skeleton Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Prior to version 1.0.5 Social media skeleton did not properly salt passwords leaving user passwords susceptible to cracking should an attacker gain access to hashed passwords. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this issue. 2023-08-18 7.5 CVE-2023-40173MISCMISCMISC veilid -- veilid Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service (out-of-memory abort) via crafted packet data, as exploited in the wild in August 2023. 2023-08-20 7.5 CVE-2023-40711MISC typora -- typora Improper path handling in Typora before 1.6.7 on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora. 2023-08-19 7.4 CVE-2023-2316MISCMISC northgrid -- proself Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands. 2023-08-18 7.2 CVE-2023-39416MISCMISCMISC mcafee -- safe_connect McAfee Safe Connect before 2.16.1.126 may allow an adversary with system privileges to achieve privilege escalation by loading arbitrary DLLs. 2023-08-21 7.2 CVE-2023-40352CONFIRMMISC oracle -- apache_xml_graphics_batik Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later. 2023-08-22 7.1 CVE-2022-44729MISCMISCMISCMISC obsidian -- obsidian Improper path handling in Obsidian desktop before 1.2.8 on Windows, Linux and macOS allows a crafted webpage to access local files and exfiltrate them to remote web servers via "app://local/". This vulnerability can be exploited if a user opens a malicious markdown file in Obsidian, or copies text from a malicious webpage and paste it into Obsidian. 2023-08-19 7.1 CVE-2023-2110MISCMISC unity -- parsec Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User" mode. The application intentionally launches DLLs from a user-owned directory but intended to always perform integrity verification of those DLLs. This affects Parsec Loader versions through 8. Parsec Loader 9 is a fixed version. 2023-08-20 7 CVE-2023-37250MISCMISCCONFIRM Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info phplist -- phplist An issue was discovered in phpList 3.6.12. Due to an access error, it was possible to manipulate and edit data of the system's super admin, allowing one to perform an account takeover of the user with super-admin permission. 2023-08-18 6.7 CVE-2023-27576MISC webassembly -- binaryen A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as. 2023-08-22 6.5 CVE-2020-18378MISC webassembly -- binaryen Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-opt. 2023-08-22 6.5 CVE-2020-18382MISC exempi_project -- exempi Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted audio file with ID3V2 frame. 2023-08-22 6.5 CVE-2020-18651MISCMISC exempi_project -- exempi Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file. 2023-08-22 6.5 CVE-2020-18652MISCMISC freedesktop -- poppler Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause a denial of service. 2023-08-22 6.5 CVE-2020-18839MISC gnu -- ncurses Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19185MISC gnu -- ncurses Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19186MISC gnu -- ncurses Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19187MISC gnu -- ncurses Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19188MISC gnu -- ncurses Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19189MISC gnu -- ncurses Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19190MISC freeimage_project -- freeimage Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a denial of service via crafted PFM file. 2023-08-22 6.5 CVE-2020-22524MISC libraw -- libraw Buffer Overflow vulnerability in LibRaw::stretch() function in librawsrcpostprocessingaspect_ratio.cpp. 2023-08-22 6.5 CVE-2020-22628MISC freeimage_project -- freeimage Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to cuase a denial of service via opening of crafted psd file. 2023-08-22 6.5 CVE-2020-24294MISC freeimage_project -- freeimage A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp. 2023-08-22 6.5 CVE-2021-40262MISC freeimage_project -- freeimage NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImage_CloneTag function inFreeImageTag.cpp. 2023-08-22 6.5 CVE-2021-40264MISC freeimage_project -- freeimage FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference. 2023-08-22 6.5 CVE-2021-40266MISC upx_project -- upx Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx function. 2023-08-22 6.5 CVE-2021-46179MISC freedesktop -- poppler An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream check before saving an embedded file. 2023-08-22 6.5 CVE-2022-37051MISCMISC freedesktop -- poppler A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject. 2023-08-22 6.5 CVE-2022-37052MISCMISC libtiff -- libtiff An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file. 2023-08-22 6.5 CVE-2022-40090MISCMISC python -- python read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format. 2023-08-22 6.5 CVE-2022-48564MISC geomatika -- isigeo_web An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to obtain sensitive database content via SQL Injection. 2023-08-22 6.5 CVE-2023-23563MISCMISCMISC pandorafms -- pandora_fms Server-Side Request Forgery (SSRF) vulnerability in API checker of Pandora FMS. Application does not have a check on the URL scheme used while retrieving API URL. Rather than validating the http/https scheme, the application allows other scheme such as file, which could allow a malicious user to fetch internal file content. This issue affects Pandora FMS v767 version and prior versions on all platforms. 2023-08-22 6.5 CVE-2023-24515MISC typora -- typora Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora. 2023-08-19 6.5 CVE-2023-2971MISC tp-link -- tapo An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message. 2023-08-22 6.5 CVE-2023-38906MISCMISC tp-link -- tapo An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the TSKEP authentication function. 2023-08-22 6.5 CVE-2023-38908MISCMISCMISC tp-link -- tapo An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the IV component in the AES128-CBC function. 2023-08-22 6.5 CVE-2023-38909MISCMISCMISC oracle -- apache_nifi Apache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS access in several Processors and Controller Services with connection URL validation that does not provide sufficient protection against crafted inputs. An authenticated and authorized user can bypass connection URL validation using custom input formatting. The resolution enhances connection URL validation and introduces validation for additional related properties. Upgrading to Apache NiFi 1.23.1 is the recommended mitigation. 2023-08-18 6.5 CVE-2023-40037MISCMISCMISC devolutions -- remote_desktop_manager Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in the duplication write process. 2023-08-21 6.5 CVE-2023-4417MISC wallabag -- wallabag Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3. 2023-08-21 6.5 CVE-2023-4455MISCMISC redhat -- openshift_logging A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached. 2023-08-21 6.5 CVE-2023-4456MISCMISC samsung -- sww-3400rw_firmware A reflected cross site scripting (XSS) vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bin/command.cgi 2023-08-22 6.1 CVE-2020-22181MISCMISC nagios -- nagios_xi Cross Site Scripting (XSS) in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request. 2023-08-22 6.1 CVE-2020-23992MISC cacti -- cacti Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php. 2023-08-22 6.1 CVE-2022-41444MISC cacti -- cacti A reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML in the "ref" parameter at auth_changepassword.php. 2023-08-22 6.1 CVE-2022-48547MISC pandorafms -- pandora_fms Cross-site Scripting (XSS) vulnerability in Visual Console Module of Pandora FMS could be used to hijack admin users session cookie values, carry out phishing attacks, etc. This issue affects Pandora FMS v767 version and prior versions on all platforms. 2023-08-22 6.1 CVE-2023-24514MISC wordpress -- wordpress Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in UX-themes Flatsome plugin

Read more »

Kroll Employee SIM-Swapped for Crypto Investor Data
Security consulting giant Kroll disclosed today that a SIM-swapping attack against one of its employees led to the theft of user information for multiple cryptocurrency platforms that are relying on Kroll services in their ongoing bankruptcy proceedings. And there are indications that fraudsters may already be exploiting the stolen data in phishing attacks. Cryptocurrency lender BlockFi and the now-collapsed crypto trading platform FTX each disclosed data breaches this week thanks to a recent SIM-swapping attack targeting an employee of Kroll -- the company handling both firms' bankruptcy restructuring.

Read more »

New low price: Clearance 16″ Apple MacBook Pro with 32-core M1 Max GPU for $1100 off original MSRP
B&H Photo has clearance 16″ M1 Max MacBook Pros, 10-core CPU/32-core GPU/1TB SSD/Space Gray or Silver, in stock today for $2399 including free 1-2 day delivery to most US addresses. Their price is $1100 off Apple’s original MSRP, and it’s the lowest price for this configuration among the retailers we track: The post first appeared on MacPrices.net.

Read more »

Switch to Red Pocket Mobile and get a new iPhone 15 for $300 off MSRP, no trade-in required
Red Pocket Mobile has new Apple iPhone 15 and 15 Pro models on sale for $300 off MSRP when you switch and open up a new line of service. Red Pocket Mobile is a nationwide service using all the major wireless carrier networks and offers plans starting at $10 per month. The post first appeared on MacPrices.net.

Read more »

Apple continues to offer a $350 discount on 27″ Studio Displays in their Certified Refurbished store
Apple has Studio Display models available in their Certified Refurbished store for up to $350 off MSRP. Each display comes with Apple’s one-year warranty, with new glass and a case, and ships free. The following models are available: The post first appeared on MacPrices.net.

Read more »

Apple continues to offer a $350 discount on 27″ Studio Displays in their Certified Refurbished store
Apple has Studio Display models available in their Certified Refurbished store for up to $350 off MSRP. Each display comes with Apple’s one-year warranty, with new glass and a case, and ships free. The following models are available: The post first appeared on MacPrices.net.

Read more »

Apple’s 16-inch MacBook Pros with M2 Pro CPUs are on sale today for $250 off MSRP
Amazon is offering a $250 discount on new Apple 16-inch M2 Pro MacBook Pros for a limited time. Their prices are currently the lowest available for these models from any Apple retailer: The post first appeared on MacPrices.net.

Read more »

Closeout Sale: Apple Watch Ultra with Green Alpine Loop for $699, $100 off MSRP
Adorama haș the Apple Watch Ultra with a Green Alpine Loop on clearance sale for $699 including free shipping. Their price is $100 off original MSRP, and it’s the lowest price we’ve seen for an Apple Watch Ultra. Available while supplies last! The post first appeared on MacPrices.net.

Read more »

Use this promo code at Verizon to take $150 off any Apple Watch Series 9 or Ultra 2, with service
... The post first appeared on MacPrices.net.

Read more »

Use this promo code at Verizon to take $150 off any Apple Watch Series 9 or Ultra 2, with service
... The post first appeared on MacPrices.net.

Read more »

New low price: Apple’s 10th generation iPads for $379, $70 off MSRP
B&H Photo has the 10th generation 64GB WiFi iPad (Blue and Silver colors) in stock and on sale for $379 for a limited time. B&H’s price is $70 off Apple’s MSRP, and it’s the lowest price available for one of these 10th-gen iPads from any of the Apple retailers we track... The post first appeared on MacPrices.net.

Read more »

14″ M1 Pro MacBook Pros still available at Apple for $1539, Certified Refurbished
Apple continues to stock Certified Refurbished standard-configuration 14″ MacBook Pros with M1 Pro CPUs for as much as $570 off original MSRP, with models available starting at $1539. Each model features a new outer case, shipping is free, and an Apple 1-year warranty is standard. These models are the cheapest 14-inch MacBook Pros currently available for sale at Apple: The post first appeared on MacPrices.net.

Read more »

Amazon is offering a $200 discount on Apple’s 14″ M2 Pro MacBook Pros
Amazon has Apple's 14-inch M2 Pro MacBook Pros in stock and on sale today for $200 off MSRP. Prices start at $1799 including free delivery. These are among the lowest prices currently available for new 14" MacBook Pros from Apple's retailers: The post first appeared on MacPrices.net.

Read more »

Students and teachers can save up to $400 on a new Mac or iPad at Apple Education, plus get a free $150 gift card through October 2nd
Apple’s Back to School Promotion for 2023 remains active until October 2nd. Education customers receive a free $150 Apple Gift Card with the purchase of a new MacBook Air, MacBook Pro, or 24-inch iMac. A free $100 Gift Card is included with Mac minis. Education customers receive a free $100 Apple Gift Card with the purchase of any new iPad Air or iPad Pro. Apple’s Education promotion is available to students, their parents, as well as faculty, staff, and homeschool teachers of all grade levels. Details are available on Apple’s Education site here... The post first appeared on MacPrices.net.

Read more »