iPhone 11 Pro review roundup: massive jump in camera quality...
The iPhone 11 and iPhone 11 Pro reviews are out. The top line appears to be that Apple is meeting its promises, with industry-leading cameras and a notable jump in battery life. Read on for some choice summaries from all the publications who got review units today … more… The post iPhone 11 Pro review roundup: massive jump in camera quality, battery life claims deliver appeared first on 9to5Mac.

Read more »

Wi-Fi 6 Is Ready for Prime Time
The Wi-Fi Alliance has released certification standards for Wi-Fi 6 devices, signaling that the technology is ready for prime time. The certification program assures buyers that products carrying the Wi-Fi Certified 6 label will deliver the best user experience with devices supporting IEEE 802.11ax. Wi-Fi 6 includes innovations to create faster network performance.

Read more »

Apple argues that $14.4B EU tax order ‘defies reality&...
Apple has begun its appeal against the European Union's ruling that required it to pay Ireland $14.4 billion in back taxes, saying the EU order was flawed.

Read more »

A sour note: Calling on Apple to stop doing keynotes
Deriding the iPhone is so 2018. What’s hot this year is deriding iPhone events.Writing for a local paper in the New York area called… [puts on reading glasses, squints]… The New York Times, Charlie Warzel called for Apple to stop doing product release keynotes. Because all our problems can be traced back to Apple keynotes.John Gruber has already responded to Warzel’s piece but suffice it to say Warzel seems to have written it under the principle, “let the light of my burning strawmen guide your way.”To read this article in full, please click here

Read more »

Polk Legend L100 review: Higher performance than you’d...
Polk's Legend L100 speakers deliver well-rounded sound with generally precise renderings.

Read more »

Justin Theroux will star in Apple TV+’s The Mosquito Coast
Apple is adapting Paul Theroux’s popular 1981 novel The Mosquito Coast into a new Apple TV+ series. The novel tells the story of an inventor who takes his American family to live in the Honduran jungle — with unexpected twists along the way. It was previously adapted into a Hollywood movie starring Harrison Ford. Apple’s […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Twitter now supports iOS 13 Dark Mode, here’s how to enabl...
The official Twitter app has been updated to support iOS 13’s new Dark Mode. Twitter has had a dark theme for a while, but it had to be toggled manually as iOS had no concept of theme. The app now integrates with iOS 13 changes so that you can set it to match the current system appearance. more… The post Twitter now supports iOS 13 Dark Mode, here’s how to enable it appeared first on 9to5Mac.

Read more »

24-Hour Deal: LG 34-inch UltraWide Thunderbolt 3 Monitor $64...
For 24 hours only, B&H Photo is slashing the price of the LG 34-inch UltraWide Thunderbolt 3 display (34BL850-W) to just $649.

Read more »

Apple pouring $1 billion into iPhone production in India
Apple is reportedly spending $1 billion on growing its production capacity in India. This is part of an ongoing move away from the additional costs from assembling almost all iPhones in China in the midst of a US/Chinese trade war. An unnamed source told The Times of India that “Apple will be investing $1 billion […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple suppliers said to invest $1B in India to meet worldwid...
Apple is reportedly on the verge of investing some $1 billion in India manufacturing assets through partners like Taiwan-based Foxconn, resurrecting rumors that the tech giant is looking to expand production capabilities beyond China.

Read more »

Satechi makes one of Apple’s favorite USB-C multiport adap...
The Apple Store has just two USB-C hubs with multiple types of ports, and one of them is made by Satechi. This offers USB-A and HDMI ports, as well as dual memory card readers, but so do many other accessories. What makes the Aluminum USB-C Multiport Pro Adapter so good that Apple picked it from […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Report: Apple and suppliers investing $1 billion in India to...
Apple is looking to ramp up its investment in India, according to a new report today. The Times of India reports that Apple will invest $1 billion in India through its “partners” as it looks to expand manufacturing beyond China. more… The post Report: Apple and suppliers investing $1 billion in India to ramp up manufacturing appeared first on 9to5Mac.

Read more »

Apple called ‘modern tape pirate’ in copyright l...
Apple and two music distribution companies with which it contracts were labeled as "modern tape pirates" in a copyright infringement lawsuit last week, with the plaintiff claiming iTunes currently sells at least 98 recordings without a proper license.

Read more »

Apple orders TV series starring Justin Theroux based on nove...
According to a report from Variety today, Apple has ordered a new original TV series based on the novel “The Mosquito Coast.” The new show will star Justin Theroux, the report says. more… The post Apple orders TV series starring Justin Theroux based on novel ‘The Mosquito Coast’ appeared first on 9to5Mac.

Read more »

More analysts and retailers report strong iPhone 11 demand, ...
Yesterday evening, Apple analyst Ming-Chi Kuo suggested that iPhone 11 demand was better than expected during the first 72 hours of pre-orders, particularly in China. Now, other analysts are corroborating Kuo’s claims as we inch closer to the iPhone 11 launch on Friday. more… The post More analysts and retailers report strong iPhone 11 demand, particularly in China appeared first on 9to5Mac.

Read more »

Early iPhone 11, iPhone 11 Pro benchmarks reveal 4GB of RAM ...
A cache of benchmark results from what appear to be early iPhone 11 and 11 Pro review units made their way online this week, revealing Apple will for the first time offer identical A-series chip configurations across both mid- and high-tier models.

Read more »

The Most Memorable Apple Ads Over the Years 1984-2019
Business Insider has collected inn one place all the most memorable Apple ads over the years. We looked at the ads that have aired in the years since [1984] and highlighted the most memorable one each year, from dancing iPod silhouettes to the “Get a Mac” ad campaign. This trip down memory lane is great to mull over as we’ve watched Apple grow and change.

Read more »

Awesome but affordable leather bands for Apple Watch Series ...
Your Apple Watch Series 5 is on the way, so it’s time to start building up your band collection. A smart leather strap is a must-have for almost everyone — and it doesn’t have to be expensive. We’ve rounded up some of the finest leather Apple Watch bands you can buy on a tight budget. There’s […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Last Apple Store with ‘The Studio’ relocating September ...
A little piece of Apple retail history is coming to an end in the service of progress. On September 28 at 10:00 a.m., Apple Fukuoka will move to an expansive new storefront within walking distance of the existing store. When the original location closes, it will take with it the last of a store feature Apple called The Studio. more… The post Last Apple Store with ‘The Studio’ relocating September 28 in Fukuoka, Japan appeared first on 9to5Mac.

Read more »

9to5Mac Daily: September 16, 2019 – Apple Watch titanium ...
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by OmniFocus: Try OmniFocus for iOS, the gold-standard professional to-do list manager with apps for the web, Mac, and iOS.

Read more »

Hands on with Apple Arcade in iOS 13
Apple Arcade launches on September 19 for everybody on iOS 13. AppleInsider goes hands on today with the activation process, game installation, and looks at several launch titles.

Read more »

Journalist & TMO Contributor Charlotte Henry (#2) – TM...
Charlotte is a London-based technical journalist. A self described media junkie, she writes about Apple—and now for the Mac Observer as well. She has also written for City A.M. (London’s daily business tabloid,) Computer Business Review, and the Independent on Sunday. Her new book is: Not Buying It. In this special edition of BGM, Charlotte chats about her reactions to Apple’s September 10 iPhone event. She noted how Apple is in a new balancing act, promoting hardware to sell services—and vice versa. Charlotte told me about how pleased she is with the new iPad and plans to buy one. Then we took a closer look at the value proposition comparing the iPhone Xr to the iPhone 11. Charlotte also filled us in on her experience watching the event in the Apple London flagship store.

Read more »

LG 5K monitor on sale for $769 today only
Amazon-owned Woot is having a flash sale on the popular LG 27MD5KA-B 27-inch UltraFine 5K display, with factory reconditioned units on sale for $769.99 ($529 off) today only. This high-res 5K monitor is a great option for Mac mini and MacBook Pro users thanks to its Thunderbolt 3 connectivity.

Read more »

Netflix Buys Streaming Rights to Seinfeld Starting 2021
Netflix has bought global streaming rights for Seinfeld. It will begin in 2021, when Hulu’s contract for streaming it expires. This is the first time Seinfeld will be available on Netflix and the first time that all 180 episodes will be on one service globally and in 4K. Seinfeldmade its streaming debut with the Hulu deal. Internationally, it is streaming on Amazon in a number of territories; that will all be consolidated on Netflix under the new deal. I watched a couple of reruns of Seinfeld on TV when I was younger, and I never got into it. Maybe I’ll give it another go on Netflix.

Read more »

Apple Arcade launches early to glowing reviews
The wait for Apple’s all-you-can-play gaming service is over for some people beta testing iOS 13. Apple Arcade isn’t supposed to open its virtual doors until Thursday, but many people who are beta testing the next version of Apple’s mobile operating system are already able to start playing. Get Apple Arcade now Anyone testing iOS […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple Arcade: a brief look at device storage requirements
Today Apple’s highly-anticipated Apple Arcade video game streaming service launched in limited fashion to iOS 13.1 beta testers ahead of Thursday’s launch. At this stage of the rollout, only 53 games are available on the service, with more surely to come soon. Apple says that eventually, over 100 games will be available on Apple Arcade. One of the key features of Apple Arcade is its ability to play games offline while on the go. But will your iOS device have enough storage to hold every Apple Arcade available for offline playback? The answer might surprise you. more… The post appeared first on 9to5Mac.

Read more »

After recent hacks, tighten up your iPhone security the easy...
This iPhone security post is presented by Dashlane. To say the least, Google Project Zero’s recent surprising report on the iPhone’s two-year vulnerability to website hacks dented Apple’s vaunted reputation for nearly bulletproof smartphone security. To say the most (or something like it), this latest news of iPhone vulnerability deeply alarmed all of us. Or […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Magnetic bands could mess with Apple Watch Series 5 compass
One of the best new features on Apple Watch Series 5 may not work well at all depending on which band you choose to wear with your watch. Like all compasses, the compass on the Apple Watch Series 5 is sensitive to magnetic interference. Apple warns customers on its website that some of its bands […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple features four games coming to Apple Arcade that some i...
Apple has given us a sneak peek at what new games will be available with its new play-all-you-want service Apple Arcade, and has opened up the service early for some iOS 13 beta testers.

Read more »

iPhone giveaway: Enter to win an iPhone 11 Pro Max with Spec...
AppleInsider readers this week can enter to win a 256GB unlocked iPhone 11 Pro Max, along with three Presidio protective cases, courtesy of Speck. This special iPhone giveaway is valued at over $1,365.

Read more »

Firefox and Chrome rolling out DNS over HTTPS (DoH) feature
Earlier this month, Mozilla announced that Firefox will begin enabling “DNS over HTTPS” (DoH) by default for USA-based users. Not intending to be left behind in the pursuit of safer browsing, Google has announced that it, too, will begin experimenting with the feature; Chrome 78 will validate Google’s implementation of DNS over HTTPS. What DNS […]

Read more »

Apple’s new iPhone 11, and more – Intego Mac Podcast, Ep...
Josh and Kirk celebrate episode 100 of the Intego Mac Podcast with special guest Dave Hamilton and discuss Apple's new iPhone, Apple Watch, iPad, Apple Arcade, and Apple TV+. And we discuss changes to Apple's AppleCare extended warranty and insurance plan. Check out the full show notes for links.

Read more »

NY Payroll Company Vanishes With $35 Million
MyPayrollHR, a now defunct cloud-based payroll processing firm based in upstate New York, abruptly ceased operations this past week after stiffing employees at thousands of companies. The ongoing debacle, which allegedly involves malfeasance on the part of the payroll company's CEO, resulted in countless people having money drained from their bank accounts and has left nearly $35 million worth of payroll and tax payments in legal limbo.

Read more »

Apple updates iPhone, Apple Watch, and iPad; gives info on A...
At its "By Innovation Only" event on September 10, Apple introduced its latest line of iPhone models, along with a new Apple Watch and a new iPad, and new details about its upcoming Apple Arcade and Apple TV+ services. Here's everything you need to know.

Read more »

Patch Tuesday, September 2019 Edition
Microsoft today issued security updates to plug some 80 security holes in various flavors of its Windows operating systems and related software. The software giant assigned a "critical" rating to almost a quarter of those vulnerabilities, meaning they could be used by malware or miscreants to hijack vulnerable systems with little or no interaction on the part of the user.

Read more »

Secret Service Investigates Breach at U.S. Govt IT Contracto...
The U.S. Secret Service is investigating a breach at a Virginia-based government technology contractor that saw access to several of its systems put up for sale in the cybercrime underground, KrebsOnSecurity has learned. The contractor claims the access being auctioned off was to old test systems that do not have direct connections to its government partner networks. In mid-August, a member of a popular Russian-language cybercrime forum offered to sell access to the internal network of a U.S. government IT contractor that does business with more than 20 federal agencies, including several branches of the military. The seller bragged that he had access to email correspondence and credentials needed to view databases of the client agencies, and set the opening price at six bitcoins (~USD $60,000).

Read more »

Vulnerability Summary for the Week of September 2, 2019
Original release date: September 9, 2019  The CISA Weekly Vulnerability Summary Bulletin is created using information from the NIST NVD. In some cases, the vulnerabilities in the Bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info alfresco -- alfresco An issue was discovered in Alfresco Community Edition versions 6.0 and lower. An unauthenticated, remote attacker could authenticate to Alfresco's Solr Web Admin Interface. The vulnerability is due to the presence of a default private key that is present in all default installations. An attacker could exploit this vulnerability by using the extracted private key and bundling it into a PKCS12. A successful exploit could allow the attacker to gain information about the target system (e.g., OS type, system file locations, Java version, Solr version, etc.) as well as the ability to launch further attacks by leveraging the access to Alfresco's Solr Web Admin Interface. 2019-09-05 7.5 CVE-2019-14222MISC alfresco -- alfresco An issue was discovered in Alfresco Community Edition 5.2 201707. By leveraging multiple components in the Alfresco Software applications, an exploit chain was observed that allows an attacker to achieve remote code execution on the victim machine. The attacker must upload malicious Solr configuration files and then receive a JMX connection from the victim, and serve a Java object that results in deserialization and code execution. 2019-09-05 9.0 CVE-2019-14224MISC artifex -- ghostscript A flaw was found in ghostscript, versions 9.x before 9.28, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands. 2019-09-06 7.5 CVE-2019-14813CONFIRMCONFIRM asus -- precision_touchpad AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \.AsusTP device, leading to a DoS or potentially privilege escalation via a crafted DeviceIoControl call. 2019-09-04 7.5 CVE-2019-10709MISCMISC broadcom -- ca_client_automation An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to execute arbitrary code. 2019-09-06 7.5 CVE-2019-13656MISC cisco -- jabber A vulnerability in Cisco Jabber Client Framework (JCF) for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper file level permissions on an affected device when it is running Cisco JCF for Mac Software. An attacker could exploit this vulnerability by authenticating to the affected device and executing arbitrary code or potentially modifying certain configuration files. A successful exploit could allow the attacker to execute arbitrary code or modify certain configuration files on the device using the privileges of the installed Cisco JCF for Mac Software. 2019-09-04 7.2 CVE-2019-12645CISCO cisco -- nx-os A vulnerability in the Network Time Protocol (NTP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to excessive use of system resources when the affected device is logging a drop action for received MODE_PRIVATE (Mode 7) NTP packets. An attacker could exploit this vulnerability by flooding the device with a steady stream of Mode 7 NTP packets. A successful exploit could allow the attacker to cause high CPU and memory usage on the affected device, which could cause internal system processes to restart or cause the affected device to unexpectedly reload. Note: The NTP feature is enabled by default. 2019-08-30 7.8 CVE-2019-1967CISCO cisco -- unified_computing_system A vulnerability in a specific CLI command within the local management (local-mgmt) context for Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to gain elevated privileges as the root user on an affected device. The vulnerability is due to extraneous subcommand options present for a specific CLI command within the local-mgmt context. An attacker could exploit this vulnerability by authenticating to an affected device, entering the local-mgmt context, and issuing a specific CLI command and submitting user input. A successful exploit could allow the attacker to execute arbitrary operating system commands as root on an affected device. The attacker would need to have valid user credentials for the device. 2019-08-30 7.2 CVE-2019-1966CISCO cisco -- webex_teams A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. This vulnerability is due to improper restrictions on software logging features used by the application on Windows operating systems. An attacker could exploit this vulnerability by convincing a targeted user to visit a website designed to submit malicious input to the affected application. A successful exploit could allow the attacker to cause the application to modify files and execute arbitrary commands on the system with the privileges of the targeted user. 2019-09-04 9.3 CVE-2019-1939CISCO egain -- chat eGain Chat 15.0.3 allows unrestricted file upload. 2019-09-04 7.5 CVE-2019-13976MISC eventum_project -- eventum Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2. 2019-09-05 7.5 CVE-2018-11569MISC exim -- exim Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash. 2019-09-06 10.0 CVE-2019-15846MISCMLISTMLISTMLISTMLISTMLISTMLISTMLISTMLISTMLISTFEDORAFEDORABUGTRAQGENTOOUBUNTUDEBIANCERT-VNMISC freebsd -- freebsd In FreeBSD 12.0-STABLE before r350648, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350650, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before 11.2-RELEASE-p13, the ICMPv6 input path incorrectly handles cases where an MLDv2 listener query packet is internally fragmented across multiple mbufs. A remote attacker may be able to cause an out-of-bounds read or write that may cause the kernel to attempt to access an unmapped page and subsequently panic. 2019-08-30 7.5 CVE-2019-5608CONFIRM freebsd -- freebsd In FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r350829, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, a missing check in the function to arrange data in a chain of mbufs could cause data returned not to be contiguous. Extra checks in the IPv6 stack could catch the error condition and trigger a kernel panic, leading to a remote denial of service. 2019-08-30 7.8 CVE-2019-5611MISCBUGTRAQCONFIRM freebsd -- freebsd In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r351265, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, the kernel driver for /dev/midistat implements a read handler that is not thread-safe. A multi-threaded program can exploit races in the handler to copy out kernel memory outside the boundaries of midistat's data buffer. 2019-08-30 7.8 CVE-2019-5612CONFIRM fusionpbx -- fusionpbx FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (which will insert the malicious command into the database). To trigger the command, one needs to call the services.php file via a GET request with the service id followed by the parameter a=start to execute the stored command. 2019-09-05 9.0 CVE-2019-15029MISCMISCMISC google -- android NVIDIA Tegra contains a vulnerability in BootRom where a user with kernel level privileges can write an arbitrary value to an arbitrary physical address 2019-09-06 7.2 CVE-2018-6240MISC google -- android In ihevcd_ref_list of ihevcd_ref_list.c in Android 10, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 9.3 CVE-2019-2108MISC google -- android In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 7.2 CVE-2019-2115MISC google -- android In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 7.2 CVE-2019-2174MISC google -- android In ihevcd_parse_buffering_period_sei of ihevcd_parse_headers.c in Android 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 9.3 CVE-2019-2176MISC google -- android In rw_t4t_sm_read_ndef of rw_t4t in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC service with no additional execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 7.2 CVE-2019-2178MISC google -- android In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 7.2 CVE-2019-9254MISC hanwha-security -- srn-472s_firmware An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before 2019-05-03. A system crash and reboot can be achieved by submitting a long username in excess of 117 characters. The username triggers a buffer overflow in the main process controlling operation of the DVR system, rendering services unavailable during the reboot operation. A repeated attack affects availability as long as the attacker has network access to the device. 2019-09-05 7.8 CVE-2019-12223MISCMISCMISC libreoffice -- libreoffice LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice install. Protection was added, to address CVE-2019-9852, to avoid a directory traversal attack where scripts in arbitrary locations on the file system could be executed by employing a URL encoding attack to defeat the path verification step. However this protection could be bypassed by taking advantage of a flaw in how LibreOffice assembled the final script URL location directly from components of the passed in path as opposed to solely from the sanitized output of the path verification step. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1. 2019-09-06 7.5 CVE-2019-9854CONFIRM libreoffice -- libreoffice LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1. 2019-09-06 7.5 CVE-2019-9855CONFIRM linux -- linux_kernel An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c. 2019-09-04 7.2 CVE-2017-18595MISCMISC linux -- linux_kernel A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped. 2019-09-04 7.5 CVE-2019-15902MISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service. 2019-09-04 7.8 CVE-2019-15916MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c. 2019-09-04 7.2 CVE-2019-15917MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.10. SMB2_negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21. 2019-09-04 7.2 CVE-2019-15918MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.10. SMB2_write in fs/cifs/smb2pdu.c has a use-after-free. 2019-09-04 7.2 CVE-2019-15919MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.10. SMB2_read in fs/cifs/smb2pdu.c has a use-after-free. NOTE: this was not fixed correctly in 5.0.10; see the 5.0.11 ChangeLog, which documents a memory leak. 2019-09-04 7.2 CVE-2019-15920MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.2.3. An out of bounds access exists in the function hclge_tm_schd_mode_vnet_base_cfg in the file drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c. 2019-09-04 7.2 CVE-2019-15925MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx in the file drivers/net/wireless/ath/ath6kl/wmi.c. 2019-09-04 9.4 CVE-2019-15926MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the function build_audio_procunit in the file sound/usb/mixer.c. 2019-09-04 7.2 CVE-2019-15927MISCMISC nagios -- nagios_xi Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The getprofile.sh script, invoked by downloading a system profile (profile.php?cmd=download), is executed as root via a passwordless sudo entry; the script executes check_plugin, which is owned by the nagios user. A user logged into Nagios XI with permissions to modify plugins, or the nagios user on the server, can modify the check_plugin executable and insert malicious commands to execute as root. 2019-09-05 9.0 CVE-2019-15949MISC opensc_project -- opensc OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c. 2019-09-05 7.5 CVE-2019-15945MISCMISC opensc_project -- opensc OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c. 2019-09-05 7.5 CVE-2019-15946MISCMISC pengutronix -- barebox Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly used for a memcpy. 2019-09-05 7.5 CVE-2019-15937MISC pengutronix -- barebox Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length field is directly used for a memcpy. 2019-09-05 7.5 CVE-2019-15938MISC restaurant_reservations_project -- restaurant_reservations The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for nd_rst_import_settings_php_function authentication. 2019-08-30 7.5 CVE-2019-15819MISCMISCMISC sonatype -- nexus_repository_manager The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability. 2019-09-03 9.0 CVE-2019-5475MISC symphonyextensions -- rich_text_formatter The Rich Text Formatter (Redactor) extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in content.fileupload.php and content.imageupload.php. 2019-09-05 7.5 CVE-2019-13187MISCMISC totaljs -- total.js_cms An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution (RCE) on the remote server by creating a malicious widget with a special tag containing JavaScript code that will be evaluated server side. In the process of evaluating the tag by the back-end, it is possible to escape the sandbox object by using the following payload: global.process.mainModule.require(child_process).exec(RCE); 2019-09-05 9.0 CVE-2019-15954MISCMISC varnish-cache -- varnish An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests. The assert will cause an automatic restart with a clean cache, which makes it a Denial of Service attack. 2019-09-03 7.8 CVE-2019-15892BUGTRAQMISCDEBIAN wpbrigade -- loginpress The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings. 2019-09-03 7.5 CVE-2019-15872MISCMISC wpserveur -- wps_child_theme_generator The wps-child-theme-generator plugin before 1.2 for WordPress has classes/helpers.php directory traversal. 2019-08-30 7.5 CVE-2019-15822MISCMISCMISC wpserveur -- wps_hide_login The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass. 2019-08-30 7.5 CVE-2019-15823MISCMISCMISC wpserveur -- wps_hide_login The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass. 2019-08-30 7.5 CVE-2019-15824MISCMISCMISC wpserveur -- wps_hide_login The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass. 2019-08-30 7.5 CVE-2019-15825MISCMISCMISC wpserveur -- wps_hide_login The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field. 2019-08-30 7.5 CVE-2019-15826MISCMISCMISC xiaoyi -- yi_m1_mirrorless_camera_firmware An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy (BLE) authentication module of YI M1 Mirrorless Camera V3.2-cn. An attacker can send a set of BLE commands to trigger this vulnerability, resulting in sensitive data leakage (e.g., personal photos). An attacker can also control the camera to record or take a picture after bypassing authentication. 2019-09-06 8.3 CVE-2019-13953MISC Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info 10web -- photo_gallery The photo-gallery plugin before 1.2.42 for WordPress has CSRF. 2019-08-30 6.8 CVE-2015-9380MISCMISCMISC abus -- secvest_wireless_alarm_system_fuaa50000_firmware An issue was discovered on ABUS Secvest FUAA50000 3.01.01 devices. Due to an insufficient implementation of jamming detection, an attacker is able to suppress correctly received RF messages sent between wireless peripheral components, e.g., wireless detectors or remote controls, and the ABUS Secvest alarm central. An attacker is able to perform a "reactive jamming" attack. The reactive jamming simply detects the start of a RF message sent by a component of the ABUS Secvest wireless alarm system, for instance a wireless motion detector (FUBW50000) or a remote control (FUBE50014 or FUBE50015), and overlays it with random data before the original RF message ends. Thereby, the receiver (alarm central) is not able to properly decode the original transmitted signal. This enables an attacker to suppress correctly received RF messages of the wireless alarm system in an unauthorized manner, for instance status messages sent by a detector indicating an intrusion. 2019-09-03 5.0 CVE-2019-14261MISCFULLDISCBUGTRAQMISC airbrake -- airbrake_ruby The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklist_keys configuration option and consequently may disclose passwords to unauthorized actors. This is fixed in 4.2.4 (also, 4.2.2 and earlier are unaffected). 2019-09-06 5.0 CVE-2019-16060MISC apache -- commons_compress The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress. 2019-08-30 5.0 CVE-2019-12402MISC artifex -- ghostscript A flaw was found in, ghostscript versions prior to 9.28, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands. 2019-09-03 6.8 CVE-2019-14811CONFIRM bitcoin -- bitcoin-qt In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via a grep "6231 0500" command. 2019-09-05 5.0 CVE-2019-15947MISCMISC blynk -- blynk-library An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability. 2019-09-05 5.0 CVE-2019-5065MISC bold-themes -- bold_page_builder The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data. 2019-08-30 5.0 CVE-2019-15821MISCMISCMISC canon -- print The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the administrator web interface and WPA2-PSK key. 2019-09-05 4.3 CVE-2019-14339MISCMISC cisco -- content_security_management_appliance A vulnerability in the authorization module of Cisco Content Security Management Appliance (SMA) Software could allow an authenticated, remote attacker to gain out-of-scope access to email. The vulnerability exists because the affected software does not correctly implement role permission controls. An attacker could exploit this vulnerability by using a custom role with specific permissions. A successful exploit could allow the attacker to access the spam quarantine of other users. 2019-09-04 4.0 CVE-2019-12635CISCO cisco -- finesse A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to access the system and perform unauthorized actions. 2019-09-04 5.0 CVE-2019-12632CISCO cisco -- identity_services_engine A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability exists because the web-based management interface of the affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. 2019-09-04 4.3 CVE-2019-12644CISCO cisco -- network_level_service A vulnerability in the “plug-and-play” services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper access restrictions on the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access running configuration information about devices managed by the IND, including administrative credentials. 2019-09-04 5.0 CVE-2019-1976CISCO cisco -- nx-os A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API on an affected device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition in the NX-API service; however, the NX-OS device itself would still be available and passing network traffic. Note: The NX-API feature is disabled by default. 2019-08-30 5.0 CVE-2019-1968CISCO cisco -- nx-os A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) Access Control List (ACL) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to perform SNMP polling of an affected device, even if it is configured to deny SNMP traffic. The vulnerability is due to an incorrect length check when the configured ACL name is the maximum length, which is 32 ASCII characters. An attacker could exploit this vulnerability by performing SNMP polling of an affected device. A successful exploit could allow the attacker to perform SNMP polling that should have been denied. The attacker has no control of the configuration of the SNMP ACL name. 2019-08-30 5.0 CVE-2019-1969CISCO cisco -- nx-os A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an endpoint device in certain circumstances. The vulnerability is due to improper endpoint learning when packets are received on a specific port from outside the ACI fabric and destined to an endpoint located on a border leaf when Disable Remote Endpoint Learning has been enabled. This can result in a Remote (XR) entry being created for the impacted endpoint that will become stale if the endpoint migrates to a different port or leaf switch. This results in traffic not reaching the impacted endpoint until the Remote entry can be relearned by another mechanism. 2019-08-30 4.3 CVE-2019-1977CISCO cisco -- unified_contact_center_express A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper validation of user-supplied input on the affected system. An attacker could exploit this vulnerability by sending the user of the web application a crafted request. If the request is processed, the attacker could access the system and perform unauthorized actions. 2019-09-04 5.0 CVE-2019-12633CISCO convertplug -- convertplus The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation (with the none role) via a request for variants. 2019-09-03 5.0 CVE-2019-15863MISC custom_404_pro_project -- custom_404_pro The custom-404-pro plugin before 3.2.8 for WordPress has reflected XSS, a different vulnerability than CVE-2019-14789. 2019-08-30 4.3 CVE-2019-15838MISCMISC dell -- emc_enterprise_copy_data_management Dell EMC Enterprise Copy Data Management (eCDM) versions 1.0, 1.1, 2.0, 2.1, and 3.0 contain a certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim?s data in transit. 2019-09-03 5.8 CVE-2019-3751MISC dell -- emc_unity_operating_environment Dell EMC Unity Operating Environment versions prior to 5.0.0.0.5.116, Dell EMC UnityVSA versions prior to 5.0.0.0.5.116 and Dell EMC VNXe3200 versions prior to 3.1.10.9946299 contain a reflected cross-site scripting vulnerability on the cas/logout page. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or Java Script code to Unisphere, which is then reflected back to the victim and executed by the web browser. 2019-09-03 4.3 CVE-2019-3754CONFIRM egain -- chat eGain Chat 15.0.3 allows HTML Injection. 2019-09-04 4.3 CVE-2019-13975MISC eng -- knowage In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application. 2019-09-05 5.0 CVE-2019-13188MISC eng -- knowage In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page. 2019-09-05 5.0 CVE-2019-13190MISC epignosishq -- efront_lms A code execution vulnerability exists in Epignosis eFront LMS v5.2.12. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability. 2019-09-05 6.5 CVE-2019-5069MISC epignosishq -- efront_lms An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier. Specially crafted web request to login page can cause SQL injections, resulting in data compromise. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required. 2019-09-05 6.4 CVE-2019-5070MISC espressif -- esp-idf The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key (PMK) after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames via a rogue access point. 2019-09-04 4.8 CVE-2019-12587MISCMISCMISC estrongs -- es_file_explorer_file_manager The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage. 2019-09-05 5.0 CVE-2019-11380MISC estsoft -- alsee A memory corruption vulnerability exists in the .PSD parsing functionality of ALSee v5.3 ~ v8.39. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in code execution. By persuading a victim to open a specially-crafted .PSD file, an attacker could execute arbitrary code. 2019-08-30 6.8 CVE-2019-12810CONFIRM ezautomation -- ez_plc_editor An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of the EZ PLC Editor Versions 1.8.41 and prior. 2019-09-04 6.8 CVE-2019-13522MISC ezautomation -- ez_touch_editor An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the EZ Touch Editor Versions 2.1.0 and prior. 2019-09-04 6.8 CVE-2019-13518MISC f5 -- big-ip_access_policy_manager On BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST users with guest privileges may be able to escalate their privileges and run commands with admin privileges. 2019-09-04 6.5 CVE-2019-6646MISC facebook -- facebook_for_woocommerce The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF. 2019-08-30 6.8 CVE-2019-15840MISC facebook -- facebook_for_woocommerce The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajax_woo_infobanner_post_click, ajax_woo_infobanner_post_xout, or ajax_fb_toggle_visibility. 2019-08-30 6.8 CVE-2019-15841MISC ffmpeg -- ffmpeg FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer. 2019-09-05 6.8 CVE-2019-15942MISC freebsd -- freebsd In FreeBSD 12.0-STABLE before r350619, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350619, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before 11.2-RELEASE-p13, the bhyve e1000 device emulation used a guest-provided value to determine the size of the on-stack buffer without validation when TCP segmentation offload is requested for a transmitted packet. A misbehaving bhyve guest could overwrite memory in the bhyve process on the host. 2019-08-30 6.4 CVE-2019-5609CONFIRM freebsd -- freebsd In FreeBSD 12.0-STABLE before r350637, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350638, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before 11.2-RELEASE-p13, the bsnmp library is not properly validating the submitted length from a type-length-value encoding. A remote user could cause an out-of-bounds read or trigger a crash of the software such as bsnmpd resulting in a denial of service. 2019-08-30 5.0 CVE-2019-5610MISCBUGTRAQCONFIRM freedesktop -- poppler Poppler before 0.76.0 has an integer overflow in Parser::makeStream in Parser.cc. 2019-09-05 6.8 CVE-2018-21009MISC freetype -- freetype FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. 2019-09-03 6.8 CVE-2015-9381MISCMLISTMISC freetype -- freetype FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation. 2019-09-03 4.3 CVE-2015-9382MISCMLISTMISC freetype -- freetype FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c. 2019-09-03 4.3 CVE-2015-9383MISCMLISTMISC glyphandcog -- xpdfreader Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from November 2002. 2019-09-03 4.3 CVE-2019-15860MISC gnu -- gcc The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same. 2019-09-02 5.0 CVE-2019-15847MISC google -- android In execTransact of Binder.java in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible local execution of arbitrary code in a privileged process due to a memory overwrite. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 4.6 CVE-2019-2123MISC google -- android In checkAccess of SliceManagerService.java in Android 9, there is a possible permissions check bypass due to incorrect order of arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 4.4 CVE-2019-2175MISC google -- android In isPreferred of HidProfile.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible device type confusion due to a permissions bypass. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 6.8 CVE-2019-2177MISC google -- android In NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 4.3 CVE-2019-2179MISC google -- android In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 6.9 CVE-2019-2181MISC grafana -- grafana In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana. 2019-09-03 5.0 CVE-2019-15043CONFIRMMISCMISCCONFIRMFEDORAFEDORA ibm -- intelligent_operations_center IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 - V5.1.0.6, and IBM Water Operations for Waternamics V5.1.0 - V5.2.1.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 161201. 2019-09-05 5.0 CVE-2019-4321CONFIRMXF ibm -- jazz_for_service_management IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host header during caching. By sending a specially crafted HTTP GET request, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-force ID: 158976. 2019-09-05 4.3 CVE-2019-4186XFCONFIRM instagram-php-api_project -- instagram-php-api cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/success.php error_description parameter. 2019-09-04 4.3 CVE-2019-14470MISCMISCMISCEXPLOIT-DB jetbrains -- teamcity JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it possible to send an arbitrary HTTP request to a TeamCity server under the name of the currently logged-in user. 2019-09-05 4.3 CVE-2019-15848CONFIRM knowage-suite -- knowage In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes. 2019-09-05 4.0 CVE-2019-13349MISC knowage-suite -- knowage In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page. 2019-09-05 5.0 CVE-2019-14278MISC lenovo -- xclarity_administrator An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 that could allow information disclosure. 2019-09-03 5.0 CVE-2019-6179MISC lenovo -- xclarity_administrator A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the user's web browser. The JavaScript code is not executed on LXCA itself. 2019-09-03 4.3 CVE-2019-6181MISC lenovo -- xclarity_administrator A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formula is not executed on LXCA itself. 2019-09-03 4.0 CVE-2019-6182MISC libexpat_project -- libexpat In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read. 2019-09-04 5.0 CVE-2019-15903MISCMISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c. 2019-09-04 4.9 CVE-2018-21008MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.6. There is a memory leak issue when idr_alloc() fails in genl_register_family() in net/netlink/genetlink.c. 2019-09-04 4.6 CVE-2019-15921MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a pf data structure if alloc_disk fails in drivers/block/paride/pf.c. 2019-09-04 4.9 CVE-2019-15922MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if alloc_disk fails in drivers/block/paride/pf.c. 2019-09-04 4.9 CVE-2019-15923MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dereference because there is no -ENOMEM upon an alloc_workqueue failure. 2019-09-04 4.9 CVE-2019-15924MISCMISC login_or_logout_menu_item_project -- login_or_logout_menu_item The login-or-logout-menu-item plugin before 1.2.0 for WordPress has no requirement for lolmi_save_settings authentication. 2019-08-30 5.8 CVE-2019-15820MISCMISCMISC memcached -- memcached memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str in memcached.c. 2019-08-30 5.0 CVE-2019-15026CONFIRMCONFIRMMLIST mongodb -- mongodb An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB server versions less than 4.0.11, 3.6.14, and 3.4.22 to run attacker defined code as the user running the utility. 2019-08-30 6.8 CVE-2019-2390CONFIRM mulesoft -- api_gateway Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gateway released before August 1 2019 allow remote attackers to read files accessible to the Mule process. 2019-08-30 5.0 CVE-2019-15630MISC nagios -- log_server Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page. 2019-09-03 4.3 CVE-2019-15898MISCMISC naver -- cloud_explorer NDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle. 2019-09-03 5.0 CVE-2019-13156CONFIRM onkyo -- tx-nr686_firmware Directory traversal vulnerability on ONKYO TX-NR686 1030-5000-1040-0010 A/V Receiver devices allows remote attackers to read arbitrary files via a .. (dot dot) and %2f to the default URI. 2019-08-30 5.0 CVE-2019-6113MISC opencv -- opencv An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp. 2019-09-05 5.0 CVE-2019-15939MISCMISC profilegrid -- profilegrid The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pm_template_preview&html=

Read more »

Twitter and Deepfakes – Intego Mac Podcast, Episode 99
This week on the Intego Mac Podcast, episode 99… Twitter's boss had his Twitter account hacked, and Twitter has disabled a feature from its earliest days that let you tweet via SMS. Firefox's new update, version 69, blocks trackers and cryptocurrency miners by default. And we take a look at audio and video deepfakes. Check out […]

Read more »

‘Satori’ IoT Botnet Operator Pleads Guilty
A 21-year-old man from Vancouver, Wash. has pleaded guilty to federal hacking charges tied to his role in operating the "Satori" botnet, a crime machine powered by hacked Internet of Things (IoT) devices that was built to conduct massive denial-of-service attacks targeting Internet service providers, online gaming platforms and Web hosting companies.

Read more »

Spam In your Calendar? Here’s What to Do.
Many spam trends are cyclical: Spammers tend to switch tactics when one method of hijacking your time and attention stops working. But periodically they circle back to old tricks, and few spam trends are as perennial as calendar spam, in which invitations to click on dodgy links show up unbidden in your digital calendar application from Apple, Google and Microsoft. Here's a brief primer on what you can do about it.

Read more »

Everyone is listening! – Intego Mac Podcast, Episode 98
The Intego Mac Podcast episode 98 is now available! There's a recurring theme in security and privacy news lately, and that is the fact that everyone is listening. If you use Alexa, OK Google, or Siri, the companies behind these services listen to some of your requests (and sometimes when you don't explicitly ask their […]

Read more »

Save $150-$250 on 10.2″ WiFi + Cellular iPads at Verizon w...
Verizon is offering $150-$250 discounts on Apple’s new 10.2″ WiFi + Cellular iPad with service. Buy the iPad itself and save $150. Save $250 on the purchase of an iPad along with an iPhone. The fine print: “$150 promo credit requires device payment purchase on iPad; $250 promo credit requires device payment purchase on both iPad and iPhone; Up to $1,229.99 purchase required. Less $150 instant promo credit and $100 promo credit applied to account over 24 mos on device payment; promo credit ends if eligibility requirements are no longer met; 0% APR.” This deal is live at → Read More...

Read more »

Apple continues to offer 13″ 2.3GHz Dual-Core MacBook Pros...
Apple has Certified Refurbished 2017 13″ 2.3GHz Dual-Core non-Touch Bar MacBook Pros available starting at $1019. An standard Apple one-year warranty is included with each model, outer cases are new, and shipping is free: – 13″ 2.3GHz/128GB Space Gray MacBook Pro (MPXQ2LL/A): $1019 original MSRP $1299 – 13″ 2.3GHz/256GB Space Gray MacBook Pro (MPXT2LL/A): $1189 original MSRP $1499 – 13″ 2.3GHz/128GB Silver MacBook Pro (MPXR2LL/A): $1019 original MSRP $1299 – 13″ 2.3GHz/256GB Silver MacBook Pro (MPXU2LL/A): $1189 original MSRP $1499 Keep an eye on our 13″ MacBook Pro Price Tracker for the latest prices → Read More...

Read more »

Apple restocks 2018 MacBook Airs, Certified Refurbished, sta...
Apple has restocked Certified Refurbished 2018 13″ MacBook Airs starting at only $849. Each MacBook features a new outer case, comes with a standard Apple one-year warranty, and is shipped free. The following configurations are available: – 13″ 1.6GHz/128GB MacBook Air Space Gray: $849 original MSRP $1199 – 13″ 1.6GHz/128GB MacBook Air Silver: $849 original MSRP $1199 – 13″ 1.6GHz/128GB MacBook Air Gold: $849 original MSRP $1199 – 13″ 1.6GHz/256GB MacBook Air Space Gray: $1019 original MSRP $1399 – 13″ 1.6GHz/256GB MacBook Air Silver: $1019 original MSRP $1399 – 13″ 1.6GHz/256GB MacBook Air Gold: $1019 original MSRP $1399 Apple’s refurbished prices are the lowest available for 2018 13″ MacBook Airs anywhere. For the latest sales & prices, see our 13″ MacBook Air Price Tracker, → Read More...

Read more »

Sunday Sale! 2019 27″ 5K 6-Core iMacs for $200-$250 off Ap...
B&H Photo has the new 2019 27″ 5K 6-Core iMacs on stock today and on sale for up to $250 off Apple’s MSRP. Overnight shipping is free to many locations in the US. These are the same iMacs sold by Apple in their retail and online stores: – 27″ 3.0GHz 5K iMac: $1599 $200 off MSRP – 27″ 3.1GHz 5K iMac: $1749 $250 off MSRP – 27″ 3.7GHz 5K iMac: $2099 $200 off MSRP See our iMac Price Tracker for the latest sales and prices from Apple and → Read More...

Read more »

Weekend Sale! 2019 13″ MacBook Airs for $200 off Apple’s...
Amazon has new 2019 13″ MacBook Airs on sale for $200 off Apple’s MSRP, with prices starting at $899, each including free shipping. Be sure to select Amazon as the seller during checkout, rather than a third party: – 13″ 1.6GHz/128GB MacBook Air Space Gray: $899.99 $200 off MSRP – 13″ 1.6GHz/128GB MacBook Air Silver: $899.99 $200 off MSRP – 13″ 1.6GHz/128GB MacBook Air Gold: $899.99 $200 off MSRP – 13″ 1.6GHz/256GB MacBook Air Space Gray: $1099.99 $200 off MSRP – 13″ 1.6GHz/256GB MacBook Air Silver: $1099.99 $200 off MSRP – 13″ 1.6GHz/256GB MacBook Air Gold: $1099.99 $200 off MSRP These are the same MacBook Airs Apple sells in their retail and online stores. Amazon’s prices are the cheapest available for new MacBooks from any Apple reseller. For the latest sales & prices, see our 13″ MacBook Air Price Tracker, → Read More...

Read more »

2019 15″ MacBook Pros now on sale for $350-$400 off Apple�...
B&H Photo has Apple’s 2019 15″ 6-Core and 8-Core MacBook Pros on sale today for $350-$400 off MSRP, starting at $2049, with free overnight shipping available to many addresses in the US: – 2019 15″ 2.6GHz 6-Core MacBook Pro Space Gray: $2049 $350 off MSRP – 2019 15″ 2.3GHz 8-Core MacBook Pro Space Gray: $2399 $400 off MSRP – 2019 15″ 2.6GHz 6-Core MacBook Pro Silver: $2049 $350 off MSRP – 2019 15″ 2.3GHz 8-Core MacBook Pro Silver: $2399 $400 off MSRP See our 15″ MacBook Pro Price Tracker for the latest prices & deals from Apple and → Read More...

Read more »

Buy one Apple Watch Series 5 at Verizon, get a second for 50...
Buy one Apple Watch Series 5 at Verizon, and get a second Watch for 50% off. Plus save $10 on your first month of service. The fine print: “Buy Apple Watch, get another up to 50% off on us. Plus $10 off your first month’s service. – Add Apple Watch with monthly device payments to your cart, get another Apple Watch half off. – New watch line of service required. – Get up to $150 credited to your account over 24 months. Up to $849.99 device payment purchase req’d per watch. 2nd watch: Less $150 promo credit applied to account over 24 mos. w/in 1-2 billing cycles; promo credit ends when balance paid or line terminated/transferred; 0% APR. New watch line of service req’d. For first month after activation, $10 monthly line access fee waived on single device and shared plans; $10 plan discount applied on unlimited plans. Early termination fee, other fees and restrictions may apply.” This deal is live at → Read More...

Read more »

Sprint offers 64GB iPhone 11 for free to new customers with ...
Sprint will include the 64GB iPhone 11 for free for new customers with an eligible trade-in in of the iPhone 7 or newer through September 19, 2019. The fine print: “iPhone 11 64GB $0/mo. iPhone 11 Pro 64GB $12.50/mo. or iPhone 11 Pro Max 64GB $16.67/mo. after $29.17/mo. credit, applied within 2 bills. Reqs. unlocked eligible trade in, 18-mo. lease, new line activ. or eligible upgrade, and approved credit. If you cancel early, remaining balance due. Excludes tax.” This deal is live at → Read More...

Read more »

Verizon offers new iPhone 11 models for up to $500 off with ...
Verizon is offering Apple’s new iPhone 11 models for $500 off MSRP to new customers with an eligible trade-in (see list below). Discount is applied via monthly bill credits over 24 months. Verizon is offering a $200 discounts on iPhone 11 models for existing customers wishing to upgrade, also with eligible trade-in (see below). This deal is live at Verizon today. Their fine print is below: Get up to $500 off a new iPhone with select trade-in and Unlimited. – Add a new iPhone 11, iPhone 11 Pro, iPhone 11 Pro Max, iPhone XS or iPhone XS Max with monthly device payments or at full retail price to your cart. – Trade in one of the phones below within 30 days after checkout. – Get up to $500 for your trade-in credited to your account over 24 months. Trade in: iPhone X iPhone XR iPhone XS iPhone XS Max iPhone 8 Plus iPhone 8 iPhone 7 Plus iPhone 7 Samsung Galaxy S10 Galaxy S10+ Galaxy S10e Galaxy S10 5G Galaxy S9 Galaxy S9+ Galaxy S8 Active Galaxy S8+ Galaxy Note9 Galaxy Note8 Google Pixel 3 Google Pixel 3 XL Google Pixel 2 Google Pixel 2 XL LG G8 ThinQ™ LG V50 ThinQ™ RED HYDROGEN One And get: Up to $500 (new lines) or $200 (upgrades). Trade in: iPhone 6s Plus iPhone 6s iPhone 6 Plus iPhone 6 iPhone SE iPhone 5s Galaxy S7 Galaxy S7 edge Galaxy S7 active Galaxy S6 Galaxy S6 edge Galaxy S6 edge+ Galaxy S6 active Galaxy S5 Galaxy S5 Active Galaxy S4 Galaxy S4 Active Galaxy Note5 Galaxy Note 4 Galaxy Note Edge Google Pixel XL Google Pixel Google Pixel 3a Google Pixel 3a XL LG V40 ThinQ™ LG V30 LG V20 LG V10 LG G7 ThinQ™ LG G6 LG G5 LG G4 moto z4 moto z3 moto z2 force moto z2 play moto z force moto z droid moto z play DROID Turbo 2 HTC 10 HTC One M9+ HTC One M9 And get: Up to $300 (new lines) or $100 (upgrades). Plus, get a $200 → Read More...

Read more »

AT&T offers free $300 reward card + free 64GB iPhone 11 ...
AT&T Wireless will include a second free 64GB iPhone 11 with the purchase of one eligible iPhone at full price. They will also include a free $300 rewards card. The fine print: “Buy an elig. iPhone and get the iPhone 11 on us when you buy both on a qualifying installment plan with an eligible AT&T unlimited plan (min. $145/mo. combined before discounts).” You’ll need to: – Purchase two eligible iPhones on a qualifying installment agreement – Add at least one new line to a new or existing account – Pay taxes on the full retail price of both devices up front. – Have an eligible AT&T unlimited plan (min. $125/mo. combined after discounts for new customers. Pay $145/mo. until autopay and paperless bill discounts starts w/in 2 bills. Existing customers can add to eligible existing plans, which may be less.). – Pay a $30 activation or upgrade fee for each device Note: Requires qualifying 0% APR installment agreement (30-mo. term at up to $40/mo.). Other installment options may be available and vary by location. If buying on the AT&T Installment Plan with Next Up, customer is responsible and will not receive any credits for an additional $5/mo. for the Next Up upgrade feature. Port-in of new line and well-qualified credit required for $0 down on both lines, or down payment may be required. Eligible Phones: iPhone 8, 8 Plus, XR, X, Xs, Xs Max, 11, 11 Pro, 11 Pro Max (priced up to $1450) After all that you’ll get: – iPhone 8 64GB, 8 Plus 64GB, XR 64GB/128GB, or 11 64GB for free after up to $700 in bill credits – iPhone 8 256GB, 8 Plus 256GB, XR 256GB, X, Xs, Xs Max, 11 128GB/256GB, 11 Pro, or 11 Pro Max will be up to $700 off. This deal is live today at → Read More...

Read more »

US Cellular offers 64GB iPhone 11 for free to new customers ...
US Cellular is offering the base 64GB iPhone 11 for free for new customers. Qualified trade-in of iPhone 7 or higher required (or a number of Android phones). Discounts are applied via monthly bill credit over 30 months. The fine print: “New consumer or small business (25 lines or less) NEW Plan line with Unlimited Data and portin required. Purchase of a qualifying device via 0% APR, $0 down, 30-mo. Retail Installment Contract (RIC), credit approval and Device Protection+ required. Offer applies to base model and memory only. Tax due at sale. A Regulatory Cost Recovery Fee applies; this is not a tax or gov’t-required charge. Additional fees, taxes, terms, conditions and coverage areas may apply and vary by plan, service and phone.” US Cellular’s deal is live on their → Read More...

Read more »

New 7th generation 10.2″ 128GB iPads available for preorde...
Amazon is accepting preorders for Apple’s new 7th generation 10.2″ 128GB iPads for $399.99 each, or $30 off Apple’s MSRP for this model. Shipping is free: – 10.2″ 128GB WiFi iPad Space Gray: $399.99 $30 off MSRP – 10.2″ 128GB WiFi iPad Silver: $399.99 $30 off MSRP – 10.2″ 128GB WiFi iPad Gold: $399.99 $30 off MSRP Keep an eye on our 10.2″ iPad Price Tracker for the latest prices and sales from Apple and → Read More...

Read more »