Apple TV+ ‘Dickinson’ not shying away from sex i...
Stars Hailee Steinfeld and Jane Krakowski alongside creator Alena Smith introduced the new Apple TV+ series "Dickinson," in New York City on Saturday night, and AppleInsider was there.

Read more »

Apple @ Work: What can your IT department look at on your ma...
Apple @ Work is brought to you by Spike, the world’s first conversational email app that helps professionals and teams spend less time on email, and more on getting things done. One of the common things I hear about Mobile Device Management solutions from my technology-focused friends is they hate when their company IT departments “suck” their devices into the management system the organization chooses. For those that love to tinker, set up, and manage their own devices, having them “managed” may seem like big brother is watching. Thankfully, Apple has clear APIs for how their devices interact with MDMs, so end users can rest assured their IT department doesn’t have access to everything on their devices. If you’re wondering if your IT department can read your iMessages, you’ve come to the right place. more… The post Apple @ Work: What can your IT department look at on your managed Apple devices? appeared first on 9to5Mac.

Read more »

New Apple Stores open in Louisville and The Woodlands: green...
September has been a remarkably busy month for Apple Store updates and expansions, and the sequence continues today with two more store openings in Louisville, Kentucky and The Woodlands, Texas. Both Apple Oxmoor and Apple The Woodlands left their classic locations for new storefronts that more than double the size of each store. more… The post New Apple Stores open in Louisville and The Woodlands: green walls, mirrored facade, more appeared first on 9to5Mac.

Read more »

Hands on: Razer Arctech iPhone Gaming Case aims to chill you...
A couple of weeks ago, Razer invited AppleInsider to check out their new accessory for the iPhone 11, 11 Pro and 11 Pro Max, with the Arctech Gaming Case said to help keep the Apple smartphone from overheating during lengthy 'Fortnite' scrapes.

Read more »

Totallee launches super thin cases for iPhone 11, iPhone 11 ...
Totallee is now shipping its thin cases for all the new iPhones including the iPhone 11, 11 Pro, and iPhone 11 Pro Max. Totallee has been making high-quality, ultra thin iPhone cases since 2013. All of its cases are incredibly thin, branding free (!!!) and designed to offer everyday protection without adding bulk. Totallee’s new cases are available in 7 different colors and 3 different styles: matte, transparent and leather. Head below for a look at the whole collection. more… The post Totallee launches super thin cases for iPhone 11, iPhone 11 Pro, and 11 Pro Max appeared first on 9to5Mac.

Read more »

Today in Apple history: Apple denies Steve Jobs’ love of n...
September 14, 2010: Security workers reportedly stop Steve Jobs at Japan’s Kansai International Airport. The reason? The Apple CEO supposedly tried to bring ninja throwing stars onto his private plane while heading home from vacation. It’s one of the most bizarre Jobs stories ever. Apple, however, quickly spoils the internet’s fun. Cupertino issues a statement describing […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple’s internal ‘Overton’ AI tool helps w...
Apple has offered details of an internal development tool titled "Overton," a system for monitoring and improving machine learning applications such as how Siri determines results for queries, by handling the lower-level tasks and allowing engineers to focus more on higher-level concepts.

Read more »

Big surprises at iPhone 11 event get us buzzing [Cult of Mac...
For the iPhone 11 event, that crafty Tim Cook slipped some genuine surprises around the back of the rumor mill. Apple left our heads spinning in a variety of ways. We totally expected the gorgeous new iPhone 11 and iPhone 11 Pro. And we figured the fat new camera array would prove a total killer […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Poll: Have you pre-ordered the Apple Watch Series 5 yet?
Unlike past years, the Apple Watch Series 5 went up for pre-order immediately following Apple’s September event on Tuesday. The Series 5 is available in new materials including ceramic and titanium, and we want to know: have you pre-ordered the Apple Watch Series 5? more… The post appeared first on 9to5Mac.

Read more »

Apple unveils Overton, an AI development tool
Apple has developed Overton, a framework intended to automate artificial intelligence (AI) system lifecycles by providing a set of novel high-level abstractions, according to VentureBeat. 

Read more »

‘El Gato Negro’ coming to Apple TV+
Robert Rodriguez and Diego Boneta are teaming up for El Gato Negro, an adaptation of a Mexican comic book being set up at Apple TV+ as a series, according to The Hollywood Reporter.

Read more »

Disney CEO Bob Iger resigns from Apple’s Board of Director
CNN reports that Disney CEO Bob Iger has resigned from Apple’s Board of Directors as the two companies will be competing in the video streaming business.

Read more »

Sling TV officially adds support for streaming in Safari for...
Sling TV has finally added support for streaming live and on-demand content through Safari. Previously, playing Sling content on the web was limited to Chrome and Edge, as well as apps on iOS and Apple TV. more… The post Sling TV officially adds support for streaming in Safari for macOS appeared first on 9to5Mac.

Read more »

iPhone 11 still available for launch day delivery as iPhone ...
The iPhone 11 and iPhone 11 Pro officially went up for pre-order yesterday ahead of their September 20th launch day. Over the last 24 hours, supply of certain iPhone models has started to dwindle, but plenty of options still remain for day one delivery. more… The post iPhone 11 still available for launch day delivery as iPhone 11 Pro starts to slip appeared first on 9to5Mac.

Read more »

IDC: 5G will spur smartphone growth (including iPhones) in 2...
A new forecast from the International Data Corporation (IDC) Worldwide Quarterly Mobile Phone Tracker shows signs of market recovery in the second half of 2019 and into 2020, pushing smartphone shipment growth back into positive territory.

Read more »

Notable apps and updates, Sept. 9-14
On a regular basis, Apple World Today posts a list of notable new apps or app updates that have been released. They may not necessarily be new, but they're popular and deserve mention. Here are this week’s picks.iOSMailbutler has debuted mobile app to accompany its desktop email productivity extension for Apple Mail and Gmail on macOS.  The mobile app serves as an information hub for all Mailbutler activity, keeping users updated wherever they go with real-time push notifications on their phones. Users can access Tracking Details, check or create new Tasks and Notes, and open emails quickly in their mobile email client. The app is free and available at the Apple App Store.Roland has announced its latest tool to simplify professional-quality video production: the 4XCamera Maker App. The company says aspiring videographers can use the new iOS app to shoot, edit, and publish videos without needing expensive camera equipment or a computer.  The full editing functionality of 4XCamera Maker is available through a small in-app purchase. Roland GO:MIXER and GO:MIXER Pro users can connect their GO:MIXER to the app for full editing functionality free of charge. VideoGo has debuted MyNews Video Ticker, a new release to the company's professional level video branding solution app developed exclusively for iOS devices. It enables you to add a scrolling ticker over video you have already taken, easily adding loops, emojis and more. MyNews Video Ticker is used for product/marketing opportunities and sales prospecting, commentary and testimonials. It’s free for the first three renders. After that, you’ll need to pay $1.99 via an in-app purchase.Johannes Erschbamer has served up Thirstic, a smart water drink reminder that automatically adapts to the users's activity and the weather conditions. The app automatically updates the estimated water needs in the background and sends a reminder as soon as the user reaches her/his preferred water needs threshold. The daily water intake goal changes depending on the local weather conditions. Thirstic is free, but does offer in-app purchases.macOSDEVONtechnologies has released DEVONthink 3.0, an update of its mobile document and information manager for the Mac. DEVONthink supports a large variety of file formats and stores them in a database enhanced by artificial intelligence. Version 3.0 sports an overhauled user interface. It now comes with support for Dark Mode, an extended search language, and a new menu extra for capturing notes and more. Version 3.0 also adds custom metadata and tables with typed data and form views. Office users can add imprints to PDFs and images, use the improved OCR engine, and share databases via the rewritten web interface. Smart rules and reminders make DEVONthink 3 easier to automate than ever before.DEVONthink 3.0 requires macOS El Capitan or later. It can be downloaded at www.devontechnologies.com. After e trial period of 30 days or 150 hours of runtime, whichever is later, it requires a license key for one of the three available editions: DEVONthink 3: $99; DEVONthink Pro 3: $199; and DEVONthink Server 3, $499.Every license includes the ability to install the software on two physical machines (seats). Additional seats and upgrades from the previous generation of DEVONthink are available for upgrade prices.  

Read more »

Sign in With Apple and Guidelines to 3rd Party Kids Apps Rel...
Today, Apple has updated its Review Guidelines for analytics and advertising on Kids apps at the App Store. Moreover, it added several criteria on when apps can use the ‘Sign… The post Sign in With Apple and Guidelines to 3rd Party Kids Apps Relaxed appeared first on iLounge.

Read more »

iPhone 11 Highlights New Cameras and Night Mode
Apple’s newest iPhone 11 Pro and iPhone 11 feature an upgraded camera system that flaunt new capabilities, including an improved Night Mode. Night Mode works without flash and can produce… The post appeared first on iLounge.

Read more »

New App Store Billing Grace Period Announced
Apple has recently announced that they will be adding a grace period for auto-renewals on the App Store. Subscribers who haven’t updated their billing credentials by the due date will… The post appeared first on iLounge.

Read more »

Apple Stores reopening on iPhone 11 launch day: Bridgewater,...
To celebrate the launch of the iPhone 11, 11 Pro, and Apple Watch Series 5, Apple is preparing a whirlwind of retail updates. In addition to Apple Fifth Avenue’s grand reopening in Manhattan, multiple Apple Stores across the world will reopen or move to greatly expanded spaces on September 20. more… The post Apple Stores reopening on iPhone 11 launch day: Bridgewater, Mall of America, Highland Village, more appeared first on 9to5Mac.

Read more »

Totallee’s new thin iPhone cases cover your new iPhone 11,...
This post is presented by Totallee. In all the excitement of getting a brand-spanking-new iPhone 11, don’t forget to protect your pricey new purchase from drops, bumps and scrapes with a sturdy case. It may be the last thing you want to deal with, buying yet another thing, but it’s worth it. And let’s face […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Iger departs board of Apple, Disney’s new streaming compet...
Everyone will read this as being due to to the competition between Apple TV+ and Disney+ but as Tim Bajarin said on Twitter, "Iger resigning is to avoid any possible conflict of interest since they both now have streaming services. They actually co-exist well but this takes any potential threat from Wall Street over conflict of interest out of the picture."∞ Read this on The Loop

Read more »

Disney CEO resigns from Apple board as streaming war heats u...
The Apple board of directors just lost a powerful member: Disney CEO Bob Iger. His resignation, revealed by an Apple filing to the Securities and Exchange Commission, comes as Disney and Apple prepare to launch competing streaming services. Meanwhile, the new Disney offering garnered a rave early review that called it “more addictive than heroin.” […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Terrific Tenc Air slim case now available for iPhone 11
Just Mobile’s terrific Tenc Air case is now available for iPhone 11, 11 Pro, and 11 Pro Max. It’s super-slim, insanely durable, and it won’t spoil the stunning design of your new iPhone. It’s a shame to spend hundreds of dollars on a beautiful new phone and then slap it inside a case that hides […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

How to check what LTE bands the iPhone 11 and iPhone 11 Pro ...
Want to pick up the new iPhone 11, iPhone 11 Pro, or iPhone 11 Pro Max but want to make sure it will work with certain LTE bands and specific carriers? Follow along for how to check what LTE bands are used in the various models of the iPhone 11 lineup. more… The post How to check what LTE bands the iPhone 11 and iPhone 11 Pro have appeared first on 9to5Mac.

Read more »

New iPhone on the way? Get the best price for your old one
Staring at your savings account with tears in your eyes after preordering a new iPhone? Sell your old iPhone today to recover some of your hard-earned cash, and get the best price from Cult of Mac. We make the whole process quick and simple — and we typically pay more than anyone else. Apple devices hold […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Disney CEO Bob Iger Quits Apple Board
Disney CEO Bob Iger has resigned from Apple’s board of directors as the two firms prepare to launch rival video streaming services.

Read more »

Bob Iger resigns from Apple’s board of directors ahead of ...
Even though Disney’s CEO Bob Iger previously suggested that the impending launches of Apple TV+ and Disney+ wouldn’t mean he’d have to leave Apple’s board of directors, we’ve learned today that he has resigned that position. more… The post Bob Iger resigns from Apple’s board of directors ahead of Apple TV+ and Disney+ launches appeared first on 9to5Mac.

Read more »

Disney CEO Bob Iger resigns from Apple board
Disney Chairman and CEO Bob Iger on Friday announced his resignation from Apple's board of directors, a move that comes just two months before the two companies will go head-to-head in the highly competitive video streaming business.

Read more »

Get 20% off Defense cases for iPhone 11, 11 Pro, and 11 Pro ...
Defense by X-Doria, a leading case manufacturer based out of Santa Monica, is introducing Defense: A four case collection engineered to protect the new iPhone 11, iPhone 11 Pro and iPhone 11 Pro Max. The Defense line of cases has been tested to exceed military drop test standards of up to 10 feet onto concrete and are further backed by a lifetime warranty. And for a limited time, 9to5Mac readers 20% off the new collection: 9to5 readers can get 20% off Defense cases to celebrate the launch of iPhone 11 with code: 9TO5MAC20 Head below for a look at the full collection: more… The post Get 20% off Defense cases for iPhone 11, 11 Pro, and 11 Pro Max for a limited time appeared first on 9to5Mac.

Read more »

Apple’s new iPhone 11, and more – Intego Mac Podcast, Ep...
Josh and Kirk celebrate episode 100 of the Intego Mac Podcast with special guest Dave Hamilton and discuss Apple's new iPhone, Apple Watch, iPad, Apple Arcade, and Apple TV+. And we discuss changes to Apple's AppleCare extended warranty and insurance plan. Check out the full show notes for links.

Read more »

NY Payroll Company Vanishes With $35 Million
MyPayrollHR, a now defunct cloud-based payroll processing firm based in upstate New York, abruptly ceased operations this past week after stiffing employees at thousands of companies. The ongoing debacle, which allegedly involves malfeasance on the part of the payroll company's CEO, resulted in countless people having money drained from their bank accounts and has left nearly $35 million worth of payroll and tax payments in legal limbo.

Read more »

Patch Tuesday, September 2019 Edition
Microsoft today issued security updates to plug some 80 security holes in various flavors of its Windows operating systems and related software. The software giant assigned a "critical" rating to almost a quarter of those vulnerabilities, meaning they could be used by malware or miscreants to hijack vulnerable systems with little or no interaction on the part of the user.

Read more »

Secret Service Investigates Breach at U.S. Govt IT Contracto...
The U.S. Secret Service is investigating a breach at a Virginia-based government technology contractor that saw access to several of its systems put up for sale in the cybercrime underground, KrebsOnSecurity has learned. The contractor claims the access being auctioned off was to old test systems that do not have direct connections to its government partner networks. In mid-August, a member of a popular Russian-language cybercrime forum offered to sell access to the internal network of a U.S. government IT contractor that does business with more than 20 federal agencies, including several branches of the military. The seller bragged that he had access to email correspondence and credentials needed to view databases of the client agencies, and set the opening price at six bitcoins (~USD $60,000).

Read more »

Vulnerability Summary for the Week of September 2, 2019
Original release date: September 9, 2019  The CISA Weekly Vulnerability Summary Bulletin is created using information from the NIST NVD. In some cases, the vulnerabilities in the Bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info alfresco -- alfresco An issue was discovered in Alfresco Community Edition versions 6.0 and lower. An unauthenticated, remote attacker could authenticate to Alfresco's Solr Web Admin Interface. The vulnerability is due to the presence of a default private key that is present in all default installations. An attacker could exploit this vulnerability by using the extracted private key and bundling it into a PKCS12. A successful exploit could allow the attacker to gain information about the target system (e.g., OS type, system file locations, Java version, Solr version, etc.) as well as the ability to launch further attacks by leveraging the access to Alfresco's Solr Web Admin Interface. 2019-09-05 7.5 CVE-2019-14222MISC alfresco -- alfresco An issue was discovered in Alfresco Community Edition 5.2 201707. By leveraging multiple components in the Alfresco Software applications, an exploit chain was observed that allows an attacker to achieve remote code execution on the victim machine. The attacker must upload malicious Solr configuration files and then receive a JMX connection from the victim, and serve a Java object that results in deserialization and code execution. 2019-09-05 9.0 CVE-2019-14224MISC artifex -- ghostscript A flaw was found in ghostscript, versions 9.x before 9.28, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands. 2019-09-06 7.5 CVE-2019-14813CONFIRMCONFIRM asus -- precision_touchpad AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \.AsusTP device, leading to a DoS or potentially privilege escalation via a crafted DeviceIoControl call. 2019-09-04 7.5 CVE-2019-10709MISCMISC broadcom -- ca_client_automation An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to execute arbitrary code. 2019-09-06 7.5 CVE-2019-13656MISC cisco -- jabber A vulnerability in Cisco Jabber Client Framework (JCF) for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper file level permissions on an affected device when it is running Cisco JCF for Mac Software. An attacker could exploit this vulnerability by authenticating to the affected device and executing arbitrary code or potentially modifying certain configuration files. A successful exploit could allow the attacker to execute arbitrary code or modify certain configuration files on the device using the privileges of the installed Cisco JCF for Mac Software. 2019-09-04 7.2 CVE-2019-12645CISCO cisco -- nx-os A vulnerability in the Network Time Protocol (NTP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to excessive use of system resources when the affected device is logging a drop action for received MODE_PRIVATE (Mode 7) NTP packets. An attacker could exploit this vulnerability by flooding the device with a steady stream of Mode 7 NTP packets. A successful exploit could allow the attacker to cause high CPU and memory usage on the affected device, which could cause internal system processes to restart or cause the affected device to unexpectedly reload. Note: The NTP feature is enabled by default. 2019-08-30 7.8 CVE-2019-1967CISCO cisco -- unified_computing_system A vulnerability in a specific CLI command within the local management (local-mgmt) context for Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to gain elevated privileges as the root user on an affected device. The vulnerability is due to extraneous subcommand options present for a specific CLI command within the local-mgmt context. An attacker could exploit this vulnerability by authenticating to an affected device, entering the local-mgmt context, and issuing a specific CLI command and submitting user input. A successful exploit could allow the attacker to execute arbitrary operating system commands as root on an affected device. The attacker would need to have valid user credentials for the device. 2019-08-30 7.2 CVE-2019-1966CISCO cisco -- webex_teams A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. This vulnerability is due to improper restrictions on software logging features used by the application on Windows operating systems. An attacker could exploit this vulnerability by convincing a targeted user to visit a website designed to submit malicious input to the affected application. A successful exploit could allow the attacker to cause the application to modify files and execute arbitrary commands on the system with the privileges of the targeted user. 2019-09-04 9.3 CVE-2019-1939CISCO egain -- chat eGain Chat 15.0.3 allows unrestricted file upload. 2019-09-04 7.5 CVE-2019-13976MISC eventum_project -- eventum Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2. 2019-09-05 7.5 CVE-2018-11569MISC exim -- exim Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash. 2019-09-06 10.0 CVE-2019-15846MISCMLISTMLISTMLISTMLISTMLISTMLISTMLISTMLISTMLISTFEDORAFEDORABUGTRAQGENTOOUBUNTUDEBIANCERT-VNMISC freebsd -- freebsd In FreeBSD 12.0-STABLE before r350648, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350650, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before 11.2-RELEASE-p13, the ICMPv6 input path incorrectly handles cases where an MLDv2 listener query packet is internally fragmented across multiple mbufs. A remote attacker may be able to cause an out-of-bounds read or write that may cause the kernel to attempt to access an unmapped page and subsequently panic. 2019-08-30 7.5 CVE-2019-5608CONFIRM freebsd -- freebsd In FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r350829, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, a missing check in the function to arrange data in a chain of mbufs could cause data returned not to be contiguous. Extra checks in the IPv6 stack could catch the error condition and trigger a kernel panic, leading to a remote denial of service. 2019-08-30 7.8 CVE-2019-5611MISCBUGTRAQCONFIRM freebsd -- freebsd In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r351265, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, the kernel driver for /dev/midistat implements a read handler that is not thread-safe. A multi-threaded program can exploit races in the handler to copy out kernel memory outside the boundaries of midistat's data buffer. 2019-08-30 7.8 CVE-2019-5612CONFIRM fusionpbx -- fusionpbx FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (which will insert the malicious command into the database). To trigger the command, one needs to call the services.php file via a GET request with the service id followed by the parameter a=start to execute the stored command. 2019-09-05 9.0 CVE-2019-15029MISCMISCMISC google -- android NVIDIA Tegra contains a vulnerability in BootRom where a user with kernel level privileges can write an arbitrary value to an arbitrary physical address 2019-09-06 7.2 CVE-2018-6240MISC google -- android In ihevcd_ref_list of ihevcd_ref_list.c in Android 10, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 9.3 CVE-2019-2108MISC google -- android In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 7.2 CVE-2019-2115MISC google -- android In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 7.2 CVE-2019-2174MISC google -- android In ihevcd_parse_buffering_period_sei of ihevcd_parse_headers.c in Android 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 9.3 CVE-2019-2176MISC google -- android In rw_t4t_sm_read_ndef of rw_t4t in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC service with no additional execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 7.2 CVE-2019-2178MISC google -- android In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 7.2 CVE-2019-9254MISC hanwha-security -- srn-472s_firmware An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before 2019-05-03. A system crash and reboot can be achieved by submitting a long username in excess of 117 characters. The username triggers a buffer overflow in the main process controlling operation of the DVR system, rendering services unavailable during the reboot operation. A repeated attack affects availability as long as the attacker has network access to the device. 2019-09-05 7.8 CVE-2019-12223MISCMISCMISC libreoffice -- libreoffice LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice install. Protection was added, to address CVE-2019-9852, to avoid a directory traversal attack where scripts in arbitrary locations on the file system could be executed by employing a URL encoding attack to defeat the path verification step. However this protection could be bypassed by taking advantage of a flaw in how LibreOffice assembled the final script URL location directly from components of the passed in path as opposed to solely from the sanitized output of the path verification step. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1. 2019-09-06 7.5 CVE-2019-9854CONFIRM libreoffice -- libreoffice LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1. 2019-09-06 7.5 CVE-2019-9855CONFIRM linux -- linux_kernel An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c. 2019-09-04 7.2 CVE-2017-18595MISCMISC linux -- linux_kernel A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped. 2019-09-04 7.5 CVE-2019-15902MISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service. 2019-09-04 7.8 CVE-2019-15916MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c. 2019-09-04 7.2 CVE-2019-15917MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.10. SMB2_negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21. 2019-09-04 7.2 CVE-2019-15918MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.10. SMB2_write in fs/cifs/smb2pdu.c has a use-after-free. 2019-09-04 7.2 CVE-2019-15919MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.10. SMB2_read in fs/cifs/smb2pdu.c has a use-after-free. NOTE: this was not fixed correctly in 5.0.10; see the 5.0.11 ChangeLog, which documents a memory leak. 2019-09-04 7.2 CVE-2019-15920MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.2.3. An out of bounds access exists in the function hclge_tm_schd_mode_vnet_base_cfg in the file drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c. 2019-09-04 7.2 CVE-2019-15925MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx in the file drivers/net/wireless/ath/ath6kl/wmi.c. 2019-09-04 9.4 CVE-2019-15926MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the function build_audio_procunit in the file sound/usb/mixer.c. 2019-09-04 7.2 CVE-2019-15927MISCMISC nagios -- nagios_xi Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The getprofile.sh script, invoked by downloading a system profile (profile.php?cmd=download), is executed as root via a passwordless sudo entry; the script executes check_plugin, which is owned by the nagios user. A user logged into Nagios XI with permissions to modify plugins, or the nagios user on the server, can modify the check_plugin executable and insert malicious commands to execute as root. 2019-09-05 9.0 CVE-2019-15949MISC opensc_project -- opensc OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c. 2019-09-05 7.5 CVE-2019-15945MISCMISC opensc_project -- opensc OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c. 2019-09-05 7.5 CVE-2019-15946MISCMISC pengutronix -- barebox Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly used for a memcpy. 2019-09-05 7.5 CVE-2019-15937MISC pengutronix -- barebox Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length field is directly used for a memcpy. 2019-09-05 7.5 CVE-2019-15938MISC restaurant_reservations_project -- restaurant_reservations The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for nd_rst_import_settings_php_function authentication. 2019-08-30 7.5 CVE-2019-15819MISCMISCMISC sonatype -- nexus_repository_manager The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability. 2019-09-03 9.0 CVE-2019-5475MISC symphonyextensions -- rich_text_formatter The Rich Text Formatter (Redactor) extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in content.fileupload.php and content.imageupload.php. 2019-09-05 7.5 CVE-2019-13187MISCMISC totaljs -- total.js_cms An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution (RCE) on the remote server by creating a malicious widget with a special tag containing JavaScript code that will be evaluated server side. In the process of evaluating the tag by the back-end, it is possible to escape the sandbox object by using the following payload: global.process.mainModule.require(child_process).exec(RCE); 2019-09-05 9.0 CVE-2019-15954MISCMISC varnish-cache -- varnish An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests. The assert will cause an automatic restart with a clean cache, which makes it a Denial of Service attack. 2019-09-03 7.8 CVE-2019-15892BUGTRAQMISCDEBIAN wpbrigade -- loginpress The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings. 2019-09-03 7.5 CVE-2019-15872MISCMISC wpserveur -- wps_child_theme_generator The wps-child-theme-generator plugin before 1.2 for WordPress has classes/helpers.php directory traversal. 2019-08-30 7.5 CVE-2019-15822MISCMISCMISC wpserveur -- wps_hide_login The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass. 2019-08-30 7.5 CVE-2019-15823MISCMISCMISC wpserveur -- wps_hide_login The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass. 2019-08-30 7.5 CVE-2019-15824MISCMISCMISC wpserveur -- wps_hide_login The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass. 2019-08-30 7.5 CVE-2019-15825MISCMISCMISC wpserveur -- wps_hide_login The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field. 2019-08-30 7.5 CVE-2019-15826MISCMISCMISC xiaoyi -- yi_m1_mirrorless_camera_firmware An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy (BLE) authentication module of YI M1 Mirrorless Camera V3.2-cn. An attacker can send a set of BLE commands to trigger this vulnerability, resulting in sensitive data leakage (e.g., personal photos). An attacker can also control the camera to record or take a picture after bypassing authentication. 2019-09-06 8.3 CVE-2019-13953MISC Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info 10web -- photo_gallery The photo-gallery plugin before 1.2.42 for WordPress has CSRF. 2019-08-30 6.8 CVE-2015-9380MISCMISCMISC abus -- secvest_wireless_alarm_system_fuaa50000_firmware An issue was discovered on ABUS Secvest FUAA50000 3.01.01 devices. Due to an insufficient implementation of jamming detection, an attacker is able to suppress correctly received RF messages sent between wireless peripheral components, e.g., wireless detectors or remote controls, and the ABUS Secvest alarm central. An attacker is able to perform a "reactive jamming" attack. The reactive jamming simply detects the start of a RF message sent by a component of the ABUS Secvest wireless alarm system, for instance a wireless motion detector (FUBW50000) or a remote control (FUBE50014 or FUBE50015), and overlays it with random data before the original RF message ends. Thereby, the receiver (alarm central) is not able to properly decode the original transmitted signal. This enables an attacker to suppress correctly received RF messages of the wireless alarm system in an unauthorized manner, for instance status messages sent by a detector indicating an intrusion. 2019-09-03 5.0 CVE-2019-14261MISCFULLDISCBUGTRAQMISC airbrake -- airbrake_ruby The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklist_keys configuration option and consequently may disclose passwords to unauthorized actors. This is fixed in 4.2.4 (also, 4.2.2 and earlier are unaffected). 2019-09-06 5.0 CVE-2019-16060MISC apache -- commons_compress The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress. 2019-08-30 5.0 CVE-2019-12402MISC artifex -- ghostscript A flaw was found in, ghostscript versions prior to 9.28, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands. 2019-09-03 6.8 CVE-2019-14811CONFIRM bitcoin -- bitcoin-qt In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via a grep "6231 0500" command. 2019-09-05 5.0 CVE-2019-15947MISCMISC blynk -- blynk-library An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability. 2019-09-05 5.0 CVE-2019-5065MISC bold-themes -- bold_page_builder The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data. 2019-08-30 5.0 CVE-2019-15821MISCMISCMISC canon -- print The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the administrator web interface and WPA2-PSK key. 2019-09-05 4.3 CVE-2019-14339MISCMISC cisco -- content_security_management_appliance A vulnerability in the authorization module of Cisco Content Security Management Appliance (SMA) Software could allow an authenticated, remote attacker to gain out-of-scope access to email. The vulnerability exists because the affected software does not correctly implement role permission controls. An attacker could exploit this vulnerability by using a custom role with specific permissions. A successful exploit could allow the attacker to access the spam quarantine of other users. 2019-09-04 4.0 CVE-2019-12635CISCO cisco -- finesse A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to access the system and perform unauthorized actions. 2019-09-04 5.0 CVE-2019-12632CISCO cisco -- identity_services_engine A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability exists because the web-based management interface of the affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. 2019-09-04 4.3 CVE-2019-12644CISCO cisco -- network_level_service A vulnerability in the “plug-and-play” services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper access restrictions on the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access running configuration information about devices managed by the IND, including administrative credentials. 2019-09-04 5.0 CVE-2019-1976CISCO cisco -- nx-os A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API on an affected device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition in the NX-API service; however, the NX-OS device itself would still be available and passing network traffic. Note: The NX-API feature is disabled by default. 2019-08-30 5.0 CVE-2019-1968CISCO cisco -- nx-os A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) Access Control List (ACL) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to perform SNMP polling of an affected device, even if it is configured to deny SNMP traffic. The vulnerability is due to an incorrect length check when the configured ACL name is the maximum length, which is 32 ASCII characters. An attacker could exploit this vulnerability by performing SNMP polling of an affected device. A successful exploit could allow the attacker to perform SNMP polling that should have been denied. The attacker has no control of the configuration of the SNMP ACL name. 2019-08-30 5.0 CVE-2019-1969CISCO cisco -- nx-os A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an endpoint device in certain circumstances. The vulnerability is due to improper endpoint learning when packets are received on a specific port from outside the ACI fabric and destined to an endpoint located on a border leaf when Disable Remote Endpoint Learning has been enabled. This can result in a Remote (XR) entry being created for the impacted endpoint that will become stale if the endpoint migrates to a different port or leaf switch. This results in traffic not reaching the impacted endpoint until the Remote entry can be relearned by another mechanism. 2019-08-30 4.3 CVE-2019-1977CISCO cisco -- unified_contact_center_express A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper validation of user-supplied input on the affected system. An attacker could exploit this vulnerability by sending the user of the web application a crafted request. If the request is processed, the attacker could access the system and perform unauthorized actions. 2019-09-04 5.0 CVE-2019-12633CISCO convertplug -- convertplus The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation (with the none role) via a request for variants. 2019-09-03 5.0 CVE-2019-15863MISC custom_404_pro_project -- custom_404_pro The custom-404-pro plugin before 3.2.8 for WordPress has reflected XSS, a different vulnerability than CVE-2019-14789. 2019-08-30 4.3 CVE-2019-15838MISCMISC dell -- emc_enterprise_copy_data_management Dell EMC Enterprise Copy Data Management (eCDM) versions 1.0, 1.1, 2.0, 2.1, and 3.0 contain a certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim?s data in transit. 2019-09-03 5.8 CVE-2019-3751MISC dell -- emc_unity_operating_environment Dell EMC Unity Operating Environment versions prior to 5.0.0.0.5.116, Dell EMC UnityVSA versions prior to 5.0.0.0.5.116 and Dell EMC VNXe3200 versions prior to 3.1.10.9946299 contain a reflected cross-site scripting vulnerability on the cas/logout page. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or Java Script code to Unisphere, which is then reflected back to the victim and executed by the web browser. 2019-09-03 4.3 CVE-2019-3754CONFIRM egain -- chat eGain Chat 15.0.3 allows HTML Injection. 2019-09-04 4.3 CVE-2019-13975MISC eng -- knowage In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application. 2019-09-05 5.0 CVE-2019-13188MISC eng -- knowage In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page. 2019-09-05 5.0 CVE-2019-13190MISC epignosishq -- efront_lms A code execution vulnerability exists in Epignosis eFront LMS v5.2.12. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability. 2019-09-05 6.5 CVE-2019-5069MISC epignosishq -- efront_lms An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier. Specially crafted web request to login page can cause SQL injections, resulting in data compromise. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required. 2019-09-05 6.4 CVE-2019-5070MISC espressif -- esp-idf The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key (PMK) after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames via a rogue access point. 2019-09-04 4.8 CVE-2019-12587MISCMISCMISC estrongs -- es_file_explorer_file_manager The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage. 2019-09-05 5.0 CVE-2019-11380MISC estsoft -- alsee A memory corruption vulnerability exists in the .PSD parsing functionality of ALSee v5.3 ~ v8.39. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in code execution. By persuading a victim to open a specially-crafted .PSD file, an attacker could execute arbitrary code. 2019-08-30 6.8 CVE-2019-12810CONFIRM ezautomation -- ez_plc_editor An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of the EZ PLC Editor Versions 1.8.41 and prior. 2019-09-04 6.8 CVE-2019-13522MISC ezautomation -- ez_touch_editor An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the EZ Touch Editor Versions 2.1.0 and prior. 2019-09-04 6.8 CVE-2019-13518MISC f5 -- big-ip_access_policy_manager On BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST users with guest privileges may be able to escalate their privileges and run commands with admin privileges. 2019-09-04 6.5 CVE-2019-6646MISC facebook -- facebook_for_woocommerce The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF. 2019-08-30 6.8 CVE-2019-15840MISC facebook -- facebook_for_woocommerce The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajax_woo_infobanner_post_click, ajax_woo_infobanner_post_xout, or ajax_fb_toggle_visibility. 2019-08-30 6.8 CVE-2019-15841MISC ffmpeg -- ffmpeg FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer. 2019-09-05 6.8 CVE-2019-15942MISC freebsd -- freebsd In FreeBSD 12.0-STABLE before r350619, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350619, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before 11.2-RELEASE-p13, the bhyve e1000 device emulation used a guest-provided value to determine the size of the on-stack buffer without validation when TCP segmentation offload is requested for a transmitted packet. A misbehaving bhyve guest could overwrite memory in the bhyve process on the host. 2019-08-30 6.4 CVE-2019-5609CONFIRM freebsd -- freebsd In FreeBSD 12.0-STABLE before r350637, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350638, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before 11.2-RELEASE-p13, the bsnmp library is not properly validating the submitted length from a type-length-value encoding. A remote user could cause an out-of-bounds read or trigger a crash of the software such as bsnmpd resulting in a denial of service. 2019-08-30 5.0 CVE-2019-5610MISCBUGTRAQCONFIRM freedesktop -- poppler Poppler before 0.76.0 has an integer overflow in Parser::makeStream in Parser.cc. 2019-09-05 6.8 CVE-2018-21009MISC freetype -- freetype FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. 2019-09-03 6.8 CVE-2015-9381MISCMLISTMISC freetype -- freetype FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation. 2019-09-03 4.3 CVE-2015-9382MISCMLISTMISC freetype -- freetype FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c. 2019-09-03 4.3 CVE-2015-9383MISCMLISTMISC glyphandcog -- xpdfreader Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from November 2002. 2019-09-03 4.3 CVE-2019-15860MISC gnu -- gcc The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same. 2019-09-02 5.0 CVE-2019-15847MISC google -- android In execTransact of Binder.java in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible local execution of arbitrary code in a privileged process due to a memory overwrite. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 4.6 CVE-2019-2123MISC google -- android In checkAccess of SliceManagerService.java in Android 9, there is a possible permissions check bypass due to incorrect order of arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 4.4 CVE-2019-2175MISC google -- android In isPreferred of HidProfile.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible device type confusion due to a permissions bypass. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 6.8 CVE-2019-2177MISC google -- android In NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 4.3 CVE-2019-2179MISC google -- android In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 6.9 CVE-2019-2181MISC grafana -- grafana In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana. 2019-09-03 5.0 CVE-2019-15043CONFIRMMISCMISCCONFIRMFEDORAFEDORA ibm -- intelligent_operations_center IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 - V5.1.0.6, and IBM Water Operations for Waternamics V5.1.0 - V5.2.1.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 161201. 2019-09-05 5.0 CVE-2019-4321CONFIRMXF ibm -- jazz_for_service_management IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host header during caching. By sending a specially crafted HTTP GET request, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-force ID: 158976. 2019-09-05 4.3 CVE-2019-4186XFCONFIRM instagram-php-api_project -- instagram-php-api cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/success.php error_description parameter. 2019-09-04 4.3 CVE-2019-14470MISCMISCMISCEXPLOIT-DB jetbrains -- teamcity JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it possible to send an arbitrary HTTP request to a TeamCity server under the name of the currently logged-in user. 2019-09-05 4.3 CVE-2019-15848CONFIRM knowage-suite -- knowage In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes. 2019-09-05 4.0 CVE-2019-13349MISC knowage-suite -- knowage In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page. 2019-09-05 5.0 CVE-2019-14278MISC lenovo -- xclarity_administrator An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 that could allow information disclosure. 2019-09-03 5.0 CVE-2019-6179MISC lenovo -- xclarity_administrator A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the user's web browser. The JavaScript code is not executed on LXCA itself. 2019-09-03 4.3 CVE-2019-6181MISC lenovo -- xclarity_administrator A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formula is not executed on LXCA itself. 2019-09-03 4.0 CVE-2019-6182MISC libexpat_project -- libexpat In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read. 2019-09-04 5.0 CVE-2019-15903MISCMISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c. 2019-09-04 4.9 CVE-2018-21008MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.6. There is a memory leak issue when idr_alloc() fails in genl_register_family() in net/netlink/genetlink.c. 2019-09-04 4.6 CVE-2019-15921MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a pf data structure if alloc_disk fails in drivers/block/paride/pf.c. 2019-09-04 4.9 CVE-2019-15922MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if alloc_disk fails in drivers/block/paride/pf.c. 2019-09-04 4.9 CVE-2019-15923MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dereference because there is no -ENOMEM upon an alloc_workqueue failure. 2019-09-04 4.9 CVE-2019-15924MISCMISC login_or_logout_menu_item_project -- login_or_logout_menu_item The login-or-logout-menu-item plugin before 1.2.0 for WordPress has no requirement for lolmi_save_settings authentication. 2019-08-30 5.8 CVE-2019-15820MISCMISCMISC memcached -- memcached memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str in memcached.c. 2019-08-30 5.0 CVE-2019-15026CONFIRMCONFIRMMLIST mongodb -- mongodb An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB server versions less than 4.0.11, 3.6.14, and 3.4.22 to run attacker defined code as the user running the utility. 2019-08-30 6.8 CVE-2019-2390CONFIRM mulesoft -- api_gateway Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gateway released before August 1 2019 allow remote attackers to read files accessible to the Mule process. 2019-08-30 5.0 CVE-2019-15630MISC nagios -- log_server Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page. 2019-09-03 4.3 CVE-2019-15898MISCMISC naver -- cloud_explorer NDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle. 2019-09-03 5.0 CVE-2019-13156CONFIRM onkyo -- tx-nr686_firmware Directory traversal vulnerability on ONKYO TX-NR686 1030-5000-1040-0010 A/V Receiver devices allows remote attackers to read arbitrary files via a .. (dot dot) and %2f to the default URI. 2019-08-30 5.0 CVE-2019-6113MISC opencv -- opencv An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp. 2019-09-05 5.0 CVE-2019-15939MISCMISC profilegrid -- profilegrid The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pm_template_preview&html=

Read more »

Twitter and Deepfakes – Intego Mac Podcast, Episode 99
This week on the Intego Mac Podcast, episode 99… Twitter's boss had his Twitter account hacked, and Twitter has disabled a feature from its earliest days that let you tweet via SMS. Firefox's new update, version 69, blocks trackers and cryptocurrency miners by default. And we take a look at audio and video deepfakes. Check out […]

Read more »

‘Satori’ IoT Botnet Operator Pleads Guilty
A 21-year-old man from Vancouver, Wash. has pleaded guilty to federal hacking charges tied to his role in operating the "Satori" botnet, a crime machine powered by hacked Internet of Things (IoT) devices that was built to conduct massive denial-of-service attacks targeting Internet service providers, online gaming platforms and Web hosting companies.

Read more »

Spam In your Calendar? Here’s What to Do.
Many spam trends are cyclical: Spammers tend to switch tactics when one method of hijacking your time and attention stops working. But periodically they circle back to old tricks, and few spam trends are as perennial as calendar spam, in which invitations to click on dodgy links show up unbidden in your digital calendar application from Apple, Google and Microsoft. Here's a brief primer on what you can do about it.

Read more »

Everyone is listening! – Intego Mac Podcast, Episode 98
The Intego Mac Podcast episode 98 is now available! There's a recurring theme in security and privacy news lately, and that is the fact that everyone is listening. If you use Alexa, OK Google, or Siri, the companies behind these services listen to some of your requests (and sometimes when you don't explicitly ask their […]

Read more »

Do Macs need an antivirus? – Intego Mac Podcast, Episode 9...
The Intego Mac Podcast episode 97 is now available! There's a question we get asked often: do Macs really need an antivirus? Many people think that Macs are immune to malware, or that security software companies even create malware to sell their products. We give a balanced answer to the question of whether you need […]

Read more »

Feds Allege Adconion Employees Hijacked IP Addresses for Spa...
Federal prosecutors in California have filed criminal charges against four employees of Adconion Direct, an email advertising firm, alleging they unlawfully hijacked vast swaths of Internet addresses and used them in large-scale spam campaigns. KrebsOnSecurity has learned that the charges are likely just the opening salvo in a much larger, ongoing federal investigation into the company's commercial email practices.

Read more »

Weekend Sale! 2019 13″ MacBook Airs for $200 off Apple’s...
Amazon has new 2019 13″ MacBook Airs on sale for $200 off Apple’s MSRP, with prices starting at $899, each including free shipping. Be sure to select Amazon as the seller during checkout, rather than a third party: – 13″ 1.6GHz/128GB MacBook Air Space Gray: $899.99 $200 off MSRP – 13″ 1.6GHz/128GB MacBook Air Silver: $899.99 $200 off MSRP – 13″ 1.6GHz/128GB MacBook Air Gold: $899.99 $200 off MSRP – 13″ 1.6GHz/256GB MacBook Air Space Gray: $1099.99 $200 off MSRP – 13″ 1.6GHz/256GB MacBook Air Silver: $1099.99 $200 off MSRP – 13″ 1.6GHz/256GB MacBook Air Gold: $1099.99 $200 off MSRP These are the same MacBook Airs Apple sells in their retail and online stores. Amazon’s prices are the cheapest available for new MacBooks from any Apple reseller. For the latest sales & prices, see our 13″ MacBook Air Price Tracker, → Read More...

Read more »

2019 15″ MacBook Pros now on sale for $350-$400 off Apple�...
B&H Photo has Apple’s 2019 15″ 6-Core and 8-Core MacBook Pros on sale today for $350-$400 off MSRP, starting at $2049, with free overnight shipping available to many addresses in the US: – 2019 15″ 2.6GHz 6-Core MacBook Pro Space Gray: $2049 $350 off MSRP – 2019 15″ 2.3GHz 8-Core MacBook Pro Space Gray: $2399 $400 off MSRP – 2019 15″ 2.6GHz 6-Core MacBook Pro Silver: $2049 $350 off MSRP – 2019 15″ 2.3GHz 8-Core MacBook Pro Silver: $2399 $400 off MSRP See our 15″ MacBook Pro Price Tracker for the latest prices & deals from Apple and → Read More...

Read more »

Buy one Apple Watch Series 5 at Verizon, get a second for 50...
Buy one Apple Watch Series 5 at Verizon, and get a second Watch for 50% off. Plus save $10 on your first month of service. The fine print: “Buy Apple Watch, get another up to 50% off on us. Plus $10 off your first month’s service. – Add Apple Watch with monthly device payments to your cart, get another Apple Watch half off. – New watch line of service required. – Get up to $150 credited to your account over 24 months. Up to $849.99 device payment purchase req’d per watch. 2nd watch: Less $150 promo credit applied to account over 24 mos. w/in 1-2 billing cycles; promo credit ends when balance paid or line terminated/transferred; 0% APR. New watch line of service req’d. For first month after activation, $10 monthly line access fee waived on single device and shared plans; $10 plan discount applied on unlimited plans. Early termination fee, other fees and restrictions may apply.” This deal is live at → Read More...

Read more »

Sprint offers 64GB iPhone 11 for free to new customers with ...
Sprint will include the 64GB iPhone 11 for free for new customers with an eligible trade-in in of the iPhone 7 or newer through September 19, 2019. The fine print: “iPhone 11 64GB $0/mo. iPhone 11 Pro 64GB $12.50/mo. or iPhone 11 Pro Max 64GB $16.67/mo. after $29.17/mo. credit, applied within 2 bills. Reqs. unlocked eligible trade in, 18-mo. lease, new line activ. or eligible upgrade, and approved credit. If you cancel early, remaining balance due. Excludes tax.” This deal is live at → Read More...

Read more »

Verizon offers new iPhone 11 models for up to $500 off with ...
Verizon is offering Apple’s new iPhone 11 models for $500 off MSRP to new customers with an eligible trade-in (see list below). Discount is applied via monthly bill credits over 24 months. Verizon is offering a $200 discounts on iPhone 11 models for existing customers wishing to upgrade, also with eligible trade-in (see below). This deal is live at Verizon today. Their fine print is below: Get up to $500 off a new iPhone with select trade-in and Unlimited. – Add a new iPhone 11, iPhone 11 Pro, iPhone 11 Pro Max, iPhone XS or iPhone XS Max with monthly device payments or at full retail price to your cart. – Trade in one of the phones below within 30 days after checkout. – Get up to $500 for your trade-in credited to your account over 24 months. Trade in: iPhone X iPhone XR iPhone XS iPhone XS Max iPhone 8 Plus iPhone 8 iPhone 7 Plus iPhone 7 Samsung Galaxy S10 Galaxy S10+ Galaxy S10e Galaxy S10 5G Galaxy S9 Galaxy S9+ Galaxy S8 Active Galaxy S8+ Galaxy Note9 Galaxy Note8 Google Pixel 3 Google Pixel 3 XL Google Pixel 2 Google Pixel 2 XL LG G8 ThinQ™ LG V50 ThinQ™ RED HYDROGEN One And get: Up to $500 (new lines) or $200 (upgrades). Trade in: iPhone 6s Plus iPhone 6s iPhone 6 Plus iPhone 6 iPhone SE iPhone 5s Galaxy S7 Galaxy S7 edge Galaxy S7 active Galaxy S6 Galaxy S6 edge Galaxy S6 edge+ Galaxy S6 active Galaxy S5 Galaxy S5 Active Galaxy S4 Galaxy S4 Active Galaxy Note5 Galaxy Note 4 Galaxy Note Edge Google Pixel XL Google Pixel Google Pixel 3a Google Pixel 3a XL LG V40 ThinQ™ LG V30 LG V20 LG V10 LG G7 ThinQ™ LG G6 LG G5 LG G4 moto z4 moto z3 moto z2 force moto z2 play moto z force moto z droid moto z play DROID Turbo 2 HTC 10 HTC One M9+ HTC One M9 And get: Up to $300 (new lines) or $100 (upgrades). Plus, get a $200 → Read More...

Read more »

AT&T offers free $300 reward card + free 64GB iPhone 11 ...
AT&T Wireless will include a second free 64GB iPhone 11 with the purchase of one eligible iPhone at full price. They will also include a free $300 rewards card. The fine print: “Buy an elig. iPhone and get the iPhone 11 on us when you buy both on a qualifying installment plan with an eligible AT&T unlimited plan (min. $145/mo. combined before discounts).” You’ll need to: – Purchase two eligible iPhones on a qualifying installment agreement – Add at least one new line to a new or existing account – Pay taxes on the full retail price of both devices up front. – Have an eligible AT&T unlimited plan (min. $125/mo. combined after discounts for new customers. Pay $145/mo. until autopay and paperless bill discounts starts w/in 2 bills. Existing customers can add to eligible existing plans, which may be less.). – Pay a $30 activation or upgrade fee for each device Note: Requires qualifying 0% APR installment agreement (30-mo. term at up to $40/mo.). Other installment options may be available and vary by location. If buying on the AT&T Installment Plan with Next Up, customer is responsible and will not receive any credits for an additional $5/mo. for the Next Up upgrade feature. Port-in of new line and well-qualified credit required for $0 down on both lines, or down payment may be required. Eligible Phones: iPhone 8, 8 Plus, XR, X, Xs, Xs Max, 11, 11 Pro, 11 Pro Max (priced up to $1450) After all that you’ll get: – iPhone 8 64GB, 8 Plus 64GB, XR 64GB/128GB, or 11 64GB for free after up to $700 in bill credits – iPhone 8 256GB, 8 Plus 256GB, XR 256GB, X, Xs, Xs Max, 11 128GB/256GB, 11 Pro, or 11 Pro Max will be up to $700 off. This deal is live today at → Read More...

Read more »

US Cellular offers 64GB iPhone 11 for free to new customers ...
US Cellular is offering the base 64GB iPhone 11 for free for new customers. Qualified trade-in of iPhone 7 or higher required (or a number of Android phones). Discounts are applied via monthly bill credit over 30 months. The fine print: “New consumer or small business (25 lines or less) NEW Plan line with Unlimited Data and portin required. Purchase of a qualifying device via 0% APR, $0 down, 30-mo. Retail Installment Contract (RIC), credit approval and Device Protection+ required. Offer applies to base model and memory only. Tax due at sale. A Regulatory Cost Recovery Fee applies; this is not a tax or gov’t-required charge. Additional fees, taxes, terms, conditions and coverage areas may apply and vary by plan, service and phone.” US Cellular’s deal is live on their → Read More...

Read more »

New 7th generation 10.2″ 128GB iPads available for preorde...
Amazon is accepting preorders for Apple’s new 7th generation 10.2″ 128GB iPads for $399.99 each, or $30 off Apple’s MSRP for this model. Shipping is free: – 10.2″ 128GB WiFi iPad Space Gray: $399.99 $30 off MSRP – 10.2″ 128GB WiFi iPad Silver: $399.99 $30 off MSRP – 10.2″ 128GB WiFi iPad Gold: $399.99 $30 off MSRP Keep an eye on our 10.2″ iPad Price Tracker for the latest prices and sales from Apple and → Read More...

Read more »

Sprint has the new 7th Generation iPad on sale for just $99,...
Sprint has the new 2019 7th Generation 32GB WiFi + Cellular iPad available starting at only $99.99 from 9/12/19 to 10/3/19. Their price is a $360 savings over Apple’s standard MSRP. See the deal live on their site here. Here is the fine print: “iPad 7th Gen 32GB $4.17/mo. after $15/mo. credit, applied within 2 bills. Reqs. 24-mo. installment billing agreement, new line on qualifying plan, and 1 active handset on account. If you cancel early, remaining balance due. Taxes due at sale.” Sprint is also offering the new 2019 Apple Watch Series 5 for 50% off. Offer is valid through November 6, 2019. See the Watch deal live on their site here. The following restriction apply to Sprint’s Apple Watch offer: “Take 50% off any Apple Watch — including Series 5. 50% off via monthly credits, applied within 2 bills. Reqs. 24-month Installment Billing agreement, new watch plan activation, and 1 active handset on account. Early termination results in remaining balance due. Taxes due at sale. Excludes 44mm Stainless with Milanese → Read More...

Read more »

Apple offers clearance iPhone 7 models starting at only $399
Apple is now offering iPhone 7 and iPhone 7 Plus models in their clearance section starting at only $399. Unlocked models are available as well as model for Verizon, AT&T, T-Mobile, and Sprint. At the time of this post, the only color available was Jet Black: – 32GB iPhone 7: $399 – 128GB iPhone 7: $449 – 32GB iPhone 7 Plus: $499 – 128GB iPhone 7 Plus: $549 Act now if you’re interested, as we don’t expect these iPhones to stay in stock for → Read More...

Read more »

13″ 2.4GHz Space Gray MacBook Pros on sale today for $220-...
Apple resellers B&H Photo and Amazon are offering new 2019 13″ 2.4GHz Space Gray 4-Core Touch Bar MacBook Pros for $220-$250 off Apple’s MSRP. Their prices are the cheapest available for these models from any Apple reseller. These are the same MacBook Pros sold by Apple in its retail and online stores: B&H Photo: – 2019 13″ 2.4GHz/256GB 4-Core MacBook Pro Space Gray: $1579 $220 off MSRP – 2019 13″ 2.4GHz/512GB 4-Core MacBook Pro Space Gray: $1749 $250 off MSRP Amazon: – 2019 13″ 2.4GHz/256GB 4-Core MacBook Pro Space Gray: $1579 $220 off MSRP – 2019 13″ 2.4GHz/512GB 4-Core MacBook Pro Space Gray: $1749 $250 off MSRP See our 13″ MacBook Pro Price Tracker for the latest prices & deals from Apple’s resellers, → Read More...

Read more »

Buy one iPhone 6S at Boost Mobile for $25, get a second for ...
Buy one 32GB iPhone 6S at Boost Mobile for $25, and get a second iPhone 6S for $25. Offer is valid until October 4, 2019 for new customers only. The fine print: “While supplies last. Excl. tax. Limit 1 device/line. Avail. for new customers only. Req. port-in & activation on eligible plans $50 or higher & unlimited family plans; excl. ports from Sprint-related carriers. In sel. markets (excl. boostmobile.com or national retailers). Discount applied toward phone purchase; no cash back, credit or rain checks. Sel. models only, no substitutions. Selection & availability vary by retailer.” Order online, then pick a Boost unlimited plan when the phone arrives. Boost Mobile is part of the Sprint network, and they offer plans beginning at $50 per month for one line. No annual contract → Read More...

Read more »