Get Rosetta Stone and StackSkills Unlimited for just $160 with code
Macworld Experts agree that the best way to keep your mind sharp over the long term is by learning new things. And for that, you can’t go wrong with The Unlimited Lifetime Learning Subscription Bundle featuring Rosetta Stone — Especially during our Labor Day Sale since you’ll save an extra $30 with code ROSETTA as long as you purchase before September 4 at 11:59pm. With lifetime subscriptions to both StackSkills Unlimited and Rosetta Stone, this bundle may be all you need to keep your mind as fit as a fiddle. You can teach yourself how to code, develop a mobile app, or learn a new language so you can start traveling the world. And since you get lifetime access to each, the value you receive is going to keep climbing the more you use it. StackSkills, of course, should need no introduction. It is, after all, a popular and critically acclaimed source for web based education. But for those unfamiliar, it features over 1,000 courses in a wide range of technical subjects with some even offering certifications. And they add 50 new courses every month, so the content will always remain cutting edge. Tired of spam calls? Put a stop to them with RoboKiller, just $49.97 for a limited time. Then, with Rosetta Stone, you’ll have the ability to learn up to 24 different languages using their award winning and proprietary approaches. It features TruAccent technology to ensure that your pronunciation is on point, you’ll first learn basic conversational words, and then advance your knowledge from there. And it works well, which is why it’s trusted by NASA, TripAdvisor, and more. Use code ROSETTA to purchase the Unlimited Lifetime Learning Subscription Bundle featuring Rosetta Stone for just $159.97.   The Unlimited Lifetime Learning Subscription Bundle ft. Rosetta Stone – $159.97 See Deal Prices subject to change. Entertainment

Read more »

Apps by Apple promotes first-party apps already on iPhone and Mac
Apple has added a new page to its website, with Apps by Apple promoting all of the first-party tools and applications Apple makes for its iPhone and other hardware.Apps by AppleUpdated on Saturday, the new Apps by Apple page explains users can "connect, create, and get things done with powerful and intuitive apps designed to be accessible, private, and secure." Read more...

Read more »

Twelve South AirFly Pro review: Boost your in-flight audio quality
Twelve South's AirFly Pro helps make your in-flight listening experiences much better, provided you don't lose the device on those hectic travel days.Review: Twelve South AirFly ProIf you are a frequent flyer, you know how frustrating it can be to endure long flights with bad audio quality. The headsets provided by most airlines are often subpar and uncomfortable. Read more...

Read more »

Apple's IPads-for-Concealed-Firearms-Licenses Bribery Case Moves Forward
"Generally you may not carry a concealed firearm on your person in public," warns a California government web site, "unless you have a valid Carry Concealed Weapon (CCW) license." And a California appellate court associated justice writes that in the county where Apple is located, "the Santa Clara County Sheriff's Office rarely issued CCW licenses." This has led to Thomas Moyer, Apple's head of global security, facing bribery charges, reports Reason's legal blog, the Volokh Conspiracy. According to the judge's statement (citing the case of the public defender)... ...the Santa Clara County undersheriff requested — and defendant Thomas Moyer made — a promise to donate iPads to the Santa Clara County Sheriff's Office in exchange for releasing concealed carry weapon licenses that the sheriff had signed. Consistent with the Ninth Circuit's interpretation of California law, federal law and the law in many states, we conclude that such a promise may constitute a bribe. We also conclude that the evidence presented to the grand jury was sufficient to raise a reasonable suspicion of such bribery. Accordingly, we reverse the trial court's order dismissing the bribery count against Moyer, reinstate that count, and remand for further proceedings. Read more of this story at Slashdot.

Read more »

Apple Watch Crash Detection comes to the rescue yet again: ‘Amazing technology that clearly impacted a person’s life’
The Apple Watch’s Crash Detection feature has once again been credited with helping save a life. This time, first responders in Wisconsin say that the Apple Watch feature kicked in to call 911 and share the user’s location after they were involved in a crash on Thursday morning. more…

Read more »

How Apple is already using machine learning and AI in iOS
Apple may not be as flashy as other companies in adopting artificial intelligence features. Still, the already has a lot of smarts scattered throughout iOS.Apple's SiriApple does not go out of its way to specifically name-drop "artificial intelligence" or AI meaningfully, but the company isn't avoiding the technology. Machine learning has become Apple's catch-all for its AI initiatives. Read more...

Read more »

Will Apple’s ‘Wonderlust’ event bring lust-worthy iPhones? [The CultCast]
This week on Cult of Mac's podcast: Apple's invite for the September 12 "Wonderlust" event offers potential clues about what to expect. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple launches new ‘Apps by Apple’ website promoting its ‘powerful and intuitive apps’
Apple has quietly debuted an all-new “Apps by Apple” page on its website designed to promote its own apps for iPhone, iPad, Apple Watch, Mac, and Apple TV. The company highlights key apps like Messages, Photos, Reminders, and more – including teasers on upcoming new features in iOS 17. and more. more…

Read more »

Prepare for the next hurricane with Bluetti power
Considering Hurricane Idalia's impact on parts of Florida, you might want to prepare for next time with Bluetti's guidelines. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Daily deals Sept 2: Apple TV $67, HomePod mini $79, MagSafe Wireless Charger $30, more
Today's top deals include 60% off an Apple power adapter & USB-C charging cable, $350 off a G16 gaming laptop, 35% off a JBL PartyBox wireless speaker, 57% off a Samsung Galaxy Smart Watch 4, and more.Get a JBL PartyBox Wireless Speaker for $260The AppleInsider crew combs the web for amazing deals at online retailers to craft a list of top-notch bargains on popular tech gadgets, including deals on Apple products, TVs, accessories, and other items. We share our top finds daily to help you get more bang for your buck. Read more...

Read more »

MLS Season Pass gets significantly cheaper in time for the playoffs
The Major League Soccer playoffs kick off soon, and fans can watch all the action with an MLS Season Pass at a third of the previous cost. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Today in Apple history: Steve Jobs prepares to take on Apple
On September 2, 1985, the tech rumor mill reported that Jobs was on the verge of setting up his own company to take on Apple. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

How to sync multiple Apple Watches to one iPhone
If you're going to buy an Apple Watch Series 9, you don't have to ditch your old one, because Apple makes it easy to use two or more with your iPhone. Here's how.In the beginning, you could only sync one Apple Watch with one iPhone. Along the way, Apple added the ability to sync more than one, but it wasn't intuitive.And now, it could not be easier than Apple's made it — once you've set everything up. From then on, switching between two or more Apple Watches is solely a case of taking one off and putting the other one on. Read more...

Read more »

Frankfurt Apple Store reopens after month-long renovation
Apple has re-opened an Apple Store in Frankfurt, Germany, with the Grosse Bockenheimer Strasse outlet back open after a brief summer renovation.Apple intends to renovate a number of stores around the world, to reenergize the physical shopping experience for its customers. As part of the program, Apple has opened back up a storefront in Germany that it had closed earlier in the summer.Accessible again on Saturday, the Apple Grosse Bockenheimer Strasse store in Frankfurt opens its doors to customers after shuttering the location on July 31, reports Macerkopf. The reopening on September 2 means the store was closed for just over a month, which is fairly short compared to some other renovation projects. Read more...

Read more »

Take an extra $15 off Microsoft Office for 2 devices
You can take your pick of a two-pack of lifetime licenses for Microsoft Office Home & Business for Mac or Microsoft Office Pro for Windows. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

How to turn your iPhone into a smart display with Standby
Standby is a headline iOS 17 feature that turns your iPhone into a smart display on your nightstand, at your desk or in the kitchen. It’s an attractive way to put your phone to work when you’re not using it as a small information board or digital clock. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple @ Work: Telepod makes moving MDM vendors a breeze on iOS and iPadOS
Apple @ Work is brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that fully integrates five different applications on a single Apple-only platform, allowing Businesses to easily and automatically deploy, manage & protect all their Apple devices. Over 38,000 organizations leverage Mosyle solutions to automate the deployment,  management, and security of millions of Apple devices daily. Request a FREE account today and discover how you can put your Apple fleet on auto-pilot at a price point that is hard to believe. Apple makes a lot of tools for IT teams when it comes to managing iPads, iPhones, and Macs. Apple Configurator is a fantastic tool that acts as a Swiss army knife of sorts when it comes to doing tasks locally on iPhones and iPads when paired with a Mac. That doesn’t mean there isn’t room for innovation, though. I recently came across a tool that could be incredibly useful in the right circumstances: Telepod. more…

Read more »

Apple details reasons to abandon CSAM-scanning tool, more controversy ensues
Safety groups remain concerned about child sexual abuse material scanning and user reporting.

Read more »

Save hundreds on a lifetime of web hosting this Labor Day with Bono Host
Macworld Modern life and work demands that you keep a website up and running, whether it’s a personal site highlighting your skills or a site for your business. This Bono Host lifetime subscription gives you all the hosting you need with no limits on the necessary tools, and right now it’s at a special price through September 4th. Built on CloudLinux, and with uptime superior to the top thirty hosting sites, Bono Host offers unlimited domains, email boxes, subdomains, mySQL databases, and more. Sites can be imported or migrated at any time, with support for Python, Perl, and other standard site coding languages. One-click app install and built-in anti-virus and DDoS protection make keeping your site safe and up-to-date simple. And if there are any issues, expert support with decades of knowledge is available at any time to help you resolve the issue. Never worry about your hosting again with a lifetime subscription to Bono Host for $49.97, 96% off the $1615 MSRP, now through the end of September 4th.   Bono Host Unlimited Plan: Lifetime Web Hosting Subscription – $49.97 See Deal Prices subject to change. Accessories

Read more »

The 5th Generation iPad Air is $120 Off
The iPad Air 5 is a light yet powerful tablet for just about every type of daily work, from typing to content creation and research. Today, the iPad Air 5th Generation WiFi + Cellular with M1 chip and 64GB is down to just $629.99 from its original price of $749 on Amazon. If you’re looking […] The post appeared first on iLounge.

Read more »

New Apple Card Family member promo launches
Apple continues to entice activity to its Apple Card platform by offering $100 Daily Cash bonuses for adding family members. To encourage Apple Card users to add new members or switch to Apple Card Family, Apple has a $25 bonus cashback per family member of up to a maximum of four. The rules state that […] The post appeared first on iLounge.

Read more »

iPhone market share expected to grow as smartphone sales decline
Counterpoint Research recently said that smartphone sales continue to decline while the iPhone goes in a different direction, market share-wise. New research from the IDC claims that smartphone shipments on a global scale will fall to a 2013 low, with Counterpoint Research echoing the same sentiment. However, the silver lining to this is Apple’s continued […] The post appeared first on iLounge.

Read more »

Apple cancels free one week Apple TV+ trial in South Africa and the UK
The free 1-week Apple TV+ promo has been removed for South Africa and UK users. Apple usually gives away free streaming promos, with the last one for the MLS Season Pass. However, countries like South Africa and the UK can no longer get the TV service for free as it has been pulled from the […] The post appeared first on iLounge.

Read more »

Some of the Apple Watch bands are currently unavailable ahead of Series 9 launch
Apple this week confirmed that it will hold a special event on September 12. Although the company never reveals in advance what will be announced at the event, we all know at this point that Apple will introduce the iPhone 15 lineup and also the Apple Watch Series 9, along with a new Apple Watch Ultra. And to corroborate the upcoming arrival of new Apple Watches, some watch bands are currently unavailable on Apple’s website. more…

Read more »

SpaceX sending iPhone Emergency SOS satellites to space for Apple partner Globalstar
Nearly a year has passed since Apple introduced the iPhone 14 featuring Emergency SOS via Satellite, allowing users to reach out to emergency services even in areas without cellular coverage. And Globalstar, Apple’s partner in providing satellites for this technology, could soon expand its coverage thanks to Elon Musk’s SpaceX. more…

Read more »

9to5Mac Daily: September 1, 2023 – The state of HomeKit with Benjamin Mayo
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by Backblaze: Don’t be “THAT” person that forgot to back up their important files. Backblaze makes backing up and accessing your data astonishingly easy. Get started with a free 15-day trial today. more…

Read more »

Apple Arcade Guide: Everything that’s available [New: Samba de Amigo]
Apple Arcade launched with close to 100 titles and the service is seeing new games added regularly with over 200 games now in the library. Follow along with our guide on all the available Apple Arcade games. more…

Read more »

Hands-on: CarPlay in iOS 17 adds SharePlay for Apple Music listening parties, even for long-distance friends
One of the big changes in iOS 17 for CarPlay users is the addition of SharePlay support for Apple Music. This feature allows anyone in the car to control and contribute to what’s playing via Apple Music, rather than just one person. I took SharePlay for Apple Music in iOS 17 for a recent drive. My takeaway? This is going to be a very, very fun feature. el

Read more »

iOS 17: Here are the features that won’t be available at launch
iOS 17 is set to be released in September with a number of new features, ranging from upgrades to Messages, major upgrades to autocorrect, and more. There are multiple new iOS 17 features, however, that Apple previewed at WWDC but says won’t be available until sometime later this year. more…

Read more »

Child safety advocacy group launches campaign against Apple
Heat Initiative, a child safety advocacy group, is launching a multi-million dollar campaign against Apple to pressure the company into reinstating iCloud CSAM detection.Apple's abandoned child protection featureHeat Initiative said it would launch the campaign against Apple after pressing the tech giant on why it had abandoned plans for on-device and iCloud Child Sexual Abuse Material (CSAM) detection tools. The launch comes after Apple giving its most detailed response yet as to why it backed off its plans, citing that it would uphold user privacy. Read more...

Read more »

Why is .US Being Used to Phish So Many of Us?
Domain names ending in “.US” — the top-level domain for the United States — are among the most prevalent in phishing scams, new research shows. This is noteworthy because .US is overseen by the U.S. government, which is frequently the target of phishing domains ending in .US. Also, .US domains are only supposed to be available to U.S. citizens and to those who can demonstrate that they have a physical presence in the United States.

Read more »

U.S. Hacks QakBot, Quietly Removes Botnet Infections
The U.S. government today announced a coordinated crackdown against QakBot, a complex malware family used by multiple cybercrime groups to lay the groundwork for ransomware infections. The international law enforcement operation involved seizing control over the botnet's online infrastructure, and quietly removing the Qakbot malware from tens of thousands of infected Microsoft Windows computer systems.

Read more »

Vulnerability Summary for the Week of August 21, 2023
  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info qemu -- qemu The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code on the host via execute a malformed program in the guest OS. 2023-08-22 10 CVE-2022-36648MISC c-ares -- c-ares Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c. 2023-08-22 9.8 CVE-2020-22217MISC flac_project -- flac Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder. 2023-08-22 9.8 CVE-2020-22219MISC leeco -- letv_x43_firmware An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN02C080080B04121S, allows attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). 2023-08-21 9.8 CVE-2020-28715MISCMISC gnu -- gnu_scientific_library A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_stats_quantile_from_sorted_data of the library may lead to unexpected application termination or arbitrary code execution. 2023-08-22 9.8 CVE-2020-35357MISCMISC libjpeg-turbo -- libjpeg-turbo libjpeg-turbo version 2.0.90 is vulnerable to a heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c. 2023-08-22 9.8 CVE-2021-29390MISC json-c_project -- json-c An issue was discovered in json-c through 0.15-20200726. A stack-buffer-overflow exists in the function parseit located in json_parse.c. It allows an attacker to cause code Execution. 2023-08-22 9.8 CVE-2021-32292MISC dpic_project -- dpic dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y 2023-08-22 9.8 CVE-2021-33388MISC dpic_project -- dpic dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421. 2023-08-22 9.8 CVE-2021-33390MISC terra-master -- terramaster_operating_system TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instantiation to the api.php?mobile/createRaid URI. (Shell metacharacters can be placed in raidtype because popen is used without any sanitization.) The credentials from CVE-2022-24990 exploitation can be used. 2023-08-20 9.8 CVE-2022-24989MISCMISCMISCMISCMISC pandorafms -- pandora_fms Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue ( unrestricted file upload ) to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prior versions on all platforms. 2023-08-22 9.8 CVE-2023-24517MISC danfoss -- ak-sm_800a_firmware Due to improper input validation, a remote attacker could execute arbitrary commands on the target system. 2023-08-21 9.8 CVE-2023-25915MISCMISC nodejs -- node.js The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js. 2023-08-21 9.8 CVE-2023-32002MISC elecom -- lan-w300n/rs_firmware Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allow an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. 2023-08-18 9.8 CVE-2023-32626MISCMISC e-excellence -- u-office_force   e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service. 2023-08-25 9.8 CVE-2023-32757MISC elecom -- lan-wh300andgpe_firmware Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions, LAN-W300N/P all versions, LAN-WH450N/GP all versions, LAN-WH300AN/DGP all versions, LAN-WH300N/DGP all versions, and LAN-WH300ANDGPE all versions. 2023-08-18 9.8 CVE-2023-35991MISCMISC langchain -- langchain An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter. 2023-08-22 9.8 CVE-2023-36281MISCMISC ivanti -- mobileiron_sentry A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration. 2023-08-21 9.8 CVE-2023-38035MISC ibm -- robotic_process_automation IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an LDAP directory. IBM X-Force ID: 262481. 2023-08-22 9.8 CVE-2023-38734MISCMISC jerryscript -- jerryscript Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scanner-until.c. 2023-08-21 9.8 CVE-2023-38961MISC elecom -- wrc-x1800gs-b_firmware Buffer overflow vulnerability in WRC-X1800GS-B v1.13 and earlier, WRC-X1800GSA-B v1.13 and earlier, and WRC-X1800GSH-B v1.13 and earlier allows an unauthenticated attacker to execute arbitrary code. 2023-08-18 9.8 CVE-2023-39454MISCMISC totolink -- x5000r_firmware TOTOLINK X5000R_V9.1.0cu.2089_B20211224 and X5000R_V9.1.0cu.2350_B20230313 were discovered to contain a remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function. 2023-08-21 9.8 CVE-2023-39617MISC totolink -- x5000r_firmware TOTOLINK X5000R B20210419 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg interface. 2023-08-21 9.8 CVE-2023-39618MISC gabrieleventuri -- pandasai An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function. 2023-08-21 9.8 CVE-2023-39660MISCMISC dlink -- dir-842_firmware D-Link DIR-842 fw_revA_1-02_eu_multi_20151008 was discovered to contain multiple buffer overflows in the fgets function via the acStack_120 and acStack_220 parameters. 2023-08-18 9.8 CVE-2023-39666MISCMISCMISC tenda -- ac6_firmware Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets. 2023-08-18 9.8 CVE-2023-39670MISCMISC dlink -- dir-880l_a1_firmware D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function FUN_0001be68. 2023-08-18 9.8 CVE-2023-39671MISCMISCMISC tenda -- wh450a_firmware Tenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets. 2023-08-18 9.8 CVE-2023-39672MISCMISC tenda -- ac15_firmware Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34(). 2023-08-18 9.8 CVE-2023-39673MISCMISC dlink -- dir-880l_a1_firmware D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function fgets. 2023-08-18 9.8 CVE-2023-39674MISCMISCMISC tp-link -- tl-wr940n_v2_firmware TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm. 2023-08-21 9.8 CVE-2023-39747MISC dlink -- dap-2660_firmware D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /adv_resource. This vulnerability is exploited via a crafted GET request. 2023-08-21 9.8 CVE-2023-39749MISCMISC dlink -- dap-2660_firmware D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the f_ipv6_enable parameter at /bsc_ipv6. This vulnerability is exploited via a crafted POST request. 2023-08-21 9.8 CVE-2023-39750MISCMISC tp-link -- tl-wr941nd_v6_firmware TP-Link TL-WR941ND V6 were discovered to contain a buffer overflow via the pSize parameter at /userRpm/PingIframeRpm. 2023-08-21 9.8 CVE-2023-39751MISC nvki -- intelligent_broadband_subscriber_gateway N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection vulnerability via the a_passwd parameter at /portal/user-register.php. 2023-08-21 9.8 CVE-2023-39807MISCMISC nvki -- intelligent_broadband_subscriber_gateway N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root password which allows attackers to login with root privileges via the SSH service. 2023-08-21 9.8 CVE-2023-39808MISCMISC nvki -- intelligent_broadband_subscriber_gateway N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a command injection vulnerability via the system_hostname parameter at /manage/network-basic.php. 2023-08-21 9.8 CVE-2023-39809MISCMISC elecom -- wrc-f1167acf_firmware OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions, WRC-1167GHBK2 all versions, WRC-1750GHBK2-I all versions, and WRC-1750GHBK-E all versions. 2023-08-18 9.8 CVE-2023-40069MISCMISC fobybus -- social-media-skeleton Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly manage the lifecycle of a user's session. Social media skeleton releases prior to 1.0.5 did not properly limit manage user session lifecycles. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this vulnerability. 2023-08-18 9.8 CVE-2023-40174MISCMISC puma -- puma Puma is a Ruby/Rack web server built for parallelism. Prior to versions 6.3.1 and 5.6.7, puma exhibited incorrect behavior when parsing chunked transfer encoding bodies and zero-length Content-Length headers in a way that allowed HTTP request smuggling. Severity of this issue is highly dependent on the nature of the web site using puma is. This could be caused by either incorrect parsing of trailing fields in chunked transfer encoding bodies or by parsing of blank/zero-length Content-Length headers. Both issues have been addressed and this vulnerability has been fixed in versions 6.3.1 and 5.6.7. Users are advised to upgrade. There are no known workarounds for this vulnerability. 2023-08-18 9.8 CVE-2023-40175MISCMISC devolutions -- remote_desktop_manager Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature. 2023-08-21 9.8 CVE-2023-4373MISC wordpress -- wordpress   The Donation Forms by Charitable plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.7.0.12 due to insufficient restriction on the 'update_core_user' function. This makes it possible for unauthenticated attackers to specify their user role by supplying the 'role' parameter during a registration. 2023-08-23 9.8 CVE-2023-4404MISCMISC credit_lite_project -- credit_lite A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4. Affected by this vulnerability is an unknown functionality of the file /portal/reports/account_statement of the component POST Request Handler. The manipulation of the argument date1/date2 leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-237511. 2023-08-18 9.8 CVE-2023-4407MISCMISCMISC totolink -- ex1200l_firmware A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023. This affects the function setDiagnosisCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237513 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 9.8 CVE-2023-4410MISCMISCMISC totolink -- ex1200l_firmware A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-237514 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 9.8 CVE-2023-4411MISCMISCMISC totolink -- ex1200l_firmware A vulnerability was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This issue affects the function setWanCfg. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237515. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 9.8 CVE-2023-4412MISCMISCMISC beijing_baichuo -- smart_s85f_management_platform A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237517 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 9.8 CVE-2023-4414MISCMISCMISC sourcecodester -- inventory_management_system A vulnerability, which was classified as critical, has been found in SourceCodester Inventory Management System 1.0. This issue affects some unknown processing of the file app/action/edit_update.php. The manipulation of the argument user_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237557 was assigned to this vulnerability. 2023-08-20 9.8 CVE-2023-4436MISCMISCMISC sourcecodester -- inventory_management_system A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/search_sell_paymen_report.php. The manipulation of the argument customer leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-237558 is the identifier assigned to this vulnerability. 2023-08-20 9.8 CVE-2023-4437MISCMISCMISC sourcecodester -- inventory_management_system A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file app/ajax/search_sales_report.php. The manipulation of the argument customer leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237559. 2023-08-20 9.8 CVE-2023-4438MISCMISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been classified as critical. This affects an unknown part of the file appointment.php. The manipulation of the argument sheduledate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237561 was assigned to this vulnerability. 2023-08-20 9.8 CVE-2023-4440MISCMISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /patient/appointment.php. The manipulation of the argument sheduledate leads to sql injection. The attack can be initiated remotely. VDB-237562 is the identifier assigned to this vulnerability. 2023-08-21 9.8 CVE-2023-4441MISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been rated as critical. This issue affects some unknown processing of the file vmpatientbooking-complete.php. The manipulation of the argument userid/apponum/scheduleid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237563. 2023-08-21 9.8 CVE-2023-4442MISCMISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0/5.0.12. Affected is an unknown function of the file vmdoctoredit-doc.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237564. 2023-08-21 9.8 CVE-2023-4443MISCMISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is an unknown functionality of the file vmpatientedit-user.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237565 was assigned to this vulnerability. 2023-08-21 9.8 CVE-2023-4444MISCMISCMISC mini -- mini-tmall A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20230811. Affected by this issue is some unknown functionality of the file product/1/1?test=1&test2=2&. The manipulation of the argument orderBy leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237566 is the identifier assigned to this vulnerability. 2023-08-21 9.8 CVE-2023-4445MISCMISCMISC openrapid -- rapidcms A vulnerability, which was classified as critical, was found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file template/default/category.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237567. 2023-08-21 9.8 CVE-2023-4446MISCMISCMISC openrapid -- rapidcms A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. This vulnerability affects unknown code of the file admin/article-chat.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237568. 2023-08-21 9.8 CVE-2023-4447MISCMISCMISC openrapid -- rapidcms A vulnerability was found in OpenRapid RapidCMS 1.3.1 and classified as critical. This issue affects some unknown processing of the file admin/run-movepass.php. The manipulation of the argument password/password2 leads to weak password recovery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 4dff387283060961c362d50105ff8da8ea40bcbe. It is recommended to apply a patch to fix this issue. The identifier VDB-237569 was assigned to this vulnerability. 2023-08-21 9.8 CVE-2023-4448MISCMISCMISCMISC jeecg -- jimureport A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-237571. 2023-08-21 9.8 CVE-2023-4450MISCMISCMISC typora -- typora DOM-based XSS in updater/update.html in Typora before 1.6.7 on Windows and Linux allows a crafted markdown file to run arbitrary JavaScript code in the context of Typora main window via loading typora://app/typemark/updater/update.html in tag. This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora. 2023-08-19 9.6 CVE-2023-2317MISCMISC marktext -- marktext DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScript code to run in the context of MarkText main window. This vulnerability can be exploited if a user copies text from a malicious webpage and paste it into MarkText. 2023-08-19 9.6 CVE-2023-2318MISCMISC luxsoft -- luxcal_web_calendar SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote unauthenticated attacker to execute arbitrary queries against the database and obtain or alter the information in it. 2023-08-21 9.1 CVE-2023-39939MISCMISCMISC hdfgroup -- hdf5 Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file. 2023-08-22 8.8 CVE-2020-18232MISC hdfgroup -- hdf5 Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file. 2023-08-22 8.8 CVE-2020-18494MISC gnu -- binutils An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service. 2023-08-22 8.8 CVE-2020-19726MISCMISC freeimage_project -- freeimage Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafted ico file. 2023-08-22 8.8 CVE-2020-24292MISC freeimage_project -- freeimage Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafted psd file. 2023-08-22 8.8 CVE-2020-24293MISC freeimage_project -- freeimage Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine() in FreeImage 3.19.0 [r1859] allows remote attackers to ru narbitrary code via use of crafted psd file. 2023-08-22 8.8 CVE-2020-24295MISC cesanta -- mongoose Buffer overflow in mg_resolve_from_hosts_file in Mongoose 6.18, when reading from a crafted hosts file. 2023-08-22 8.8 CVE-2020-25887MISC freeimage_project -- freeimage A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp. 2023-08-22 8.8 CVE-2021-40265MISC sass-lang -- libsass Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function. 2023-08-22 8.8 CVE-2022-26592MISC geomatika -- isigeo_web An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to execute commands. 2023-08-22 8.8 CVE-2023-23564MISCMISCMISC opensuse -- libeconf A stack overflow vulnerability exists in function econf_writeFile in file atlibeconf/lib/libeconf.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code. 2023-08-22 8.8 CVE-2023-30078MISCMISCMISC opensuse -- libeconf A stack overflow vulnerability exists in function read_file in atlibeconf/lib/getfilecontents.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code. 2023-08-22 8.8 CVE-2023-30079MISCMISCMISC microsoft -- edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2023-08-21 8.8 CVE-2023-36787MISC elecom -- lan-w451ngr_firmware LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service. 2023-08-18 8.8 CVE-2023-38132MISCMISC boidcms -- boidcms File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code via the GIF header component. 2023-08-21 8.8 CVE-2023-38836MISCMISC online_shopping_portal_project -- online_shopping_portal Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks. 2023-08-18 8.8 CVE-2023-38890MISC elecom -- wrc-1467ghbk-a_firmware Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console. 2023-08-18 8.8 CVE-2023-39445MISCMISC elecom -- wrc-600ghbk-a_firmware OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions. 2023-08-18 8.8 CVE-2023-39455MISCMISC elecom -- wrc-f1167acf_firmware OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allow an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. 2023-08-18 8.8 CVE-2023-39944MISCMISC elecom -- wab-s600-ps_firmware OS command injection vulnerability in WAB-S600-PS all versions, and WAB-S300 all versions allow an authenticated user to execute an arbitrary OS command by sending a specially crafted request. 2023-08-18 8.8 CVE-2023-40072MISCMISC fobybus -- social-media-skeleton Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. A Cross-site request forgery (CSRF) attack is a type of malicious attack whereby an attacker tricks a victim into performing an action on a website that they do not intend to do. This can be done by sending the victim a malicious link or by exploiting a vulnerability in the website. Prior to version 1.0.5 Social media skeleton did not properly restrict CSRF attacks. This has been addressed in version 1.0.5 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2023-08-18 8.8 CVE-2023-40172MISCMISC happysoft -- nbs&happysoftwechat A vulnerability, which was classified as critical, has been found in NBS&HappySoftWeChat 1.1.6. Affected by this issue is some unknown functionality. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237512. 2023-08-18 8.8 CVE-2023-4409MISCMISCMISC ruijienetworks -- rg-ew1200g_firmware A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237518 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 8.8 CVE-2023-4415MISCMISCMISC google -- chrome Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2023-08-23 8.8 CVE-2023-4429MISCMISCMISC google -- chrome Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2023-08-23 8.8 CVE-2023-4430MISCMISCMISC sourcecodester -- free_and_open_source_inventory_management_system A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php?page=member. The manipulation of the argument columns[0][data] leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-237570 is the identifier assigned to this vulnerability. 2023-08-21 8.8 CVE-2023-4449MISCMISCMISC spice-space -- spice-server An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product. There is a security vulnerablility that can restart KVMvirtual machine without any authorization. It is not yet known if there will be other other effects. 2023-08-22 8.6 CVE-2020-23793MISC microsoft -- microsoft_edge   Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2023-08-26 8.3 CVE-2023-36741MISC google -- chrome Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) 2023-08-23 8.1 CVE-2023-4428MISCMISCMISC google -- chrome Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) 2023-08-23 8.1 CVE-2023-4431MISCMISCMISC elecom -- lan-wh300n/re_firmware Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console. 2023-08-18 8 CVE-2023-38576MISCMISC exiv2 -- exiv2 Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file. 2023-08-22 7.8 CVE-2020-18831MISCMISC microsoft -- z3 There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempts to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution. 2023-08-22 7.8 CVE-2020-19725MISC freeimage_project -- freeimage Buffer Overflow vulnerability in function C_IStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. 2023-08-22 7.8 CVE-2020-21426MISC freeimage_project -- freeimage Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. 2023-08-22 7.8 CVE-2020-21427MISC freeimage_project -- freeimage Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. 2023-08-22 7.8 CVE-2020-21428MISC ogg_video_tools_project -- ogg_video_tools Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file. 2023-08-22 7.8 CVE-2020-21722MISCMISC ogg_video_tools_project -- ogg_video_tools Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file. 2023-08-22 7.8 CVE-2020-21724MISCMISC artifex -- ghostscript Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF document. 2023-08-22 7.8 CVE-2020-21890MISC gnu -- binutils Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c. 2023-08-22 7.8 CVE-2022-44840MISC gnu -- binutils Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c. 2023-08-22 7.8 CVE-2022-45703MISC 7-zip -- p7zip p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. 2023-08-22 7.8 CVE-2022-47069MISC gnu -- binutils An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads which may cause a denial of service or other unspecified impacts. 2023-08-22 7.8 CVE-2022-47673MISC gnu -- binutils An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c. 2023-08-22 7.8 CVE-2022-47695MISC gnu -- binutils An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function compare_symbols. 2023-08-22 7.8 CVE-2022-47696MISC berkaygediz -- o_blog SQL injection vulnerability in berkaygediz O_Blog v.1.0 allows a local attacker to escalate privileges via the secure_file_priv component. 2023-08-21 7.8 CVE-2023-38899MISCMISCMISCMISC openvpn -- openvpn Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet. 2023-08-22 7.5 CVE-2020-20813MISC postgresql -- postgresql An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. 2023-08-22 7.5 CVE-2020-21469MISC libssh2 -- libssh2 An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory. 2023-08-22 7.5 CVE-2020-22218MISC memcached -- memcached Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted meta command. 2023-08-22 7.5 CVE-2020-22570MISC freedesktop -- poppler Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input. 2023-08-22 7.5 CVE-2020-23804MISC realtek -- rtl8812au_firmware An issue was discovered in function nl80211_send_chandef in rtl8812au v5.6.4.2 allows attackers to cause a denial of service. 2023-08-22 7.5 CVE-2020-26652MISC linux -- kernel A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgacon_invert_region() function. 2023-08-22 7.5 CVE-2020-27418MISCMISC gnu -- binutils GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak. 2023-08-22 7.5 CVE-2020-35342MISC vsftpd_project -- vsftpd VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed. 2023-08-22 7.5 CVE-2021-30047MISC dpic_project -- dpic dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y. 2023-08-22 7.5 CVE-2021-32420MISCMISC dpic_project -- dpic dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y. 2023-08-22 7.5 CVE-2021-32421MISCMISC dpic_project -- dpic dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array. 2023-08-22 7.5 CVE-2021-32422MISCMISC imagemagick -- imagemagick An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c. 2023-08-22 7.5 CVE-2021-40211MISC gnu -- binutils Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37. 2023-08-22 7.5 CVE-2021-46174MISC python -- python The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service. 2023-08-22 7.5 CVE-2022-25024MISCMISCMISCMISC radare -- radare2 A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28068MISC radare -- radare2 A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28069MISC radare -- radare2 A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28070MISC radare -- radare2 A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28071MISC radare -- radare2 A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28072MISC radare -- radare2 A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28073MISC imagemagick -- imagemagick A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command. 2023-08-22 7.5 CVE-2022-48541MISC python -- python A use-after-free exists in Python through 3.9 via heappushpop in heapq. 2023-08-22 7.5 CVE-2022-48560MISC cryptopp -- crypto++ Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to memory outside of the allocation if the allocated memory was not 16-byte aligned. NOTE: this issue exists because the CVE-2019-14318 fix was intentionally removed for functionality reasons. 2023-08-22 7.5 CVE-2022-48570MISCMISC memcached -- memcached memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP. 2023-08-22 7.5 CVE-2022-48571MISC cisco -- secure_endpoint_private_cloud A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a logic error in the memory management of an affected device. An attacker could exploit this vulnerability by submitting a crafted AutoIt file to be scanned by ClamAV on the affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to restart unexpectedly, resulting in a DoS condition. 2023-08-18 7.5 CVE-2023-20212MISC danfoss -- ak-sm_800a_firmware Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information. 2023-08-21 7.5 CVE-2023-25913MISCMISC danfoss -- ak-sm_800a_firmware Due to improper restriction, attackers could retrieve and read system files of the underlying server through the XML interface. 2023-08-21 7.5 CVE-2023-25914MISCMISC e-excellence -- u-office_force   e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. An unauthenticated remote attacker can exploit this vulnerability to read arbitrary system files but can’t control system or disrupt service. 2023-08-25 7.5 CVE-2023-32756MISC wordpress -- wordpress The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a crafted URL, bypassing the protection offered. 2023-08-21 7.5 CVE-2023-3604MISC qt -- qt In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a situation in which a prefix is greater than a length. 2023-08-20 7.5 CVE-2023-37369MISCMISCMLIST kidus -- minimati SQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain sensitive information via theID parameter in the fulldelete.php component. 2023-08-18 7.5 CVE-2023-38839MISC weaviate -- weaviate An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function. 2023-08-21 7.5 CVE-2023-38976MISC ntsc-crt_project -- ntsc-crt NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmp_rw.c because a file's width, height, and BPP are not validated. NOTE: the vendor's perspective is "this main application was not intended to be a well-tested program, it's just something to demonstrate it works and for the user to see how to integrate it into their own programs." 2023-08-18 7.5 CVE-2023-39125MISC northgrid -- proself Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote unauthenticated attacker to log in to the product's Control Panel and perform an unintended operation. 2023-08-18 7.5 CVE-2023-39415MISCMISCMISC dlink -- dir-880l_a1_firmware D-Link DIR-880 A1_FW107WWb08 was discovered to contain a NULL pointer dereference in the function FUN_00010824. 2023-08-18 7.5 CVE-2023-39669MISCMISCMISC tp-link -- tl-wr940n_v2_firmware TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via the component /userRpm/AccessCtrlAccessRulesRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. 2023-08-21 7.5 CVE-2023-39745MISC tp-link -- tl-wr1041n_v2_firmware An issue in the component /userRpm/NetworkCfgRpm of TP-Link TL-WR1041N V2 allows attackers to cause a Denial of Service (DoS) via a crafted GET request. 2023-08-21 7.5 CVE-2023-39748MISC tenda -- ac8v4_firmware Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the save_virtualser_data function. 2023-08-21 7.5 CVE-2023-39784MISCMISC tenda -- ac8v4_firmware Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the set_qosMib_list function. 2023-08-21 7.5 CVE-2023-39785MISCMISC tenda -- ac8v4_firmware Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sscanf function. 2023-08-21 7.5 CVE-2023-39786MISCMISC fobybus -- social-media-skeleton Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Prior to version 1.0.5 Social media skeleton did not properly salt passwords leaving user passwords susceptible to cracking should an attacker gain access to hashed passwords. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this issue. 2023-08-18 7.5 CVE-2023-40173MISCMISCMISC veilid -- veilid Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service (out-of-memory abort) via crafted packet data, as exploited in the wild in August 2023. 2023-08-20 7.5 CVE-2023-40711MISC typora -- typora Improper path handling in Typora before 1.6.7 on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora. 2023-08-19 7.4 CVE-2023-2316MISCMISC northgrid -- proself Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands. 2023-08-18 7.2 CVE-2023-39416MISCMISCMISC mcafee -- safe_connect McAfee Safe Connect before 2.16.1.126 may allow an adversary with system privileges to achieve privilege escalation by loading arbitrary DLLs. 2023-08-21 7.2 CVE-2023-40352CONFIRMMISC oracle -- apache_xml_graphics_batik Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later. 2023-08-22 7.1 CVE-2022-44729MISCMISCMISCMISC obsidian -- obsidian Improper path handling in Obsidian desktop before 1.2.8 on Windows, Linux and macOS allows a crafted webpage to access local files and exfiltrate them to remote web servers via "app://local/". This vulnerability can be exploited if a user opens a malicious markdown file in Obsidian, or copies text from a malicious webpage and paste it into Obsidian. 2023-08-19 7.1 CVE-2023-2110MISCMISC unity -- parsec Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User" mode. The application intentionally launches DLLs from a user-owned directory but intended to always perform integrity verification of those DLLs. This affects Parsec Loader versions through 8. Parsec Loader 9 is a fixed version. 2023-08-20 7 CVE-2023-37250MISCMISCCONFIRM Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info phplist -- phplist An issue was discovered in phpList 3.6.12. Due to an access error, it was possible to manipulate and edit data of the system's super admin, allowing one to perform an account takeover of the user with super-admin permission. 2023-08-18 6.7 CVE-2023-27576MISC webassembly -- binaryen A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as. 2023-08-22 6.5 CVE-2020-18378MISC webassembly -- binaryen Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-opt. 2023-08-22 6.5 CVE-2020-18382MISC exempi_project -- exempi Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted audio file with ID3V2 frame. 2023-08-22 6.5 CVE-2020-18651MISCMISC exempi_project -- exempi Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file. 2023-08-22 6.5 CVE-2020-18652MISCMISC freedesktop -- poppler Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause a denial of service. 2023-08-22 6.5 CVE-2020-18839MISC gnu -- ncurses Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19185MISC gnu -- ncurses Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19186MISC gnu -- ncurses Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19187MISC gnu -- ncurses Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19188MISC gnu -- ncurses Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19189MISC gnu -- ncurses Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19190MISC freeimage_project -- freeimage Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a denial of service via crafted PFM file. 2023-08-22 6.5 CVE-2020-22524MISC libraw -- libraw Buffer Overflow vulnerability in LibRaw::stretch() function in librawsrcpostprocessingaspect_ratio.cpp. 2023-08-22 6.5 CVE-2020-22628MISC freeimage_project -- freeimage Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to cuase a denial of service via opening of crafted psd file. 2023-08-22 6.5 CVE-2020-24294MISC freeimage_project -- freeimage A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp. 2023-08-22 6.5 CVE-2021-40262MISC freeimage_project -- freeimage NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImage_CloneTag function inFreeImageTag.cpp. 2023-08-22 6.5 CVE-2021-40264MISC freeimage_project -- freeimage FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference. 2023-08-22 6.5 CVE-2021-40266MISC upx_project -- upx Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx function. 2023-08-22 6.5 CVE-2021-46179MISC freedesktop -- poppler An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream check before saving an embedded file. 2023-08-22 6.5 CVE-2022-37051MISCMISC freedesktop -- poppler A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject. 2023-08-22 6.5 CVE-2022-37052MISCMISC libtiff -- libtiff An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file. 2023-08-22 6.5 CVE-2022-40090MISCMISC python -- python read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format. 2023-08-22 6.5 CVE-2022-48564MISC geomatika -- isigeo_web An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to obtain sensitive database content via SQL Injection. 2023-08-22 6.5 CVE-2023-23563MISCMISCMISC pandorafms -- pandora_fms Server-Side Request Forgery (SSRF) vulnerability in API checker of Pandora FMS. Application does not have a check on the URL scheme used while retrieving API URL. Rather than validating the http/https scheme, the application allows other scheme such as file, which could allow a malicious user to fetch internal file content. This issue affects Pandora FMS v767 version and prior versions on all platforms. 2023-08-22 6.5 CVE-2023-24515MISC typora -- typora Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora. 2023-08-19 6.5 CVE-2023-2971MISC tp-link -- tapo An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message. 2023-08-22 6.5 CVE-2023-38906MISCMISC tp-link -- tapo An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the TSKEP authentication function. 2023-08-22 6.5 CVE-2023-38908MISCMISCMISC tp-link -- tapo An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the IV component in the AES128-CBC function. 2023-08-22 6.5 CVE-2023-38909MISCMISCMISC oracle -- apache_nifi Apache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS access in several Processors and Controller Services with connection URL validation that does not provide sufficient protection against crafted inputs. An authenticated and authorized user can bypass connection URL validation using custom input formatting. The resolution enhances connection URL validation and introduces validation for additional related properties. Upgrading to Apache NiFi 1.23.1 is the recommended mitigation. 2023-08-18 6.5 CVE-2023-40037MISCMISCMISC devolutions -- remote_desktop_manager Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in the duplication write process. 2023-08-21 6.5 CVE-2023-4417MISC wallabag -- wallabag Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3. 2023-08-21 6.5 CVE-2023-4455MISCMISC redhat -- openshift_logging A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached. 2023-08-21 6.5 CVE-2023-4456MISCMISC samsung -- sww-3400rw_firmware A reflected cross site scripting (XSS) vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bin/command.cgi 2023-08-22 6.1 CVE-2020-22181MISCMISC nagios -- nagios_xi Cross Site Scripting (XSS) in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request. 2023-08-22 6.1 CVE-2020-23992MISC cacti -- cacti Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php. 2023-08-22 6.1 CVE-2022-41444MISC cacti -- cacti A reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML in the "ref" parameter at auth_changepassword.php. 2023-08-22 6.1 CVE-2022-48547MISC pandorafms -- pandora_fms Cross-site Scripting (XSS) vulnerability in Visual Console Module of Pandora FMS could be used to hijack admin users session cookie values, carry out phishing attacks, etc. This issue affects Pandora FMS v767 version and prior versions on all platforms. 2023-08-22 6.1 CVE-2023-24514MISC wordpress -- wordpress Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in UX-themes Flatsome plugin

Read more »

Kroll Employee SIM-Swapped for Crypto Investor Data
Security consulting giant Kroll disclosed today that a SIM-swapping attack against one of its employees led to the theft of user information for multiple cryptocurrency platforms that are relying on Kroll services in their ongoing bankruptcy proceedings. And there are indications that fraudsters may already be exploiting the stolen data in phishing attacks. Cryptocurrency lender BlockFi and the now-collapsed crypto trading platform FTX each disclosed data breaches this week thanks to a recent SIM-swapping attack targeting an employee of Kroll -- the company handling both firms' bankruptcy restructuring.

Read more »

Tourists Give Themselves Away by Looking Up. So Do Most Network Intruders.
In large metropolitan areas, tourists are often easy to spot because they're far more inclined than locals to gaze upward at the surrounding skyscrapers. Security experts say this same tourist dynamic is a dead giveaway in virtually all computer intrusions that lead to devastating attacks like ransomware, and that more organizations should set simple virtual tripwires that sound the alarm when authorized users and devices are spotted exhibiting this behavior.

Read more »

Vulnerability Summary for the Week of August 14, 2023
High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info foldingathome -- client_advanced_control An issue was discovered in FoldingAtHome Client Advanced Control GUI before commit 9b619ae64443997948a36dda01b420578de1af77, allows remote attackers to execute arbitrary code via crafted payload to function parse_message in file Connection.py. 2023-08-11 9.8 CVE-2020-27544MISC sourcecodester -- school_faculty_scheduling_system SQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows remote attacker to execute arbitrary code, escalate privilieges, and gain sensitive information via crafted payload to id parameter in manage_user.php. 2023-08-11 9.8 CVE-2020-36034MISCMISCMISC bloofox -- bloofoxcms File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via crafted webshell file to upload module. 2023-08-11 9.8 CVE-2020-36082MISC hello.js_project -- hello.js Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code via hello.utils.extend function. 2023-08-11 9.8 CVE-2021-26505MISC open-falcon -- dashboard An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sensitive information via crafted POST request to register interface. 2023-08-11 9.8 CVE-2021-27523MISC ruoyi -- ruoyi An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges. 2023-08-11 9.8 CVE-2021-28411MISC intel(r) -- ethernet_controller_rdma_driver_for_linux Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access. 2023-08-11 9.8 CVE-2023-25775MISC wordpress -- wordpress The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter. This allows unauthenticated attackers to include and execute arbitrary remote code on the server, provided that allow_url_include is enabled. Local File Inclusion is also possible, albeit less useful because it requires that the attacker be able to upload a malicious php file via FTP or some other means into a directory readable by the web server. 2023-08-12 9.8 CVE-2023-3452MISCMISCMISC novel-plus -- novel-plus novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability. 2023-08-14 9.8 CVE-2023-37847MISCMISCMISC huawei -- emui Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with escalated privileges. 2023-08-13 9.8 CVE-2023-39405MISCMISC schoolmate -- schoolmate Schoolmate v1.3 was discovered to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters at DeleteFunctions.php. 2023-08-15 9.8 CVE-2023-39850MISCMISC veritas -- netbackup_snapshot_manager A vulnerability was discovered in Veritas NetBackup Snapshot Manager before 10.2.0.1 that allowed untrusted clients to interact with the RabbitMQ service. This was caused by improper validation of the client certificate due to misconfiguration of the RabbitMQ service. Exploiting this impacts the confidentiality and integrity of messages controlling the backup and restore jobs, and could result in the service becoming unavailable. This impacts only the jobs controlling the backup and restore activities, and does not allow access to (or deletion of) the backup snapshot data itself. This vulnerability is confined to the NetBackup Snapshot Manager feature and does not impact the RabbitMQ instance on the NetBackup primary servers. 2023-08-11 9.8 CVE-2023-40256MISC gitpython -- gitpython GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439. 2023-08-11 9.8 CVE-2023-40267MISCMISC intel(r) -- manageability_commander Cross-site Scripting (XSS) in some Intel(R) Manageability Commander software before version 2.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access. 2023-08-11 9.6 CVE-2022-29887MISC intel(r) -- driver_support_assistant Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via network access. 2023-08-11 9.6 CVE-2023-27515MISC zrlog -- zrlog Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows remote attackers to delete arbitrary files and cause a denial of service (DoS). 2023-08-11 9.1 CVE-2020-27514MISC huawei -- emui Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of this vulnerability will cause the hopped app to bypass the app lock and reset the device that initiates the hop. 2023-08-13 9.1 CVE-2021-46895MISCMISC huawei -- emui Vulnerability of configuration defects in the media module of certain products. Successful exploitation of this vulnerability may cause unauthorized access. 2023-08-13 9.1 CVE-2023-39385MISCMISC huawei -- emui Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 2023-08-13 9.1 CVE-2023-39398MISCMISC huawei -- emui Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 2023-08-13 9.1 CVE-2023-39399MISCMISC huawei -- emui Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 2023-08-13 9.1 CVE-2023-39400MISCMISC huawei -- emui Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 2023-08-13 9.1 CVE-2023-39401MISCMISC huawei -- emui Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 2023-08-13 9.1 CVE-2023-39402MISCMISC huawei -- emui Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization. 2023-08-13 9.1 CVE-2023-39403MISCMISC yzmcms -- yzmcms Cross Site Request Forgery (CSRF) vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint. 2023-08-11 8.8 CVE-2020-23595MISC xuxueli -- xxl-job Cross Site Request Forgery (CSRF) vulnerability in xxl-job-admin/user/add in xuxueli xxl-job version 2.2.0, allows remote attackers to execute arbitrary code and esclate privileges via crafted .html file. 2023-08-11 8.8 CVE-2020-24922MISC thedaylightstudio -- fuel_cms SQL Injection vulnerability in file Base_module_model.php in Daylight Studio FUEL-CMS version 1.4.9, allows remote attackers to execute arbitrary code via the col parameter to function list_items. 2023-08-11 8.8 CVE-2020-24950MISC churchcrm -- churchcrm CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted CSV file. 2023-08-11 8.8 CVE-2020-28848MISC wuzhicms -- wuzhicms An issue was disocvered in wuzhicms version 4.1.0, allows remote attackers to execte arbitrary code via the setting parameter to the ueditor in index.php. 2023-08-11 8.8 CVE-2020-36037MISC qpdf_project -- qpdf An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to Pl_ASCII85Decoder::write parameter in libqpdf. 2023-08-11 8.8 CVE-2021-25786MISC pearadmin -- pear_admin_think SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request to Crud.php. 2023-08-11 8.8 CVE-2021-29378MISC apple -- iphone_os The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution. 2023-08-14 8.8 CVE-2022-48503MISCMISCMISCMISCMISC google -- android In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-08-14 8.8 CVE-2023-21273MISCMISC apple -- macos A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution. 2023-08-14 8.8 CVE-2023-28198MISCMISC intel(r) -- ai_hackathon Uncontrolled search path for the Intel(R) AI Hackathon software before version 2.0.0 may allow an unauthenticated user to potentially enable escalation of privilege via network access. 2023-08-11 8.8 CVE-2023-28380MISC tigergraph -- tigergraph_enterprise An issue was discovered in Tigergraph Enterprise 3.7.0. The TigerGraph platform installs a full development toolchain within every TigerGraph deployment. An attacker is able to compile new executables on each Tigergraph system and modify system and Tigergraph binaries. 2023-08-15 8.8 CVE-2023-28479MISC apple -- macos A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution. 2023-08-14 8.8 CVE-2023-32358MISCMISC zyxel -- nbg6604   A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request. 2023-08-14 8.8 CVE-2023-33013MISC postgresql -- postgresql IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser. 2023-08-11 8.8 CVE-2023-39417MISCMISCMISC jenkins -- jenkins A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.27.5 and earlier allows attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job. 2023-08-16 8.8 CVE-2023-40341MISCMISC wordpress -- wordpress   The Premium Packages - Sell Digital Products Securely plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.7.4 due to insufficient restriction on the 'wpdmpp_update_profile' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'profile[role]' parameter during a profile update. 2023-08-12 8.8 CVE-2023-4293MISCMISCMISC wordpress -- wordpress   The WP Remote Users Sync plugin for WordPress is vulnerable to Server Side Request Forgery via the 'notify_ping_remote' AJAX function in versions up to, and including, 1.2.12. This can allow authenticated attackers with subscriber-level permissions or above to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. This was partially patched in version 1.2.12 and fully patched in version 1.2.13. 2023-08-16 8.5 CVE-2023-3958MISCMISCMISCMISC red_lion_europe -- mbnet   A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an authenticated remote attacker to store an arbitrary JavaScript payload on the diagnosis page of the device. That page is loaded immediately after login into the device and runs the stored payload, allowing the attacker to read and write browser data and reduce system performance. 2023-08-17 8.3 CVE-2023-34412MISCMISC intel(r) -- celeron_j6413_firmware Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via adjacent access. 2023-08-11 8 CVE-2022-44611MISC rockcarry -- ffjpeg Buffer Overflow vulnerability in jfif_decode() function in rockcarry ffjpeg through version 1.0.0, allows local attackers to execute arbitrary code due to an issue with ALIGN. 2023-08-11 7.8 CVE-2020-24222MISC apple -- macos An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1. Processing a maliciously crafted font may lead to arbitrary code execution. 2023-08-14 7.8 CVE-2020-36615MISC xnview -- xnview Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file. 2023-08-11 7.8 CVE-2021-28427MISC xnview -- xnview Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file. 2023-08-11 7.8 CVE-2021-28835MISCCONFIRM intel(r) -- oneapi_math_kernel_library Uncontrolled search path in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2022-25864MISC intel(r) -- dynamic_tuning_technology Improper access control in the Intel DTT Software before version 8.7.10400.15482 may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2022-29470MISC intel(r)-- multiple_products Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2022-38076MISC intel(r) -- rapid_storage_technology Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2022-43456MISC apple -- mac_os_x A type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to execute arbitrary code with kernel privileges. 2023-08-14 7.8 CVE-2022-46706MISCMISCMISC google -- android In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-08-14 7.8 CVE-2023-21229MISC google -- android In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exported or permission-protected activity due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-08-14 7.8 CVE-2023-21231MISC google -- android In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-08-14 7.8 CVE-2023-21272MISCMISC intel(r) -- unite Uncontrolled search path element in the Intel(R) Unite(R) Client software for Mac before version 4.2.11 may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2023-25182MISC intel(r) -- unite Improper access control in the Intel(R) Unite(R) Hub software installer for Windows before version 4.2.34962 may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2023-25773MISC intel(r) -- vcust_tool Uncontrolled search path element in some Intel(R) VCUST Tool software downloaded before February 3nd 2023 may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2023-25944MISC intel(r) -- easy_streaming_wizard Improper input validation for the Intel(R) Easy Streaming Wizard software may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2023-26587MISC intel(r) -- advanced_link_analyzer Incorrect default permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installers before version 22.1 .1 may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2023-27505MISC intel(r) -- optimization_for_tensorflow Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2023-27506MISC intel(r) -- ispc_software_installer Improper access control in some Intel(R) ISPC software installers before version 1.19.0 may allow an authenticated user to potentially enable escalation of privileges via local access. 2023-08-11 7.8 CVE-2023-27509MISC intel(r) -- openvino Uncontrolled search path in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2022.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2023-28405MISC intel(r) -- oneapi_math_kernel_library Insecure inherited permissions in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2023-28658MISC onlyoffice -- document_server A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file. 2023-08-14 7.8 CVE-2023-30186MISCMISCMISCMISCMISCMISC onlyoffice -- document_server An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file. 2023-08-14 7.8 CVE-2023-30187MISCMISCMISCMISCMISCMISC intel(r) -- intelligent_test_system Incorrect default permissions in the Intel(R) ITS sofware before version 3.1 may allow authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2023-32543MISC intel(r) -- realsense_450_fa_firmware Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2023-32656MISC intel(r) -- realsense_software_development_kit Incorrect default permissions in some Intel(R) RealSense(TM) SDKs in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2023-32663MISC intel(r) -- realsense_450_fa_firmware Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2023-33867MISC intel(r) -- realsense_450_fa_firmware Out-of-bounds write in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2023-33877MISC intel(r) -- realsense_450_fa_firmware Protection mechanism failure in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2023-34427MISC intel(r) -- nuc_bios Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. 2023-08-11 7.8 CVE-2023-34438MISC faucet_sdn -- ryu An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite loop). 2023-08-11 7.5 CVE-2020-35139MISC faucet_sdn -- ryu An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite loop). 2023-08-11 7.5 CVE-2020-35141MISC cszcms-- cszcms SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail parameter in csz_model.php. 2023-08-11 7.5 CVE-2020-36136MISC ffmpeg -- ffmpeg An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service (DoS). 2023-08-11 7.5 CVE-2020-36138MISCMISCMISC dgtl -- huemagic Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js. 2023-08-11 7.5 CVE-2021-26504MISC google -- android In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-08-14 7.5 CVE-2023-21233MISC wordpress -- wordpress   The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.11.1 via the 'admin_notice' function. This can allow authenticated attackers with subscriber-level permissions or above to extract sensitive data including configuration. It can only be exploited if the plugin has not been configured yet. If combined with another arbitrary plugin installation and activation vulnerability, it may be possible to connect a site to InfiniteWP which would make remote management possible and allow for elevation of privileges. 2023-08-15 7.5 CVE-2023-2916MISCMISCMISC faad2 -- faad2 Buffer Overflow vulnerability in faad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the stcoin function in mp4read.c. 2023-08-15 7.5 CVE-2023-38857MISC huawei -- harmonyos Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally. 2023-08-13 7.5 CVE-2023-39380MISCMISC huawei -- emui Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart. 2023-08-13 7.5 CVE-2023-39381MISCMISC huawei -- emui Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restart. 2023-08-13 7.5 CVE-2023-39382MISCMISC huawei -- emui Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnerability may compromise apps' data security. 2023-08-13 7.5 CVE-2023-39383MISCMISC huawei -- harmonyos Vulnerability of incomplete permission verification in the input method module. Successful exploitation of this vulnerability may cause features to perform abnormally. 2023-08-13 7.5 CVE-2023-39384MISCMISC huawei -- emui Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps to fail to restart. 2023-08-13 7.5 CVE-2023-39386MISCMISC huawei -- emui Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability. 2023-08-13 7.5 CVE-2023-39388MISCMISC huawei -- emui Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability. 2023-08-13 7.5 CVE-2023-39389MISCMISC huawei -- harmonyos Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart. 2023-08-13 7.5 CVE-2023-39390MISCMISC huawei -- emui Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confidentiality. 2023-08-13 7.5 CVE-2023-39391MISCMISC huawei -- harmonyos Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciously modified and overwritten. 2023-08-13 7.5 CVE-2023-39392MISCMISC huawei -- harmonyos Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability may cause ServiceWifiResources to be maliciously modified and overwritten. 2023-08-13 7.5 CVE-2023-39393MISCMISC huawei -- emui Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list to be modified. 2023-08-13 7.5 CVE-2023-39394MISCMISC huawei -- emui Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect availability. 2023-08-13 7.5 CVE-2023-39395MISCMISC huawei -- harmonyos Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability. 2023-08-13 7.5 CVE-2023-39396MISCMISC huawei -- emui Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availability. 2023-08-13 7.5 CVE-2023-39397MISCMISC huawei -- emui Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart. 2023-08-13 7.5 CVE-2023-39404MISCMISC huawei -- emui Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart. 2023-08-13 7.5 CVE-2023-39406MISCMISC tenda -- a18 Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the rule_info parameter in the formAddMacfilterRule function. 2023-08-14 7.5 CVE-2023-39827MISC tenda -- a18 Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function. 2023-08-14 7.5 CVE-2023-39828MISC tenda -- a18 Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the wpapsk_crypto2_4g parameter in the fromSetWirelessRepeat function. 2023-08-14 7.5 CVE-2023-39829MISC mattermost -- mattermost Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged 2023-08-11 7.5 CVE-2023-4108MISC intel(r) -- quartus_prime Uncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition software for linux may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.3 CVE-2023-24016MISC intel(r) -- open_image_denoise Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-08-11 7.3 CVE-2023-28823MISC supermicro-cms_project -- supermicro-cms An issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to execute arbitrary code via the font_type parameter to setup.php. 2023-08-11 7.2 CVE-2021-25857MISC intel(r) -- unison Improper access control in some Intel(R) Unison(TM) software before version 10.12 may allow a privileged user to potentially enable escalation of privilege via network access. 2023-08-11 7.2 CVE-2023-25757MISC online_travel_agency_system_project -- online_travel_agency_system SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_detail.php. 2023-08-17 7.2 CVE-2023-31938MISC online_travel_agency_system_project -- online_travel_agency_system SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the costomer_id parameter at customer_edit.php. 2023-08-17 7.2 CVE-2023-31939MISC online_travel_agency_system_project -- online_travel_agency_system SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the page_id parameter at article_edit.php. 2023-08-17 7.2 CVE-2023-31940MISC online_travel_agency_system_project -- online_travel_agency_system File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the employee_insert.php. 2023-08-17 7.2 CVE-2023-31941MISC online_travel_agency_system_project -- online_travel_agency_system SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the ticket_id parameter at ticket_detail.php. 2023-08-17 7.2 CVE-2023-31943MISC online_travel_agency_system_project -- online_travel_agency_system SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_edit.php. 2023-08-17 7.2 CVE-2023-31944MISC online_travel_agency_system_project -- online_travel_agency_system SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the id parameter at daily_expenditure_edit.php. 2023-08-17 7.2 CVE-2023-31945MISC online_travel_agency_system_project -- online_travel_agency_system File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the artical.php. 2023-08-17 7.2 CVE-2023-31946MISC solarwinds -- serv-u A vulnerability has been identified within Serv-U 15.4 that, if exploited, allows an actor to bypass multi-factor/two-factor authentication. The actor must have administrator-level access to Serv-U to perform this action.  2023-08-11 7.2 CVE-2023-35179MISCMISC snowsoftware -- snow_license_manager Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal. 2023-08-11 7.2 CVE-2023-3864MISC wordpress -- wordpress   The User Submitted Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘user-submitted-content’ parameter in versions up to, and including, 20230809 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. 2023-08-15 7.2 CVE-2023-4308MISCMISC apple -- macos The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. Processing a maliciously crafted AppleScript binary may result in unexpected app termination or disclosure of process memory. 2023-08-14 7.1 CVE-2023-28179MISC Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info intel(r)-- multiple_products Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access. 2023-08-11 6.7 CVE-2022-27635MISC intel(r)-- nuc_bios Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. 2023-08-11 6.7 CVE-2022-36372MISC intel(r) -- nuc Improper input validation in BIOS firmware for some Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. 2023-08-11 6.7 CVE-2022-37336MISC intel(r)-- atom_c3338r_firmware Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. 2023-08-11 6.7 CVE-2022-37343MISC intel(r) -- multiple_products Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access. 2023-08-11 6.7 CVE-2022-40964MISC intel(r) -- xeon(r)_processors Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. 2023-08-11 6.7 CVE-2022-41804MISCMISCMISCMISC intel(r) -- proset/wireless_wifi Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access. 2023-08-11 6.7 CVE-2022-46329MISC intel(r) -- nuc_bios Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. 2023-08-11 6.7 CVE-2023-22449MISC intel(r)-- open_image_denoise Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access. 2023-08-11 6.7 CVE-2023-27391MISC intel(r) -- next_unit_of_computing_firmware Improper authorization in the Intel(R) NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially enable escalation of privilage via local access. 2023-08-11 6.7 CVE-2023-28385MISC intel(r) -- nuc_bios Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. 2023-08-11 6.7 CVE-2023-29494MISC intel(r) -- multiple_products Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. 2023-08-11 6.7 CVE-2023-32617MISC intel(r) -- nuc_bios Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. 2023-08-11 6.7 CVE-2023-34086MISC cms-dev -- cms Plaintext Password vulnerability in AddAdmin.py in cms-dev/cms v1.4.rc1, allows attackers to gain sensitive information via audit logs. 2023-08-11 6.5 CVE-2020-24804MISC gnome-gmail -- gnome-gmail An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via crafted "mailto" link. 2023-08-11 6.5 CVE-2020-24904MISC freedesktop -- poppler An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function. 2023-08-11 6.5 CVE-2020-36023MISCMLIST intel(r)-- multiple_products Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access. 2023-08-11 6.5 CVE-2022-36351MISC intel(r) -- processors Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. 2023-08-11 6.5 CVE-2022-40982MISCMISCMISCMISCMISCMISCMISCMISCMISCMISCMISCMISC tigergraph -- tigergraph_enterprise An issue was discovered in Tigergraph Enterprise 3.7.0. The TigerGraph platform allows users to define new User Defined Functions (UDFs) from C/C++ code. To support this functionality TigerGraph allows users to upload custom C/C++ code which is then compiled and installed into the platform. An attacker who has filesystem access on a remote TigerGraph system can alter the behavior of the database against the will of the database administrator; thus, effectively bypassing the built in RBAC controls. 2023-08-14 6.5 CVE-2023-28480MISC zyxel -- multiple_products   Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firmware version V4.80(ABQE.1) could allow an unauthenticated LAN-based attacker to cause denial-of-service (DoS) conditions by sending crafted frames to an affected switch. 2023-08-14 6.5 CVE-2023-28768MISC libxls-- libxls Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the xls_parseWorkBook function in xls.c:1018. 2023-08-15 6.5 CVE-2023-38851MISC libxls-- libxls Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the unicode_decode_wcstombs function in xlstool.c:266. 2023-08-15 6.5 CVE-2023-38852MISC libxls-- libxls Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the xls_parseWorkBook function in xls.c:1015. 2023-08-15 6.5 CVE-2023-38853MISC libxls-- libxls Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the transcode_latin1_to_utf8 function in xlstool.c:296. 2023-08-15 6.5 CVE-2023-38854MISC libxls-- libxls Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the get_string function in xlstool.c:395. 2023-08-15 6.5 CVE-2023-38855MISC libxls-- libxls Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the get_string function in xlstool.c:411. 2023-08-15 6.5 CVE-2023-38856MISC faad2 -- faad2 Buffer Overflow vulnerability in faad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the mp4info function in mp4read.c:1039. 2023-08-15 6.5 CVE-2023-38858MISC jenkins -- jenkins Jenkins Delphix Plugin 3.0.2 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Overall/Read permission to access and capture credentials they are not entitled to. 2023-08-16 6.5 CVE-2023-40345MISCMISC jenkins -- jenkins Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. 2023-08-16 6.5 CVE-2023-40347MISCMISC mattermost -- mattermost Mattermost fails to check if the requesting user is a guest before performing different actions to public playbooks, resulting a guest being able to view, join, edit, export and archive public playbooks. 2023-08-11 6.5 CVE-2023-4106MISC mattermost -- mattermost Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user manager to update a system admin's details such as email, first name and last name. 2023-08-11 6.5 CVE-2023-4107MISC intel(r) -- nuc_bios Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. 2023-08-11 6.4 CVE-2023-34349MISC jbt -- markdown_editor Cross Site Scripting (XSS) vulnerability in Rendering Engine in jbt Markdown Editor thru commit 2252418c27dffbb35147acd8ed324822b8919477, allows remote attackers to execute arbirary code via crafted payload or opening malicious .md file. 2023-08-11 6.1 CVE-2020-19952MISCCONFIRMMISC gilacms -- gila_cms Cross Site Scripting (XSS) vulnerability in adm_user parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation. 2023-08-11 6.1 CVE-2020-20523MISC laborator -- kalium Cross Site Scripting (XSS) vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers to execute arbitrary code. 2023-08-11 6.1 CVE-2020-24075MISC lepton-cms -- epton-cms Cross Site Scripting (XSS) vulnerability in backend/pages/modify.php in Lepton-CMS version 4.7.0, allows remote attackers to execute arbitrary code. 2023-08-11 6.1 CVE-2020-24872MISC zoho_corporation -- manageengine_password_manager_pro Cross Site Scripting (XSS) vulnerability in Query Report feature in Zoho ManageEngine Password Manager Pro version 11001, allows remote attackers to execute arbitrary code and steal cookies via crafted JavaScript payload. 2023-08-11 6.1 CVE-2020-27449MISCMISC kindsoft -- kindeditor Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to execute arbitrary code. 2023-08-11 6.1 CVE-2020-28717MISC braft-editor -- braft-editor Cross Site Scripting (XSS) vulnerability in margox braft-editor version 2.3.8, allows remote attackers to execute arbitrary code via the embed media feature. 2023-08-11 6.1 CVE-2021-27524MISC opennms -- horizon XXE injection in /rtc/post/ endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to XML external entity (XXE) injection, which can be used for instance to force Horizon to make arbitrary HTTP requests to internal and external services. The solution is to upgrade to Meridian 2023.1.6, 2022.1.19, 2021.1.30, 2020.1.38 or Horizon 32.0.2 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. OpenNMS thanks Erik Wynter and Moshe Apelbaum for reporting this issue. 2023-08-11 6.1 CVE-2023-0871MISCMISC wordpress -- wordpress Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Paytm Paytm Payment Donation plugin

Read more »

Karma Catches Up to Global Phishing Service 16Shop
You've probably never heard of "16Shop," but there's a good chance someone using it has tried to phish you. Last week, the international police organization INTERPOL said it had shuttered the notorious 16Shop, a popular phishing-as-a-service platform launched in 2017 that made it simple for even complete novices to conduct complex and convincing phishing scams. INTERPOL said authorities in Indonesia arrested the 21-year-old proprietor and one of his alleged facilitators, and that a third suspect was apprehended in Japan.

Read more »

Diligere, Equity-Invest Are New Firms of U.K. Con Man
John Clifton Davies, a convicted fraudster estimated to have bilked dozens of technology startups out of more than $30 million through phony investment schemes, has a brand new pair of scam companies that are busy dashing startup dreams: A fake investment firm called Equity-Invest[.]ch, and Diligere[.]co.uk, a scam due diligence company that Equity-Invest insists all investment partners use. A native of the United Kingdom, Mr. Davies absconded from justice before being convicted on multiple counts of fraud in 2015. Prior to his conviction, Davies served 16 months in jail before being cleared on suspicion of murdering his third wife on their honeymoon in India.

Read more »

Microsoft Patch Tuesday, August 2023 Edition
Microsoft Corp. today issued software updates to plug more than 70 security holes in its Windows operating systems and related products, including a patch that addresses multiple zero-day vulnerabilities currently being exploited in the wild.

Read more »

Meet the Brains Behind the Malware-Friendly AI Chat Service ‘WormGPT’
WormGPT, a private new chatbot service advertised as a way to use Artificial Intelligence (AI) to help write malicious software without all the pesky prohibitions on such activity enforced by ChatGPT and Google Bard, has started adding restrictions on how the service can be used. Faced with customers trying to use WormGPT to create ransomware and phishing scams, the 23-year-old Portuguese programmer who created the project now says his service is slowly morphing into “a more controlled environment.” The large language models (LLMs) made by ChatGPT parent OpenAI or Google or Microsoft all have various safety measures designed to prevent people from abusing them for nefarious purposes — such as creating malware or hate speech. In contrast, WormGPT has promoted itself as a new LLM that was created specifically for cybercrime activities.

Read more »

Red Hat Security Advisory 2023-4524-01
- Libcap is a library for getting and setting POSIX.1e draft 15 capabilities. Issues addressed include integer overflow and memory leak vulnerabilities.

Read more »

Find the best deals on Apple products using the price trackers at MacPrices.net
Our Apple award-winning price trackers are the best place to look for the lowest prices and latest sales on all the latest Apple gear this holiday weekend…or anytime. Scan our price trackers for the latest information on sales, bundles, & availability on systems from 20+ retailers, including Apple, Amazon, B&H Photo, Adorama, Expercom, Tiger Direct, Sams Club, and many more. We update the trackers continuously: The post first appeared on MacPrices.net.

Read more »

Labor Day Weekend Sale: Apple 15″ MacBook Airs for $200 off MSRP
As part of their Labor Day Weekend sale, Amazon has Apple’s new 15″ MacBook Airs with M2 CPUs (8GB RAM/256GB SSD) in stock today and on sale today for $1099 in Space Gray, Silver, Starlight, and Midnight colors, each including free delivery. Their prices are $200 off Apple’s MSRP and the lowest we’ve seen for these new 15″ M2 MacBook Airs... The post first appeared on MacPrices.net.

Read more »

Labor Day Weekend Sale: Apple iPad Airs for $100 off MSRP
Amazon has 10.9″ M1 WiFi iPad Airs on sale for $100 off Apple’s MSRP, as part of their Labor Day Weekend sale, with prices starting at $499. Each includes free shipping. Their prices are the lowest available among the Apple retailers we track: The post first appeared on MacPrices.net.

Read more »

Labor Day Weekend Sale: Apple Watch Ultra on sale for $50 off MSRP
Amazon has Apple Watch Ultra models (Alpine Loop, Trail Loop, and Ocean Bands) on sale for $50 off MSRP, each including free shipping, as part of their Labor Day Weekend sale. Their prices are the lowest currently available for Ultra Watches: The post first appeared on MacPrices.net.

Read more »

Labor Day Weekend Sale: Apple iPad mini 6 on sale for $100 off MSRP
Amazon is offering Apple’s 8.3″ iPad minis for $100 off MSRP, including free shipping, as part of their Labor Day Weekend sale. Prices start at $399. Amazon’s prices are the lowest currently available for these minis from any Apple retailer we track: The post first appeared on MacPrices.net.

Read more »

Labor Day Weekend Sale: $100 off Apple AirPods Max headphones
Amazon has Apple AirPods Max headphones in stock and on sale for $100 off MSRP as part of their Labor Day Weekend sale. The sale price is valid for all colors (except for Pink) at the time of this post. Shipping is free: The post first appeared on MacPrices.net.

Read more »

13″ M2 MacBook Airs with 512GB of storage on sale for $200 off MSRP
B&H Photo has select 13" MacBook Airs with M2 CPUs and 512GB of SSD storage in stock today and on sale for up to $200 off Apple's MSRP with prices available starting at only $1199. Free 1-2 day delivery is available to most US addresses. Their prices are the lowest currently available for in-stock 512GB M2 MacBook Airs among Apple's retailers: The post first appeared on MacPrices.net.

Read more »

41mm Apple Watch Series 8 GPS models on sale for $90 off MSRP
Amazon has , each including free shipping. Their prices are among the lowest currently available for Series 8 Watches anywhere and are presently valid for Midnight, Red, and Starlight colors: The post first appeared on MacPrices.net.

Read more »

41mm Apple Watch Series 8 GPS models on sale for $90 off MSRP
Amazon has , each including free shipping. Their prices are among the lowest currently available for Series 8 Watches anywhere and are presently valid for Midnight, Red, and Starlight colors: The post first appeared on MacPrices.net.

Read more »

Expercom launches Labor Day Weekend MacBook sale, valid through September 5, 2023
Apple retailer Expercom has launched their Labor Day Weekend sale. From now until 9/5/23, save up to $800 on several MacBook Pro and MacBook Air configurations: The post first appeared on MacPrices.net.

Read more »

Apple continues to offer clearance, previous-generation, 10.9″ iPad Airs available starting at $469
Apple has Certified Refurbished 2020 10.9″ WiFi iPad Airs available in their online store in a variety of configurations. Models start at $469 and range up to $150 off Apple’s original MSRP. Each iPad Air comes with Apple’s standard one-year warranty, features a new outer case, and is in like-new condition. These iPads might be the right thing for you if you’re looking to save money on an iPad Air and don’t need the M1 processor found in the ’21 models. See Apple’s site for the latest stock status: The post first appeared on MacPrices.net.

Read more »

Apple Education is offering MacBook discounts up to $300 off MSRP, plus get a free $150 Apple Gift Card
Looking for a new MacBook instead? If you’re a student, teacher, or staff member at any educational institution, you can use your .edu email address when ordering at Apple Education to take up to $300 off the price of a new MacBook. Even parents of students can qualify. Education discounts are also available on most build-to-order options, such as extra RAM and more storage... The post first appeared on MacPrices.net.

Read more »