Deep dive on A13 Bionic design shares how Apple’s chip tea...
In an interview with Wired published today, Apple’s VP of product marketing, Phil Schiller and Anand Shimpi from the company’s Platform Architecture team give a detailed look at how they are approaching chip design and improving iPhone performance each year. With the A13 Bionic, the two have highlighted how important making the chip more energy efficient is, using software to influence its silicon and how that translates to real-world benefits for users. more… The post Deep dive on A13 Bionic design shares how Apple’s chip team stays ahead of the competition appeared first on 9to5Mac.

Read more »

Best iPhone 11 Pro Max Leather Cases in 2019
Need a list of the best iPhone 11 Pro Max Leather Cases available for your newest iPhone device? You’ve come to the right place. We’ve compiled suitable iPhone 11 Pro… The post appeared first on iLounge.

Read more »

Best iPhone 11 Pro Leather Cases in 2019
The best iPhone 11 Pro Leather cases stand up to scrutiny and everyday wear and tear. Who doesn’t love the satisfying look and feel of genuine leather in all its… The post appeared first on iLounge.

Read more »

Best iPhone 11 Leather Cases in 2019
The best iPhone 11 leather cases can give your newest iPhone that ultra-sophisticated look and feel that few iPhone cases can. Leather cases also have that ability to transform your… The post appeared first on iLounge.

Read more »

Save on this amazing mountable charging pad + case for iPhon...
Wouldn’t it be cool if you could slap your iPhone on the wall while it’s charging? You can with the magnificent mountable wireless charging pad from Xvida. Built-in magnets inside the pad grab onto Xvida’s companion case for iPhone XR, XS, and XS Max to form a super-secure grip. And you can save big when […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple previews the Apple Fifth Avenue ‘cube’ retail stor...
Apple has previewed the new Apple Fifth Avenue, an entirely reimagined space beneath one of New York City’s most recognized landmarks. It boasts a luminous glass cube rising above a newly designed public plaza.

Read more »

SmartGym for iPhone gains ARKit 3 Body Detection and Pose Es...
SmartGym is out with an update today that brings a range of new features and capabilities. Headling the update for iOS is ARKit 3 integration that brings Body Detection and Pose Estimation. There’s also full Siri Shortcuts support for parameters. The SmartGym Apple Watch app is now fully independent with watchOS 6 with a new “Explore” section, while iPad will gain multiwindow support when iPadOS 13 arrives. more… The post SmartGym for iPhone gains ARKit 3 Body Detection and Pose Estimation, full Siri Shortcuts support, Apple Watch app now independent, more appeared first on 9to5Mac.

Read more »

Apple’s Phil Schiller and Anand Shimpi tease details o...
The new 2019 iPhones utilize the latest of Apple's own custom-designed processors, and Apple executives have been talking about how their approach is different to rivals -- and why it's paying off.

Read more »

Forget lighting effects. These compact flashes bring pro lig...
Apple is trying to bring the advanced lighting of a studio to your iPhone without actual lights. And while featured effects like high-key mono and stage lighting can bring a studio-like finish to your iPhone portraits, software and algorithms can’t beat the real thing. Profoto, makers of highly regarded and expensive studio lights, introduced this […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Thursday deals: Logitech Gold Box from $24, iPad Air $50 off...
Amazon’s Logitech Gold Box offers from $24, while Apple’s latest iPad Air is on sale again and alongside a nice selection of Apple Watch sport bands. Hit the jump for all that and more in that latest 9to5Toys Lunch Break. more… The post Thursday deals: Logitech Gold Box from $24, iPad Air $50 off, Apple Watch Band sale appeared first on 9to5Mac.

Read more »

Don’t Storm Area 51, Begs Fan Site Webmaster
Joerg Arnu is fascinated by Area 51. He even runs websites focussed on the site. However, as Wried discovered, he really does not want people descending on the mysterious Air Force base. Arnu isn’t into it. He is not into the joke that has already inspired at least two people, young Dutch YouTubers, to breach the Air Force’s perimeter. And he is not into the party that threatens to take over his very little locale, a place located freakishly close to Area 51’s back gate. He has tried to put an end to its flight path. With the original festivities scheduled to start today, it’s unclear whether the horde will be huge or whether this bang will end with a poorly attended whimper.

Read more »

Apple’s iconic Fifth Avenue store reopens Friday — witho...
Apple’s redesigned Fifth Avenue Store will open to the public tomorrow, bigger and better than ever. However, the landmark New York City store replaces a trademark Apple architectural design — the glass staircase — with a twist. Originally opening its doors in 2006, the New York City retail outlet is one of the most iconic […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

9to5Mac Happy Hour 243: iPhone 11 and Apple Watch review rou...
The first round of iPhone 11 and Apple Watch Series 5 reviews are out, Apple Watch Series 3 has a new low price, Apple Arcade is officially here, and iOS 13 and other major software updates are arriving this week. 9to5Mac Happy Hour is available on Apple Podcasts, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by MNML Case: Get $10 off MNML’s Clear Case for iPhone 11 with promo code 9to5Mac.  Sponsored by Mint Mobile: Cut your wireless bill to 15 bucks a month at MintMobile.com/HappyHour.

Read more »

Photographer Heaps Praise on iPhone 11 Pro Camera
Photographer Ausin Mann could not wait to get his hands on a new iPhone 11 Pro and test the camera. His conlcusion following a trak in China with the device? “If you are a serious photographer, get a Pro.” He explained why in a blogpost, which also contained some stunning pictures (including the one featured on this article). The addition of any new lens is a pretty big deal. You might remember my excitement when we gained the “telephoto” 51mm lens with the iPhone 7 Plus, and today I’m just as thrilled to be putting an entirely new Ultra Wide lens in my pocket. It gives us another format to tell the story, another perspective to visualize, and a better rounded tool for doing our best creative work. I’ve had a blast shooting with the new Ultra Wide on iPhone 11 Pro in all kinds of scenarios here in China.

Read more »

Prince Harry hopes his Apple TV+ series will help save lives
Apple TV+ could do a lot more than just offering up some great entertainment — it could save lives. That’s according to none other than the U.K.’s Prince Harry, aka the Duke of Sussex. In a conversation with The Daily Telegraph, he discussed what he hopes to achieve with his upcoming Apple TV+ series, which […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

‘Unique’ Apple Fifth Ave Store Reopens 8 A.M. Friday, Se...
The renovated Apple Store Fifth Avenue will reopen at 8 a.m. local time tomorrow, with Tim Cook describing it as “unique.”

Read more »

TouchRetouch Update Makes it Universal
TouchRetouch is my app of choice for quick retouching of photos. By “retouching” I mean this app is for removing objects from your photos. The latest version now makes it available on the iPad, so you don’t have to use the separate “TouchRetouch for iPad.” But that’s not the only feature that was added today: Implemented a new image picker; Added a possibility to return to the place in the gallery where the last selected photo was located; Added the Paste Image feature to the image picker; Redesigned the Export menu; Added the “Open a new photo” option to the Export menu; Made the app universal; Made the tools slicker to ensure smoother editing experience; Improved compatibility with Display P3; Optimized for Dark Mode; Added support for 360° photos lacking some EXIF data; Added support for transparent PNG images; Fixed a blank screen issue arising when selecting a corrupted RAW file; Fixed an issue causing the app to quit when editing large photos (18 MP) in the TouchRetouch extension to Photos; Added support for Dynamic Type, so now the app can adjust to the preferred font size; Added support for Turkish; Changed a .jpeg file extension to .jpg. App Store: TouchRetouch – US$1.99

Read more »

Apple’s iconic Fifth Avenue ‘Cube’ store r...
A bigger and radically revamped and Apple Fifth Avenue is to reopen with the release of the new iPhone range on Friday. The landmark store has been closed for two years while work done on the Cube entrance and store below.

Read more »

iOS 13: How to Enable the Swiping QuickPath Keyboard
Apple added a QuickPath keyboard to iOS 13, which lets you swipe from one letter to the next in order to type.

Read more »

An exclusive look inside Apple’s A13 Bionic chip
Om Malik, Wired: About 72 minutes into the annual iPhone launch event, Apple senior vice president of marketing Phil Schiller invited Sri Santhanam to come onstage and talk about the brand new A13 Bionic chip found inside all three of the new phones. And: By the time Santhanam was done talking, all I could think of were the numbers. Apple’s new chip contains 8.5 billion transistors. Also, there are six CPU cores: Two high-performance cores running at 2.66 GHz (called Lightning), and four efficiency cores (called Thunder). It has a quad-core graphics processor, an LTE modem, an Apple-designed image processor, and an octa-core neural engine for machine intelligence functions that can run a trillion operations per second. This new chip is smarter, faster, and beefier, and yet it somehow manages to consume less power than its predecessor. It’s about 30 percent more efficient than last year’s A12 chip, one of the factors that contributes to the extra five hours per day of battery life in the new iPhones. And this on the competing chips from Qualcomm, Huawei, and Samsung: Those chips have some faster components and more of them, so you may think those chips perform better than Apple’s. But the reality is that we hardly use the entire capacity of the chips that come in our mobile devices. One or two high-performance cores are enough for most of what we throw at our phones. Apple's six-core design might seem lagging compared to the eight-core processors from the competitors, but really, the two big processors on its chip easily outperform its rivals’ designs. This is a terrific read. No special hardware knowledge required.∞ Read this on The Loop

Read more »

Apple’s brand ranking in China slips from 11th to 24th pla...
An Apple brand ranking in China shows that the company fell from 11th place in 2018 to 24th place this year, likely as a result of consumer unhappiness with recent actions by the US government. The rankings are compiled annually by brand consultancy Prophet… more… The post Apple’s brand ranking in China slips from 11th to 24th place over US tensions appeared first on 9to5Mac.

Read more »

∞ iPhone 11 “audio zoom”
[VIDEO] One of the little-covered announcements in last week's full-to-the-brim Apple event, was the iPhone 11's so-called audio zoom. Here's a video (embedded in the main Loop post) that shows off how this works.

Read more »

Apple Fifth Avenue: The cube is back
Apple: Apple today previewed the new Apple Fifth Avenue, an entirely reimagined space beneath one of New York City’s most recognized landmarks. With its distinctive, luminous glass cube rising above a newly designed public plaza, Apple Fifth Avenue is ready to resume its place at the heart of one of the world’s most vibrant creative communities. Now nearly double the size of its original version with a higher ceiling and more natural light, Apple Fifth Avenue is a brighter, more expansive space, and the perfect stage for customers to discover and try Apple’s newest products. A new Forum will be home to free, daily Today at Apple programming, which kicks off Saturday with a special series that captures the creative spirit of New York. The area dedicated to Geniuses has also doubled, allowing the team to dramatically increase service capacity. It remains the only Apple retail location open 24 hours a day, 365 days a year. Follow the headline link, check out those images. Those circular stairs are a marvel.∞ Read this on The Loop

Read more »

Chinese Customers Turn Against Apple in Favor of Domestic Fi...
Apple has dropped in standing amongst the Chinese public, according to a new survey by Prophet, as they back firm’s from their own country.

Read more »

Apple Arcade could have huge consequences for the iOS app ec...
Great food for thought from The Verge's Dieter Bohn. Read it, it's well written, not too long. Bottom line, it does not seem an unreasonable conclusion that Apple Arcade will impact the App Store, at least in the Games section. The question is, will that impact be seismic? Will Apple Arcade have a similar impact to music streaming, where all-you-can-eat replaced one-at-a-time song sales. Will the Apple Arcade grow into the thousands, even tens of thousands? Or will Apple limit the number of games in the catalog? One thing that is clear to me: For the consumer, Apple Arcade is a big win. Not only for value, but for the ability to live in a world free of scams and the pressure to make in-app purchases. Interesting.∞ Read this on The Loop

Read more »

Apple published a new Press Release
Apple just published a new Press Release:Apple Fifth Avenue: The cube is back

Read more »

Apple chipmaker already preparing for its next-next-gen chip...
Apple chipmaker TSMC has kicked off development of its 3-nanometer process for future chips. TSMC unveiled its 7-nanometer process with last year’s A12 Bionic chip. It is taking its 7nm tech for a victory lap with the A13 Bionic chip for this year’s iPhones. But according to the Apple chipmaker’s VP of corporate research Philip […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple Arcade, coming in just a few short hours
You might want to clear the decks around 10a PT, 1p ET, 6p London time. There're a lot of games to be played. As we shared yesterday, here's a nice list of games to get you started, and a growing list of all the games on Apple Arcade so far. While you wait, now might be a good time to dig out your Xbox One, PS4, or MFi game controllers and charge 'em up. Once you dig in, ping me with your absolute favorite games.∞ Read this on The Loop

Read more »

Bob Iger: Apple And Disney May Have Merged if Steve Jobs Wer...
Disney CEO Bob Iger gives insight into their relaitonshi and believes that Apple and Disney may have merged had Steve Jobs still been alive.

Read more »

Carrot Weather gains support for iOS 13 Dark Mode, iPad mult...
Alongside the launch of iOS 13 later today, Carrot Weather has received an update that brings support for the system-wide Dark Mode, full support for Siri Shortcuts including parameters and outputs, iPad multiwindow support, a fully-independent Apple Watch app, and tinted complications in watchOS 6. more… The post Carrot Weather gains support for iOS 13 Dark Mode, iPad multiwindow, independent Apple Watch app, more appeared first on 9to5Mac.

Read more »

What’s New in iOS 13 and iPadOS 13
Apple has released iOS 13 for the iPhone and iPod touch, and the newly-named iPadOS 13 for the iPad. This is the first year that the company has created different versions of its mobile operating system for different devices, and there are a number of new features specific to the iPad. iOS 13 runs on […]

Read more »

Before He Spammed You, this Sly Prince Stalked Your Mailbox
A reader forwarded what he briefly imagined might be a bold, if potentially costly, innovation on the old Nigerian prince scam that asks for help squirreling away millions in unclaimed fortune: it was sent via the U.S. Postal Service, with a postmarked stamp and everything. In truth these "advance fee" or "419" scams- - so-called because they violate section 419 of the criminal code of Nigeria where many such lures originate -- predate email and have circulated via postal mail in various forms and countries over the years.

Read more »

Man Who Hired Deadly Swatting Gets 15 Months
An Ohio teen who recruited a convicted serial swatter to fake a distress call that ended in the police shooting an innocent Kansas man in 2017 has been sentenced to 15 months in prison.

Read more »

Firefox and Chrome rolling out DNS over HTTPS (DoH) feature
Earlier this month, Mozilla announced that Firefox will begin enabling “DNS over HTTPS” (DoH) by default for USA-based users. Not intending to be left behind in the pursuit of safer browsing, Google has announced that it, too, will begin experimenting with the feature; Chrome 78 will validate Google’s implementation of DNS over HTTPS. What DNS […]

Read more »

Apple’s new iPhone 11, and more – Intego Mac Podcast, Ep...
Josh and Kirk celebrate episode 100 of the Intego Mac Podcast with special guest Dave Hamilton and discuss Apple's new iPhone, Apple Watch, iPad, Apple Arcade, and Apple TV+. And we discuss changes to Apple's AppleCare extended warranty and insurance plan. Check out the full show notes for links.

Read more »

NY Payroll Company Vanishes With $35 Million
MyPayrollHR, a now defunct cloud-based payroll processing firm based in upstate New York, abruptly ceased operations this past week after stiffing employees at thousands of companies. The ongoing debacle, which allegedly involves malfeasance on the part of the payroll company's CEO, resulted in countless people having money drained from their bank accounts and has left nearly $35 million worth of payroll and tax payments in legal limbo.

Read more »

Apple updates iPhone, Apple Watch, and iPad; gives info on A...
At its "By Innovation Only" event on September 10, Apple introduced its latest line of iPhone models, along with a new Apple Watch and a new iPad, and new details about its upcoming Apple Arcade and Apple TV+ services. Here's everything you need to know.

Read more »

Patch Tuesday, September 2019 Edition
Microsoft today issued security updates to plug some 80 security holes in various flavors of its Windows operating systems and related software. The software giant assigned a "critical" rating to almost a quarter of those vulnerabilities, meaning they could be used by malware or miscreants to hijack vulnerable systems with little or no interaction on the part of the user.

Read more »

Secret Service Investigates Breach at U.S. Govt IT Contracto...
The U.S. Secret Service is investigating a breach at a Virginia-based government technology contractor that saw access to several of its systems put up for sale in the cybercrime underground, KrebsOnSecurity has learned. The contractor claims the access being auctioned off was to old test systems that do not have direct connections to its government partner networks. In mid-August, a member of a popular Russian-language cybercrime forum offered to sell access to the internal network of a U.S. government IT contractor that does business with more than 20 federal agencies, including several branches of the military. The seller bragged that he had access to email correspondence and credentials needed to view databases of the client agencies, and set the opening price at six bitcoins (~USD $60,000).

Read more »

Vulnerability Summary for the Week of September 2, 2019
Original release date: September 9, 2019  The CISA Weekly Vulnerability Summary Bulletin is created using information from the NIST NVD. In some cases, the vulnerabilities in the Bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info alfresco -- alfresco An issue was discovered in Alfresco Community Edition versions 6.0 and lower. An unauthenticated, remote attacker could authenticate to Alfresco's Solr Web Admin Interface. The vulnerability is due to the presence of a default private key that is present in all default installations. An attacker could exploit this vulnerability by using the extracted private key and bundling it into a PKCS12. A successful exploit could allow the attacker to gain information about the target system (e.g., OS type, system file locations, Java version, Solr version, etc.) as well as the ability to launch further attacks by leveraging the access to Alfresco's Solr Web Admin Interface. 2019-09-05 7.5 CVE-2019-14222MISC alfresco -- alfresco An issue was discovered in Alfresco Community Edition 5.2 201707. By leveraging multiple components in the Alfresco Software applications, an exploit chain was observed that allows an attacker to achieve remote code execution on the victim machine. The attacker must upload malicious Solr configuration files and then receive a JMX connection from the victim, and serve a Java object that results in deserialization and code execution. 2019-09-05 9.0 CVE-2019-14224MISC artifex -- ghostscript A flaw was found in ghostscript, versions 9.x before 9.28, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands. 2019-09-06 7.5 CVE-2019-14813CONFIRMCONFIRM asus -- precision_touchpad AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \.AsusTP device, leading to a DoS or potentially privilege escalation via a crafted DeviceIoControl call. 2019-09-04 7.5 CVE-2019-10709MISCMISC broadcom -- ca_client_automation An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to execute arbitrary code. 2019-09-06 7.5 CVE-2019-13656MISC cisco -- jabber A vulnerability in Cisco Jabber Client Framework (JCF) for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper file level permissions on an affected device when it is running Cisco JCF for Mac Software. An attacker could exploit this vulnerability by authenticating to the affected device and executing arbitrary code or potentially modifying certain configuration files. A successful exploit could allow the attacker to execute arbitrary code or modify certain configuration files on the device using the privileges of the installed Cisco JCF for Mac Software. 2019-09-04 7.2 CVE-2019-12645CISCO cisco -- nx-os A vulnerability in the Network Time Protocol (NTP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to excessive use of system resources when the affected device is logging a drop action for received MODE_PRIVATE (Mode 7) NTP packets. An attacker could exploit this vulnerability by flooding the device with a steady stream of Mode 7 NTP packets. A successful exploit could allow the attacker to cause high CPU and memory usage on the affected device, which could cause internal system processes to restart or cause the affected device to unexpectedly reload. Note: The NTP feature is enabled by default. 2019-08-30 7.8 CVE-2019-1967CISCO cisco -- unified_computing_system A vulnerability in a specific CLI command within the local management (local-mgmt) context for Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to gain elevated privileges as the root user on an affected device. The vulnerability is due to extraneous subcommand options present for a specific CLI command within the local-mgmt context. An attacker could exploit this vulnerability by authenticating to an affected device, entering the local-mgmt context, and issuing a specific CLI command and submitting user input. A successful exploit could allow the attacker to execute arbitrary operating system commands as root on an affected device. The attacker would need to have valid user credentials for the device. 2019-08-30 7.2 CVE-2019-1966CISCO cisco -- webex_teams A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. This vulnerability is due to improper restrictions on software logging features used by the application on Windows operating systems. An attacker could exploit this vulnerability by convincing a targeted user to visit a website designed to submit malicious input to the affected application. A successful exploit could allow the attacker to cause the application to modify files and execute arbitrary commands on the system with the privileges of the targeted user. 2019-09-04 9.3 CVE-2019-1939CISCO egain -- chat eGain Chat 15.0.3 allows unrestricted file upload. 2019-09-04 7.5 CVE-2019-13976MISC eventum_project -- eventum Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2. 2019-09-05 7.5 CVE-2018-11569MISC exim -- exim Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash. 2019-09-06 10.0 CVE-2019-15846MISCMLISTMLISTMLISTMLISTMLISTMLISTMLISTMLISTMLISTFEDORAFEDORABUGTRAQGENTOOUBUNTUDEBIANCERT-VNMISC freebsd -- freebsd In FreeBSD 12.0-STABLE before r350648, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350650, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before 11.2-RELEASE-p13, the ICMPv6 input path incorrectly handles cases where an MLDv2 listener query packet is internally fragmented across multiple mbufs. A remote attacker may be able to cause an out-of-bounds read or write that may cause the kernel to attempt to access an unmapped page and subsequently panic. 2019-08-30 7.5 CVE-2019-5608CONFIRM freebsd -- freebsd In FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r350829, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, a missing check in the function to arrange data in a chain of mbufs could cause data returned not to be contiguous. Extra checks in the IPv6 stack could catch the error condition and trigger a kernel panic, leading to a remote denial of service. 2019-08-30 7.8 CVE-2019-5611MISCBUGTRAQCONFIRM freebsd -- freebsd In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r351265, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, the kernel driver for /dev/midistat implements a read handler that is not thread-safe. A multi-threaded program can exploit races in the handler to copy out kernel memory outside the boundaries of midistat's data buffer. 2019-08-30 7.8 CVE-2019-5612CONFIRM fusionpbx -- fusionpbx FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (which will insert the malicious command into the database). To trigger the command, one needs to call the services.php file via a GET request with the service id followed by the parameter a=start to execute the stored command. 2019-09-05 9.0 CVE-2019-15029MISCMISCMISC google -- android NVIDIA Tegra contains a vulnerability in BootRom where a user with kernel level privileges can write an arbitrary value to an arbitrary physical address 2019-09-06 7.2 CVE-2018-6240MISC google -- android In ihevcd_ref_list of ihevcd_ref_list.c in Android 10, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 9.3 CVE-2019-2108MISC google -- android In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 7.2 CVE-2019-2115MISC google -- android In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 7.2 CVE-2019-2174MISC google -- android In ihevcd_parse_buffering_period_sei of ihevcd_parse_headers.c in Android 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 9.3 CVE-2019-2176MISC google -- android In rw_t4t_sm_read_ndef of rw_t4t in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC service with no additional execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 7.2 CVE-2019-2178MISC google -- android In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 7.2 CVE-2019-9254MISC hanwha-security -- srn-472s_firmware An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before 2019-05-03. A system crash and reboot can be achieved by submitting a long username in excess of 117 characters. The username triggers a buffer overflow in the main process controlling operation of the DVR system, rendering services unavailable during the reboot operation. A repeated attack affects availability as long as the attacker has network access to the device. 2019-09-05 7.8 CVE-2019-12223MISCMISCMISC libreoffice -- libreoffice LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice install. Protection was added, to address CVE-2019-9852, to avoid a directory traversal attack where scripts in arbitrary locations on the file system could be executed by employing a URL encoding attack to defeat the path verification step. However this protection could be bypassed by taking advantage of a flaw in how LibreOffice assembled the final script URL location directly from components of the passed in path as opposed to solely from the sanitized output of the path verification step. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1. 2019-09-06 7.5 CVE-2019-9854CONFIRM libreoffice -- libreoffice LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1. 2019-09-06 7.5 CVE-2019-9855CONFIRM linux -- linux_kernel An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c. 2019-09-04 7.2 CVE-2017-18595MISCMISC linux -- linux_kernel A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped. 2019-09-04 7.5 CVE-2019-15902MISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service. 2019-09-04 7.8 CVE-2019-15916MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c. 2019-09-04 7.2 CVE-2019-15917MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.10. SMB2_negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21. 2019-09-04 7.2 CVE-2019-15918MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.10. SMB2_write in fs/cifs/smb2pdu.c has a use-after-free. 2019-09-04 7.2 CVE-2019-15919MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.10. SMB2_read in fs/cifs/smb2pdu.c has a use-after-free. NOTE: this was not fixed correctly in 5.0.10; see the 5.0.11 ChangeLog, which documents a memory leak. 2019-09-04 7.2 CVE-2019-15920MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.2.3. An out of bounds access exists in the function hclge_tm_schd_mode_vnet_base_cfg in the file drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c. 2019-09-04 7.2 CVE-2019-15925MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx in the file drivers/net/wireless/ath/ath6kl/wmi.c. 2019-09-04 9.4 CVE-2019-15926MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the function build_audio_procunit in the file sound/usb/mixer.c. 2019-09-04 7.2 CVE-2019-15927MISCMISC nagios -- nagios_xi Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The getprofile.sh script, invoked by downloading a system profile (profile.php?cmd=download), is executed as root via a passwordless sudo entry; the script executes check_plugin, which is owned by the nagios user. A user logged into Nagios XI with permissions to modify plugins, or the nagios user on the server, can modify the check_plugin executable and insert malicious commands to execute as root. 2019-09-05 9.0 CVE-2019-15949MISC opensc_project -- opensc OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c. 2019-09-05 7.5 CVE-2019-15945MISCMISC opensc_project -- opensc OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c. 2019-09-05 7.5 CVE-2019-15946MISCMISC pengutronix -- barebox Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly used for a memcpy. 2019-09-05 7.5 CVE-2019-15937MISC pengutronix -- barebox Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length field is directly used for a memcpy. 2019-09-05 7.5 CVE-2019-15938MISC restaurant_reservations_project -- restaurant_reservations The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for nd_rst_import_settings_php_function authentication. 2019-08-30 7.5 CVE-2019-15819MISCMISCMISC sonatype -- nexus_repository_manager The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability. 2019-09-03 9.0 CVE-2019-5475MISC symphonyextensions -- rich_text_formatter The Rich Text Formatter (Redactor) extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in content.fileupload.php and content.imageupload.php. 2019-09-05 7.5 CVE-2019-13187MISCMISC totaljs -- total.js_cms An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution (RCE) on the remote server by creating a malicious widget with a special tag containing JavaScript code that will be evaluated server side. In the process of evaluating the tag by the back-end, it is possible to escape the sandbox object by using the following payload: global.process.mainModule.require(child_process).exec(RCE); 2019-09-05 9.0 CVE-2019-15954MISCMISC varnish-cache -- varnish An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests. The assert will cause an automatic restart with a clean cache, which makes it a Denial of Service attack. 2019-09-03 7.8 CVE-2019-15892BUGTRAQMISCDEBIAN wpbrigade -- loginpress The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings. 2019-09-03 7.5 CVE-2019-15872MISCMISC wpserveur -- wps_child_theme_generator The wps-child-theme-generator plugin before 1.2 for WordPress has classes/helpers.php directory traversal. 2019-08-30 7.5 CVE-2019-15822MISCMISCMISC wpserveur -- wps_hide_login The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass. 2019-08-30 7.5 CVE-2019-15823MISCMISCMISC wpserveur -- wps_hide_login The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass. 2019-08-30 7.5 CVE-2019-15824MISCMISCMISC wpserveur -- wps_hide_login The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass. 2019-08-30 7.5 CVE-2019-15825MISCMISCMISC wpserveur -- wps_hide_login The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field. 2019-08-30 7.5 CVE-2019-15826MISCMISCMISC xiaoyi -- yi_m1_mirrorless_camera_firmware An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy (BLE) authentication module of YI M1 Mirrorless Camera V3.2-cn. An attacker can send a set of BLE commands to trigger this vulnerability, resulting in sensitive data leakage (e.g., personal photos). An attacker can also control the camera to record or take a picture after bypassing authentication. 2019-09-06 8.3 CVE-2019-13953MISC Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info 10web -- photo_gallery The photo-gallery plugin before 1.2.42 for WordPress has CSRF. 2019-08-30 6.8 CVE-2015-9380MISCMISCMISC abus -- secvest_wireless_alarm_system_fuaa50000_firmware An issue was discovered on ABUS Secvest FUAA50000 3.01.01 devices. Due to an insufficient implementation of jamming detection, an attacker is able to suppress correctly received RF messages sent between wireless peripheral components, e.g., wireless detectors or remote controls, and the ABUS Secvest alarm central. An attacker is able to perform a "reactive jamming" attack. The reactive jamming simply detects the start of a RF message sent by a component of the ABUS Secvest wireless alarm system, for instance a wireless motion detector (FUBW50000) or a remote control (FUBE50014 or FUBE50015), and overlays it with random data before the original RF message ends. Thereby, the receiver (alarm central) is not able to properly decode the original transmitted signal. This enables an attacker to suppress correctly received RF messages of the wireless alarm system in an unauthorized manner, for instance status messages sent by a detector indicating an intrusion. 2019-09-03 5.0 CVE-2019-14261MISCFULLDISCBUGTRAQMISC airbrake -- airbrake_ruby The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklist_keys configuration option and consequently may disclose passwords to unauthorized actors. This is fixed in 4.2.4 (also, 4.2.2 and earlier are unaffected). 2019-09-06 5.0 CVE-2019-16060MISC apache -- commons_compress The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress. 2019-08-30 5.0 CVE-2019-12402MISC artifex -- ghostscript A flaw was found in, ghostscript versions prior to 9.28, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands. 2019-09-03 6.8 CVE-2019-14811CONFIRM bitcoin -- bitcoin-qt In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via a grep "6231 0500" command. 2019-09-05 5.0 CVE-2019-15947MISCMISC blynk -- blynk-library An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability. 2019-09-05 5.0 CVE-2019-5065MISC bold-themes -- bold_page_builder The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data. 2019-08-30 5.0 CVE-2019-15821MISCMISCMISC canon -- print The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the administrator web interface and WPA2-PSK key. 2019-09-05 4.3 CVE-2019-14339MISCMISC cisco -- content_security_management_appliance A vulnerability in the authorization module of Cisco Content Security Management Appliance (SMA) Software could allow an authenticated, remote attacker to gain out-of-scope access to email. The vulnerability exists because the affected software does not correctly implement role permission controls. An attacker could exploit this vulnerability by using a custom role with specific permissions. A successful exploit could allow the attacker to access the spam quarantine of other users. 2019-09-04 4.0 CVE-2019-12635CISCO cisco -- finesse A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to access the system and perform unauthorized actions. 2019-09-04 5.0 CVE-2019-12632CISCO cisco -- identity_services_engine A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability exists because the web-based management interface of the affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. 2019-09-04 4.3 CVE-2019-12644CISCO cisco -- network_level_service A vulnerability in the “plug-and-play” services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper access restrictions on the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access running configuration information about devices managed by the IND, including administrative credentials. 2019-09-04 5.0 CVE-2019-1976CISCO cisco -- nx-os A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API on an affected device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition in the NX-API service; however, the NX-OS device itself would still be available and passing network traffic. Note: The NX-API feature is disabled by default. 2019-08-30 5.0 CVE-2019-1968CISCO cisco -- nx-os A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) Access Control List (ACL) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to perform SNMP polling of an affected device, even if it is configured to deny SNMP traffic. The vulnerability is due to an incorrect length check when the configured ACL name is the maximum length, which is 32 ASCII characters. An attacker could exploit this vulnerability by performing SNMP polling of an affected device. A successful exploit could allow the attacker to perform SNMP polling that should have been denied. The attacker has no control of the configuration of the SNMP ACL name. 2019-08-30 5.0 CVE-2019-1969CISCO cisco -- nx-os A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an endpoint device in certain circumstances. The vulnerability is due to improper endpoint learning when packets are received on a specific port from outside the ACI fabric and destined to an endpoint located on a border leaf when Disable Remote Endpoint Learning has been enabled. This can result in a Remote (XR) entry being created for the impacted endpoint that will become stale if the endpoint migrates to a different port or leaf switch. This results in traffic not reaching the impacted endpoint until the Remote entry can be relearned by another mechanism. 2019-08-30 4.3 CVE-2019-1977CISCO cisco -- unified_contact_center_express A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper validation of user-supplied input on the affected system. An attacker could exploit this vulnerability by sending the user of the web application a crafted request. If the request is processed, the attacker could access the system and perform unauthorized actions. 2019-09-04 5.0 CVE-2019-12633CISCO convertplug -- convertplus The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation (with the none role) via a request for variants. 2019-09-03 5.0 CVE-2019-15863MISC custom_404_pro_project -- custom_404_pro The custom-404-pro plugin before 3.2.8 for WordPress has reflected XSS, a different vulnerability than CVE-2019-14789. 2019-08-30 4.3 CVE-2019-15838MISCMISC dell -- emc_enterprise_copy_data_management Dell EMC Enterprise Copy Data Management (eCDM) versions 1.0, 1.1, 2.0, 2.1, and 3.0 contain a certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim?s data in transit. 2019-09-03 5.8 CVE-2019-3751MISC dell -- emc_unity_operating_environment Dell EMC Unity Operating Environment versions prior to 5.0.0.0.5.116, Dell EMC UnityVSA versions prior to 5.0.0.0.5.116 and Dell EMC VNXe3200 versions prior to 3.1.10.9946299 contain a reflected cross-site scripting vulnerability on the cas/logout page. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or Java Script code to Unisphere, which is then reflected back to the victim and executed by the web browser. 2019-09-03 4.3 CVE-2019-3754CONFIRM egain -- chat eGain Chat 15.0.3 allows HTML Injection. 2019-09-04 4.3 CVE-2019-13975MISC eng -- knowage In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application. 2019-09-05 5.0 CVE-2019-13188MISC eng -- knowage In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page. 2019-09-05 5.0 CVE-2019-13190MISC epignosishq -- efront_lms A code execution vulnerability exists in Epignosis eFront LMS v5.2.12. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability. 2019-09-05 6.5 CVE-2019-5069MISC epignosishq -- efront_lms An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier. Specially crafted web request to login page can cause SQL injections, resulting in data compromise. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required. 2019-09-05 6.4 CVE-2019-5070MISC espressif -- esp-idf The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key (PMK) after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames via a rogue access point. 2019-09-04 4.8 CVE-2019-12587MISCMISCMISC estrongs -- es_file_explorer_file_manager The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage. 2019-09-05 5.0 CVE-2019-11380MISC estsoft -- alsee A memory corruption vulnerability exists in the .PSD parsing functionality of ALSee v5.3 ~ v8.39. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in code execution. By persuading a victim to open a specially-crafted .PSD file, an attacker could execute arbitrary code. 2019-08-30 6.8 CVE-2019-12810CONFIRM ezautomation -- ez_plc_editor An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of the EZ PLC Editor Versions 1.8.41 and prior. 2019-09-04 6.8 CVE-2019-13522MISC ezautomation -- ez_touch_editor An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the EZ Touch Editor Versions 2.1.0 and prior. 2019-09-04 6.8 CVE-2019-13518MISC f5 -- big-ip_access_policy_manager On BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST users with guest privileges may be able to escalate their privileges and run commands with admin privileges. 2019-09-04 6.5 CVE-2019-6646MISC facebook -- facebook_for_woocommerce The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF. 2019-08-30 6.8 CVE-2019-15840MISC facebook -- facebook_for_woocommerce The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajax_woo_infobanner_post_click, ajax_woo_infobanner_post_xout, or ajax_fb_toggle_visibility. 2019-08-30 6.8 CVE-2019-15841MISC ffmpeg -- ffmpeg FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer. 2019-09-05 6.8 CVE-2019-15942MISC freebsd -- freebsd In FreeBSD 12.0-STABLE before r350619, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350619, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before 11.2-RELEASE-p13, the bhyve e1000 device emulation used a guest-provided value to determine the size of the on-stack buffer without validation when TCP segmentation offload is requested for a transmitted packet. A misbehaving bhyve guest could overwrite memory in the bhyve process on the host. 2019-08-30 6.4 CVE-2019-5609CONFIRM freebsd -- freebsd In FreeBSD 12.0-STABLE before r350637, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350638, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before 11.2-RELEASE-p13, the bsnmp library is not properly validating the submitted length from a type-length-value encoding. A remote user could cause an out-of-bounds read or trigger a crash of the software such as bsnmpd resulting in a denial of service. 2019-08-30 5.0 CVE-2019-5610MISCBUGTRAQCONFIRM freedesktop -- poppler Poppler before 0.76.0 has an integer overflow in Parser::makeStream in Parser.cc. 2019-09-05 6.8 CVE-2018-21009MISC freetype -- freetype FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. 2019-09-03 6.8 CVE-2015-9381MISCMLISTMISC freetype -- freetype FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation. 2019-09-03 4.3 CVE-2015-9382MISCMLISTMISC freetype -- freetype FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c. 2019-09-03 4.3 CVE-2015-9383MISCMLISTMISC glyphandcog -- xpdfreader Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from November 2002. 2019-09-03 4.3 CVE-2019-15860MISC gnu -- gcc The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same. 2019-09-02 5.0 CVE-2019-15847MISC google -- android In execTransact of Binder.java in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible local execution of arbitrary code in a privileged process due to a memory overwrite. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 4.6 CVE-2019-2123MISC google -- android In checkAccess of SliceManagerService.java in Android 9, there is a possible permissions check bypass due to incorrect order of arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 4.4 CVE-2019-2175MISC google -- android In isPreferred of HidProfile.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible device type confusion due to a permissions bypass. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 6.8 CVE-2019-2177MISC google -- android In NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 4.3 CVE-2019-2179MISC google -- android In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 6.9 CVE-2019-2181MISC grafana -- grafana In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana. 2019-09-03 5.0 CVE-2019-15043CONFIRMMISCMISCCONFIRMFEDORAFEDORA ibm -- intelligent_operations_center IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 - V5.1.0.6, and IBM Water Operations for Waternamics V5.1.0 - V5.2.1.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 161201. 2019-09-05 5.0 CVE-2019-4321CONFIRMXF ibm -- jazz_for_service_management IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host header during caching. By sending a specially crafted HTTP GET request, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-force ID: 158976. 2019-09-05 4.3 CVE-2019-4186XFCONFIRM instagram-php-api_project -- instagram-php-api cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/success.php error_description parameter. 2019-09-04 4.3 CVE-2019-14470MISCMISCMISCEXPLOIT-DB jetbrains -- teamcity JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it possible to send an arbitrary HTTP request to a TeamCity server under the name of the currently logged-in user. 2019-09-05 4.3 CVE-2019-15848CONFIRM knowage-suite -- knowage In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes. 2019-09-05 4.0 CVE-2019-13349MISC knowage-suite -- knowage In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page. 2019-09-05 5.0 CVE-2019-14278MISC lenovo -- xclarity_administrator An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 that could allow information disclosure. 2019-09-03 5.0 CVE-2019-6179MISC lenovo -- xclarity_administrator A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the user's web browser. The JavaScript code is not executed on LXCA itself. 2019-09-03 4.3 CVE-2019-6181MISC lenovo -- xclarity_administrator A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formula is not executed on LXCA itself. 2019-09-03 4.0 CVE-2019-6182MISC libexpat_project -- libexpat In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read. 2019-09-04 5.0 CVE-2019-15903MISCMISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c. 2019-09-04 4.9 CVE-2018-21008MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.6. There is a memory leak issue when idr_alloc() fails in genl_register_family() in net/netlink/genetlink.c. 2019-09-04 4.6 CVE-2019-15921MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a pf data structure if alloc_disk fails in drivers/block/paride/pf.c. 2019-09-04 4.9 CVE-2019-15922MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if alloc_disk fails in drivers/block/paride/pf.c. 2019-09-04 4.9 CVE-2019-15923MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dereference because there is no -ENOMEM upon an alloc_workqueue failure. 2019-09-04 4.9 CVE-2019-15924MISCMISC login_or_logout_menu_item_project -- login_or_logout_menu_item The login-or-logout-menu-item plugin before 1.2.0 for WordPress has no requirement for lolmi_save_settings authentication. 2019-08-30 5.8 CVE-2019-15820MISCMISCMISC memcached -- memcached memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str in memcached.c. 2019-08-30 5.0 CVE-2019-15026CONFIRMCONFIRMMLIST mongodb -- mongodb An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB server versions less than 4.0.11, 3.6.14, and 3.4.22 to run attacker defined code as the user running the utility. 2019-08-30 6.8 CVE-2019-2390CONFIRM mulesoft -- api_gateway Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gateway released before August 1 2019 allow remote attackers to read files accessible to the Mule process. 2019-08-30 5.0 CVE-2019-15630MISC nagios -- log_server Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page. 2019-09-03 4.3 CVE-2019-15898MISCMISC naver -- cloud_explorer NDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle. 2019-09-03 5.0 CVE-2019-13156CONFIRM onkyo -- tx-nr686_firmware Directory traversal vulnerability on ONKYO TX-NR686 1030-5000-1040-0010 A/V Receiver devices allows remote attackers to read arbitrary files via a .. (dot dot) and %2f to the default URI. 2019-08-30 5.0 CVE-2019-6113MISC opencv -- opencv An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp. 2019-09-05 5.0 CVE-2019-15939MISCMISC profilegrid -- profilegrid The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pm_template_preview&html=

Read more »

Twitter and Deepfakes – Intego Mac Podcast, Episode 99
This week on the Intego Mac Podcast, episode 99… Twitter's boss had his Twitter account hacked, and Twitter has disabled a feature from its earliest days that let you tweet via SMS. Firefox's new update, version 69, blocks trackers and cryptocurrency miners by default. And we take a look at audio and video deepfakes. Check out […]

Read more »

4-core and 6-core 2018 Mac minis available at Apple, refurbi...
Apple has Certified Refurbished 2018 Mac minis available on their online store for $120-$170 off the cost of new models. Each mini comes with a new outer case plus a standard Apple one-year warranty. Shipping is free: – 3.6GHz Quad-Core mini: $679 $120 off MSRP – 3.0GHz 6-Core mini: $929 $170 off MSRP Keep an eye on our Mac mini Price Tracker for the latest prices and sales from Apple and → Read More...

Read more »

$250 prepaid Visa card with any Apple iPhone, including the ...
Xfinity Mobile will include a free $250 prepaid Visa card with the purchase of any new iPhone, new line activation, and transfer of phone number to Xfinity Mobile. Offer is valid through October 27, 2019. The fine print: “Prepaid Card offer ends 10/27/19. Requires purchase of new, qualifying iPhone while supplies last, activation of new Xfinity Mobile line and transfer of phone number from another carrier within 30 days of phone order date. Must maintain new Xfinity Mobile line with an account in good standing for 90 days following line activation. Prepaid card issued by MetaBank®, Member FDIC, pursuant to a license from Visa® U.S.A., Inc. Prepaid card mailed to Xfinity account holder within 16-18 weeks of activation of all required services and expires in 180 days. May not be combined with other offers. Not valid with prior purchases, returns or exchanges. Maximum $1,250 in prepaid card amount per customer/account. Multiple cards may be issued based on total qualifying amount.” This deal is live today at → Read More...

Read more »

Sprint is offering the 64GB Apple iPhone 11 Pro for $12.50 p...
Sprint has the new 64GB iPhone 11 Pro available for $12.50 per month for new customers with an eligible trade-in in of iPhone 7 or newer. That’s down from their standard monthly lease of $41.67. The fine print: “Get iPhone 11 for as low as $0/mo. and save on the iPhone 11 Pro and iPhone 11 Pro Max when you trade in select phones in ANY condition. iPhone 11 64GB $0/mo. iPhone 11 Pro 64GB $12.50/mo. or iPhone 11 Pro Max 64GB $16.67/mo. after $29.17/mo. credit, applied within 2 bills. Reqs. unlocked eligible trade-in, 18-mo. lease, new line activ., and approved credit. If you cancel early, remaining balance due. Excludes tax. Eligible trade-in phones: iPhone 7, iPhone 7+, iPhone 8, iPhone 8+, iPhone X, iPhone XR, iPhone XS, iPhone XS Max, Samsung Galaxy S9, Samsung Galaxy S9+, Samsung Galaxy Note9, Samsung Galaxy S10e, Samsung Galaxy S10, Samsung Galaxy S10 5G, Samsung Galaxy S10+, Google Pixel 3, Google Pixel 3 XL, Google Pixel 3a, Google Pixel 3a XL, LG G8, LG V40 and LG V50.” This deal is live at → Read More...

Read more »

Final week: Apple’s 2019 Back to School Promotion. Free Be...
Purchase a new Mac using Apple’s Education discount, and take up to $400 off MSRP. All teachers, students, and staff of any educational institution with a .edu email address qualify for the discount. As part of Apple’s 2019 Back to School promotion, they will include one free pair of Beats Studio 3 Wireless headphones, Beats Solo3 Wireless Headphones, or BeatsX Earphones with the purchase of a MacBook Air, MacBook Pro, iMac, or iMac Pro (Mac mini excluded). Apple will include a free pair of BeatsX Earphones or Solo3 Wireless Headphones with the purchase of any new iPad Pro. Promotion runs through September 26, 2019: – 2019 15″ 2.3GHz 8-Core Touch Bar MacBook Pro: $2599 $200 off – 2019 15″ 2.6GHz 6-Core Touch Bar MacBook Pro: $2249 $150 off – 2019 13″ 2.4GHz/512GB 4-Core Touch Bar MacBook Pro: $1899 $100 off – 2019 13″ 2.4GHz/256GB 4-Core Touch Bar MacBook Pro: $1699 $100 off – 2019 13″ 1.4GHz/128GB 4-Core Touch Bar MacBook Pro: $1199 $100 off – 2019 13″ 1.4GHz/256GB 4-Core Touch Bar MacBook Pro: $1399 $100 off – 2019 13″ 1.6GHz/128GB MacBook Air: $999 $100 off – 2019 13″ 1.6GHz/256GB MacBook Air: $1199 $100 off – 27″ 8-Core iMac Pro: $4599 $400 off – 27″ 3.7GHz 5K iMac: $2099 $200 off – 27″ 3.1GHz 5K iMac: $1899 $100 off – 27″ 3.0GHz 5K iMac: $1699 $100 off – 21″ 3.0GHz 4K iMac: $1399 $100 off – 21″ 3.6GHz 4K iMac: $1249 $50 off – 21″ 2.3GHz iMac: $1049 $50 off – 3.6GHz Mac mini: $779 $20 off – 3.0GHz Mac mini: $1049 $50 off – 12.9″ iPad Pros: $50 off – 11″ iPad Pros: $50 off – 10.5″ iPad Airs: $20 off – 10.2″ iPads: $20 off – → Read More...

Read more »

Save $30 on Apple’s AirPods at these resellers today
Amazon is offering discounts on new 2019 Apple AirPods ranging up to $30 off MSRP as part of their Labor Day sale. Shipping is free: – AirPods with Charging Case: $144.95 $15 off MSRP – AirPods with Wireless Charging Case: $169.95 $30 off MSRP – Wireless Charging Case: $69 $10 off MSRP B&H Photo has AirPods on sale for up to $30 off MSRP as well. Shipping is free: – AirPods with Charging Case: $149 $10 off MSRP – AirPods with Wireless Charging Case: $169.95 $30 off MSRP – Wireless Charging Case: $69.95 $10 off MSRP See our AirPod Price Tracker for the latest prices and deals from Apple and → Read More...

Read more »

Preorder your Apple Watch Series 5 today at Amazon and save ...
Amazon has Apple Watch Series 5 GPS models available for preorder and on sale today for $15 off Apple’s MSRP. Shipping is free and starts on September 20th: – 40mm Apple Watch Series 5 GPS: $384.99 $30 off MSRP – 44mm Apple Watch Series 5 GPS: $414.99 $30 off MSRP See our Apple Watch Price Tracker for the latest prices & sales from Apple and → Read More...

Read more »

21″ iMacs on sale for $100 off Apple’s MSRP, starting at...
B&H Photo has new 21″ Apple iMacs on sale for $100 off MSRP with models available starting at $999. These are the same iMacs offered by Apple in their retail and online stores. Overnight shipping is free to many US addresses: – 21″ 2.3GHz iMac (MMQA2LL/A): $999.99 $100 off MSRP – 21″ 3.6GHz 4-Core 4K iMac (MRT32LL/A): $1199 $100 off MSRP – 21″ 3.0GHz 6-Core 4K iMac (MRT42LL/A): $1399 $100 off MSRP Amazon has these iMacs on sale for $100 off Apple’s MSRP as well: – 21″ 2.3GHz iMac (MMQA2LL/A): $999.99 $100 off MSRP – 21″ 3.6GHz 4-Core 4K iMac (MRT32LL/A): $1199 $100 off MSRP – 21″ 3.0GHz 6-Core 4K iMac (MRT42LL/A): $1399 $100 off MSRP For the latest up-to-date iMac sale prices from Apple’s resellers, see our iMac → Read More...

Read more »

2018 4 and 6-Core Mac minis on sale today for $100-$150 off ...
Apple resellers are offering new 2018 4-Core and 6-Core Mac minis for $100-$150 off MSRP for a limited time. B&H Photo has the new 2018 4-Core and 6-Core Mac minis on sale for up to $150 off Apple’s standard MSRP. Overnight shipping is free to many US addresses: – 3.6GHz Quad-Core mini: $699 $100 off MSRP – 3.0GHz 6-Core mini: $949 $150 off MSRP Amazon also has Mac minis on sale for $100-$150 off MSRP. Shipping is free: – 3.6GHz Quad-Core mini: $699 $100 off MSRP – 3.0GHz 6-Core mini: $949 $150 off MSRP Keep an eye on our Mac mini Price Tracker for the latest prices and sales from Apple and → Read More...

Read more »

Save $150-$250 on 10.2″ WiFi + Cellular iPads at Verizon w...
Verizon is offering $150-$250 discounts on Apple’s new 10.2″ WiFi + Cellular iPad with service. Buy the iPad itself and save $150. Save $250 on the purchase of an iPad along with an iPhone. The fine print: “$150 promo credit requires device payment purchase on iPad; $250 promo credit requires device payment purchase on both iPad and iPhone; Up to $1,229.99 purchase required. Less $150 instant promo credit and $100 promo credit applied to account over 24 mos on device payment; promo credit ends if eligibility requirements are no longer met; 0% APR.” This deal is live at → Read More...

Read more »

Apple continues to offer 13″ 2.3GHz Dual-Core MacBook Pros...
Apple has Certified Refurbished 2017 13″ 2.3GHz Dual-Core non-Touch Bar MacBook Pros available starting at $1019. An standard Apple one-year warranty is included with each model, outer cases are new, and shipping is free: – 13″ 2.3GHz/128GB Space Gray MacBook Pro (MPXQ2LL/A): $1019 original MSRP $1299 – 13″ 2.3GHz/256GB Space Gray MacBook Pro (MPXT2LL/A): $1189 original MSRP $1499 – 13″ 2.3GHz/128GB Silver MacBook Pro (MPXR2LL/A): $1019 original MSRP $1299 – 13″ 2.3GHz/256GB Silver MacBook Pro (MPXU2LL/A): $1189 original MSRP $1499 Keep an eye on our 13″ MacBook Pro Price Tracker for the latest prices → Read More...

Read more »

Apple restocks 2018 MacBook Airs, Certified Refurbished, sta...
Apple has restocked Certified Refurbished 2018 13″ MacBook Airs starting at only $849. Each MacBook features a new outer case, comes with a standard Apple one-year warranty, and is shipped free. The following configurations are available: – 13″ 1.6GHz/128GB MacBook Air Space Gray: $849 original MSRP $1199 – 13″ 1.6GHz/128GB MacBook Air Silver: $849 original MSRP $1199 – 13″ 1.6GHz/128GB MacBook Air Gold: $849 original MSRP $1199 – 13″ 1.6GHz/256GB MacBook Air Space Gray: $1019 original MSRP $1399 – 13″ 1.6GHz/256GB MacBook Air Silver: $1019 original MSRP $1399 – 13″ 1.6GHz/256GB MacBook Air Gold: $1019 original MSRP $1399 Apple’s refurbished prices are the lowest available for 2018 13″ MacBook Airs anywhere. For the latest sales & prices, see our 13″ MacBook Air Price Tracker, → Read More...

Read more »

Sunday Sale! 2019 27″ 5K 6-Core iMacs for $200-$250 off Ap...
B&H Photo has the new 2019 27″ 5K 6-Core iMacs on stock today and on sale for up to $250 off Apple’s MSRP. Overnight shipping is free to many locations in the US. These are the same iMacs sold by Apple in their retail and online stores: – 27″ 3.0GHz 5K iMac: $1599 $200 off MSRP – 27″ 3.1GHz 5K iMac: $1749 $250 off MSRP – 27″ 3.7GHz 5K iMac: $2099 $200 off MSRP See our iMac Price Tracker for the latest sales and prices from Apple and → Read More...

Read more »