Wicked bike wreck shows importance of Apple Watch hard fall ...
Bob Burdett was mountain biking near Spokane, then the next thing he knew he was waking up in an ambulance. He’d had a crash so severe he was knocked unconscious for a considerable amount of time. Fortunately, his Apple Watch called 911 for him. Burdett’s son was notified by his father’s wearable of the hard […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

6 reasons iPhone 11 is Apple’s best new smartphone [Review...
Everyone shopping for a 2019 iPhone faces a conundrum: the new Pro series models are loaded with top-of-line features, but they cost much, much more than the iPhone 11. Is it really necessary to pay $1000 or more to get a great iPhone? No, no it isn’t. Here’s why. 1. Performance The iPhone 11 has […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Did your iOS update fail? Here’s how to troubleshoot
9to5Mac is brought to you by JustAnswer: Connect 1-on-1 with an Apple support Expert to get step-by-step assistance via phone or online chat, 24/7. Try it now.  Apple just released iOS 13 to the public, and it’s available as an over-air-download to users now. Did your iOS update fail for some reason? Read on as we walk through a few common problems and solutions. more… The post appeared first on 9to5Mac.

Read more »

Get an Instant Discount On The Apple Watch Series 5
Hesitated pre-ordering the Apple Watch Series 5 and now regret the decision? It’s okay- the newest Apple Watch is now discounted on Amazon. The 40 mm GPS Apple Watch Series… The post appeared first on iLounge.

Read more »

The week’s best iOS 13 apps (and one Mac app)
This week we get grooving with EG Pulse, take control of Mission Control, drag stuff around with Yoink, and wonder why we need Pocket Casts. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Gesture Bug on iOS 13 Makes PUBG and Fortnite Unplayable
Recently updated to iOS 13 and loaded up Fortnite? You may be in for a rude awakening. iOS 13 contains a bug that rears its ugly head when iPhone owners… The post appeared first on iLounge.

Read more »

Apple Shows Off The iPhone 11 Pro’s Cameras in a ‘Behind...
Apple has recently uploaded a video of the iPhone 11 Pro’s photographic prowess in a ‘behind the scenes’ video. The footage highlights the photographic equipment that was used for the… The post Apple Shows Off The iPhone 11 Pro’s Cameras in a ‘Behind the Scenes’ Video appeared first on iLounge.

Read more »

iFixit Shows iPhone 11 Pro Teardown on YouTube
iFixit has hosted a live teardown of the newest iPhone 11 Pro on YouTube. To those who are interested in what the iPhone looks like when it’s being disassembled bit… The post appeared first on iLounge.

Read more »

How Apple has designed the iPhone 11 for everybody
Last year's iPhone XR was a good phone, but the 2019 iPhone 11 is a standout. It has enough new features that it's going to tempt people who would otherwise have gone for the more expensive models. Here are our pick of the top reasons why iPhone 11 is superb.

Read more »

Feature Request: How Apple could integrate Notes with Activi...
The Activity app for Apple Watch and iPhone has come a long way over the last several years. It gets even better this year with the incredibly useful “Trends” feature and more in watchOS 6 and iOS 13. One feature I would really like to see come to the Activity app, however, is support for adding Notes to workouts. Here’s how that could work. more… The post Feature Request: How Apple could integrate Notes with Activity to improve workout tracking  appeared first on 9to5Mac.

Read more »

Today in Apple history: iPhone 6 sells record 10 million uni...
September 22, 2014: Apple notches a new sales record with iPhone 6 and iPhone 6 Plus, selling a massive 10 million units in the first weekend the handsets go on sale. The eagerly anticipated phones bring a redesigned form factor that will persist for years. The most obvious change? Larger 4.7-inch and 5.5-inch displays that […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

MiniWiki unofficial Wikipedia Apple Watch app adds ‘Random...
If you want the knowledge of Wikipedia on your Apple Watch, MiniWiki is the best way to go. The watch app is developed by Will Bishop, the maker of Chirp for Twitter and Nano for Reddit, so Will knows his Apple Watch apps. The first big update to MiniWiki since launching is out this week, and it adds a highly requested feature to the Wikipedia watch app. more… The post MiniWiki unofficial Wikipedia Apple Watch app adds ‘Random’ articles, independent language appeared first on 9to5Mac.

Read more »

New Old Orchard Apple Store arriving September 28 in Skokie,...
Apple’s busy September of retail store openings and expansions isn’t over yet. On September 28 at 10:00 a.m., Apple Old Orchard in Skokie, Illinois will move to a brand new space. more… The post New Old Orchard Apple Store arriving September 28 in Skokie, Illinois appeared first on 9to5Mac.

Read more »

SignEasy upgraded with VisionKit-based document scanning, Da...
Signing digital documents on the iPhone and iPad can be confusing without the right software. That’s where SignEasy comes in — making the process of signing and filling out digital paperwork simple. The latest version of the popular utility landed this week with new iOS 13 and iPadOS 13 features from day one. more… The post SignEasy upgraded with VisionKit-based document scanning, Dark Mode, and multi-windowing appeared first on 9to5Mac.

Read more »

This week’s top stories: iPhone 11 and iPhone 11 Pro relea...
In this week’s top stories: Apple officially releases iOS 13 and watchOS 6 to the public, the iPhone 11 and Apple Watch Series 5 launch, and much more. Read on for all of this week’s biggest news.more… The post This week’s top stories: iPhone 11 and iPhone 11 Pro release, iOS 13 and watchOS 6 features, more appeared first on 9to5Mac.

Read more »

Comment: How to decide if AppleCare is worth the price
Is AppleCare worth the price? Is AppleCare good value? These are questions I get asked a lot this time of year. While people generally buy Macs and iPads when they are falling apart, a lot of people love to buy the latest iPhone every other year, if not every year. Thanks to the iPhone Upgrade Program and leasing through cellular carriers, it’s gotten a lot easier to always carry the latest iPhone. I’ve never bought AppleCare on a device, and I’ve never regretted it. more… The post appeared first on 9to5Mac.

Read more »

Poll: Early Apple Watch Series 5 users report mixed battery ...
The Apple Watch Series 5 is the first to feature an always-on display, and Apple touted that it was able to achieve that without a measurable impact on battery life. Now that the Series 5 is widely available, however, some users are reporting mixed results when it comes to battery performance – but it could be a software bug. more… The post Poll: Early Apple Watch Series 5 users report mixed battery life, what about you? appeared first on 9to5Mac.

Read more »

How Apple Arcade wants to bust up free-to-play games. And wh...
I don't know if Apple Arcade will "kill free-to-play" gaming as some have predicted but it is a shot across the bow to those developers who use that model to make money.∞ Read this on The Loop

Read more »

iPhone 11 Pro loses to iPhone XS in app launch speed test
The iPhone 11 and iPhone 11 Pro boasts a 20% faster processor on paper, but how does that translate into real-world use? Not great at least running iOS 13.0 when compared to the iPhone XS. App launch speed tests aren’t the be all and end all, but they give a reasonable stress test overview that it is at least less synthetic than Geekbench scores. In EverythingApplePro’s video, the iPhone XS actually beat the iPhone 11 Pro by thirty seconds … more… The post appeared first on 9to5Mac.

Read more »

iPhone 11: Night Mode camera will make us rethink what we ca...
iPhone 11 launched this week with an all-new Night Mode camera for capturing low light scenes that are difficult or impossible to shoot on earlier models. Check below for a quick comparison of iPhone 11 photos taken at night with and without Night Mode. more… The post iPhone 11: Night Mode camera will make us rethink what we can capture with our phones appeared first on 9to5Mac.

Read more »

Apple Watch helps EMTs and family locate mountain biker afte...
Fall detection on Apple Watch Series 4 (and now Series 5) has been credited with saving lives all over the world in the year since the feature was introduced.  The latest real-world story is a great example of why people of all ages should consider turning on the feature. more… The post Apple Watch helps EMTs and family locate mountain biker after unexpected fall appeared first on 9to5Mac.

Read more »

Apple Watch Series 5 bands featured in stunning, one-of-a-ki...
Apple Park Visitor Center is always home to the most unique product displays of any Apple Store location in the world. Since opening in 2017, the store has featured several exquisitely detailed installations showcasing the latest Apple Watch bands and accessories. For the launch of Apple Watch Series 5, iPhone 11, and 11 Pro on September 20, new displays arrived to treat visitors. more… The post Apple Watch Series 5 bands featured in stunning, one-of-a-kind displays at Apple Park Visitor Center appeared first on 9to5Mac.

Read more »

Weekend deal roundup: Apple Watch 5, iPads, Macs up to $700 ...
Weekend Apple deals are delivering cash savings on everything from the Apple Watch Series 5 to Vega MacBook Pros and iMacs. Many of the markdowns at top Apple Authorized Resellers are in addition to bonus perks, such as free expedited shipping and no interest financing offers.

Read more »

Apple @ Work: Why are IT professionals choosing Apple produc...
Apple @ Work is brought to you by Spike, the world’s first conversational email app that helps professionals and teams spend less time on email, and more on getting things done. In the enterprise IT market, eliminating variables is an essential part of the job when it comes to troubleshooting. The more variables you have, the more opportunities you have for things to go wrong. By eliminating variables on your network and with your end-user devices, you make it easier to troubleshoot when issues arise. Variables especially cause issues when it comes to major OS upgrades as you have more testing to do. The longer I’ve been in enterprise IT, the more I’ve realized that Apple’s tightly controlled system of hardware and software integration is exactly what IT departments crave. Apple controls every bit of driver updates as part of their OS upgrades, and that helps IT departments be more efficient. While IT departments used to be all in on Windows, we are starting to see that tide shift. Thanks to upgrades in the ability to manage Apple products in mass, and the simplicity of the Apple hardware and software configuration, IT departments are now seeing the value of Apple in the enterprise. Instead of banning Apple devices, IT departments are now recommending them. more… The post Apple @ Work: Why are IT professionals choosing Apple products when they used to ban them appeared first on 9to5Mac.

Read more »

iPhone 11 and 11 Pro drop test: We couldn’t crack these ph...
I take all these tests with very large grains of salt because everyone's "Oh crap! I dropped my phone!" situation is different but they can still be interesting. I will admit it's painful to watch so many brand new phones get destroyed. I wih I had that kind of money.∞ Read this on The Loop

Read more »

Camera comparison: iPhone 11 versus iPhone 11 Pro
The differences between the iPhone 11 and iPhone 11 Pro's camera systems are less than we're used to in previous models, but there are still differences that are worth investigating. We took to a pair of iPhones out into the world to see how they really stack up against each other.

Read more »

iPhone 11 makes powerful first impression [Cult of Mac Magaz...
The new iPhones and Apple Watch are out, and they’re racking up rave reviews. Our hands-on iPhone 11 first impressions show it to be a pretty, powerful photographic phenom. Meanwhile, other reviewers can’t stop complimenting the entry-level iPhone (or its beefed-up siblings, the iPhone 11 Pro and 11 Pro Max). Same goes for Apple Watch […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

How to force restart your iPhone 11, iPhone 11 Pro, or iPhon...
The steps you need to take to force restart your iPhone 11, iPhone 11 Pro or iPhone 11 Pro Max are different if you're used to an iPhone with a Home button. Here's how to do it.

Read more »

iFixit’s iPhone 11 Pro Max teardown finds higher-capacity ...
iFixit gave the phone a 6 out of 10 for repairability.

Read more »

Totallee’s super thin iPhone 11, 11 Pro/Max cases are now ...
California-based iPhone case maker totallee has been making some of the top reviewed super thin cases around since 2013, and now you can buy the lineup on Amazon too. We’re big fans of the branding-free totallee iPhone cases which allow you to enjoy your phone like it was meant to be while adding some extra protection at the same time. Totallee offers the perfect low profile cases for the new iPhone 11, 11 Pro and 11 Pro Max, helping keep them protected without adding extra bulk. Totallee is now offering its collection of super thin and minimalistic cases on Amazon starting at just $29, including free shipping for Prime members (just scroll down a couple of rows to see the new cases for the iPhone 11, 11 Pro, and 11 Pro Max). Totallee offers three types of cases, each minimalistic and branding-free: more… The post Totallee’s super thin iPhone 11, 11 Pro/Max cases are now available on Amazon appeared first on 9to5Mac.

Read more »

New iOS 13 features, Smart TVs spying on you, and more – I...
iOS 13 is out, and Josh and Kirk discuss its new features and what you can look forward to. They also discuss how smart TVs spy on you and send data about everything you watch, as well as a new SIM card flaw and an iOS 13 lock screen bypass.

Read more »

What’s New in iOS 13 and iPadOS 13
Apple has released iOS 13 for the iPhone and iPod touch, and the newly-named iPadOS 13 for the iPad. This is the first year that the company has created different versions of its mobile operating system for different devices, and there are a number of new features specific to the iPad. iOS 13 runs on […]

Read more »

Before He Spammed You, this Sly Prince Stalked Your Mailbox
A reader forwarded what he briefly imagined might be a bold, if potentially costly, innovation on the old Nigerian prince scam that asks for help squirreling away millions in unclaimed fortune: it was sent via the U.S. Postal Service, with a postmarked stamp and everything. In truth these "advance fee" or "419" scams- - so-called because they violate section 419 of the criminal code of Nigeria where many such lures originate -- predate email and have circulated via postal mail in various forms and countries over the years.

Read more »

Man Who Hired Deadly Swatting Gets 15 Months
An Ohio teen who recruited a convicted serial swatter to fake a distress call that ended in the police shooting an innocent Kansas man in 2017 has been sentenced to 15 months in prison.

Read more »

Firefox and Chrome rolling out DNS over HTTPS (DoH) feature
Earlier this month, Mozilla announced that Firefox will begin enabling “DNS over HTTPS” (DoH) by default for USA-based users. Not intending to be left behind in the pursuit of safer browsing, Google has announced that it, too, will begin experimenting with the feature; Chrome 78 will validate Google’s implementation of DNS over HTTPS. What DNS […]

Read more »

Apple’s new iPhone 11, and more – Intego Mac Podcast, Ep...
Josh and Kirk celebrate episode 100 of the Intego Mac Podcast with special guest Dave Hamilton and discuss Apple's new iPhone, Apple Watch, iPad, Apple Arcade, and Apple TV+. And we discuss changes to Apple's AppleCare extended warranty and insurance plan. Check out the full show notes for links.

Read more »

NY Payroll Company Vanishes With $35 Million
MyPayrollHR, a now defunct cloud-based payroll processing firm based in upstate New York, abruptly ceased operations this past week after stiffing employees at thousands of companies. The ongoing debacle, which allegedly involves malfeasance on the part of the payroll company's CEO, resulted in countless people having money drained from their bank accounts and has left nearly $35 million worth of payroll and tax payments in legal limbo.

Read more »

Apple updates iPhone, Apple Watch, and iPad; gives info on A...
At its "By Innovation Only" event on September 10, Apple introduced its latest line of iPhone models, along with a new Apple Watch and a new iPad, and new details about its upcoming Apple Arcade and Apple TV+ services. Here's everything you need to know.

Read more »

Patch Tuesday, September 2019 Edition
Microsoft today issued security updates to plug some 80 security holes in various flavors of its Windows operating systems and related software. The software giant assigned a "critical" rating to almost a quarter of those vulnerabilities, meaning they could be used by malware or miscreants to hijack vulnerable systems with little or no interaction on the part of the user.

Read more »

Secret Service Investigates Breach at U.S. Govt IT Contracto...
The U.S. Secret Service is investigating a breach at a Virginia-based government technology contractor that saw access to several of its systems put up for sale in the cybercrime underground, KrebsOnSecurity has learned. The contractor claims the access being auctioned off was to old test systems that do not have direct connections to its government partner networks. In mid-August, a member of a popular Russian-language cybercrime forum offered to sell access to the internal network of a U.S. government IT contractor that does business with more than 20 federal agencies, including several branches of the military. The seller bragged that he had access to email correspondence and credentials needed to view databases of the client agencies, and set the opening price at six bitcoins (~USD $60,000).

Read more »

Vulnerability Summary for the Week of September 2, 2019
Original release date: September 9, 2019  The CISA Weekly Vulnerability Summary Bulletin is created using information from the NIST NVD. In some cases, the vulnerabilities in the Bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info alfresco -- alfresco An issue was discovered in Alfresco Community Edition versions 6.0 and lower. An unauthenticated, remote attacker could authenticate to Alfresco's Solr Web Admin Interface. The vulnerability is due to the presence of a default private key that is present in all default installations. An attacker could exploit this vulnerability by using the extracted private key and bundling it into a PKCS12. A successful exploit could allow the attacker to gain information about the target system (e.g., OS type, system file locations, Java version, Solr version, etc.) as well as the ability to launch further attacks by leveraging the access to Alfresco's Solr Web Admin Interface. 2019-09-05 7.5 CVE-2019-14222MISC alfresco -- alfresco An issue was discovered in Alfresco Community Edition 5.2 201707. By leveraging multiple components in the Alfresco Software applications, an exploit chain was observed that allows an attacker to achieve remote code execution on the victim machine. The attacker must upload malicious Solr configuration files and then receive a JMX connection from the victim, and serve a Java object that results in deserialization and code execution. 2019-09-05 9.0 CVE-2019-14224MISC artifex -- ghostscript A flaw was found in ghostscript, versions 9.x before 9.28, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands. 2019-09-06 7.5 CVE-2019-14813CONFIRMCONFIRM asus -- precision_touchpad AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \.AsusTP device, leading to a DoS or potentially privilege escalation via a crafted DeviceIoControl call. 2019-09-04 7.5 CVE-2019-10709MISCMISC broadcom -- ca_client_automation An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to execute arbitrary code. 2019-09-06 7.5 CVE-2019-13656MISC cisco -- jabber A vulnerability in Cisco Jabber Client Framework (JCF) for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper file level permissions on an affected device when it is running Cisco JCF for Mac Software. An attacker could exploit this vulnerability by authenticating to the affected device and executing arbitrary code or potentially modifying certain configuration files. A successful exploit could allow the attacker to execute arbitrary code or modify certain configuration files on the device using the privileges of the installed Cisco JCF for Mac Software. 2019-09-04 7.2 CVE-2019-12645CISCO cisco -- nx-os A vulnerability in the Network Time Protocol (NTP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to excessive use of system resources when the affected device is logging a drop action for received MODE_PRIVATE (Mode 7) NTP packets. An attacker could exploit this vulnerability by flooding the device with a steady stream of Mode 7 NTP packets. A successful exploit could allow the attacker to cause high CPU and memory usage on the affected device, which could cause internal system processes to restart or cause the affected device to unexpectedly reload. Note: The NTP feature is enabled by default. 2019-08-30 7.8 CVE-2019-1967CISCO cisco -- unified_computing_system A vulnerability in a specific CLI command within the local management (local-mgmt) context for Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to gain elevated privileges as the root user on an affected device. The vulnerability is due to extraneous subcommand options present for a specific CLI command within the local-mgmt context. An attacker could exploit this vulnerability by authenticating to an affected device, entering the local-mgmt context, and issuing a specific CLI command and submitting user input. A successful exploit could allow the attacker to execute arbitrary operating system commands as root on an affected device. The attacker would need to have valid user credentials for the device. 2019-08-30 7.2 CVE-2019-1966CISCO cisco -- webex_teams A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. This vulnerability is due to improper restrictions on software logging features used by the application on Windows operating systems. An attacker could exploit this vulnerability by convincing a targeted user to visit a website designed to submit malicious input to the affected application. A successful exploit could allow the attacker to cause the application to modify files and execute arbitrary commands on the system with the privileges of the targeted user. 2019-09-04 9.3 CVE-2019-1939CISCO egain -- chat eGain Chat 15.0.3 allows unrestricted file upload. 2019-09-04 7.5 CVE-2019-13976MISC eventum_project -- eventum Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2. 2019-09-05 7.5 CVE-2018-11569MISC exim -- exim Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash. 2019-09-06 10.0 CVE-2019-15846MISCMLISTMLISTMLISTMLISTMLISTMLISTMLISTMLISTMLISTFEDORAFEDORABUGTRAQGENTOOUBUNTUDEBIANCERT-VNMISC freebsd -- freebsd In FreeBSD 12.0-STABLE before r350648, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350650, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before 11.2-RELEASE-p13, the ICMPv6 input path incorrectly handles cases where an MLDv2 listener query packet is internally fragmented across multiple mbufs. A remote attacker may be able to cause an out-of-bounds read or write that may cause the kernel to attempt to access an unmapped page and subsequently panic. 2019-08-30 7.5 CVE-2019-5608CONFIRM freebsd -- freebsd In FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r350829, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, a missing check in the function to arrange data in a chain of mbufs could cause data returned not to be contiguous. Extra checks in the IPv6 stack could catch the error condition and trigger a kernel panic, leading to a remote denial of service. 2019-08-30 7.8 CVE-2019-5611MISCBUGTRAQCONFIRM freebsd -- freebsd In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r351265, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, the kernel driver for /dev/midistat implements a read handler that is not thread-safe. A multi-threaded program can exploit races in the handler to copy out kernel memory outside the boundaries of midistat's data buffer. 2019-08-30 7.8 CVE-2019-5612CONFIRM fusionpbx -- fusionpbx FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (which will insert the malicious command into the database). To trigger the command, one needs to call the services.php file via a GET request with the service id followed by the parameter a=start to execute the stored command. 2019-09-05 9.0 CVE-2019-15029MISCMISCMISC google -- android NVIDIA Tegra contains a vulnerability in BootRom where a user with kernel level privileges can write an arbitrary value to an arbitrary physical address 2019-09-06 7.2 CVE-2018-6240MISC google -- android In ihevcd_ref_list of ihevcd_ref_list.c in Android 10, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 9.3 CVE-2019-2108MISC google -- android In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 7.2 CVE-2019-2115MISC google -- android In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 7.2 CVE-2019-2174MISC google -- android In ihevcd_parse_buffering_period_sei of ihevcd_parse_headers.c in Android 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 9.3 CVE-2019-2176MISC google -- android In rw_t4t_sm_read_ndef of rw_t4t in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC service with no additional execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 7.2 CVE-2019-2178MISC google -- android In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 7.2 CVE-2019-9254MISC hanwha-security -- srn-472s_firmware An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before 2019-05-03. A system crash and reboot can be achieved by submitting a long username in excess of 117 characters. The username triggers a buffer overflow in the main process controlling operation of the DVR system, rendering services unavailable during the reboot operation. A repeated attack affects availability as long as the attacker has network access to the device. 2019-09-05 7.8 CVE-2019-12223MISCMISCMISC libreoffice -- libreoffice LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice install. Protection was added, to address CVE-2019-9852, to avoid a directory traversal attack where scripts in arbitrary locations on the file system could be executed by employing a URL encoding attack to defeat the path verification step. However this protection could be bypassed by taking advantage of a flaw in how LibreOffice assembled the final script URL location directly from components of the passed in path as opposed to solely from the sanitized output of the path verification step. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1. 2019-09-06 7.5 CVE-2019-9854CONFIRM libreoffice -- libreoffice LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1. 2019-09-06 7.5 CVE-2019-9855CONFIRM linux -- linux_kernel An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c. 2019-09-04 7.2 CVE-2017-18595MISCMISC linux -- linux_kernel A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped. 2019-09-04 7.5 CVE-2019-15902MISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service. 2019-09-04 7.8 CVE-2019-15916MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c. 2019-09-04 7.2 CVE-2019-15917MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.10. SMB2_negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21. 2019-09-04 7.2 CVE-2019-15918MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.10. SMB2_write in fs/cifs/smb2pdu.c has a use-after-free. 2019-09-04 7.2 CVE-2019-15919MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.10. SMB2_read in fs/cifs/smb2pdu.c has a use-after-free. NOTE: this was not fixed correctly in 5.0.10; see the 5.0.11 ChangeLog, which documents a memory leak. 2019-09-04 7.2 CVE-2019-15920MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.2.3. An out of bounds access exists in the function hclge_tm_schd_mode_vnet_base_cfg in the file drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c. 2019-09-04 7.2 CVE-2019-15925MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx in the file drivers/net/wireless/ath/ath6kl/wmi.c. 2019-09-04 9.4 CVE-2019-15926MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the function build_audio_procunit in the file sound/usb/mixer.c. 2019-09-04 7.2 CVE-2019-15927MISCMISC nagios -- nagios_xi Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The getprofile.sh script, invoked by downloading a system profile (profile.php?cmd=download), is executed as root via a passwordless sudo entry; the script executes check_plugin, which is owned by the nagios user. A user logged into Nagios XI with permissions to modify plugins, or the nagios user on the server, can modify the check_plugin executable and insert malicious commands to execute as root. 2019-09-05 9.0 CVE-2019-15949MISC opensc_project -- opensc OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c. 2019-09-05 7.5 CVE-2019-15945MISCMISC opensc_project -- opensc OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c. 2019-09-05 7.5 CVE-2019-15946MISCMISC pengutronix -- barebox Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly used for a memcpy. 2019-09-05 7.5 CVE-2019-15937MISC pengutronix -- barebox Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length field is directly used for a memcpy. 2019-09-05 7.5 CVE-2019-15938MISC restaurant_reservations_project -- restaurant_reservations The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for nd_rst_import_settings_php_function authentication. 2019-08-30 7.5 CVE-2019-15819MISCMISCMISC sonatype -- nexus_repository_manager The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability. 2019-09-03 9.0 CVE-2019-5475MISC symphonyextensions -- rich_text_formatter The Rich Text Formatter (Redactor) extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in content.fileupload.php and content.imageupload.php. 2019-09-05 7.5 CVE-2019-13187MISCMISC totaljs -- total.js_cms An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution (RCE) on the remote server by creating a malicious widget with a special tag containing JavaScript code that will be evaluated server side. In the process of evaluating the tag by the back-end, it is possible to escape the sandbox object by using the following payload: global.process.mainModule.require(child_process).exec(RCE); 2019-09-05 9.0 CVE-2019-15954MISCMISC varnish-cache -- varnish An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests. The assert will cause an automatic restart with a clean cache, which makes it a Denial of Service attack. 2019-09-03 7.8 CVE-2019-15892BUGTRAQMISCDEBIAN wpbrigade -- loginpress The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings. 2019-09-03 7.5 CVE-2019-15872MISCMISC wpserveur -- wps_child_theme_generator The wps-child-theme-generator plugin before 1.2 for WordPress has classes/helpers.php directory traversal. 2019-08-30 7.5 CVE-2019-15822MISCMISCMISC wpserveur -- wps_hide_login The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass. 2019-08-30 7.5 CVE-2019-15823MISCMISCMISC wpserveur -- wps_hide_login The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass. 2019-08-30 7.5 CVE-2019-15824MISCMISCMISC wpserveur -- wps_hide_login The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass. 2019-08-30 7.5 CVE-2019-15825MISCMISCMISC wpserveur -- wps_hide_login The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field. 2019-08-30 7.5 CVE-2019-15826MISCMISCMISC xiaoyi -- yi_m1_mirrorless_camera_firmware An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy (BLE) authentication module of YI M1 Mirrorless Camera V3.2-cn. An attacker can send a set of BLE commands to trigger this vulnerability, resulting in sensitive data leakage (e.g., personal photos). An attacker can also control the camera to record or take a picture after bypassing authentication. 2019-09-06 8.3 CVE-2019-13953MISC Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info 10web -- photo_gallery The photo-gallery plugin before 1.2.42 for WordPress has CSRF. 2019-08-30 6.8 CVE-2015-9380MISCMISCMISC abus -- secvest_wireless_alarm_system_fuaa50000_firmware An issue was discovered on ABUS Secvest FUAA50000 3.01.01 devices. Due to an insufficient implementation of jamming detection, an attacker is able to suppress correctly received RF messages sent between wireless peripheral components, e.g., wireless detectors or remote controls, and the ABUS Secvest alarm central. An attacker is able to perform a "reactive jamming" attack. The reactive jamming simply detects the start of a RF message sent by a component of the ABUS Secvest wireless alarm system, for instance a wireless motion detector (FUBW50000) or a remote control (FUBE50014 or FUBE50015), and overlays it with random data before the original RF message ends. Thereby, the receiver (alarm central) is not able to properly decode the original transmitted signal. This enables an attacker to suppress correctly received RF messages of the wireless alarm system in an unauthorized manner, for instance status messages sent by a detector indicating an intrusion. 2019-09-03 5.0 CVE-2019-14261MISCFULLDISCBUGTRAQMISC airbrake -- airbrake_ruby The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklist_keys configuration option and consequently may disclose passwords to unauthorized actors. This is fixed in 4.2.4 (also, 4.2.2 and earlier are unaffected). 2019-09-06 5.0 CVE-2019-16060MISC apache -- commons_compress The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress. 2019-08-30 5.0 CVE-2019-12402MISC artifex -- ghostscript A flaw was found in, ghostscript versions prior to 9.28, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands. 2019-09-03 6.8 CVE-2019-14811CONFIRM bitcoin -- bitcoin-qt In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via a grep "6231 0500" command. 2019-09-05 5.0 CVE-2019-15947MISCMISC blynk -- blynk-library An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability. 2019-09-05 5.0 CVE-2019-5065MISC bold-themes -- bold_page_builder The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data. 2019-08-30 5.0 CVE-2019-15821MISCMISCMISC canon -- print The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the administrator web interface and WPA2-PSK key. 2019-09-05 4.3 CVE-2019-14339MISCMISC cisco -- content_security_management_appliance A vulnerability in the authorization module of Cisco Content Security Management Appliance (SMA) Software could allow an authenticated, remote attacker to gain out-of-scope access to email. The vulnerability exists because the affected software does not correctly implement role permission controls. An attacker could exploit this vulnerability by using a custom role with specific permissions. A successful exploit could allow the attacker to access the spam quarantine of other users. 2019-09-04 4.0 CVE-2019-12635CISCO cisco -- finesse A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to access the system and perform unauthorized actions. 2019-09-04 5.0 CVE-2019-12632CISCO cisco -- identity_services_engine A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability exists because the web-based management interface of the affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. 2019-09-04 4.3 CVE-2019-12644CISCO cisco -- network_level_service A vulnerability in the “plug-and-play” services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper access restrictions on the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access running configuration information about devices managed by the IND, including administrative credentials. 2019-09-04 5.0 CVE-2019-1976CISCO cisco -- nx-os A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API on an affected device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition in the NX-API service; however, the NX-OS device itself would still be available and passing network traffic. Note: The NX-API feature is disabled by default. 2019-08-30 5.0 CVE-2019-1968CISCO cisco -- nx-os A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) Access Control List (ACL) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to perform SNMP polling of an affected device, even if it is configured to deny SNMP traffic. The vulnerability is due to an incorrect length check when the configured ACL name is the maximum length, which is 32 ASCII characters. An attacker could exploit this vulnerability by performing SNMP polling of an affected device. A successful exploit could allow the attacker to perform SNMP polling that should have been denied. The attacker has no control of the configuration of the SNMP ACL name. 2019-08-30 5.0 CVE-2019-1969CISCO cisco -- nx-os A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an endpoint device in certain circumstances. The vulnerability is due to improper endpoint learning when packets are received on a specific port from outside the ACI fabric and destined to an endpoint located on a border leaf when Disable Remote Endpoint Learning has been enabled. This can result in a Remote (XR) entry being created for the impacted endpoint that will become stale if the endpoint migrates to a different port or leaf switch. This results in traffic not reaching the impacted endpoint until the Remote entry can be relearned by another mechanism. 2019-08-30 4.3 CVE-2019-1977CISCO cisco -- unified_contact_center_express A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper validation of user-supplied input on the affected system. An attacker could exploit this vulnerability by sending the user of the web application a crafted request. If the request is processed, the attacker could access the system and perform unauthorized actions. 2019-09-04 5.0 CVE-2019-12633CISCO convertplug -- convertplus The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation (with the none role) via a request for variants. 2019-09-03 5.0 CVE-2019-15863MISC custom_404_pro_project -- custom_404_pro The custom-404-pro plugin before 3.2.8 for WordPress has reflected XSS, a different vulnerability than CVE-2019-14789. 2019-08-30 4.3 CVE-2019-15838MISCMISC dell -- emc_enterprise_copy_data_management Dell EMC Enterprise Copy Data Management (eCDM) versions 1.0, 1.1, 2.0, 2.1, and 3.0 contain a certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim?s data in transit. 2019-09-03 5.8 CVE-2019-3751MISC dell -- emc_unity_operating_environment Dell EMC Unity Operating Environment versions prior to 5.0.0.0.5.116, Dell EMC UnityVSA versions prior to 5.0.0.0.5.116 and Dell EMC VNXe3200 versions prior to 3.1.10.9946299 contain a reflected cross-site scripting vulnerability on the cas/logout page. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or Java Script code to Unisphere, which is then reflected back to the victim and executed by the web browser. 2019-09-03 4.3 CVE-2019-3754CONFIRM egain -- chat eGain Chat 15.0.3 allows HTML Injection. 2019-09-04 4.3 CVE-2019-13975MISC eng -- knowage In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application. 2019-09-05 5.0 CVE-2019-13188MISC eng -- knowage In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page. 2019-09-05 5.0 CVE-2019-13190MISC epignosishq -- efront_lms A code execution vulnerability exists in Epignosis eFront LMS v5.2.12. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability. 2019-09-05 6.5 CVE-2019-5069MISC epignosishq -- efront_lms An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier. Specially crafted web request to login page can cause SQL injections, resulting in data compromise. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required. 2019-09-05 6.4 CVE-2019-5070MISC espressif -- esp-idf The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key (PMK) after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames via a rogue access point. 2019-09-04 4.8 CVE-2019-12587MISCMISCMISC estrongs -- es_file_explorer_file_manager The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage. 2019-09-05 5.0 CVE-2019-11380MISC estsoft -- alsee A memory corruption vulnerability exists in the .PSD parsing functionality of ALSee v5.3 ~ v8.39. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in code execution. By persuading a victim to open a specially-crafted .PSD file, an attacker could execute arbitrary code. 2019-08-30 6.8 CVE-2019-12810CONFIRM ezautomation -- ez_plc_editor An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of the EZ PLC Editor Versions 1.8.41 and prior. 2019-09-04 6.8 CVE-2019-13522MISC ezautomation -- ez_touch_editor An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the EZ Touch Editor Versions 2.1.0 and prior. 2019-09-04 6.8 CVE-2019-13518MISC f5 -- big-ip_access_policy_manager On BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST users with guest privileges may be able to escalate their privileges and run commands with admin privileges. 2019-09-04 6.5 CVE-2019-6646MISC facebook -- facebook_for_woocommerce The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF. 2019-08-30 6.8 CVE-2019-15840MISC facebook -- facebook_for_woocommerce The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajax_woo_infobanner_post_click, ajax_woo_infobanner_post_xout, or ajax_fb_toggle_visibility. 2019-08-30 6.8 CVE-2019-15841MISC ffmpeg -- ffmpeg FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer. 2019-09-05 6.8 CVE-2019-15942MISC freebsd -- freebsd In FreeBSD 12.0-STABLE before r350619, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350619, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before 11.2-RELEASE-p13, the bhyve e1000 device emulation used a guest-provided value to determine the size of the on-stack buffer without validation when TCP segmentation offload is requested for a transmitted packet. A misbehaving bhyve guest could overwrite memory in the bhyve process on the host. 2019-08-30 6.4 CVE-2019-5609CONFIRM freebsd -- freebsd In FreeBSD 12.0-STABLE before r350637, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350638, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before 11.2-RELEASE-p13, the bsnmp library is not properly validating the submitted length from a type-length-value encoding. A remote user could cause an out-of-bounds read or trigger a crash of the software such as bsnmpd resulting in a denial of service. 2019-08-30 5.0 CVE-2019-5610MISCBUGTRAQCONFIRM freedesktop -- poppler Poppler before 0.76.0 has an integer overflow in Parser::makeStream in Parser.cc. 2019-09-05 6.8 CVE-2018-21009MISC freetype -- freetype FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. 2019-09-03 6.8 CVE-2015-9381MISCMLISTMISC freetype -- freetype FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation. 2019-09-03 4.3 CVE-2015-9382MISCMLISTMISC freetype -- freetype FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c. 2019-09-03 4.3 CVE-2015-9383MISCMLISTMISC glyphandcog -- xpdfreader Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from November 2002. 2019-09-03 4.3 CVE-2019-15860MISC gnu -- gcc The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same. 2019-09-02 5.0 CVE-2019-15847MISC google -- android In execTransact of Binder.java in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible local execution of arbitrary code in a privileged process due to a memory overwrite. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2019-09-05 4.6 CVE-2019-2123MISC google -- android In checkAccess of SliceManagerService.java in Android 9, there is a possible permissions check bypass due to incorrect order of arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 4.4 CVE-2019-2175MISC google -- android In isPreferred of HidProfile.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible device type confusion due to a permissions bypass. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 6.8 CVE-2019-2177MISC google -- android In NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 4.3 CVE-2019-2179MISC google -- android In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. 2019-09-05 6.9 CVE-2019-2181MISC grafana -- grafana In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana. 2019-09-03 5.0 CVE-2019-15043CONFIRMMISCMISCCONFIRMFEDORAFEDORA ibm -- intelligent_operations_center IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 - V5.1.0.6, and IBM Water Operations for Waternamics V5.1.0 - V5.2.1.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 161201. 2019-09-05 5.0 CVE-2019-4321CONFIRMXF ibm -- jazz_for_service_management IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host header during caching. By sending a specially crafted HTTP GET request, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-force ID: 158976. 2019-09-05 4.3 CVE-2019-4186XFCONFIRM instagram-php-api_project -- instagram-php-api cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/success.php error_description parameter. 2019-09-04 4.3 CVE-2019-14470MISCMISCMISCEXPLOIT-DB jetbrains -- teamcity JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it possible to send an arbitrary HTTP request to a TeamCity server under the name of the currently logged-in user. 2019-09-05 4.3 CVE-2019-15848CONFIRM knowage-suite -- knowage In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes. 2019-09-05 4.0 CVE-2019-13349MISC knowage-suite -- knowage In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page. 2019-09-05 5.0 CVE-2019-14278MISC lenovo -- xclarity_administrator An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 that could allow information disclosure. 2019-09-03 5.0 CVE-2019-6179MISC lenovo -- xclarity_administrator A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the user's web browser. The JavaScript code is not executed on LXCA itself. 2019-09-03 4.3 CVE-2019-6181MISC lenovo -- xclarity_administrator A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formula is not executed on LXCA itself. 2019-09-03 4.0 CVE-2019-6182MISC libexpat_project -- libexpat In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read. 2019-09-04 5.0 CVE-2019-15903MISCMISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c. 2019-09-04 4.9 CVE-2018-21008MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.6. There is a memory leak issue when idr_alloc() fails in genl_register_family() in net/netlink/genetlink.c. 2019-09-04 4.6 CVE-2019-15921MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a pf data structure if alloc_disk fails in drivers/block/paride/pf.c. 2019-09-04 4.9 CVE-2019-15922MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if alloc_disk fails in drivers/block/paride/pf.c. 2019-09-04 4.9 CVE-2019-15923MISCMISC linux -- linux_kernel An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dereference because there is no -ENOMEM upon an alloc_workqueue failure. 2019-09-04 4.9 CVE-2019-15924MISCMISC login_or_logout_menu_item_project -- login_or_logout_menu_item The login-or-logout-menu-item plugin before 1.2.0 for WordPress has no requirement for lolmi_save_settings authentication. 2019-08-30 5.8 CVE-2019-15820MISCMISCMISC memcached -- memcached memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str in memcached.c. 2019-08-30 5.0 CVE-2019-15026CONFIRMCONFIRMMLIST mongodb -- mongodb An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB server versions less than 4.0.11, 3.6.14, and 3.4.22 to run attacker defined code as the user running the utility. 2019-08-30 6.8 CVE-2019-2390CONFIRM mulesoft -- api_gateway Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gateway released before August 1 2019 allow remote attackers to read files accessible to the Mule process. 2019-08-30 5.0 CVE-2019-15630MISC nagios -- log_server Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page. 2019-09-03 4.3 CVE-2019-15898MISCMISC naver -- cloud_explorer NDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle. 2019-09-03 5.0 CVE-2019-13156CONFIRM onkyo -- tx-nr686_firmware Directory traversal vulnerability on ONKYO TX-NR686 1030-5000-1040-0010 A/V Receiver devices allows remote attackers to read arbitrary files via a .. (dot dot) and %2f to the default URI. 2019-08-30 5.0 CVE-2019-6113MISC opencv -- opencv An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp. 2019-09-05 5.0 CVE-2019-15939MISCMISC profilegrid -- profilegrid The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pm_template_preview&html=

Read more »

11″ WiFi iPad Pros on sale today for up to $200 off Apple�...
Amazon has new 2018 Apple 11″ WiFi iPad Pros in stock today and on sale for up to $200 off Apple’s MSRP. These are the same iPad Pros sold by Apple in its retail and online stores. Be sure to select Amazon as the seller, rather than a third-party, and note that Amazon may sell out at any time. Shipping is free. Sale prices may be restricted to Space Gray or Silver colors: – 11″ 64GB WiFi iPad Pro: $674 $125 off – 11″ 256GB WiFi iPad Pro: $899 $50 off – 11″ 512GB WiFi iPad Pro: $999.99 $150 off – 11″ 1TB WiFi iPad Pro: $1149.99 $200 off Keep an eye on our 11″ iPad Pro Price Tracker for the latest → Read More...

Read more »

Select 12″ iPad Pros on sale for $200 off Apple’s MSRP
Amazon has select 2018 Apple 12″ iPad Pros in stock today and on sale for $200 off Apple’s MSRP. These are the same iPad Pros sold by Apple in its retail and online stores. Be sure to select Amazon as the seller, rather than a third-party, and note that Amazon may sell out at any time. Shipping is free. Sale price may be confined to either Space Gray or Silver models: – 12.9″ 64GB WiFi iPad Pro: $799 $200 off – 12.9″ 512GB WiFi iPad Pro: $1149.99 $200 off – 12.9″ 1TB WiFi iPad Pro: $1349.99 $200 off – 12.9″ 512GB WiFi + Cellular iPad Pro: $1299.99 $200 off Keep an eye on our 12.9″ iPad Pro Price Tracker for the latest → Read More...

Read more »

Get one of Apple’s new 2019 iPhone 11 models for $100 off ...
Boost Mobile is offering the new 2019 Apple iPhone 11, iPhone 11 Pro, and 11 Pro Max for $100 off MSRP. Their discount reduces the cost of an iPhone 11 to $599 for the 64GB models, $899 for the 64GB 11 Pro, and $999 for a 64GB iPhone 11 Pro Max. Order online, then pick a Boost unlimited plan when the phone arrives. Boost Mobile is part of the Sprint network, and they offer plans beginning at $50 per month for one line. No annual contract → Read More...

Read more »

13″ 1.4GHz Silver MacBook Pros on sale for $100 off Apple�...
B&H Photo has new 2019 13″ 1.4GHz 4-Core Touch Bar Silver MacBook Pros on sale for $100 off Apple’s MSRP. Overnight shipping is free to many addresses in the US. These are the same MacBook Pros sold by Apple in its retail and online stores: – 2019 13″ 1.4GHz/128GB 4-Core MacBook Pro Silver: $1199.99 $100 off MSRP – 2019 13″ 1.4GHz/256GB 4-Core MacBook Pro Silver: $1399.99 $100 off MSRP See our 13″ MacBook Pro Price Tracker for the latest prices & deals from Apple’s resellers, → Read More...

Read more »

4-core and 6-core 2018 Mac minis available at Apple, refurbi...
Apple has Certified Refurbished 2018 Mac minis available on their online store for $120-$170 off the cost of new models. Each mini comes with a new outer case plus a standard Apple one-year warranty. Shipping is free: – 3.6GHz Quad-Core mini: $679 $120 off MSRP – 3.0GHz 6-Core mini: $929 $170 off MSRP Keep an eye on our Mac mini Price Tracker for the latest prices and sales from Apple and → Read More...

Read more »

$250 prepaid Visa card with any Apple iPhone, including the ...
Xfinity Mobile will include a free $250 prepaid Visa card with the purchase of any new iPhone, new line activation, and transfer of phone number to Xfinity Mobile. Offer is valid through October 27, 2019. The fine print: “Prepaid Card offer ends 10/27/19. Requires purchase of new, qualifying iPhone while supplies last, activation of new Xfinity Mobile line and transfer of phone number from another carrier within 30 days of phone order date. Must maintain new Xfinity Mobile line with an account in good standing for 90 days following line activation. Prepaid card issued by MetaBank®, Member FDIC, pursuant to a license from Visa® U.S.A., Inc. Prepaid card mailed to Xfinity account holder within 16-18 weeks of activation of all required services and expires in 180 days. May not be combined with other offers. Not valid with prior purchases, returns or exchanges. Maximum $1,250 in prepaid card amount per customer/account. Multiple cards may be issued based on total qualifying amount.” This deal is live today at → Read More...

Read more »

Sprint is offering the 64GB Apple iPhone 11 Pro for $12.50 p...
Sprint has the new 64GB iPhone 11 Pro available for $12.50 per month for new customers with an eligible trade-in in of iPhone 7 or newer. That’s down from their standard monthly lease of $41.67. The fine print: “Get iPhone 11 for as low as $0/mo. and save on the iPhone 11 Pro and iPhone 11 Pro Max when you trade in select phones in ANY condition. iPhone 11 64GB $0/mo. iPhone 11 Pro 64GB $12.50/mo. or iPhone 11 Pro Max 64GB $16.67/mo. after $29.17/mo. credit, applied within 2 bills. Reqs. unlocked eligible trade-in, 18-mo. lease, new line activ., and approved credit. If you cancel early, remaining balance due. Excludes tax. Eligible trade-in phones: iPhone 7, iPhone 7+, iPhone 8, iPhone 8+, iPhone X, iPhone XR, iPhone XS, iPhone XS Max, Samsung Galaxy S9, Samsung Galaxy S9+, Samsung Galaxy Note9, Samsung Galaxy S10e, Samsung Galaxy S10, Samsung Galaxy S10 5G, Samsung Galaxy S10+, Google Pixel 3, Google Pixel 3 XL, Google Pixel 3a, Google Pixel 3a XL, LG G8, LG V40 and LG V50.” This deal is live at → Read More...

Read more »

Final week: Apple’s 2019 Back to School Promotion. Free Be...
Purchase a new Mac using Apple’s Education discount, and take up to $400 off MSRP. All teachers, students, and staff of any educational institution with a .edu email address qualify for the discount. As part of Apple’s 2019 Back to School promotion, they will include one free pair of Beats Studio 3 Wireless headphones, Beats Solo3 Wireless Headphones, or BeatsX Earphones with the purchase of a MacBook Air, MacBook Pro, iMac, or iMac Pro (Mac mini excluded). Apple will include a free pair of BeatsX Earphones or Solo3 Wireless Headphones with the purchase of any new iPad Pro. Promotion runs through September 26, 2019: – 2019 15″ 2.3GHz 8-Core Touch Bar MacBook Pro: $2599 $200 off – 2019 15″ 2.6GHz 6-Core Touch Bar MacBook Pro: $2249 $150 off – 2019 13″ 2.4GHz/512GB 4-Core Touch Bar MacBook Pro: $1899 $100 off – 2019 13″ 2.4GHz/256GB 4-Core Touch Bar MacBook Pro: $1699 $100 off – 2019 13″ 1.4GHz/128GB 4-Core Touch Bar MacBook Pro: $1199 $100 off – 2019 13″ 1.4GHz/256GB 4-Core Touch Bar MacBook Pro: $1399 $100 off – 2019 13″ 1.6GHz/128GB MacBook Air: $999 $100 off – 2019 13″ 1.6GHz/256GB MacBook Air: $1199 $100 off – 27″ 8-Core iMac Pro: $4599 $400 off – 27″ 3.7GHz 5K iMac: $2099 $200 off – 27″ 3.1GHz 5K iMac: $1899 $100 off – 27″ 3.0GHz 5K iMac: $1699 $100 off – 21″ 3.0GHz 4K iMac: $1399 $100 off – 21″ 3.6GHz 4K iMac: $1249 $50 off – 21″ 2.3GHz iMac: $1049 $50 off – 3.6GHz Mac mini: $779 $20 off – 3.0GHz Mac mini: $1049 $50 off – 12.9″ iPad Pros: $50 off – 11″ iPad Pros: $50 off – 10.5″ iPad Airs: $20 off – 10.2″ iPads: $20 off – → Read More...

Read more »

Save $30 on Apple’s AirPods at these resellers today
Amazon is offering discounts on new 2019 Apple AirPods ranging up to $30 off MSRP as part of their Labor Day sale. Shipping is free: – AirPods with Charging Case: $144.95 $15 off MSRP – AirPods with Wireless Charging Case: $169.95 $30 off MSRP – Wireless Charging Case: $69 $10 off MSRP B&H Photo has AirPods on sale for up to $30 off MSRP as well. Shipping is free: – AirPods with Charging Case: $149 $10 off MSRP – AirPods with Wireless Charging Case: $169.95 $30 off MSRP – Wireless Charging Case: $69.95 $10 off MSRP See our AirPod Price Tracker for the latest prices and deals from Apple and → Read More...

Read more »

Preorder your Apple Watch Series 5 today at Amazon and save ...
Amazon has Apple Watch Series 5 GPS models available for preorder and on sale today for $15 off Apple’s MSRP. Shipping is free and starts on September 20th: – 40mm Apple Watch Series 5 GPS: $384.99 $30 off MSRP – 44mm Apple Watch Series 5 GPS: $414.99 $30 off MSRP See our Apple Watch Price Tracker for the latest prices & sales from Apple and → Read More...

Read more »

21″ iMacs on sale for $100 off Apple’s MSRP, starting at...
B&H Photo has new 21″ Apple iMacs on sale for $100 off MSRP with models available starting at $999. These are the same iMacs offered by Apple in their retail and online stores. Overnight shipping is free to many US addresses: – 21″ 2.3GHz iMac (MMQA2LL/A): $999.99 $100 off MSRP – 21″ 3.6GHz 4-Core 4K iMac (MRT32LL/A): $1199 $100 off MSRP – 21″ 3.0GHz 6-Core 4K iMac (MRT42LL/A): $1399 $100 off MSRP Amazon has these iMacs on sale for $100 off Apple’s MSRP as well: – 21″ 2.3GHz iMac (MMQA2LL/A): $999.99 $100 off MSRP – 21″ 3.6GHz 4-Core 4K iMac (MRT32LL/A): $1199 $100 off MSRP – 21″ 3.0GHz 6-Core 4K iMac (MRT42LL/A): $1399 $100 off MSRP For the latest up-to-date iMac sale prices from Apple’s resellers, see our iMac → Read More...

Read more »

2018 4 and 6-Core Mac minis on sale today for $100-$150 off ...
Apple resellers are offering new 2018 4-Core and 6-Core Mac minis for $100-$150 off MSRP for a limited time. B&H Photo has the new 2018 4-Core and 6-Core Mac minis on sale for up to $150 off Apple’s standard MSRP. Overnight shipping is free to many US addresses: – 3.6GHz Quad-Core mini: $699 $100 off MSRP – 3.0GHz 6-Core mini: $949 $150 off MSRP Amazon also has Mac minis on sale for $100-$150 off MSRP. Shipping is free: – 3.6GHz Quad-Core mini: $699 $100 off MSRP – 3.0GHz 6-Core mini: $949 $150 off MSRP Keep an eye on our Mac mini Price Tracker for the latest prices and sales from Apple and → Read More...

Read more »