9to5Mac Happy Hour 312: MagSafe and more coming in 2021 MacB...
9to5Mac’s Benjamin Mayo and Zac Hall unpack the latest 2021 rumors from Ming-Chi Kuo and Bloomberg including redesigned iMac, MacBook Pro, and Apple display hardware. Sponsored by TwoBird —one inbox for all your tasks- Write emails, create notes, set reminders, view events, and collaborate live. Learn more about Twobird and download it for free at twobird.com. Sponsored by Headspace: You deserve to feel happier, and Headspace is meditation made simple. Go to headspace.com/mac to start your free one-month trial. Sponsored by TextExpander: Visit textexpander.com/podcast and select 9to5Mac Happy Hour to save 20% off your first year! more… The post 9to5Mac Happy Hour 312: MagSafe and more coming in 2021 MacBook Pro, redesigned iMac and Apple external display rumors appeared first on 9to5Mac.

Read more »

A Robotic Chef Could Be in Your Near Future
If you hate cooking, but also don't want to keep throwing money at your local eateries, this robotic chef might be the answer to your problem. Launched to help a friend who had found himself wheelchair-bound and struggling to keep up with daily living tasks, a startup is trying to make cooking healthy, delicious meals as easy as popping in a tray of ingredients and your favorite cookware. From Tragedy to Inspiration Michael Lemberg, a graduate of NYU's business school, jumped to his friend's aid when the young man suffered an accident that left him confined to a wheelchair. So did several others, and they managed for several years to keep the gent living well. Soon, though, they recognized they needed to help him maintain a sense of independence, especially when it came to meals. While they could have completely remodeled his kitchen to make it more accessible to him from the wheelchair, the band of brothers and sisters also saw a missed opportunity for others. Realizing that not everyone enjoys the time-consuming process of preparing and cooking a good meal, they asked how the task could be done using a robotic chef. From those thoughts, they dreamt up iWondercook, a robotic chef in a box that appeared at CES 2021. The Robitc Chef: A Better Way to Cook The way iWondercook works is simple. You purchase the meal kit, which the company packages so that it's able to stay fresh in your refrigerator for up to ten days. The meal kits are made using only the freshest ingredients, never precooked, frozen, or loaded with artifical preservatives. When you place the meal kit into iWondercook, the device scans it and makes sure it hasn't expired. All you have to do is add water, cooking oil, and spices as directed. Your robotic chef does the rest, using steaming, induction, and convection heating. No microwave meals here, folks. In no longer than 15 minutes, your meal is ready to eat.The iWondercook also includes a timer function, so you can load it and it will automatically start cooking just in time for dinner to be ready when you get home. When it comes time to clean up, just place the cooking pot and your dishes into the dishwasher. Smart Cooking Even Without a Kitchen No kitchen? No problem. The iWondercook robotic chef only needs a power outlet and Wi-Fi, and it measures just 14 inches wide by 15 inches deep. The gadget is only 17 inches high, so it should easily fit on a break-room countertop under cabinets. https://youtu.be/KQoyMkySACM From your iPhone, you can order your meal kits for up to six pounds of food, enough to feed as many as seven people. A professional model is also on the way, and can cook up to 10 pounds of food at once. The finished meals, according to Lemberg, don't taste any different from home-cooked meals or dishes served in premium restaurants. A True Vision of the Future of Cooking The bad news is that iWondercook isn't in production just yet. However, Lemberg was busy during the all-digital CES 2021 showing off the latest prototype and trying to interest investors in helping get things moving. The team needs to raise as little as $1.5 million to make iWondercook a reality for consumers. The team projects for pricing to be comparable with most major kitchen appliances, and may even have an option for people to get their robotic chef free if they agree to purchase a certain number of meal kits each month. Lemberg likens the iWondercook to the reality of most printer manufacturers. When HP or Epson sells you a printer, they aren't really making much money from that purchase. The real profit comes from the ink or toner cartridges. With iWondercook, the profit will be from the meal kits, which are still projected to cost less than a similar meal will cost in a restaurant, and about what you'd pay for the groceries. Not only that, you don't have to actually go to the grocery store. Everything gets delivered straight to your door. The iWondercook may well be the coolest thing that showed up at CES this year, and I can't wait to see one sitting on my counter.

Read more »

Bumble warns Apple privacy push could hurt business in IPO f...
The dating app Bumble used its IPO filing on Friday to warn investors Apple's ongoing efforts to improve user privacy may hurt its bottom line in the long run.On Friday, Bumble filed its IPO with the U.S. Securities and Exchange Commission, which reveals Bumble's plans ahead of selling stock to the public for the first time. Within the filing, which includes lists of things that could be a risk to the company's future existence, Bumble mentions Apple's Identifier for Advertisers (IDFA) and changes that will make it harder to use the code for advertising to users.The IDFA is a string of characters used to refer to a specific user's iPhone, which can be used by advertisers to track a user and offer a more personalized and targeted advertising. As part of Apple's expansion of privacy protection, the company is requiring users to grant permission for an app to track them across apps and websites owned by third parties. Read more...

Read more »

Apple Maps adds VolunteerMatch integration with curated guid...
Apple is expanding Apple Maps with new VolunteerMatch match integration. The new partnership between Apple Maps and VolunteerMatch will allow users to easily find ways to volunteer in their communities ahead of Martin Luther King Jr. Day on Monday. more… The post Apple Maps adds VolunteerMatch integration with curated guides for giving back to communities appeared first on 9to5Mac.

Read more »

New studies show how Apple Watch can help detect COVID-19 pr...
A pair of new studies highlighted by a CBS News report indicate that smartwatches such as the Apple Watch can help detect COVID-19 before the onset of symptoms or a positive test. The studies, separately undertaken by Mount Sinai Health System in New York and Stanford University in California, are giving experts hope that the Apple Watch can help “play a vital role in stemming the pandemic and other communicable diseases.” more… The post New studies show how Apple Watch can help detect COVID-19 prior to symptoms and testing appeared first on 9to5Mac.

Read more »

DOJ keeps 80-year-old music licensing rules affecting Apple ...
The Department of Justice has chosen to keep 80-year-old consent decrees relating to music licensing rules intact, a decision that keeps the way Apple Music secures licenses for songs and tracks the same without any major legal changes.The examination of whether consent decrees from 1941 apply appropriately to the modern music industry by the Justice Department has been a closely-watched affair, as it had the potential to change how licensing fees are determined. On Friday, the department offered its decision to keep the consent decrees active.The 80-year-old decrees dictate how the American Society of Composers, Authors, and Publishers (ASCAP) and Broadcast Music Inc. (BMI) performing rights organizations function,specifically regarding music licensing. The two PROs can provide a license to businesses, broadcasters, and streaming services that include the usage rights held by songwriters, composers, and others, for the use of the music. Read more...

Read more »

Apple working new Mac Pro models; one half the current size ...
AApple is working on a pair of new Mac Pro desktop computers, including an all-new design powered by Apple Silicon. One model, which… The post Apple working new Mac Pro models; one half the current size with Apple Silicon appeared first on MacDailyNews.

Read more »

Apple’s 2021 iMac redesign to deliver ‘one of the bigges...
In 2021 Apple is preparing the first redesign of its iconic iMac all-in-one desktop computer since 2012, as the company upgrades from Intel… The post Apple’s 2021 iMac redesign to deliver ‘one of the biggest visual updates this year’ appeared first on MacDailyNews.

Read more »

Trailer for Season Two of ‘For All Mankind’
The trailer for season two of For All Mankind dropped Friday. The season will continue to tell a counter-factual story of the space race, starting this time in 1983. It will air on Apple TV+ from February 19.

Read more »

Second season of Apple TV+'s 'Ted Lasso' star...
Production has commenced on the second season of the popular sports-comedy series "Ted Lasso," which could start airing on Apple TV by summer 2021.A second and third season of "Ted Lasso" has been confirmed to be on the way, with Apple ordering more seasons at the time the show became available on Apple TV+. The ongoing COVID-19 pandemic forced many productions to be delayed or postponed, but now Apple has confirmed it is starting for the show.Time to start warming those biscuits. Production for @TedLasso Season 2 has officially begun! pic.twitter.com/EHZWbwiY58— Apple TV (@AppleTV) January 15, 2021 Read more...

Read more »

Kingston Introduces DataTraveler Kyson to Line of High Perfo...
Kingston introduces DataTraveler Kyson to their line of high performance flash drives at Pepcom’s Digital Experience! at CES 2021. Lang Chheou, PR Coordinator, gave us the scoop on this new product line. The DataTraveler Kyson is a Type-A USB flash drive with a stylish, capless metal case, so there’s no cap to lose. The drive supports USB 3.1 Gen 1 speeds, with up to 200 MB/s read and 60 MB/s write. A functional loop can be attached to a keyring. Capacities range from 32 GB to 256 GB. 32 GB is US$8.45, 64 GB is US$13.97, 128 GB is US23.73, and 256 GB is US$52.00 from their store. For those that prefer a USB-C connector, the DataTraveler 80 is an option that offers the same performance of 200 MB/s read and 60 MB/s write, and capacities ranging from 32 GB to 256 GB, but has a different design, and a cap. 32 GB is US$11.99, 64 GB is US$17.99, 128 GB is US$30.99, and 256 GB is $49.99 from their store. 

Read more »

Origin Wireless Announces Hex Home Wave-Based Security Syste...
Origin Wireless announced Hex Home, a wave-based home security system at Pepcom’s Digital Experience! at CES 2021. Dan Bugos, Product Manager, briefed us on what sets their system apart from other home security systems. Unlike other home security products that typically use infrared and other motion detection technologies, Hex Home applies advanced signal processing techniques to standard Wi-Fi protocols to derive meaningful ambient insights. This unique technology is protected by more than 30 patents. Hex Home includes two devices, a Hex Command (a surface-sitting pod) and a Hex Sense (a wall plug-in), to monitor a user’s home using WiFi waves. As people move through these waves, they bounce, break and bend around them. Hex Home then calculates how the waves change and informs users when meaningful motion is detected. With the accompanying Hex app, users can view real-time and historical motion levels in their home, change system modes to manage the siren and customize alerts. Using one Hex Command and two Hex Senses, users can secure up to 1,500 square feet. Hex Home will be available Summer 2021 starting at $199.99. An optional 24/7 monitoring service will be available for a small monthly fee or users can choose to self-monitor at no additional cost.

Read more »

Level Touch Smart Lock Packs Smart Features into a Small Pac...
Level introduces Level Touch, a smart lock that doesn’t look like one, but packs in many advanced features, including HomeKit integration. At Pepcom’s Digital Experience! at CES 2021, Josh Hepburn, Product Marketing, helped us to understand why they claims it's “the smallest, most capable lock ever.” Looking at the Level Touch, with satin nickel and satin chrome finish, and upcoming polished brass and matte black finishes, you wouldn’t even realize it was a smart lock, with the traditional keyhole on the outside and a lever on the inside. But things change once you touch it, or use your phone, accessories and HomeKit. Level Touch is built with a combination of 440C stainless steel and strengthened metal alloys. Certified BHMA AAA to meet the highest industry standard for security and durability, so no need to  worry about basic security without the smart features.  To enter or exit your home, simply touch the lock when your phone is nearby, or allow guest or phone less access with a key card. You can also use the Level Home app to operate the lock and receive notifications of lock activity. You can also enable auto-lock and auto-unlock events.  You can share access based on specified time and days, and send passes to a group of friends via email or social media. To take access to the next level, Level Touch integrates with Apple HomeKit, so you can lock and unlock with Siri, run automations, and more. Level Touch is available now for US$329 from the Level Store or their retail partner, Amazon.  

Read more »

Apple adds 'Privacy' collection to iOS Tips app
Apple this week expanded the first-party iOS Tips app to include a section covering hardware, software, and account privacy.The new Privacy collection consists of nine tips covering Sign in with Apple, Safari passwords, system-wide password security, camera and mic usage indicators, Messages previews, location, Photos, Private Browsing in Safari, and Safari's Privacy Report feature.Starting with Safari, Apple notes the web browser can create and remember passwords for specific websites. Users can elect to rely on iPhone's Strong Password generation or type in their own for later recall. Read more...

Read more »

Apple Plans First iMac Desktop Redesign In Nearly a Decade
In addition to upgraded MacBook Pros, Bloomberg reports that Apple is also "planning the first redesign of its iMac all-in-one desktop computer since 2012," as it shifts away from Intel to its own silicon. From the report: The new models will slim down the thick black borders around the screen and do away with the sizable metal chin area in favor of a design similar to Apple's Pro Display XDR monitor. These iMacs will have a flat back, moving away from the curved rear of the current iMac. Apple is planning to launch two versions -- codenamed J456 and J457 -- to replace the existing 21.5-inch and 27-inch models later this year, the people said, asking not to be identified because the products are not yet announced. The new models will use next-generation versions of Apple's Mac processors like the upcoming 2021 MacBook Pros. The iMac redesign will be one of the biggest visual updates to any Apple product this year, according to people familiar with the company's roadmap. Apple is also working on a pair of new Mac Pro desktop computers, its priciest Mac machines that don't come with a screen included, the people said. One version is a direct update to the current Mac Pro and will continue to use the same design as the version launched in 2019. Apple has discussed continuing to use Intel processors for that model rather than moving to its own chips. The second version, however, will use Apple's own processors and be less than half the size of the current Mac Pro. The design will feature a mostly aluminum exterior and could invoke nostalgia for the Power Mac G4 Cube, a short-lived smaller version of the Power Mac, an earlier iteration of the Mac Pro. Apple has also reportedly started development of a cheaper external monitor to sell alongside the Pro Display XDR. "The cheaper monitor would feature a screen geared more for consumer than professional use and wouldn't have the brightness and contrast ratio of the top-tier offering," reports Bloomberg. Read more of this story at Slashdot.

Read more »

CES 2021: Tech Trends to Watch
The Consumer Technology Association predicts the tech trends of the year to come in its annual opening of CES. Jeff Porten shares the thrust of the talk and provides commentary.

Read more »

HomeKit for the Holidays (And Home Troubleshooting Tips)
In which Adam Engst finally hops on the HomeKit bandwagon for real and gets totally sucked in, installing smart outlets, controlling motorized shades, and adding some Flic buttons. 

Read more »

Poll: What ports and features do you want to return or arriv...
We just got some exciting news from Ming-Chi Kuo and Bloomberg today about the next-generation MacBook Pro notebooks. While we already knew some of the details like 14- and 16-inch screen sizes and the move to Apple Silicon, an expansion of I/O beyond USB-C ports, the return of MagSafe, a new design, and more have now been predicted. What ports and features are you most interested to see return or arrive on the next-gen MacBook Pro lineup? more… The post Poll: What ports and features do you want to return or arrive on the 2021 MacBook Pro? appeared first on 9to5Mac.

Read more »

Apple begins early work on a foldable iPhone
While planning only minor "S year" changes for the 2021 iPhone line, Apple has begun early work on an iPhone with a foldable screen… The post appeared first on MacDailyNews.

Read more »

Apple Maps now shows curated list of volunteer opportunities...
Apple is now including guides curated by VolunteerMatch in its Apple Maps platform, making it easier for users to find ways to give back to their communities.Credit: AppleThe new guides, which are built into Apple Maps, will show up in certain U.S. cities ahead of Martin Luther King Jr.'s birthday on Monday. Normally, guides are focused on activities and entertainment and are curated by local companies or media outlets. Read more...

Read more »

Apple Maps now shows curated list of volunteer opportunities...
Apple is now including guides curated by VolunteerMatch in its Apple Maps platform, making it easier for users to find ways to give back to their communities.Credit: AppleThe new guides, which are built into Apple Maps, will show up in certain U.S. cities ahead of Martin Luther King Jr.'s birthday on Monday. Normally, guides are focused on activities and entertainment and are curated by local companies or media outlets. Read more...

Read more »

Apple Maps now shows curated list of volunteer opportunities...
Apple is now including guides curated by VolunteerMatch in its Apple Maps platform, making it easier for users to find ways to give back to their communities.Credit: AppleThe new guides, which are built into Apple Maps, will show up in certain U.S. cities ahead of Martin Luther King Jr.'s birthday on Monday. Normally, guides are focused on activities and entertainment and are curated by local companies or media outlets. Read more...

Read more »

Apple starts early work on folding iPhone, testing in-screen...
Apple has started early development work on a foldable iPhone but is only planning incremental changes for its 2021 iPhone lineup that could include a in-screen fingerprint sensor.Credit: Andrew O'Hara, AppleInsiderAccording to a Bloomberg report Friday, Apple still hasn't solidified plans to launch a foldable iPhone. Thus far, it has developed prototype folding screens for internal testing, but work hasn't extended much farther beyond the display. Read more...

Read more »

Apple shares 9 tips to take control of your privacy on iPhon...
Apple’s Tips app on iOS has been around for a while and the company has been consistently updating it with new content over the years. Now a new Privacy tips collection has been added with Apple’s recommendations to change iPhone privacy settings. more… The post Apple shares 9 tips to take control of your privacy on iPhone appeared first on 9to5Mac.

Read more »

Apple Feels Schadenfreude as Amazon is Accused of eBook Pric...
Nine years after an investigation found that Apple and the “Big Five” book publishers colluded to fix eBook prices to compete with Amazon, Amazon has now been accused of doing the same. The lawsuit claims that almost 90% of all ebooks sold in the US are sold on Amazon, in addition to over 50% of all print books. The suit alleges that ebook prices dropped in 2013 and 2014 after Apple and major publishers were successfully sued for conspiring to set ebook prices, but rose again after Amazon renegotiated their contracts in 2015.

Read more »

Bloomberg: Apple developing foldable iPhone prototypes, laun...
In November last year, a report citing Chinese suppliers claimed that Apple began testing folding iPhones for a launch in 2022. Bloomberg today corroborated that rumor with a new report about Apple now working on an iPhone with a foldable screen — although the launch schedule is unknown. more… The post Bloomberg: Apple developing foldable iPhone prototypes, launch is still unclear appeared first on 9to5Mac.

Read more »

Bloomberg: Apple testing in-screen Touch ID for 2021 iPhone,...
A new report from Bloomberg today sheds more light on what to expect this year’s update to the iPhone. The report says that Apple “isn’t planning major changes” for the 2021 iPhone, but one key upgrade is in testing: an in-screen fingerprint reader. more… The post Bloomberg: Apple testing in-screen Touch ID for 2021 iPhone, AirTags coming this year appeared first on 9to5Mac.

Read more »

Review: Logitech’s Circle View Doorbell with HomeKit Secur...
The HomeKit doorbell scene has finally grown wings and one of the most compelling options is Logitech’s new Circle View Doorbell. It’s got a sharp and simple design, HomeKit Secure Video support, face recognition, and an impressive price point – particularly if you’re willing to handle the installation yourself. Join along for our full review of this Logitech HomeKit doorbell, the first true consumer option with HKSV. more… The post Review: Logitech’s Circle View Doorbell with HomeKit Secure Video is ready to rule the roost appeared first on 9to5Mac.

Read more »

Apple extends Apple TV+ free trials, subscribers now get fre...
Once again, Apple has extended the free period for the Apple TV+ 1-year free trials that come with select new hardware purchase… The post Apple extends Apple TV+ free trials, subscribers now get free access until July 2021 appeared first on MacDailyNews.

Read more »

M1 Macs: Should you upgrade? (YouTube video)
To read this article in full, please click here

Read more »

How iTunes Changed Apple – Intego Mac Podcast Episode 170
iTunes is 20 years old. Even if, on the Mac, that name has been eclipsed, the iTunes brand still exists, and iTunes is one of the reasons that Apple is such a strong services company. We also look at some new AppleScript malware, how some millionaires are losing Bitcoin because they forgot their passwords, and […] The post appeared first on The Mac Security Blog.

Read more »

Microsoft Patch Tuesday, January 2021 Edition
Microsoft today released updates to plug more than 80 security holes in its Windows operating systems and other software, including one that is actively being exploited and another which was disclosed prior to today. Ten of the flaws earned Microsoft's most-dire "critical" rating, meaning they could be exploited by malware or miscreants to seize remote control over unpatched systems with little or no interaction from Windows users.

Read more »

SolarWinds: What Hit Us Could Hit Others
New research into the malware that set the stage for the megabreach at IT vendor SolarWinds shows the perpetrators spent months inside the company's software development labs honing their attack before inserting malicious code into updates that SolarWinds then shipped to thousands of customers. More worrisome, the research suggests the insidious methods used by the intruders to subvert the company's software development pipeline could be repurposed against many other major software providers.

Read more »

Ubiquiti: Change Your Password, Enable 2FA
Ubiquiti, a major vendor of cloud-enabled Internet of Things (IoT) devices such as routers, network video recorders, security cameras and access control systems, is urging customers to change their passwords and enable multi-factor authentication. The company says an incident at a third-party cloud provider may have exposed customer account information and credentials used to remotely manage Ubiquiti gear.

Read more »

Vulnerability Summary for the Week of January 4, 2021
Original release date: January 11, 2021 The CISA Weekly Vulnerability Summary Bulletin is created using information from the NIST NVD. In some cases, the vulnerabilities in the Bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available. High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info 1234n -- minicms Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary files via the state parameter. 2021-01-05 7.5 CVE-2020-36052 MISC asciitable.js_project -- asciitable.js The package asciitable.js before 1.0.3 are vulnerable to Prototype Pollution via the main function. 2021-01-04 7.5 CVE-2020-7771 MISC MISC asus -- dsl-n17u_firmware The ASUS DSL-N17U modem with firmware 1.1.0.2 allows attackers to access the admin interface by changing the admin password without authentication via a POST request to Advanced_System_Content.asp with the uiViewTools_username=admin&uiViewTools_Password= and uiViewTools_PasswordConfirm= substrings. 2021-01-04 10 CVE-2020-35219 MISC MISC chatter-social -- creeper Creeper is an experimental dynamic, interpreted language. The binary release of Creeper Interpreter 1.1.3 contains potential malware. The compromised binary release was available for a few hours between December 26, 2020 at 3:22 PM EST to December 26, 2020 at 11:00 PM EST. If you used the source code, you are **NOT** affected. This only affects the binary releases. The binary of unknown quality has been removed from the release. If you have downloaded the binary, please delete it and run a reputable antivirus scanner to ensure that your computer is clean. 2021-01-04 7.5 CVE-2020-26292 CONFIRM clickhouse-driver_project -- clickhouse-driver clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, due to a buffer overflow. 2021-01-06 7.5 CVE-2020-26759 MISC MISC cse_bookstore_project -- cse_bookstore CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database on which the web application is running. 2021-01-04 7.5 CVE-2020-36112 MISC dell -- emc_isilon_onefs Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock Compliance mode cluster. The compadmin user connecting using ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE can elevate privileges to the root user if they have ISI PRIV HARDENING privileges. 2021-01-05 7.2 CVE-2020-26181 MISC djv_project -- djv This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine. 2021-01-04 10 CVE-2020-28464 MISC MISC MISC drivergenius -- drivergenius_firmware MyDrivers64.sys in DriverGenius 9.61.3708.3054 allows attackers to cause a system crash via the ioctl command 0x9c402000 to \.MyDrivers0_0_1. 2021-01-03 7.1 CVE-2020-28841 MISC MISC fasterxml -- jackson-databind FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource. 2021-01-06 7.5 CVE-2020-36185 MISC MISC fasterxml -- jackson-databind FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS. 2021-01-06 7.5 CVE-2020-36181 MISC MISC fasterxml -- jackson-databind FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS. 2021-01-07 7.5 CVE-2020-36182 MISC MISC fasterxml -- jackson-databind FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool. 2021-01-07 7.5 CVE-2020-36183 MISC MISC fasterxml -- jackson-databind FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource. 2021-01-06 7.5 CVE-2020-36184 MISC MISC fasterxml -- jackson-databind FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS. 2021-01-07 7.5 CVE-2020-36179 MISC MISC fasterxml -- jackson-databind FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource. 2021-01-06 7.5 CVE-2020-36186 MISC MISC fasterxml -- jackson-databind FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource. 2021-01-06 7.5 CVE-2020-36187 MISC MISC fasterxml -- jackson-databind FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource. 2021-01-06 7.5 CVE-2020-36188 MISC MISC fasterxml -- jackson-databind FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource. 2021-01-06 7.5 CVE-2020-36189 MISC MISC fasterxml -- jackson-databind FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS. 2021-01-07 7.5 CVE-2020-36180 MISC MISC google -- android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) (Exynos chipsets) software. The Mali GPU driver allows out-of-bounds access and a device reset. The Samsung ID is SVE-2020-19174 (January 2021). 2021-01-05 7.1 CVE-2021-22495 MISC ibm -- sterling_b2b_integrator IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code with SYSTEM privileges. IBM X-Force ID: 172452. 2021-01-05 9 CVE-2019-4728 XF CONFIRM ipeak -- ipeakcms ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page. 2021-01-05 7.5 CVE-2021-3018 MISC MISC MISC MISC MISC ispconfig -- ispconfig ISPConfig before 3.2.2 allows SQL injection. 2021-01-05 7.5 CVE-2021-3021 MISC MISC linux -- linux_kernel mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332. 2021-01-05 8.3 CVE-2020-36158 MISC MISC MISC MISC proofpoint -- inside_threat_management rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows remote authenticated users to execute arbitrary code as SYSTEM because of improper deserialization over named pipes. 2021-01-06 9 CVE-2020-8884 MISC CONFIRM proofpoint -- insider_threat_management_server The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteImage API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. The vulnerability is caused by improper deserialization. 2021-01-06 7.5 CVE-2020-10658 MISC CONFIRM proofpoint -- insider_threat_management_server The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouseWithChunksV2 API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. The vulnerability is caused by improper deserialization. 2021-01-06 7.5 CVE-2020-10656 MISC CONFIRM proofpoint -- insider_threat_management_server The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouse API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. The vulnerability is caused by improper deserialization. 2021-01-06 7.5 CVE-2020-10655 MISC CONFIRM redlion -- crimson A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a specially crafted packet that could reboot the device running Crimson 3.1 (Build versions prior to 3119.001). 2021-01-06 7.8 CVE-2020-27279 MISC rest/json_project -- rest/json The REST/JSON project 7.x-1.x for Drupal allows field access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy. 2021-01-01 7.5 CVE-2016-20004 MISC rest/json_project -- rest/json The REST/JSON project 7.x-1.x for Drupal allows node access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy. 2021-01-01 7.5 CVE-2016-20001 MISC rest/json_project -- rest/json The REST/JSON project 7.x-1.x for Drupal allows comment access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy. 2021-01-01 7.5 CVE-2016-20002 MISC rest/json_project -- rest/json The REST/JSON project 7.x-1.x for Drupal allows user registration bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy. 2021-01-01 7.5 CVE-2016-20005 MISC thecodingmachine -- gotenberg A directory traversal vulnerability in file upload function of Gotenberg through 6.2.1 allows an attacker to upload and overwrite any writable files outside the intended folder. This can lead to DoS, a change to program behavior, or code execution. 2021-01-07 7.5 CVE-2020-13450 MISC MISC thecodingmachine -- gotenberg An incomplete-cleanup vulnerability in the Office rendering engine of Gotenberg through 6.2.1 allows an attacker to overwrite LibreOffice configuration files and execute arbitrary code via macros. 2021-01-07 7.5 CVE-2020-13451 MISC MISC thecodingmachine -- gotenberg In Gotenberg through 6.2.1, insecure permissions for tini (writable by user gotenberg) potentially allow an attacker to overwrite the file, which can lead to denial of service or code execution. 2021-01-07 7.5 CVE-2020-13452 MISC MISC thedaylightstudio -- fuel_cms FUEL CMS 1.4.11 allows SQL Injection via parameter 'name' in /fuel/permissions/create/. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 2021-01-05 7.5 CVE-2020-26045 MISC MISC MISC uclouvain -- openjpeg A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability. 2021-01-05 7.1 CVE-2020-27843 MISC uclouvain -- openjpeg A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. 2021-01-05 8.3 CVE-2020-27844 MISC ultimatemember -- ultimate_member An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive metadata, such as the wp_capabilities user meta that defines a user's role. During the registration process, submitted registration details were passed to the update_profile function, and any metadata was accepted, e.g., wp_capabilities[administrator] for Administrator access. 2021-01-04 7.5 CVE-2020-36155 MISC MISC MISC ultimatemember -- ultimate_member An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles. Due to the lack of filtering on the role parameter that could be supplied during the registration process, an attacker could supply the role parameter with a WordPress capability (or any custom Ultimate Member role) and effectively be granted those privileges. 2021-01-04 7.5 CVE-2020-36157 MISC MISC MISC win911 -- mobile-911_server An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2.5 install directory. Depending on the vector chosen, an attacker can overwrite the service executable and execute arbitrary code with System privileges or replace other files within the installation folder that could lead to local privilege escalation. 2021-01-05 7.2 CVE-2020-13541 MISC Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info 1234n -- minicms Directory traversal vulnerability in page_edit.php in MiniCMS V1.10 allows remote attackers to read arbitrary files via the state parameter. 2021-01-05 5 CVE-2020-36051 MISC advancedcustomfields -- advanced_custom_fields The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings in Select2 dropdowns, potentially leading to XSS. 2021-01-06 4.3 CVE-2020-36172 MISC apache -- flink Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users should upgrade to Flink 1.11.3 or 1.12.0 if their Flink instance(s) are exposed. The issue was fixed in commit a5264a6f41524afe8ceadf1d8ddc8c80f323ebc4 from apache/flink:master. 2021-01-05 5 CVE-2020-17518 MLIST MLIST MLIST MLIST MLIST MLIST MISC MLIST MLIST MLIST MLIST apache -- flink A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager process. All users should upgrade to Flink 1.11.3 or 1.12.0 if their Flink instance(s) are exposed. The issue was fixed in commit b561010b0ee741543c3953306037f00d7a9f0801 from apache/flink:master. 2021-01-05 5 CVE-2020-17519 MISC MLIST MLIST MLIST MLIST MLIST MISC MLIST MLIST MLIST broadcom -- ca_service_catalog CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a denial of service condition. 2021-01-05 5 CVE-2020-29478 CONFIRM dell -- emc_powerstore_firmware Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore X & T environments. A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account. 2021-01-05 4.6 CVE-2020-29502 MISC dell -- emc_powerstore_firmware Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore X & T environments. A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account. 2021-01-05 4.6 CVE-2020-29501 MISC dell -- emc_powerstore_firmware Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore T environments. A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account. 2021-01-05 4.6 CVE-2020-29500 MISC dell -- wyse_management_suite Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites. 2021-01-04 5.8 CVE-2020-29498 MISC dell -- wyse_thinos Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable file and manipulate the configuration of any target specific station. 2021-01-04 6.4 CVE-2020-29492 MISC dell -- wyse_thinos Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading to the potential compromise of impacted thin clients. 2021-01-04 5 CVE-2020-29491 MISC digisol -- dg-hr3400_firmware Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter. 2021-01-06 4.3 CVE-2020-35262 MISC MISC MISC dovecot -- dovecot An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled parameters, leading to access to other users' email messages (and path disclosure). 2021-01-04 6.5 CVE-2020-24386 MISC FULLDISC CONFIRM MISC CONFIRM MISC GENTOO DEBIAN dovecot -- dovecot Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts. 2021-01-04 5 CVE-2020-25275 MISC FULLDISC CONFIRM CONFIRM MISC GENTOO DEBIAN expresstech -- quiz_and_survey_master An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbitrary files such as wp-config.php file, which could effectively take a site offline and allow an attacker to reinstall with a WordPress instance under their control. This occurred via qsm_remove_file_fd_question, which allowed unauthenticated deletions (even though it was only intended for a person to delete their own quiz-answer files). 2021-01-01 6.4 CVE-2020-35951 MISC MISC ffmpeg -- ffmpeg decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations. 2021-01-04 5 CVE-2020-35965 MISC MISC MISC ffmpeg -- ffmpeg track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing. 2021-01-03 4.3 CVE-2020-35964 MISC MISC foxitsoftware -- phantompdf Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyPreviewAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read. 2021-01-07 6.8 CVE-2018-20313 MISC foxitsoftware -- phantompdf Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read, a different issue than CVE-2018-20310 because of a different opcode. 2021-01-07 6.8 CVE-2018-20312 MISC foxitsoftware -- phantompdf Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an out-of-bounds read. 2021-01-07 6.8 CVE-2018-20315 MISC foxitsoftware -- phantompdf Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence race condition that can cause a stack-based buffer overflow or an out-of-bounds read. 2021-01-07 6.8 CVE-2018-20314 MISC foxitsoftware -- phantompdf Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read, a different issue than CVE-2018-20310 because of a different opcode. 2021-01-07 6.8 CVE-2018-20316 MISC foxitsoftware -- phantompdf Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCPDFAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read. 2021-01-07 6.8 CVE-2018-20311 MISC foxitsoftware -- phantompdf Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyGetAppEdition race condition that can cause a stack-based buffer overflow or an out-of-bounds read. 2021-01-07 6.8 CVE-2018-20309 MISC foxitsoftware -- phantompdf Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read. 2021-01-07 6.8 CVE-2018-20310 MISC gigamon -- gigavue-os GigaVUE-OS (GVOS) 5.4 - 5.9 stores a Redis database password in plaintext. 2021-01-05 4 CVE-2020-23249 MISC gjson_project -- gjson GJSON out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34. 2021-01-04 4.3 CVE-2020-35493 MISC FEDORA gnu -- binutils There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34. 2021-01-04 4.3 CVE-2020-35495 MISC FEDORA gnu -- binutils There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34. 2021-01-04 4.3 CVE-2020-35507 MISC gnu -- glibc The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read. 2021-01-04 5 CVE-2019-25013 MISC MISC golang -- go In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.) 2021-01-02 5 CVE-2020-28851 MISC golang -- go In x/text in Go 1.15.4, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.) 2021-01-02 5 CVE-2020-28852 MISC google -- android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The quram library allows attackers to execute arbitrary code or cause a denial of service (memory corruption) during dng decoding. The Samsung ID is SVE-2020-18811 (January 2021). 2021-01-05 6.8 CVE-2021-22493 MISC google -- android An issue was discovered in the fingerprint scanner on Samsung Note20 mobile devices with Q(10.0) software. When a screen protector is used, the required image compensation is not present. Consequently, inversion can occur during fingerprint enrollment, and a high False Recognition Rate (FRR) can occur. The Samsung ID is SVE-2020-19216 (January 2021). 2021-01-05 4.3 CVE-2021-22494 MISC google -- android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Broadcom Bluetooth chipsets) software. The Bluetooth UART driver has a buffer overflow. The Samsung ID is SVE-2020-18731 (January 2021). 2021-01-05 5.8 CVE-2021-22492 MISC hp -- integrated_lights-out_4 A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware. The vulnerability could be remotely exploited to disclose the serial number and other information. 2021-01-05 5 CVE-2020-7202 MISC htmlsanitizer_project -- htmlsanitizer HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. In HtmlSanitizer before version 5.0.372, there is a possible XSS bypass if style tag is allowed. If you have explicitly allowed the `` tag, an attacker could craft HTML that includes script after passing through the sanitizer. The default settings disallow the `` tag so there is no risk if you have not explicitly allowed the `` tag. The problem has been fixed in version 5.0.372. 2021-01-04 4.3 CVE-2020-26293 MISC MISC CONFIRM MISC ibm -- api_connect IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due to plain text transmission of sensitive information across the network. IBM X-Force ID: 190990. 2021-01-05 6.4 CVE-2020-4899 XF CONFIRM ibm -- cloud_pak_system IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191391. 2021-01-04 6.8 CVE-2020-4917 XF CONFIRM ibm -- cloud_pak_system IBM Cloud Pak System 2.3 could allow a local privileged attacker to upload arbitrary files. By intercepting the request and modifying the file extention, the attacker could execute arbitrary code on the server. IBM X-Force ID: 191705. 2021-01-04 4.6 CVE-2020-4928 XF CONFIRM ibm -- cloud_pak_system IBM Cloud Pak System 2.3 Self Service Console could allow a privilege escalation by capturing the user request URL when logged in as a privileged user. IBM X-Force ID: 191287. 2021-01-04 6.5 CVE-2020-4912 XF CONFIRM ibm -- cloud_pak_system IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated privileged user to impersonate another user on the system. IBM X-Force ID: 191395. 2021-01-04 5.5 CVE-2020-4919 XF CONFIRM ibm -- curam_social_program_management IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191942. 2021-01-04 6.8 CVE-2020-4942 XF CONFIRM ibm -- emptoris_strategic_supply_management IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request parameters. This may lead to information disclosure via man in the middle methods. IBM X-Force ID: 190984. 2021-01-07 4.3 CVE-2020-4893 XF CONFIRM ibm -- emptoris_strategic_supply_management IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 190989. 2021-01-07 5 CVE-2020-4898 XF CONFIRM ibm -- sterling_b2b_integrator IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow an authenticated user to create a privileged account due to improper access controls. IBM X-Force ID: 188896. 2021-01-05 6.5 CVE-2020-4762 XF CONFIRM ibm -- sterling_b2b_integrator IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 188895. 2021-01-05 5 CVE-2020-4761 XF CONFIRM invisioncommunity -- ips_community_suite Invision Community IPS Community Suite before 4.5.4.2 allows XSS during the quoting of a post or comment. 2021-01-05 4.3 CVE-2021-3026 MISC kamadak-exif_project -- kamadak-exif kamadak-exif is an exif parsing library written in pure Rust. In kamadak-exif version 0.5.2, there is an infinite loop in parsing crafted PNG files. Specifically, reader::read_from_container can cause an infinite loop when a crafted PNG file is given. This is fixed in version 0.5.3. No workaround is available. Applications that do not pass files with the PNG signature to Reader::read_from_container are not affected. 2021-01-06 4.3 CVE-2021-21235 MISC MISC CONFIRM lanproxy_project -- lanproxy ffay lanproxy 0.1 allows Directory Traversal to read /../conf/config.properties to obtain credentials for a connection to the intranet. 2021-01-05 5 CVE-2021-3019 MISC MISC limit_login_attempts_project -- limit_login_attempts The Limit Login Attempts plugin before 1.7.1 for WordPress does not clear auth cookies upon a lockout, which might make it easier for remote attackers to conduct brute-force authentication attempts. 2021-01-06 5 CVE-2012-10001 MISC loopring -- loopring The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring (LRC), an Ethereum token, lacks access control for fee swapping and thus allows price manipulation. 2021-01-03 5 CVE-2020-35962 MISC MISC mcafee -- network_security_management Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an attacker to change the configuration of the Network Security Manager via a carefully crafted HTTP request. 2021-01-05 4.3 CVE-2020-7336 CONFIRM mikrotik -- routeros In MikroTik RouterOS through 2021-01-04, the hotspot login page is vulnerable to reflected XSS via the target parameter. 2021-01-04 4.3 CVE-2021-3014 MISC MISC mk-auth -- mk-auth MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information (e.g., a CPF number) via a modified titulo (aka invoice number) value to the central/recibo.php URI. 2021-01-03 4 CVE-2021-3005 MISC MISC mk-auth -- mk-auth MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI. 2021-01-04 6.8 CVE-2021-21495 MISC MISC ninjaforms -- ninja_forms The Ninja Forms plugin before 3.4.27.1 for WordPress allows attackers to bypass validation via the email field. 2021-01-06 5 CVE-2020-36175 MISC ninjaforms -- ninja_forms The Ninja Forms plugin before 3.4.28 for WordPress lacks escaping for submissions-table fields. 2021-01-06 5 CVE-2020-36173 MISC ninjaforms -- ninja_forms The Ninja Forms plugin before 3.4.27.1 for WordPress allows CSRF via services integration. 2021-01-06 4.3 CVE-2020-36174 MISC nxlog -- nxlog The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service (daemon crash) via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also, the name of the directory created must use a Syslog field. (For example, on Linux it is not possible to create a .. directory. On Windows, it is not possible to create a CON directory.) 2021-01-05 4.3 CVE-2020-35488 MISC orangehrm -- orangehrm SQL injection in the Buzz module of OrangeHRM through 4.6 allows remote authenticated attackers to execute arbitrary SQL commands via the orangehrmBuzzPlugin/lib/dao/BuzzDao.php loadMorePostsForm[profileUserId] parameter to the buzz/loadMoreProfile endpoint. 2021-01-05 5.5 CVE-2020-29437 MISC MISC CONFIRM MISC pagelayer -- pagelayer An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. Nearly all of the AJAX action endpoints lacked permission checks, allowing these actions to be executed by anyone authenticated on the site. This happened because nonces were used as a means of authorization, but a nonce was present in a publicly viewable page. The greatest impact was the pagelayer_save_content function that allowed pages to be modified and allowed XSS to occur. 2021-01-01 6.5 CVE-2020-35947 MISC MISC pagelayer -- pagelayer An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. The pagelayer_settings_page function is vulnerable to CSRF, which can lead to XSS. 2021-01-01 6.8 CVE-2020-35944 MISC MISC proofpoint -- insider_threat_management_server The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM web console's ImportAlertRules feature. The vulnerability allows a remote attacker (with admin or config-admin privileges in the console) to execute arbitrary code with local administrator privileges. The vulnerability is caused by improper deserialization. 2021-01-06 6.5 CVE-2020-10657 MISC CONFIRM redlion -- crimson An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak arbitrary memory locations. 2021-01-06 5 CVE-2020-27283 MISC redlion -- crimson The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify the database without authentication. 2021-01-06 6.4 CVE-2020-27285 MISC rest/json_project -- rest/json The REST/JSON project 7.x-1.x for Drupal allows session enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy. 2021-01-01 5 CVE-2016-20008 MISC rest/json_project -- rest/json The REST/JSON project 7.x-1.x for Drupal allows user enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy. 2021-01-01 5 CVE-2016-20003 MISC rest/json_project -- rest/json The REST/JSON project 7.x-1.x for Drupal allows blockage of user logins, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy. 2021-01-01 5 CVE-2016-20006 MISC rest/json_project -- rest/json The REST/JSON project 7.x-1.x for Drupal allows session name guessing, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy. 2021-01-01 5 CVE-2016-20007 MISC seal_finance_project -- seal_finance The breed function in the smart contract implementation for Farm in Seal Finance (Seal), an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021. 2021-01-03 5 CVE-2021-3006 MISC MISC seopanel -- seo_panel Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter. 2021-01-01 4.3 CVE-2021-3002 MISC MISC solarwinds -- web_help_desk SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket. 2021-01-06 4.9 CVE-2019-16954 MISC MISC MISC stableyieldcredit_project -- stableyieldcredit The _deposit function in the smart contract implementation for Stable Yield Credit (yCREDIT), an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should. 2021-01-03 5 CVE-2021-3004 MISC MISC thecodingmachine -- gotenberg A directory traversal vulnerability in the Markdown engine of Gotenberg through 6.2.1 allows an attacker to read any container files. 2021-01-07 5 CVE-2020-13449 MISC MISC thedaylightstudio -- fuel_cms FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors. 2021-01-05 4.3 CVE-2020-26046 MISC MISC treasuredata -- fluent_bit flb_gzip_compress in flb_gzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it does not use the correct calculation of the maximum gzip data-size expansion. 2021-01-03 6.8 CVE-2020-35963 MISC MISC MISC uclouvain -- openjpeg There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability. 2021-01-05 4.3 CVE-2020-27845 MISC uclouvain -- openjpeg There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability. 2021-01-05 4.3 CVE-2020-27842 MISC uclouvain -- openjpeg There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability. 2021-01-05 4.3 CVE-2020-27841 MISC ultimatemember -- ultimate_member The Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name="timestamp" fields in forms. 2021-01-06 5 CVE-2020-36170 MISC ultimatemember -- ultimate_member An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalation via Profile Update. Any user with wp-admin access to the profile.php page could supply the parameter um-role with a value set to any role (e.g., Administrator) during a profile update, and effectively escalate their privileges. 2021-01-04 6.5 CVE-2020-36156 MISC MISC MISC veno_file_manager_project -- veno_file_manager Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server. 2021-01-04 5 CVE-2020-22550 MISC MISC veritas -- desktop_and_laptop_option Veritas Desktop and Laptop Option (DLO) before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication. 2021-01-05 5 CVE-2020-36159 MISC vikisolutions -- vera An issue was discovered in Viki Vera 4.9.1.26180. A user without access to a project could download or upload project files by opening the Project URL directly in the browser after logging in. 2021-01-05 5.5 CVE-2019-20484 MISC webform_report_project -- webform_report The Webform Report project 7.x-1.x-dev for Drupal allows remote attackers to view submissions by visiting the /rss.xml page. NOTE: This project is not covered by Drupal's security advisory policy. 2021-01-01 5 CVE-2019-25012 MISC win911 -- win-911 An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the privileges when executed. 2021-01-05 4.6 CVE-2020-13539 MISC MISC win911 -- win-911 An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via WIN-911 Account Change Utility. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the privileges when executed. 2021-01-05 4.6 CVE-2020-13540 MISC Back to top   Low Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info beetel -- 777vr1_firmware Cross Site Scripting (XSS) vulnerability in Beetel router 777VR1 can be exploited via the NTP server name in System Time and "Keyword" in URL Filter. 2021-01-06 3.5 CVE-2020-25498 MISC MISC MISC MISC dell -- emc_unity_operating_environment Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a plain-text password storage vulnerability. A user credentials (including the Unisphere admin privilege user) password is stored in a plain text in multiple log files. A local authenticated attacker with access to the log files may use the exposed password to gain access with the privileges of the compromised user. 2021-01-05 2.1 CVE-2020-26199 MISC dell -- unisphere Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.221.221 and 5978.479.479 contain a Cross-Site Scripting (XSS) vulnerability. An authenticated malicious user may potentially exploit this vulnerability to inject javascript code and affect other authenticated users’ sessions. 2021-01-05 3.5 CVE-2020-35170 MISC dell -- wyse_management_suite Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with high privileges could exploit this vulnerability to store malicious HTML or JavaScript code while creating the Enduser. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. 2021-01-04 3.5 CVE-2020-29496 MISC dell -- wyse_management_suite Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with low privileges could exploit this vulnerability to store malicious HTML or JavaScript code under the device tag. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. 2021-01-04 3.5 CVE-2020-29497 MISC electronjs -- zonote zonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because nodeIntegration in webPreferences is true). 2021-01-01 3.5 CVE-2020-35717 MISC MISC MISC MISC gigamon -- gigavue-os GigaVUE-OS (GVOS) 5.4 - 5.9 uses a weak algorithm for a hash stored in internal database. 2021-01-05 2.1 CVE-2020-23250 MISC google -- android An issue was discovered on LG mobile devices with Android OS 10 software. There was no write protection for the MTK protect2 partition. The LG ID is LVE-SMP-200028 (January 2021). 2021-01-05 2.1 CVE-2021-3022 MISC ibm -- cloud_pak_system IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191274. 2021-01-04 3.5 CVE-2020-4910 XF CONFIRM ibm -- cloud_pak_system IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191273. 2021-01-04 3.5 CVE-2020-4909 XF CONFIRM ibm -- cloud_pak_system IBM Cloud Pak System 2.3 could reveal credential information in the HTTP response to a local privileged user. IBM X-Force ID: 191288. 2021-01-04 2.1 CVE-2020-4913 XF CONFIRM ibm -- cloud_pak_system IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in sell service console for the Platform System Manager. IBM X-Force ID: 191392. 2021-01-04 2.1 CVE-2020-4918 XF CONFIRM ibm -- cloud_pak_system IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191390. 2021-01-04 3.5 CVE-2020-4916 XF CONFIRM ibm -- emptoris_strategic_supply_management IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190986. 2021-01-07 3.5 CVE-2020-4895 XF CONFIRM mk-auth -- mk-auth MK-AUTH through 19.01 K4.9 allows XSS via the admin/logs_ajax.php tipo parameter. An attacker can leverage this to read the centralmka2 (session token) cookie, which is not set to HTTPOnly. 2021-01-04 3.5 CVE-2021-21494 MISC MISC semperplugins -- all_in_one_seo_pack An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS. 2021-01-01 3.5 CVE-2020-35946 MISC MISC solarwinds -- web_help_desk SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field. 2021-01-04 3.5 CVE-2019-16960 MISC MISC MISC solarwinds -- web_help_desk SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket. 2021-01-04 3.5 CVE-2019-16956 MISC MISC MISC tenda -- f3_firmware Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must be placed after the RouterCfm.cfg filename, or that the HTTP request headers must be unusual, but it is not known why these are relevant to the device's HTTP response behavior. 2021-01-01 3.3 CVE-2020-35391 MISC vikisolutions -- vera An issue was discovered in Viki Vera 4.9.1.26180. An attacker could set a user's last name to an XSS Payload, and read another user's cookie and use that to login to the application. 2021-01-05 3.5 CVE-2019-20483 MISC zohocorp -- manageengine_desktop_central Zoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a New Custom Report. 2021-01-06 3.5 CVE-2019-16962 MISC MISC Back to top   Severity Not Yet Assigned Primary Vendor -- Product Description Published CVSS Score Source & Patch Info actionpack_gem_for_ruby_on_rails -- actionpack_gem_for_ruby_on_rails In actionpack gem >= 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed (in another page) a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This vulnerability is in the Actionable Exceptions middleware. 2021-01-06 not yet calculated CVE-2020-8264 MISC MISC advanced_webhost_billing_system -- advanced_webhost_billing_system   Advanced Webhost Billing System 3.7.0 is affected by Cross Site Request Forgery (CSRF) attacks that can delete a contact from the My Additional Contact page. 2021-01-08 not yet calculated CVE-2020-25950 MISC asp.net -- cute_editor   Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting (XSS) caused by improper validation of user supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. 2021-01-07 not yet calculated CVE-2020-24903 MISC barco -- multiple_products   Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection (issue 1 of 4). The NDN-210 has a web administration panel which is made available over https. The logon method is basic authentication. There is a command injection issue that will result in unauthenticated remote code execution in the username and password fields of the logon prompt. The NDN-210 is part of Barco TransForm N solution and includes the patch from TransForm N version 3.8 onwards. 2021-01-07 not yet calculated CVE-2020-17500 MISC CONFIRM MISC barco -- transform_n   Barco TransForm N before 3.8 allows Command Injection (issue 2 of 4). The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users of the administration panel to perform authenticated remote code execution. An issue exists in split_card_cmd.php in which the http parameters xmodules, ymodules and savelocking are not properly handled. The NDN-210 is part of Barco TransForm N solution and includes the patch from TransForm N version 3.8 onwards. 2021-01-08 not yet calculated CVE-2020-17502 MISC CONFIRM MISC barco -- transform_n   The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users to the administration panel to perform authenticated remote code execution. An issue exists in split_card_cmd.php in which the http parameter "locking" is not properly handled. The NDN-210 is part of Barco TransForm N solution and this vulnerability is patched from TransForm N version 3.8 onwards. 2021-01-08 not yet calculated CVE-2020-17503 MISC CONFIRM MISC barco -- transform_n   The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users to the administration panel to perform authenticated remote code execution. An issue exists in ngpsystemcmd.php in which the http parameters "x_modules" and "y_modules" are not properly handled. The NDN-210 is part of Barco TransForm N solution and this vulnerability is patched from TransForm N version 3.8 onwards. 2021-01-08 not yet calculated CVE-2020-17504 MISC CONFIRM MISC bssi -- web-sesame   A misconfiguration in Web-Sesame 2020.1.1.3375 allows an unauthenticated attacker to download the source code of the application, facilitating its comprehension (code review). Specifically, JavaScript source maps were inadvertently included in the production Webpack configuration. These maps contain sources used to generate the bundle, configuration settings (e.g., API keys), and developers' comments. 2021-01-06 not yet calculated CVE-2020-29041 MISC MISC buns -- buns   This affects all versions of package buns. The injection point is located in line 678 in index file lib/index.js in the exported function install(requestedModule). 2021-01-08 not yet calculated CVE-2020-7794 MISC cairosvg -- cairosvg   CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service (REDoS) vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time. This is fixed in version 2.5.1. See Referenced GitHub advisory for more information. 2021-01-06 not yet calculated CVE-2021-21236 MISC MISC CONFIRM MISC ceph -- ceph A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by searching the mgr logs for grafana and dashboard, with passwords visible. 2021-01-08 not yet calculated CVE-2020-25678 MISC MISC cisco -- jabber   Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more information about these vulnerabilities, see the Details section of this advisory. 2021-01-07 not yet calculated CVE-2020-26085 CISCO citrix -- secure_mail Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related data stored within Secure Mail. Note that a malicious app would need to be installed on the Android device or a threat actor would need to execute arbitrary code on the Android device. 2021-01-06 not yet calculated CVE-2020-8275 MISC citrix -- secure_mail   Citrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code ('Code Injection') by allowing unauthenticated access to read data stored within Secure Mail. Note that a malicious app would need to be installed on the Android device or a threat actor would need to execute arbitrary code on the Android device. 2021-01-06 not yet calculated CVE-2020-8274 MISC cockpit -- cockpit   Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.php, as demonstrated by values in JSON data to the /auth/check or /auth/requestreset URI. 2021-01-08 not yet calculated CVE-2020-35131 MISC MISC MISC d-link -- dsl-2888a_devices   An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. The One Touch application discloses sensitive information, such as the hashed admin login password and the Internet provider connection username and cleartext password, in the application's response body for a /tmp/var/passwd or /tmp/home/wan_stat URI. 2021-01-08 not yet calculated CVE-2020-24577 MISC CONFIRM MISC dell -- client_and_commerical_consumer_platforms   Select Dell Client Commercial and Consumer platforms support a BIOS password reset capability that is designed to assist authorized customers who forget their passwords. Dell is aware of unauthorized password generation tools that can generate BIOS recovery passwords. The tools, which are not authorized by Dell, can be used by a physically present attacker to reset BIOS passwords and BIOS-managed Hard Disk Drive (HDD) passwords. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability to bypass security restrictions for BIOS Setup configuration, HDD access and BIOS pre-boot authentication. 2021-01-04 not yet calculated CVE-2020-5361 MISC dell -- inspiron_5675_bios   Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the RuntimeServices structure to execute arbitrary code in System Management Mode (SMM). 2021-01-08 not yet calculated CVE-2020-26186 MISC dell -- multiple_products   Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contains a plain-text password storage vulnerability. A user credentials (including the Unisphere admin privilege user) password is stored in a plain text in a system file. A local authenticated attacker with access to the system files may use the exposed password to gain access with the privileges of the compromised user. 2021-01-05 not yet calculated CVE-2020-29489 MISC dell -- multiple_products   Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a Denial of Service vulnerability on NAS Servers with NFS exports. A remote authenticated attacker could potentially exploit this vulnerability and cause Denial of Service (Storage Processor Panic) by sending specially crafted UDP requests. 2021-01-05 not yet calculated CVE-2020-29490 MISC drupal -- aes_encryption   The AES encryption project 7.x and 8.x for Drupal does not sufficiently prevent attackers from decrypting data, aka SA-CONTRIB-2017-027. NOTE: This project is not covered by Drupal's security advisory policy. 2021-01-01 not yet calculated CVE-2017-20001 MISC drupal -- kcfinder_integration   uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024. NOTE: This project is not covered by Drupal's security advisory policy. 2021-01-01 not yet calculated CVE-2018-25002 MISC MISC MISC eaton -- easysoft   Eaton's easySoft software v7.20 and prior are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in the application. The vulnerability arises due to improper validation of user data supplied through E70 file which is causing Type Confusion. 2021-01-07 not yet calculated CVE-2020-6656 MISC MISC MISC MISC eaton -- easysoft   The Eaton's easySoft software v7.20 and prior are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises due to improper validation and parsing of the E70 file content by the application. 2021-01-07 not yet calculated CVE-2020-6655 MISC MISC evolucare -- ecsimaging   ** UNSUPPORTED WHEN ASSIGNED ** EVOLUCARE ECSIMAGING (aka ECS Imaging) through 6.21.5 has an OS Command Injection vulnerability via shell metacharacters and an IFS manipulation. The parameter "file" on the webpage /showfile.php can be exploited to gain root access. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. 2021-01-07 not yet calculated CVE-2021-3029 MISC MISC formstone -- formstone   Formstone

Read more »

iTunes at 20: How One App Changed Apple’s Course
It's been 20 years since iTunes was released. This app was the cornerstone of Apple's development. The post appeared first on The Mac Security Blog.

Read more »

Sealed U.S. Court Records Exposed in SolarWinds Breach
The ongoing breach affecting thousands of organizations that relied on backdoored products by network software firm SolarWinds may have jeopardized the privacy of countless sealed court documents on file with the U.S. federal court system, according to a memo released Wednesday by the Administrative Office (AO) of the U.S. Courts.

Read more »

All Aboard the Pequod!
Like countless others, I frittered away the better part of Jan. 6 doomscrolling and watching television coverage of the horrifying events unfolding in our nation's capital, where a mob of President Trump supporters and QAnon conspiracy theorists was incited to lay siege to the U.S. Capitol. For those trying to draw meaning from the experience, might I suggest consulting the literary classic Moby Dick, which simultaneously holds clues about QAnon's origins and offers an apt allegory about a modern-day Captain Ahab and his ill-fated obsessions.

Read more »

How to Uninstall Flash Player
Flash Player is dead. It's time to uninstall it from your Mac. Here's how to do this. The post appeared first on The Mac Security Blog.

Read more »

New Year’s Resolution: Cull Your Notifications – Intego ...
There's new malware attacking cryptocurrency apps, WhatsApp warns users about data it is sharing with Facebook, and Apple loses a copyright fight with a company that virtualizes iOS so security researchers can look for vulnerabilities. We also look at how you can manage and secure notifications on your devices, so you don't get too distracted, and also so personal information isn't visible when your devices are locks. The post New Year’s Resolution: Cull Your Notifications – Intego Mac Podcast Episode 169 appeared first on The Mac Security Blog.

Read more »

Hamas May Be Threat to 8chan, QAnon Online
In October 2020, KrebsOnSecurity looked at how a web of sites connected to conspiracy theory movements QAnon and 8chan were being kept online by DDoS-Guard, a dodgy Russian firm that also hosts the official site for the terrorist group Hamas. New research shows DDoS-Guard relies on data centers provided by a U.S.-based publicly traded company, which experts say could be exposed to civil and criminal liabilities as a result of DDoS-Guard's business with Hamas.

Read more »

Back in stock! 16″ MacBook Pros starting at only $2039 at ...
After a long absence, Apple has restocked a full line of Certified Refurbished 16″ MacBook Pros for up to $420 off the cost of new models, starting at $2039. Each model features a new outer case, shipping is free, and an Apple 1-year warranty is standard. These models are the cheapest 16″ MacBook Pros currently available for sale anywhere: – 16″ 2.6GHz 6-Core MacBook Pro (Space Gray): $2039 save $360 – 16″ 2.3GHz 8-Core MacBook Pro (Space Gray): $2379 save $420 – 16″ 2.6GHz 6-Core MacBook Pro (Silver): $2039 save $360 – 16″ 2.3GHz 8-Core MacBook Pro (Silver): $2379 save $420 See our 16″ MacBook Pro Price Tracker for the latest prices & deals from Apple’s resellers, → Read More...

Read more »

Saturday Steal! Clearance 2020 Mac mini for only $549!
Other World Computing has clearance 2020 Intel-based 4-core Mac minis on sale for only $549 this weekend, $250 off Apple’s original MSRP. These are new, unopened, factory-sealed models: – 3.6GHz 4-core Mac mini: $549 $250 off original MSRP This is the cheapest new 2020 Apple Mac for sale anywhere right now. Available while supplies last! For the latest prices and sales, keep an eye on our Mac mini Price Tracker, → Read More...

Read more »

Save up to $112 on 13″ Intel-based MacBook Pros at Experco...
Apple reseller Expercom has 2020 13″ 2.0GHz Intel-based MacBook Pros on sale for $100-$112 off Apple’s MSRP with prices starting at $1699. In addition to their MacBook Pro sale prices, take $70 off AppleCare+ when purchased along with the MacBook Pro ($199, regularly $269): – 2020 13″ MacBook Pros 2.0GHz Intel CPU/512GB SSD: $1699 $100 off MSRP – 2020 13″ MacBook Pros 2.0GHz Intel CPU/1TB SSD: $1888.80 $112 off MSRP Discounts are also available on various build-to-order options. Note that some configurations might require a week or so for shipping. For the latest prices & sales, keep an eye on our 13″ MacBook Pro Price Tracker, → Read More...

Read more »

New sale at B&H: Apple’s hot new 13″ M1 MacBook Pros...
Apple’s new 2020 13″ MacBook Pros with M1 Apple Silicon CPUs are on sale at B&H Photo today for $50-$100 off MSRP, starting at $1239. Free expedited shipping is available for most addresses in the US: – 2020 13″ MacBook Pro Space Gray M1 CPU/256GB SSD: $1239 $60 off MSRP – 2020 13″ MacBook Pro Space Gray M1 CPU/512GB SSD: $1439 $60 off MSRP – 2020 13″ MacBook Pro Silver M1 CPU/256GB SSD: $1249 $50 off MSRP – 2020 13″ MacBook Pro Silver M1 CPU/512GB SSD: $1399 $100 off MSRP These are the same M1 MacBook Pros sold by Apple in their retail and online stores. B&H’s prices are among the lowest available for these models anywhere. For the latest prices and sales, see our 13″ MacBook Pro Price Tracker, → Read More...

Read more »

New at US Cellular: Your choice of free iPhone 12, 12 mini, ...
US Cellular has the 64GB Apple iPhone 12, 64GB iPhone 12 mini, and 64GB iPhone SE each available for free for new customers signing up for an Unlimited data plan. Cost of the phone is spread over a 30 month period. No trade-in phone is required. The fine print: “Promotional pricing requires a new postpaid smartphone service plan, new line, port-in, credit approval, qualified smartphone purchase and comes via monthly bill credit on a 30-mo. RIC. Taxes, fees, and additional restrictions apply.” US Cellular’s deal is live on their site today and valid through February 21, 2021. For the latest prices & deals, keep an eye on our iPhone Price Tracker, → Read More...

Read more »

Verizon offers $30 discount on Apple AirPods Pro through Jan...
Verizon has Apple AirPods Pro on sale for $219.99 on their online store through January 22, 2021. Their price is $30 off Apple’s MSRP, and it’s among the lowest prices currently available for AirPods Pro. Verizon service is not required for purchase. Buy online and choose free shipping or free local store pickup (if available). Sale price for online orders only, in-store price may vary. For the latest prices and sales, see our Apple AirPods Price Tracker, → Read More...

Read more »

Apple has clearance 2020 13″ 1.4GHz Intel-based MacBook Pr...
Apple has clearance, Certified Refurbished, 2020 13″ 1.4GHz 4-Core Intel-based MacBook Pros available starting at $1059 and up to $270 off original MSRP. These are the cheapest MacBook Pros for sale today at Apple. Apple’s one-year warranty is included, shipping is free, and each MacBook has a new outer shell: – 13″ 1.4GHz/256GB Space Gray 4-Core MacBook Pro (MXK32LL/A): $1059 $240 off MSRP – 13″ 1.4GHz/512GB Space Gray 4-Core MacBook Pro (MUHP2LL/A): $1229 $270 off MSRP – 13″ 1.4GHz/256GB Silver 4-Core MacBook Pro (MXK52LL/A): $1059 $240 off MSRP – 13″ 1.4GHz/512GB Silver 4-Core MacBook Pro (MXK72LL/A): $1229 $270 off MSRP Note that stock status may vary–check Apple’ site for availability. For the latest sales & prices, see our 13″ MacBook Pro → Read More...

Read more »

2020 Mac minis on sale starting at only $599
Other World Computing has clearance 2020 Intel-based Mac minis on sale for $200 off Apple’s original MSRP. Both models are in stock today. These are new, unopened, factory-sealed models: – 3.6GHz 4-core Mac mini: $599 $200 off original MSRP – 3.0GHz 6-core Mac mini: $899 $200 off original MSRP For the latest prices and sales, keep an eye on our Mac mini Price Tracker, → Read More...

Read more »

Trade in your old Mac at Apple and get up to $3040 credit to...
Get up to $3040 on the purchase of new or refurbished Mac at Apple using their official Trade In program. Trade in your old Mac, and Apple will apply its appraised value toward the purchase of a new or refurbished MacBook Pro, MacBook Air, iMac Pro, iMac, Mac mini, or Mac Pro. According to Apple, “Answer a few questions to find out your device’s trade-in value. Then give us your device and we’ll put the value on an Apple gift card (or e-credit) you can use anytime. If it’s ready to recycle, we’ll do it for free. Trading in your device is as easy as buying a new one. We’ll give you a prepaid trade-in kit or shipping label to send it off. Or you can bring it to an Apple Store (note: this option may be currently restricted due to COVID). We’ll either give you instant credit toward the purchase of a new product or send your device on to our recyclers.” Current trade in values, at the time of this post, are as follows: – MacBook Pro: Up to $1530 – MacBook Air: Up to $630 – MacBook: Up to $380 – iMac Pro: Up to $3040 – iMac: Up to $1180 – Mac Pro: Up to $2930 – Mac mini: Up to $830 The fine print: “Trade-in values will vary based on the condition, year, and configuration of your trade-in device. You must be at least 18 years old to be eligible to trade in for credit or for an Apple Store Gift Card. Not all devices are eligible for credit. More details are available from Apple’s trade-in partner for trade-in and recycling of eligible devices. Restrictions and limitations may apply. Payments are based on the received device matching the description you provided when your estimate was made.” For more information, visit the Apple Trade In → Read More...

Read more »

Apple’s Education discount saves $20 on new M1 Mac minis f...
Purchase a new M1 Mac mini using Apple’s Education discount, and take $20 off MSRP. All teachers, students, and staff of any educational institution with a .edu email address qualify for the discount. Education discounts are also available on most build-to-order options: – M1 Mac mini/256GB: $679 $20 off – M1 Mac mini/512GB: $879 $20 off Not in the US? Click for the Canada or the

Read more »

Apple’s Education discount saves $20 on new M1 Mac minis f...
Purchase a new M1 Mac mini using Apple’s Education discount, and take $20 off MSRP. All teachers, students, and staff of any educational institution with a .edu email address qualify for the discount. Education discounts are also available on most build-to-order options: – M1 Mac mini/256GB: $679 $20 off – M1 Mac mini/512GB: $879 $20 off Not in the US? Click for the Canada or the

Read more »

Use your Apple Education discount to save $100 on a new M1 1...
Purchase one of Apple’s popular new 13″ MacBook Airs with an M1 processor using Apple’s Education discount, and take $100 off MSRP. With the discount, prices start at only $899. All teachers, students, and staff of any educational institution with a .edu email address qualify for the discount. Education discounts are also available on most build-to-order options, such as RAM, storage, CPUs, and graphics cards: – 13″ M1 MacBook Air/256GB: $899 $100 off – 13″ M1 MacBook Air/512GB: $1149 $100 off Not in the US? Click for the Canada or the

Read more »