Apple releases fifth developer beta for iOS 16.6 and iPadOS 16.6
Apple has rolled out the latest update to the beta program for iOS 16.6 and iPadOS 16.6. Developers can now access the fifth beta version for testing purposes.New beta of iOS 16.6 now availableDevelopers in the program can obtain the latest builds by visiting the Apple Developer Center or updating their iPhone or iPad through the Settings app. Following that, public beta versions are usually released shortly after the developer versions, giving users the chance to participate through the Apple Beta Software Program. Read more...

Read more »

M1 MacBook Air is a total steal at just $749
Apple's amazing M1 MacBook Air with 8GB RAM is down to an all-new low price of $750 after a massive $250 discount. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple seeds fifth developer beta for macOS 13.5 Ventura
Apple has rolled out the latest update to the beta program for macOS Ventura 13.5, and developers can now access the fifth beta version for testing purposes.The newest macOS Ventura beta is now availableDevelopers in the program can obtain the latest builds by visiting the Apple Developer Center or updating their Mac through the Settings app. Following that, public beta versions are usually released shortly after the developer versions, giving users the chance to participate through the Apple Beta Software Program. Read more...

Read more »

Apple releases iOS 16.6 beta 5 ahead of upcoming iPhone software update
While all the action is happening around iOS 17 beta, Apple is continuing to prepare a more imminent iPhone software update for release. Apple has released the fifth iOS 16.6 beta for developer testing. more… The post appeared first on 9to5Mac.

Read more »

Deals: Apple Pencil 2 $89, AirPods $75, $100 off 15-inch MacBook Air, OWC Thunderbolt Go Dock $279, more
Today's hottest deals include 29% off a Ring Spotlight Cam Plus, 50% off an Echo Show 5, 45% off an Arlo 1080p HD security camera, 20% off an OWC Thunderbolt Go dock, and more.Save $100 on a 15-inch MacBook AirThe AppleInsider team combs the web for unbeatable bargains at online retailers to create a list of top-notch deals on popular tech products, including discounts on Apple products, TVs, accessories, and other gadgets. We share the best deals to help you save money. Read more...

Read more »

iVANKY 12 in 2 Docking Stations deliver all the I/O you need from $94.99 [53% off]
The 12 in 2 Pro Docking Station from veteran Mac accessory maker iVANKY has been a hit among MacBook users with impressive functionality at an affordable price. Now the Pro and Classic Docking Stations are an even better value for Prime Day starting at just $94.99 – hundreds of dollars less than competitors. Read on for all the details and how to grab the 12 in 2 Docking Station at up to 53% off. more… The post appeared first on 9to5Mac.

Read more »

How Apple Vision Pro will try to fight off motion sickness
The Apple Vision Pro will help minimize instances of motion sickness with brute force, a professor of spatial computing believes, with Apple's high-specification headset relying on extreme performance to do it.Apple Vision ProApple's mixed-reality headset is a powerful processing device, designed to give users as lag-free an experience as possible. It's this high level of performance that should help reduce instances of motion sickness or nausea, and a professor specializing in the field agrees with that sentiment. Read more...

Read more »

Porsche unveils revamped CarPlay experience with climate controls and more
Porsche has announced a major update to support for CarPlay in its cars, saying that it is “the first automotive manufacturer to allow for easier access of vehicle functions within CarPlay.” With a tie-in to the My Porsche app on iPhone, Porsche owners will be able to control things like climate settings and more via the CarPlay infotainment screen. Unfortunately, this isn’t the next-gen CarPlay update many users have been asking for… more… The post appeared first on 9to5Mac.

Read more »

New macOS malware steals bank info, crypto wallets & much more
A newly-spotted security threat called ShadowVault works in the background on macOS to access logins, banking details, and more personal data.Malware illustrationMacs have traditionally been less targeted by malware developers in part because of the security in macOS, and partly because it's presented a smaller target than Windows. It's still the case that Macs have fewer malware issues than PCs, but also it's being targeted by different types of security threats. Read more...

Read more »

A giant 32-inch iMac is reportedly in testing–but not coming anytime soon
Macworld Head to Apple’s website and the largest iMac you’ll find has a relatively petite 24-inch screen after the 27-inch model was retired in 2022. Fans of the larger form factor, however, have some cause for optimism, because the rumored 32-inch iMac has reportedly entered the early testing phase of development. While that means it’s more likely to eventually ship, there’s still a long way to go. Mark Gurman, the Bloomberg leaker-analyst who started the rumor last month, warned in the subscribers-only edition of this weekend’s Power On newsletter that the new machine won’t launch until late 2024 at the absolute earliest, and could well appear at some point in 2025. Gurman, whose weekly newsletter schedule gives him an incentive to drip-feed leaks, also offered further detail on top of the earlier prediction. Having previously said only that the new iMac would have a screen larger than 30 inches, he is now indicating that it will, as widely guessed, be close to the same size as the Pro Display XDR, a 32-inch panel that also happens to be the largest screen—not just iMac—Apple has ever shipped. Apple’s Mac development team appears to be extremely busy. Before the 32-inch iMac arrives, we can expect the M3 update to the 24-inch iMac to launch, either in late 2023 or early 2024, according to Gurman. Following that launch, the focus will shift to something even larger: the research firm Omdia has claimed that Apple is working on an iMac with an astonishing 42-inch OLED screen. That’s reportedly pegged for a 2027 launch, assuming it ever becomes a reality. You can keep up with the latest rumors with our new iMac superguide. If you don’t want to wait for the new models to appear, however, it’s worth checking the best prices on the current range with our regularly updated iMac deals roundup. iMac

Read more »

Today in Apple history: App Store opens its virtual doors
On July 10, 2008, Apple launched the App Store, an online hub that let iPhone owners download apps made by third-party developers. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple News announces the return of ‘After the Whistle with Brendan Hunt and Rebecca Lowe’ podcast
Today Apple News announced the hit podcast "After the Whistle with Brendan Hunt and Rebecca Lowe" will return for a second season… The post appeared first on MacDailyNews.

Read more »

Trailer for Apple TV+ & Ridley Scott film 'Napoleon' shows the horror of war
Apple TV+ has shared a dramatic first-look trailer at the Ridley Scott-directed epic historical drama ahead of the film's fall theatrical release.The Apple Original depicts the life of Napoleon and how he became an emperor, focusing on his tumultuous relationship with Josephine. The film will also highlight Napoleon as a military leader and war visionary through its depictions of his famous battles. Read more...

Read more »

How Do You Request Music Using Siri?
Frustrated by how he’s using Siri, Adam Engst explains his approach to requesting music from HomePods to see if others have techniques they feel are more successful. Is the eventual answer generative AI?

Read more »

Best Prime Day Apple Deals: July 2023
Macworld Amazon’s annual Prime Day sale in July is an excellent opportunity to save money on Apple devices. For two days every year, you’ll find tons of deals including savings on AirPods, Macs, iPhone, iPad, and more. The next Amazon Prime sale will kick off just after midnight on July 11, 2023, and will run until 11.59 pm on July 12. We expect to see some great discounts on Apple products during the 48-hour sale, but you don’t have to wait until then to save money. We usually see companies offer Early Prime Day Deals to get ahead of the rush. Amazon itself is offering early access to deals via its home page. To see if you can already save money on something you want take a look at Amazon Prime Day (US) and Amazon Prime Day (UK) or at your local Amazon storefront. While many discounts are available to everyone, you’ll need to sign up for Prime to qualify for the best deals, but that also gives you free one or two-day delivery and access to Prime Video. If you don’t already have a Prime membership, you can sign up for the free 30-day trial. After that ends, the service costs $14.99/£8.99 per month or $139/£95 a year. Here are the best prices you can get on Apple products leading up to the big sale: AirPods deals Amazon U.S. AirPods Pro (2nd gen): $200 ($49 off, MSRP $249) AirPods (3rd gen): $149 ($20 off, MSRP $169) AirPods (2nd gen): $99 ($30 off, MSRP $129) AirPods Max: $450 ($99 off, MSRP $549) And in the U.K. AirPods (3rd gen, wired charging case): £152.09 (£26.91 off, MSRP £179) AirPods (2nd gen, wired charging case): £109 (£20 off, MSRP £139) AirPods Pro (2nd gen): £239 (£10 off, MSRP £249) AirPods Max: £499 (£50 off, MSRP £549) See our roundup of the best Amazon Prime Day Sale AirPods deals for more deals. Apple Watch deals Amazon U.S. Apple Watch Series 8 (41mm, GPS): $329 ($70 off, MSRP $399) Apple Watch Series 8 (45mm, GPS): $359 ($70 off, MSRP $429) Apple Watch Ultra: $780 ($19 off, MSRP $799) Apple Watch SE (40mm): $219 ($30 off, MSRP $249) Apple Watch SE (44mm): $249 ($30 off, MSRP $279) Amazon U.K. Apple Watch Series 7 (41mm) GPS, Green: £314.99 (£54 off, MSRP £369) Apple Watch Series 7 (45mm) GPS, Midnight or blue: £288.93 (£110 off, MSRP £399) Apple Watch SE 1st gen (44mm) GPS + Cellular, blue: £319 (Full Price) See our roundup of the best Amazon Prime Day Sale Apple Watch deals for more deals. iPhone deals Amazon U.S. Amazon rarely discounts iPhones in the U.S. and when it does they are tied into a contract. However, you can visit Amazon’s iPhone page to see the deals on offer. Accessories are often on sale, however, including these deals: MagSafe Battery Pack: $94 ($5 off, MSRP $99) AirTag (4-pack): $90 ($9 off, MSRP $99) iPhone 14 Pro MagSafe case: $37.49 ($12.50 off, MSRP $49) iPhone 14 Pro Max MagSafe case: $37.49 ($12.50 off, MSRP $49) MagSafe Charger: $31 ($8 off, MSRP $39) Amazon U.K. iPhone 14 (128GB): £764 (£85 off) iPhone 14 (256GB): £874 (£85 off) iPhone 14 (512GB): £1,094.99 (£84.01 off) iPhone 14 Plus (128GB): £864 (£85 off) iPhone 14 Plus (256GB): £974 (£85 off) iPhone 14 Plus (512GB): £1,184.99 (£94.01 off) iPhone 14 Pro (128GB): £1,039 (£60 off) iPhone 14 Pro (256GB): £1,144.99 (£64.01 off) iPhone 14 Pro (512GB): £1,364.99 (£64.01 off) iPhone 14 Pro (1TB): £1,584.99 (£64.01 off) iPhone 14 Pro Max (128GB): £1,139 (£60 off) iPhone 14 Pro Max (256GB): £1,244.99 (£64.01 off) iPhone 14 Pro Max (512GB): £1,442.96 (£86.04 off) iPhone 14 Pro Max (1TB): £1,684.99 (£64.01 off) iPhone SE (256GB): £573.96 (£36 off) iPhone 13 mini (128GB): £599 (£50 off) iPhone 13 mini (256GB): £709 (£50 off) iPhone 13 mini (512GB): £771.61 (£207.39 off) iPhone 13 (128GB): £699 (£50 off) iPhone 13 (256GB): £799 (£60 off) iPhone 13 (512GB): £855.81 (£223.19 off) iPhone 12 (128GB): £639 (£60 off) iPhone 12 (256GB): £750.96 (£58.04 off) See our roundup of the best Amazon Prime Day iPhone deals for more deals. iPad deals Amazon U.S. 2022 iPad Air (64GB): $500 ($99 off, MSRP $599) iPad mini (64GB): $400 ($99 off, MSRP $499) 10th-gen iPad (64GB): $399 ($50 off, MSRP $449) 10.2-inch iPad (64GB): $250 ($79 off after automatic discount at checkout, MSRP $329) 12.9-inch iPad Pro (128GB): $1,049 ($50 off, MSRP $1,099) 11-inch iPad Pro (128GB): $769 ($30 off, MSRP $799) Amazon U.K. iPad, 64GB WiFi, £314.98 (£54 off, MSRP £369). iPad Pro 11in (2022, M2, 1TB, WiFi): £1,549.07 (£149.93 off, MSRP £1,699). iPad Pro 11in (2022, M2, 2TB, WiFi): £1,943 (£206 off, MSRP £2,149). iPad Pro 12.9in (2022, M2, 1TB, WiFi): £1,962.72 (£86.28 off, MSRP £2,049). 6th gen iPad mini, 64GB, WiFi, £519 (£50 off, MSRP £569). 256GB iPad Air (2022, Wi-Fi) £782 (£67 off, MSRP: £849). See our roundup of the best Amazon Prime Day iPad deals for more Prime Day deals. MacBook deals IDG Amazon U.S. 13-inch MacBook Air, M1 (256GB): $750 ($249 off, MSRP $999) 13-inch MacBook Air, M2 (8-core GPU, 256GB): $999 ($100 off, MSRP $1,099) (Out of stock) 13-inch MacBook Air, M2 (10-core GPU, 512GB): $1,299 ($100 off, MSRP $1,399) (Out of stock) 15-inch MacBook Air, M2 (10-core GPU, 256GB): $1,199 ($100 off, MSRP $1,299) 15-inch MacBook Air, M2 (10-core GPU, 512GB): $1,399 ($100 off, MSRP $1,499) 13-inch MacBook Pro with M2 chip (256GB): $1,099 ($200 off, MSRP $1,299) 13-inch MacBook Pro with M2 chip (512GB): $1,299 ($200 off, MSRP $1,499) 14-inch MacBook Pro with M2 Pro chip (19‑core GPU, 512GB): $1,799 ($200 off, MSRP $1,999) 16-inch MacBook Pro with M2 Pro chip (19‑core GPU, 512GB): $2,299 ($200 off, MSRP $2,499) Amazon U.K. 13-inch MacBook Pro with M2 chip (10-core GPU), 8GB RAM, 256GB SSD: £1,199 (£150 off, MSRP £1,349) 13-inch MacBook Pro with M2 chip (10-core GPU), 8GB RAM, 512GB SSD: £1,399 (£150 off, MSRP £1,549) 15-inch MacBook Air, M2 (256GB) £1,289.97 (£109.03 off, MSRP £1,399) 15-inch MacBook Air, M2 (512GB) £1,479.97 (£119.03 off, MSRP £1,599) Desktop Mac deals Amazon U.S. 24-inch iMac (8-core GPU, 256GB): $1,349 ($150 off, MSRP $1499) Mac mini (256GB): $499 ($100 off, MSRP $599) Out of stock Studio Display (Tilt-adjustable): $1,499 ($100 off, MSRP $1,599) Magic Keyboard (Touch ID and Numeric Keypad): $159 ($20 off, MSRP $179) M1 Mac mini, 512GB: $778 ($120 off, MSRP $899) Amazon U.K. M2 Mac mini, 256GB: £599 (£50 off MRSP £649) M2 Mac mini, 512GB: £799 (£50 off MRSP £849) M2 Pro Mac mini, 512GB: £1,264.99 (£134 off MRSP £1,399) iMac with M1 chip (7‑core GPU), 8GB RAM, 256GB SSD: £1,127.97 (£272 off, MSRP £1,399) iMac with M1 chip (8‑core GPU), 8GB RAM, 256GB SSD: £1,299 (£300 off, MSRP £1,599) iMac with M1 chip (8‑core GPU), 8GB RAM, 512GB SSD: £1,499 (£300 off, MSRP £1,799) See our best Amazon Prime Day MacBook Air and MacBook Pro deals and our roundup of the best Amazon Prime Day Mac deals for more deals. Want a new hard drive or SSD? See our Best SSD and hard drive deals for Prime Day. Want a display to go with your Mac or MacBook? See our Best monitor or display deals for Prime Day  Apple accessories Want a new keyboard, trackpad, or mouse? After an Apple Pencil or AirTags? Look no further. Amazon U.S. Amazon, Apple Magic Keyboard with Touch ID for £121.61, usually £149 (£27.39 off). Amazon, Apple Magic Keyboard with Touch ID & Numeric Keypad for £169, usually £179 (£10 off). Amazon, Apple Magic Keyboard with Numeric Keypad (no-touch ID) for £102.55, usually £129 (£27 off). Amazon, Magic TrackPad for £117.49, usually £129 (£14.51 off). Amazon, Magic TrackPad Black for £128.98, usually £149 (£20.02 off). Amazon, 2021 Magic Mouse for £72.49, usually £79 (£7 off) Amazon, Apple Pencil (2nd gen) for £126.98, usually £139 (£27 off). Amazon, Apple Pencil (1st gen) for £106.54, usually £109 (£3 off). Amazon, pack of four Apple AirTags for £99, usually £119 (£20 off) Amazon, single AirTag for £30, usually £35 (£5 off) Amazon U.K. Amazon, Apple Magic Keyboard with Touch ID for £121.61, usually £149 (£27.39 off). Amazon, Apple Magic Keyboard with Touch ID & Numeric Keypad for £169, usually £179 (£10 off). Amazon, Apple Magic Keyboard with Numeric Keypad (no-touch ID) for £102.55, usually £129 (£27 off). Amazon, Magic TrackPad for £117.49, usually £129 (£14.51 off). Amazon, Magic TrackPad Black for £128.98, usually £149 (£20.02 off). Amazon, 2021 Magic Mouse for £72.49, usually £79 (£7 off) Amazon, Apple Pencil (2nd gen) for £126.98, usually £139 (£27 off). Amazon, Apple Pencil (1st gen) for £106.54, usually £109 (£3 off). Amazon, pack of four Apple AirTags for £99, usually £119 (£20 off) Amazon, single AirTag for £30, usually £35 (£5 off) How to qualify for Prime Early Access Sale deals Many Prime Day discounts are exclusive to Amazon Prime members, so if you want to take advantage of the deals, you’ll need to become a Prime member. Membership cost $139 / £95 / AUD$59 annually, or $14.99 / £8.99 / AUD$6.99 on a monthly basis. There’s also a 30-day free trial for anyone who doesn’t want to commit. You can cancel at any time. Amazon Prime is a service that began as a way to get unlimited next-day delivery but has since become much more. Subscribers get access to Amazon’s Netflix rival Prime Video, plus plenty of other benefits. You can see all the Prime benefits here. How to get the best Apple deals Here are some quick tips to grab an Apple bargain during the two-day Prime Day sale. 1. Browse Apple’s Amazon storefront.  It’s essentially a catalog for the full range of Apple products, and when you click through to specific devices, you’ll also see any available discounts. We’ve listed all available devices below, many of which had good discounts off last Prime Day. We’d recommend bookmarking the product pages you’re most interested in, so you can browse discounts as soon as Prime Day hits.  iPhone: iPhone 14 range, iPhone 13 range, iPhone 12 range, iPhone SE, and iPhone Accessories iPad: iPad Pro, iPad Air, 10.2-inch iPad, iPad mini, and iPad Accessories Apple Watch: (Series 8, Apple Watch Ultra, Series 7, Watch SE (gen 1 & gen 2) and Watch Accessories MacBook: MacBook Air, MacBook Pro, Mac Accessories Mac desktops: 24in iMac, Mac mini, and Mac Accessories AirPods: AirPods Max, AirPods Pro (gen 1 & gen 2), AirPods (gen 2 & gen 3), and AirPods accessories Apple TV: 4K, TV HD, TV Accessories Beats headphones: Powerbeats, Powerbeats Pro, Beats Solo Pro, Beats Studio3 Wireless, Beats Fit Pro, Beats Studio Buds, Beats Flex, Beats Solo 3 Wireless, and Beats Pill+ Here are the same product pages for UK readers: iPhone iPad Apple Watch MacBook Mac desktops AirPods Apple TV Beats headphones 2. Be prepared before Prime Day Prime Day deals will go quickly, as many offers are available as Deals of the Day, which means stock can be limited or last for only a few hours. Ensure first off that you’re signed up to Amazon Prime to access the deals on Amazon. You don’t need to be paying for the service; you can be on the free trial. Also, make sure your payment and shipping information is up to date to make sure you can purchase products before they sell out. If you come across a deal that has sold out, you can usually join the waitlist to be alerted to any stock that becomes available, usually because someone has decided they don’t want to purchase it after all, and removes it from their basket. You can also use the “Watch this Deal” button on upcoming deals to be alerted when they become available. 3. Keep an eye on our deal selections With a team of Apple-breathing experts browsing through deals and offers every day (literally), you can be sure if there’s a top offer out there. See only the best deals on Macworld right here. Apple Inc

Read more »

New EU deal legalizes transatlantic data transfers once again
The European Union has agreed to a proposal to allow companies like Facebook, Google, and Apple to store data about European users in the United States, once again allowing data to flow across the Atlantic.European flagsIn 2020, an EU court decided that a deal allowing for data transfers of user data across the Atlantic was illegal. But on Monday, the European Union approved a new plan to continue allowing the data of EU citizens to be stored by tech companies within the United States. Read more...

Read more »

Confirmed: That’s the real Apple Fellow Phil Schiller on Threads
Have you seen an account claiming to be Phil Schiller on Threads? 9to5Mac has confirmed that the account belongs to the actual Apple Fellow himself. more… The post appeared first on 9to5Mac.

Read more »

GM ditching CarPlay could go bad, complain car dealers
GM's replacement for CarPlay is due at the end of 2023, but its dealers are in the dark about when that will be and what it will do to sales when buyers figure it out.GM snubs CarPlayTogether Apple CarPlay and the equivalent Android Auto are the in giant majority of cars launched today. That's why it came as such a surprise when GM announced that it was dropping support for these systems in favor of its own, new one. Read more...

Read more »

Monday’s best deals: New lows on M2 MacBook Air at $979 and M1 MacBook Air at $750, iPad Air 5, more
The are beginning to pour in from 9to5Toys, with some new all-time lows live to start the week. Apple’s 13-inch M2 MacBook Air lands at its best price ever with a discount down to $979 to go alongside the previous-generation M1 MacBook Air at lower than before. It now rests at $750 after a $249 discount and is joined by a match of the all-time low on Apple’s latest iPad Air 5 as the first discount in months lands for Prime Day at $500. Hit the jump for all that and more in the latest 9to5Toys Lunch Break. more… The post appeared first on 9to5Mac.

Read more »

Apple releases official trailer for ‘Napoleon,’ directed by Ridley Scott, starring Joaquin Phoenix
Apple on Monday released the official trailer for the upcoming film “Napoleon,” is a spectacle-filled action epic that details the checkered… The post appeared first on MacDailyNews.

Read more »

This is how you make your computer setup a thing of beauty [Setups]
With the M1 Max MacBook Pro and PC on shelves off the side, today's setup makes more room on the beautiful wooden desk and desk shelf. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

ShadowVault macOS Stealer surfaces as the newest sophisticated Mac malware
Earlier this year, we saw a new malware designed for Macs called MacStealer that can compromise passwords, credit card numbers, crypto wallets, and more. After a second version of that popped up in April, a third advanced Mac malware called ShadowVault macOS Stealer has surfaced. Here’s what it can do and how to protect your Mac. more… The post appeared first on 9to5Mac.

Read more »

iPhone manufacturer drops $19.5 billion chip production deal with firm in India
Apple has its eyes on India as the next major market to dominate. The nation is also a big part of Apple’s plans to diversify product manufacturing outside of China. Foxconn, Apple’s iPhone manufacturing partner, just dropped out of a $19.5 billion chip deal in India, however. more… The post appeared first on 9to5Mac.

Read more »

Funny new Apple ad highlights long, long battery life of iPhone 14 Plus
“Battery for Miles,” a just-released advert for iPhone 14 Plus, stars an elderly farmer driving a tractor and listening to Lidacris… as one does. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Best Prime Day Apple Watch Deals: July 2023
Macworld One of the best times of the year to get a good deal on a new Apple Watch is during Amazon’s Prime Day Sale and this year it is scheduled to take place from July 11-12. During Prime Day 2023 we will be tracking all the sales, so be sure to check back often as the deals change all the time. The Amazon Prime Sale is only open to Prime members, so you’ll need to sign in with an active membership to purchase one of the deals. Prime memberships cost $139 / £95 / AUD$59 annually, or $14.99 / £8.99 / AUD$6.99 on a monthly basis. New users can sign up for a 30-day free trial that can be canceled at any time during the trial window. Prime Day 2023: Best Apple Watch 8 deals We are seeing the following discounts right now on Amazon: Amazon U.S.: Apple Watch Series 8 (41mm, GPS): $330 ($69 off when applying coupon below price, MSRP $399) Apple Watch Series 8 (45mm, GPS): $359 ($70 off, MSRP $429) Apple Watch Ultra: $780 ($19 off, MSRP $799) Apple Watch SE (40mm): $219 ($30 off, MSRP $249) Apple Watch SE (44mm): $249 ($30 off, MSRP $279) Amazon U.K.: Apple Watch Series 8 (41mm) GPS: £369 (£50 off) Apple Watch Series 8 (45mm) GPS: £399 (£50 off) Apple Watch Series 8 (41mm) GPS + Cellular: £499 (£30 off) Apple Watch Series 8 (45mm) GPS + Cellular: £521.96 (£27.04 off) Prime Day 2023: Best Apple Watch Ultra deals Amazon U.S.: Apple Watch Ultra: $779 ($20 off) Amazon U.K.: Apple Watch Ultra: £819 (£30 off) Prime Day 2023: Best Apple Watch SE deals The Apple Watch SE is the more affordable option, essentially a cross between an Apple Watch Series 4 and Series 6. Its display isn’t quite as large and doesn’t have the always-on feature, nor does it have the blood oxygen or ECG features. But it still does most of what people want an Apple Watch for, while saving you around $100. In the U.S.: Apple Watch SE (40mm) GPS: $239 ($89 off) Apple Watch SE (44mm) GPS: $269 ($90 off) Apple Watch SE (40mm) GPS + Cellular: $299 (full price) Apple Watch SE (44mm) GPS + Cellular: $329 (full price) Amazon U.K.: Apple Watch SE (40mm) GPS: £249 (£10 off) Apple Watch SE (44mm) GPS: £279 (£20 off) Apple Watch SE (40mm) GPS + Cellular: £319 (full price) Apple Watch SE (44mm) GPS + Cellular: £349 (full price) Prime Day 2023: Best discontinued Apple Watch deals Amazon U.S.: Apple Watch SE (1st-generation, 40mm, GPS): Not available Apple Watch SE (1st-generation, 40mm, cellular): Not available Amazon U.K.: Apple Watch Series 7 (41mm) GPS, Product Red or green: £314.99 (£54.01 off) Apple Watch Series 7 (45mm) GPS, Product Red: £310 (£89 off) Apple Watch Series 7 (41mm) GPS + Cellular, Starlight: £349.99 (£119.01 off) Apple Watch Series 7 (45mm) GPS + Cellular, Midnight: £409 (£90 off) Apple Watch SE (44mm) GPS (was £30 off, but currently out of stock/used models only) Apple Watch SE (40mm) GPS + Cellular: £271.94 (£17.06 off) Apple Watch SE (44mm) GPS + Cellular: £277.81 (£41.19 off) Prime Day Sale 2023: How can I get the best Apple Watch deals? Amazon Prime Day is scheduled for July 11 and 12, 2023. Amazon also runs an Amazon Prime Early Access Sale in October in the following countries: Austria, Australia, Belgium, Brazil, Canada, China, France, Germany, Italy, Japan, Luxembourg, Mexico, the Netherlands, Portugal, Singapore, Spain, the U.K., and the U.S. The Amazon Prime Day Sale is only open to Prime members, so you’ll need to sign in with an active membership to purchase one of the deals. Prime memberships cost $139 / £95 / AUD$59 annually, or $14.99 / £8.99 / AUD$6.99 on a monthly basis. New users can sign up for a 30-day free trial that can be canceled at any time during the trial window. Prime members also get free two-day shipping and access to Prime Video and all the content available on that service. More Apple bargains For more Prime Day coverage, check out our other Apple deal roundups: See our roundup of the best Amazon Prime Day AirPods deals See our roundup of the best Amazon Prime Day Apple Watch deals for more Prime Day deals. See our roundup of the best Amazon Prime Day iPhone deals for more Prime Day deals. See our roundup of the best Amazon Prime Day MacBook Air and MacBook Pro deals for more Prime Day deals. See our roundup of the best Amazon Prime Day Mac deals for more Prime Day deals. See our roundup of the best Amazon Prime Day Mac monitor deals See our roundup of the best Amazon Prime Day SSD and hard drive deals Apple Watch

Read more »

macOS Sonoma vs macOS Ventura: Should you update?
Macworld Apple has previewed the latest version of its Mac operating system, macOS Sonoma, which will make its debut later this year. It has some cool new features as well as general tweaks to macOS Ventura that it supersedes. So, how do the two compare? Here’s a whistlestop tour of the current and future versions of macOS. What’s new in macOS Sonoma compared to macOS Ventura? Obviously, these are both macOS, so the core functionality remains the same, but as with every new iteration there are features that haven’t appeared before, plus the continued improvements to integrations with other Apple devices. The main tentpole additions are the ones you probably want to know about, so we cover those below.  Widgets One of the most instantly recognisable things that will appear on the desktops of users running macOS Sonoma will no doubt be widgets. These interactive mini-apps used to live in the Notification Center, but when the update arrives you’ll now be able to drag them onto your desktop for instant, easy access. You can also use iPhone apps, thanks to Continuity, with the clever feature that anything you do on the Mac version instantly syncs with the iPhone version. See: How Apple’s upcoming widget revolution will change our screens forever. Foundry Screensavers With Apple placing an emphasis on customisation in macOS Sonoma, as with the widgets, it also brings new screensavers to the table. These are high definition images that acts as videos, with the camera sweeping across majestic landscapes, then slowing to a stop when you interact with the Mac, turning them into stationary images. It’s a small thing, but does look lovely.  Upgraded video conferencing tools macOS Ventura brought some interesting enhancements to video calls, including Center Stage (which uses advanced cropping techniques to ensure you’re always in the middle of the screen) and Continuity Camera (use your iPhone instead of your Mac’s built-in webcam). With the arrival of macOS Sonoma there are now new ways to liven up conference calls.  Zoom meetings were a necessary evil during Covid, but many of us feel some fatigue when it comes to sitting in video conferences these days. Apple is attempting to combat this though with some new tools in macOS Sonoma that can bring a bit of sparkle to presentations and general get-togethers.  Apple There’s a Presenter Overlay option that places the presenter in the foreground, but inserts any shared screens in between them and the background. Looks professional and should liven up the quarterly financial reports. If the other callers are impressed then they can respond with animations, such as party balloons or confetti. These can even be triggered by hand gestures, which should at least keep some people awake. Finally, macOS Sonoma allows people on the call to easily share content from apps on the call.  Game Mode An area that Macs have traditionally lagged behind their Windows-powered counterparts is gaming. Apple seems to want to close this gap by introducing a new Game Mode in macOS Sonoma that optimises the performance of Apple Silicon powered Macs so that games get the best possible performance and experience. This stretches to peripherals too, with AirPods, Xbox and PlayStation controllers all getting low-latency response times due to a doubled sample rate on their Bluetooth connections to prevent any breaking of the immersion. Read more: Apple’s Game Porting Toolkit is the first real step to fixing Mac gaming. Safari Apple’s browser already got some serious attention in macOS Ventura, with the update introducing Shared Tab Groups and several privacy focussed tools such as Passkeys.  In macOS Sonoma this is continued with extra layers of security in Private Browsing mode, including blocking tracking and profiling that webpages may attempt, as well as automatically locking private tabs when you’re away from your Mac. There’s also some helpful new capabilities, with new profiles allowing you to separate out your preferred history, cookies, favourites, tab groups and other relevant information into dedicated profiles. So you could have one for work, entertainment, holiday planning or whatever ones you’d find useful.  Apple Apple also introduces the ability to turn sites into web-apps. These run as simplified windows that you can access from the dock and go straight to your favourite websites without opening up a browser window. Accessibility Apple has always been a leading light when it comes to accessibility in products, and this is taken to new levels in macOS Sonoma. Live Text allows non-verbal people to have their Macs speak the words they type so they can participate on calls, Made for iPhone hearing devices can now also be used on Macs, plus voice controls have been improved to aid those who have difficulty with mobility. There’s plenty of other tweaks to go along with these and build on what was already in macOS Ventura. Read: How to use Live Text and Visual Look Up in macOS. Should I upgrade to macOS Sonoma? So long as your Mac will be compatible with macOS Sonoma, there’s really no reason to stay on macOS Ventura when the upgrade arrives later this year. The customisation options can make your Mac feel more like your own, while the further integrations with iPhone, not to mention the boost to Safari and video calling, makes it a simple decision. Here’s how to update once Sonoma arrives – and how to run the Sonoma beta if you can’t wait for that. Personal Software

Read more »

Nasdaq 100 plans special rebalance to curb dominance of Apple, select others
The Nasdaq 100 index is set to adjust the weighting of its 100 components, with the "magnificent seven" stocks Apple, Microsoft, Nvidia… The post appeared first on MacDailyNews.

Read more »

After the Whistle podcast with Ted Lasso’s Coach Beard is back
"After the Whistle with Brendan Hunt and Rebecca Lowe" returns July 19 to cover the 2023 Women's World Cup in Australia and New Zealand. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Threads hits 100 million users in just 5 days, toppling record set by ChatGPT
What’s the fastest way to grow a new social network? It turns out converting your existing 1 billion+ users over to the new thing isn’t a bad start. Meta CEO Mark Zuckerberg has confirmed that the company’s new Threads service has crossed 100 million users in its first five days. The new Twitter competitor piggybacks on Instagram to simplify account creation and connect who you follow. more… The post appeared first on 9to5Mac.

Read more »

Wild Prime Day sale gets you a new MacBook Air for $50 less than an iPhone 14
Macworld Even with a new 15-inch M2 model on shelves and an M3 model in the works, the M1 MacBook Air is still a fantastic laptop. And today it’s down to its lowest price ever price: Amazon is selling the M1 MacBook Air with 256GB of storage for $750, a savings of $249 and the best price we’ve ever seen. This MacBook Air has the original M1 processor with seven GPU cores, but it still performs incredibly well for everyday tasks like email and web browsing. You’ll get the iconic fanless design with a gorgeous 13.2-inch retina display, two Thunderbolt ports, and a great keyboard. In our 4.5-star review, we praised its “shocking” performance and it’ll be even better when macOS Sonoma arrives in the fall. So ignore your FOMO and grab a fantastic laptop at a fantastic price before it’s gone forever. MacBook

Read more »

Top Suspect in 2015 Ashley Madison Hack Committed Suicide in 2014
When the marital infidelity website AshleyMadison.com learned in July 2015 that hackers were threatening to publish data stolen from 37 million users, the company’s then-CEO Noel Biderman was quick to point the finger at an unnamed former contractor. But as a new documentary series on Hulu reveals [SPOILER ALERT!], there was just one problem with that theory: Their top suspect had killed himself more than a year before the hackers began publishing stolen user data.

Read more »

Who’s Behind the DomainNetworks Snail Mail Scam?
If you've ever owned a domain name, the chances are good that at some point you've received a snail mail letter which appears to be a bill for a domain or website-related services. In reality, these misleading missives try to trick people into paying for useless services they never ordered, don't need, and probably will never receive. Here's a look at the most recent incarnation of this scam -- DomainNetworks -- and some clues about who may be behind it.

Read more »

Vulnerability Summary for the Week of June 26, 2023
  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info apple -- mac_os_x A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.6, macOS Monterey 12.3, Security Update 2022-004 Catalina. A remote user may cause an unexpected app termination or arbitrary code execution 2023-06-23 9.8 CVE-2022-22630MISCMISCMISC google -- android In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-250100597References: N/A 2023-06-28 9.8 CVE-2023-21066MISC wordpress -- wordpress The wpbrutalai WordPress plugin before 2.0.0 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin via CSRF. 2023-06-27 9.8 CVE-2023-2601MISC wordpress -- wordpress   The BookIt plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.3.7. This is due to insufficient verification on the user being supplied during booking an appointment through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email. 2023-06-30 9.8 CVE-2023-2834MISCMISCMISCMISCMISCMISCMISC wordpress -- wordpress   The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. This is due to insufficient encryption on the user being supplied during a login validated through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they know the email address associated with that user. This was partially patched in version 7.6.4 and fully patched in version 7.6.5. 2023-06-29 9.8 CVE-2023-2982MISCMISCMISCMISCMISC wordpress -- wordpress The MStore API plugin for WordPress is vulnerable to Unauthenticated Blind SQL Injection via the 'id' parameter in versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. 2023-06-24 9.8 CVE-2023-3197MISCMISC apple -- macos A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A remote attacker may be able to cause unexpected app termination or arbitrary code execution 2023-06-23 9.8 CVE-2023-32387MISCMISCMISC apple -- macos A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A remote attacker may be able to cause unexpected app termination or arbitrary code execution 2023-06-23 9.8 CVE-2023-32412MISCMISCMISCMISCMISCMISCMISC apple -- iphone_os The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.5 and iPadOS 16.5. A remote attacker may be able to cause arbitrary code execution 2023-06-23 9.8 CVE-2023-32419MISC wordpress -- wordpress   The Web3 – Crypto wallet Login & NFT token gating plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.6.0. This is due to incorrect authentication checking in the 'hidden_form_data' function. This makes it possible for authenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username. 2023-06-30 9.8 CVE-2023-3249MISCMISC trendmicro -- apex_one A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an arbitrary file to the Management Server which could lead to remote code execution with system privileges. 2023-06-26 9.8 CVE-2023-32557MISC wavlink -- wn579x3_firmware A vulnerability classified as critical has been found in Wavlink WN579X3 up to 20230615. Affected is an unknown function of the file /cgi-bin/adm.cgi of the component Ping Test. The manipulation of the argument pingIp leads to injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-232236. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-06-23 9.8 CVE-2023-3380MISCMISCMISC game_result_matrix_system_project -- game_result_matrix_system A vulnerability, which was classified as critical, was found in SourceCodester Game Result Matrix System 1.0. This affects an unknown part of the file /dipam/athlete-profile.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232239. 2023-06-23 9.8 CVE-2023-3383MISCMISCMISC human_resource_management_system_project -- human_resource_management_system A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file detailview.php. The manipulation of the argument employeeid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-232288. 2023-06-23 9.8 CVE-2023-3391MISCMISCMISC trendmicro -- mobile_security A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an unauthenticated remote attacker to delete arbitrary files. 2023-06-26 9.1 CVE-2023-32521MISCMISC wordpress -- wordpress   The WP Private Content Plus plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1. This is due to missing or incorrect nonce validation on the save_groups() function. This makes it possible for unauthenticated attackers to add new group members via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2023-07-01 8.8 CVE-2021-4385MISCMISCMISCMISCMISCMISCMISCMISCMISC wordpress -- wordpress   The WP Security Question plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.5. This is due to missing or incorrect nonce validation on the save() function. This makes it possible for unauthenticated attackers to modify the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2023-07-01 8.8 CVE-2021-4386MISCMISCMISCMISCMISCMISCMISCMISCMISC wordpress -- wordpress   The Locations plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.1. This is due to missing or incorrect nonce validation on the saveCustomFields() function. This makes it possible for unauthenticated attackers to update custom field meta data via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2023-07-01 8.8 CVE-2021-4394MISCMISCMISCMISCMISCMISCMISCMISCMISC wordpress -- wordpress   The Amministrazione Trasparente plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 7.1. This is due to missing or incorrect nonce validation on the at_save_aturl_meta() function. This makes it possible for unauthenticated attackers to update meta data via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2023-07-01 8.8 CVE-2021-4398MISCMISCMISCMISCMISCMISCMISCMISCMISC wordpress -- wordpress   The Style Kits plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.0. This is due to missing or incorrect nonce validation on the update_posts_stylekit() function. This makes it possible for unauthenticated attackers to update style kits for posts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2023-07-01 8.8 CVE-2021-4401MISCMISCMISCMISCMISCMISCMISCMISCMISC yoga_class_registration_system_project -- yoga_class_registration_system Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators. 2023-06-24 8.8 CVE-2023-1722MISCMISC wordpress -- wordpress The KiviCare WordPress plugin before 3.2.1 does not have CSRF checks (either flawed or missing completely) in various AJAX actions, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks. This includes, but is not limited to: Delete arbitrary appointments/medical records/etc, create/update various users (patients, doctors etc) 2023-06-27 8.8 CVE-2023-2628MISC wordpress -- wordpress   The SP Project & Document Manager plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 4.67. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for authenticated attackers with subscriber privileges or above, to change user passwords and potentially take over administrator accounts. 2023-06-30 8.8 CVE-2023-3063MISCMISC apple -- watchos A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, Safari 16.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. 2023-06-23 8.8 CVE-2023-32373MISCMISCMISCMISCMISCMISC apple -- macos A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.4, iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7. 2023-06-23 8.8 CVE-2023-32435MISCMISCMISCMISCMLIST apple -- iphone_os A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, Safari 16.5.1, macOS Ventura 13.4.1, iOS 15.7.7 and iPadOS 15.7.7. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. 2023-06-23 8.8 CVE-2023-32439MISCMISCMISCMISCMLISTFEDORA trendmicro -- mobile_security Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This is similar to, but not identical to CVE-2023-32524. 2023-06-26 8.8 CVE-2023-32523MISCMISC trendmicro -- mobile_security Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This is similar to, but not identical to CVE-2023-32523. 2023-06-26 8.8 CVE-2023-32524MISCMISC trendmicro -- mobile_security Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32528. 2023-06-26 8.8 CVE-2023-32527MISCMISC trendmicro -- mobile_security Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32527. 2023-06-26 8.8 CVE-2023-32528MISCMISC trendmicro -- apex_central Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code execution. Please note: an attacker must first obtain authentication on the target system in order to exploit these vulnerabilities. This is similar to, but not identical to CVE-2023-32530. 2023-06-26 8.8 CVE-2023-32529MISCMISC trendmicro -- apex_central Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code execution. Please note: an attacker must first obtain authentication on the target system in order to exploit these vulnerabilities. This is similar to, but not identical to CVE-2023-32529. 2023-06-26 8.8 CVE-2023-32530MISCMISC google -- chrome Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2023-06-26 8.8 CVE-2023-3420MISCMISCMISCMISC google -- chrome Use after free in Media in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2023-06-26 8.8 CVE-2023-3421MISCMISCMISCMISC google -- chrome Use after free in Guest View in Google Chrome prior to 114.0.5735.198 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2023-06-26 8.8 CVE-2023-3422MISCMISCMISCMISC xwiki -- xwiki XWiki Platform is a generic wiki platform. Starting in version 12.9-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.1, any logged in user can add dangerous content in their first name field and see it executed with programming rights. Leading to rights escalation. The vulnerability has been fixed on XWiki 14.4.8, 14.10.6, and 15.1. As a workaround, one may apply the patch manually. 2023-06-23 8.8 CVE-2023-35152MISCMISCMISCMISCMISC gnu -- libredwg LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c. 2023-06-23 8.8 CVE-2023-36271MISC gnu -- libredwg LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c. 2023-06-23 8.8 CVE-2023-36272MISC gnu -- libredwg LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c. 2023-06-23 8.8 CVE-2023-36273MISC gnu -- libredwg LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_write_TF at bits.c. 2023-06-23 8.8 CVE-2023-36274MISC codekop -- codekop A Cross-Site Request Forgery (CSRF) in POS Codekop v2.0 allows attackers to escalate privileges. 2023-06-23 8.8 CVE-2023-36345MISCMISC codekop -- codekop POS Codekop v2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the filename parameter. 2023-06-23 8.8 CVE-2023-36348MISCMISC apple -- macos The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, Safari 16.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited. 2023-06-23 8.6 CVE-2023-32409MISCMISCMISCMISCMISC apple -- macos The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.4. An app may be able to break out of its sandbox 2023-06-23 8.6 CVE-2023-32414MISC wordpress -- wordpress   The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Injection in versions up to, and including, 4.1.5. This is due to insufficient escaping on the supplied username value. This makes it possible for unauthenticated attackers to extract potentially sensitive information from the LDAP directory. 2023-06-29 8.6 CVE-2023-3447MISCMISC microsoft -- edge Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2023-06-29 8.3 CVE-2022-29144MISC microsoft -- edge   Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2023-06-29 8.3 CVE-2022-29146MISC microsoft -- edge   Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2023-06-28 8.2 CVE-2021-31937MISC trendmicro -- mobile_security A path traversal exists in a specific dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an authenticated remote attacker to delete arbitrary files. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. 2023-06-26 8.1 CVE-2023-32522MISCMISC xwiki -- xwiki XWiki Platform is a generic wiki platform. Starting in version 11.8-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.2, `Mail.MailConfig` can be edited by any logged-in user by default. Consequently, they can change the mail obfuscation configuration and view and edit the mail sending configuration, including the smtp domain name and credentials. The problem has been patched in XWiki 14.4.8, 14.10.6, and 15.1. As a workaround, the rights of the `Mail.MailConfig` page can be manually updated so that only a set of trusted users can view, edit and delete it (e.g., the `XWiki.XWikiAdminGroup` group). 2023-06-23 8.1 CVE-2023-34465MISCMISCMISCMISCMISC xwiki -- xwiki XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 2.40m-2 and prior to versions 14.4.8, 14.10.4, and 15.0, any user with view rights on any document can execute code with programming rights, leading to remote code execution by crafting an url with a dangerous payload. The problem has been patched in XWiki 15.0, 14.10.4 and 14.4.8. 2023-06-23 8 CVE-2023-35150MISCMISCMISC google -- android In lwis_i2c_device_disable of lwis_device_i2c.c, there is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kerne lAndroid ID: A-269661912References: N/A 2023-06-28 7.8 CVE-2023-21147MISC google -- android In registerGsmaServiceIntentReceiver of ShannonRcsService.java, there is a possible way to activate/deactivate RCS service due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-270050709References: N/A 2023-06-28 7.8 CVE-2023-21149MISC google -- android In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin user due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-13Android ID: A-262243015 2023-06-28 7.8 CVE-2023-21172MISC google -- android In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-13Android ID: A-235822222 2023-06-28 7.8 CVE-2023-21174MISC google -- android In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-13Android ID: A-262243574 2023-06-28 7.8 CVE-2023-21175MISC google -- android In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi encryption protocol due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-13Android ID: A-272755865 2023-06-28 7.8 CVE-2023-21179MISC apple -- macos The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Big Sur 11.7.3, macOS Ventura 13.2. An app may be able to execute arbitrary code with kernel privileges 2023-06-23 7.8 CVE-2023-23516MISCMISCMISC apple -- macos A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution 2023-06-23 7.8 CVE-2023-23539MISC apple -- macos A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. An app may be able to execute arbitrary code with kernel privileges 2023-06-23 7.8 CVE-2023-27930MISCMISCMISCMISC dell -- precision_3570_firmware Dell BIOS contains an improper authentication vulnerability. A locally authenticated malicious user may potentially exploit this vulnerability by bypassing certain authentication mechanisms in order to elevate privileges on the system. 2023-06-23 7.8 CVE-2023-28073MISC apple -- itunes A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to gain elevated privileges 2023-06-23 7.8 CVE-2023-32351MISC apple -- itunes A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to elevate privileges 2023-06-23 7.8 CVE-2023-32353MISC apple -- macos An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. Processing a 3D model may lead to arbitrary code execution 2023-06-23 7.8 CVE-2023-32380MISCMISCMISC apple -- macos A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. Processing an image may lead to arbitrary code execution 2023-06-23 7.8 CVE-2023-32384MISCMISCMISCMISCMISCMISCMISC apple -- macos A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to execute arbitrary code with kernel privileges 2023-06-23 7.8 CVE-2023-32398MISCMISCMISCMISCMISCMISCMISC apple -- macos A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to gain root privileges 2023-06-23 7.8 CVE-2023-32405MISCMISCMISC apple -- iphone_os An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Big Sur 11.7.8, macOS Monterey 12.6.7, macOS Ventura 13.4.1, watchOS 9.5.2. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7. 2023-06-23 7.8 CVE-2023-32434MISCMISCMISCMISCMISCMISCMISC admidio -- admidio Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9. 2023-06-23 7.8 CVE-2023-3302MISCCONFIRM trendmicro -- apex_one An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-34145. 2023-06-26 7.8 CVE-2023-34144MISCMISC trendmicro -- apex_one An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-34144. 2023-06-26 7.8 CVE-2023-34145MISCMISC trendmicro -- apex_one An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an arbitrary value to specific Trend Micro agent subkeys on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-34147 and CVE-2023-34148. 2023-06-26 7.8 CVE-2023-34146MISCMISC trendmicro -- apex_one An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an arbitrary value to specific Trend Micro agent subkeys on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-34146 and CVE-2023-34148. 2023-06-26 7.8 CVE-2023-34147MISCMISC trendmicro -- apex_one An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an arbitrary value to specific Trend Micro agent subkeys on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-34146 and CVE-2023-34147. 2023-06-26 7.8 CVE-2023-34148MISCMISC irontec -- sngrep Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /src/capture.c. 2023-06-23 7.8 CVE-2023-36192MISC gifsicle_project -- gifsicle Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguity_error component at /src/clp.c. 2023-06-23 7.8 CVE-2023-36193MISC wago -- multiple_products   Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets. 2023-06-26 7.5 CVE-2023-1150MISC dtstack -- taier An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method. 2023-06-23 7.5 CVE-2023-29860MISC apple -- macos A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6. An app may be able to modify protected parts of the file system 2023-06-23 7.5 CVE-2023-32397MISCMISCMISCMISC microsoft -- yet_another_reverse_proxy Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability 2023-06-23 7.5 CVE-2023-33141MISC diagrams -- drawio Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3. 2023-06-26 7.5 CVE-2023-3398MISCMISC xwiki -- xwiki XWiki Platform is a generic wiki platform. Starting in version 3.5-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, the mail obfuscation configuration was not fully taken into account. While the mail displayed to the end user was obfuscated, the rest response was also containing the mail unobfuscated and users were able to filter and sort on the unobfuscated, allowing them to infer the mail content. The consequence was the possibility to retrieve the email addresses of all users even when obfuscated. This has been patched in XWiki 14.4.8, 14.10.4, and 15.0-rc-1. 2023-06-23 7.5 CVE-2023-34467MISCMISCMISC xwiki -- xwiki XWiki Platform is a generic wiki platform. Starting in version 7.3-milestone-1 and prior to versions 14.4.8, 14.10.6, and 15.1, ny user can call a REST endpoint and obtain the obfuscated passwords, even when the mail obfuscation is activated. The issue has been patched in XWiki 14.4.8, 14.10.6, and 15.1. There is no known workaround. 2023-06-23 7.5 CVE-2023-35151MISCMISCMISC trendmicro -- mobile_security A remote attacker could leverage a vulnerability in Trend Micro Mobile Security (Enterprise) 9.8 SP5 to download a particular log file which may contain sensitive information regarding the product. 2023-06-26 7.5 CVE-2023-35695MISCMISC webkul -- qloapps An unauthenticated Time-Based SQL injection found in Webkul QloApps 1.6.0 via GET parameter date_from, date_to, and id_product allows a remote attacker to bypass a web application's authentication and authorization mechanisms and retrieve the contents of an entire database. 2023-06-23 7.5 CVE-2023-36284MISC basecamp -- basecamp Directory traversal can occur in the Basecamp com.basecamp.bc3 application before 4.2.1 for Android, which may allow an attacker to write arbitrary files in the application's private directory. Additionally, by using a malicious intent, the attacker may redirect the server's responses (containing sensitive information) to third-party applications by using a custom-crafted deeplink scheme. 2023-06-25 7.5 CVE-2023-36612MISC dell -- alienware_update Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability leading to privilege escalation. 2023-06-23 7.3 CVE-2023-28065MISC yoga_class_registration_system_project -- yoga_class_registration_system Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators. 2023-06-24 7.2 CVE-2023-1721MISCMISC wordpress -- wordpress The ERP WordPress plugin before 1.12.4 does not properly sanitize and escape the `type` parameter in the `erp/v1/accounting/v1/people` REST API endpoint before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin. 2023-06-27 7.2 CVE-2023-2744MISC fossbilling -- fossbilling Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1. 2023-06-23 7.2 CVE-2023-3393MISCMISC dell -- alienware_update Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder leading to permanent Denial of Service (DOS). 2023-06-23 7.1 CVE-2023-28071MISC apple -- macos An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to retain access to system configuration files even after its permission is revoked 2023-06-23 7.1 CVE-2023-32357MISCMISCMISCMISCMISCMISC apple -- macos An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. An app may be able to cause unexpected system termination or read kernel memory 2023-06-23 7.1 CVE-2023-32420MISCMISCMISCMISC apple -- macos A race condition was addressed with improved state handling. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to gain root privileges 2023-06-23 7 CVE-2023-32413MISCMISCMISCMISCMISCMISCMISC trendmicro -- apex_one A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: a local attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32555. 2023-06-26 7 CVE-2023-32554MISCMISC trendmicro -- apex_one A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: a local attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32554. 2023-06-26 7 CVE-2023-32555MISCMISC Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info dell -- alienware_m15_r7_firmware Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability to perform arbitrary code execution. 2023-06-23 6.8 CVE-2023-32480MISC google -- android there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-239867994References: N/A 2023-06-28 6.7 CVE-2023-21146MISC google -- android In the Google BMS kernel module, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-265149414References: N/A 2023-06-28 6.7 CVE-2023-21151MISC google -- android In Do_AIMS_SET_CALL_WAITING of imsservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-264259730References: N/A 2023-06-28 6.7 CVE-2023-21153MISC google -- android In encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-263783137References: N/A 2023-06-28 6.7 CVE-2023-21157MISC google -- android In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-13Android ID: A-261085213 2023-06-28 6.7 CVE-2023-21171MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-25936MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-25937MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-25938MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28026MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28027MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28028MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable 2023-06-23 6.7 CVE-2023-28029MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28030MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28031MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28032MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28033MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28034MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28035MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28036MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28039MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28040MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28041MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28042MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28044MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28050MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28052MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28054MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28056MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28058MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28059MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28060MISC dell -- alienware_area_51m_r1_firmware Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. 2023-06-23 6.7 CVE-2023-28061MISC wordpress -- wordpress The KiviCare WordPress plugin before 3.2.1 does not restrict the information returned in a response and returns all user data, allowing low privilege users such as subscriber to retrieve sensitive information such as the user email and hashed password of other users 2023-06-27 6.5 CVE-2023-2623MISC apple -- macos An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, Safari 16.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited. 2023-06-23 6.5 CVE-2023-28204MISCMISCMISCMISCMISCMISC apple -- macos An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, Safari 16.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information 2023-06-23 6.5 CVE-2023-32402MISCMISCMISCMISCMISC apple -- macos A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, Safari 16.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information 2023-06-23 6.5 CVE-2023-32423MISCMISCMISCMISCMISC trendmicro -- mobile_security Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32526. 2023-06-26 6.5 CVE-2023-32525MISCMISC trendmicro -- mobile_security Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32525. 2023-06-26 6.5 CVE-2023-32526MISCMISC wordpress -- wordpress The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0.0. This is due to a missing capability check on the ajax_store_save() function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify plugin settings and inject malicious web scripts. 2023-06-27 6.4 CVE-2023-3412MISCMISC microsoft -- edge   Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability 2023-07-01 6.3 CVE-2021-31982MISC microsoft -- edge   Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2023-06-29 6.3 CVE-2022-26899MISC apple -- macos The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6. A sandboxed app may be able to observe system-wide network connections 2023-06-23 6.3 CVE-2023-27940MISCMISCMISC apple -- macos The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. An app may be able to break out of its sandbox 2023-06-23 6.3 CVE-2023-32371MISCMISC microsoft -- edge   Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability 2023-07-01 6.1 CVE-2021-34506MISC wordpress -- wordpress The wpbrutalai WordPress plugin before 2.0.1 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a logged in high privilege users such as admin. 2023-06-27 6.1 CVE-2023-2605MISC wordpress -- wordpress The KiviCare WordPress plugin before 3.2.1 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as administrator 2023-06-27 6.1 CVE-2023-2624MISC wordpress -- wordpress The ERP WordPress plugin before 1.12.4 does not sanitize and escape the employee_name parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. 2023-06-27 6.1 CVE-2023-2743MISC wordpress -- wordpress Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Dream-Theme The7 plugin xwiki/bin/deletespace/Sandbox/?xredirect=javascript:alert(document.domain). This vulnerability exists since XWiki 3.4-milestone-1. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1. 2023-06-23 6.1 CVE-2023-35159MISCMISCMISCMISC xwiki -- xwiki XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It's possible to exploit the resubmit template to perform a XSS, e.g. by using URL such as: > xwiki/bin/view/XWiki/Main xpage=resubmit&resubmit=javascript:alert(document.domain)&xback=javascript:alert(document.domain). This vulnerability exists since XWiki 2.5-milestone-2. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1. 2023-06-23 6.1 CVE-2023-35160MISCMISCMISCMISC xwiki -- xwiki XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It's possible to exploit the DeleteApplication page to perform a XSS, e.g. by using URL such as: > xwiki/bin/view/AppWithinMinutes/DeleteApplication?appName=Menu&resolve=true&xredirect=javascript:alert(document.domain). This vulnerability exists since XWiki 6.2-milestone-1. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1. 2023-06-23 6.1 CVE-2023-35161MISCMISCMISCMISC xwiki -- xwiki XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It's possible to exploit the previewactions template to perform a XSS, e.g. by using URL such as: > /xwiki/bin/get/FlamingoThemes/Cerulean xpage=xpart&vm=previewactions.vm&xcontinue=javascript:alert(document.domain). This vulnerability exists since XWiki 6.1-rc-1. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1. 2023-06-23 6.1 CVE-2023-35162MISCMISCMISCMISC webkul -- qloapps An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST controller parameter. 2023-06-23 6.1 CVE-2023-36287MISC webkul -- qloapps An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST email_create and back parameter. 2023-06-23 6.1 CVE-2023-36289MISC codekop -- codekop POS Codekop v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the nm_member parameter at print.php. 2023-06-23 6.1 CVE-2023-36346MISCMISC wordpress -- wordpress   The MainWP Child plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.4.1.1 due to insufficient controls on the storage of back-up files. This makes it possible for unauthenticated attackers to extract sensitive data including the entire installations database if a backup occurs and the deletion of the back-up files fail. 2023-06-27 5.9 CVE-2023-3132MISCMISC apple -- ipados This issue was addressed with improved data protection. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to read sensitive location information 2023-06-23 5.5 CVE-2022-42792MISC apple -- macos This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Monterey 12.6.1, macOS Big Sur 11.7.1, macOS Ventura 13. An app may be able to modify protected parts of the file system 2023-06-23 5.5 CVE-2022-42860MISCMISCMISC apple -- ipados A logic issue was addressed with improved checks. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to bypass certain Privacy preferences 2023-06-23 5.5 CVE-2022-46715MISC apple -- macos A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to read sensitive location information 2023-06-23 5.5 CVE-2022-46718MISCMISCMISCMISC google -- android In FaceStatsAnalyzer::InterpolateWeightList of face_stats_analyzer.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-269174022References: N/A 2023-06-28 5.5 CVE-2023-21152MISC google -- android In BuildSetRadioNode of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-264540700References: N/A 2023-06-28 5.5 CVE-2023-21155MISC google -- android In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-13Android ID: A-253270285 2023-06-28 5.5 CVE-2023-21168MISC google -- android In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-13 Android ID: A-262741858 2023-06-28 5.5 CVE-2023-21173MISC google -- android In requestAppKeyboardShortcuts of WindowManagerService.java, there is a possible way to infer the app a user is interacting with due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-13Android ID: A-273906410 2023-06-28 5.5 CVE-2023-21177MISC apple -- macos This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to bypass Privacy preferences 2023-06-23 5.5 CVE-2023-28191MISCMISCMISCMISCMISCMISC apple -- macos This issue was addressed with improved state management. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. An app firewall setting may not take effect after exiting the Settings app 2023-06-23 5.5 CVE-2023-28202MISCMISCMISCMISC trendmicro -- apex_one A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintentionally delete privileged Trend Micro registry keys including its own protected registry keys on affected installations. 2023-06-26 5.5 CVE-2023-30902MISC apple -- macos A logic issue was addressed with improved checks. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may bypass Gatekeeper checks 2023-06-23 5.5 CVE-2023-32352MISCMISCMISCMISCMISC apple -- watchos An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5. An app may be able to disclose kernel memory 2023-06-23 5.5 CVE-2023-32354MISCMISCMISC apple -- macos A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to modify protected parts of the file system 2023-06-23 5.5 CVE-2023-32355MISCMISCMISC apple -- macos An authentication issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An unauthenticated user may be able to access recently printed documents 2023-06-23 5.5 CVE-2023-32360MISCMISCMISC apple -- macos A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Ventura 13.4. An app may be able to bypass Privacy preferences 2023-06-23 5.5 CVE-2023-32363MISC apple -- macos This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. An app may be able to access user-sensitive data 2023-06-23 5.5 CVE-2023-32367MISCMISC apple -- macos An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Monterey 12.6.6. Processing a 3D model may result in disclosure of process memory 2023-06-23 5.5 CVE-2023-32368MISCMISCMISCMISCMISC apple -- macos An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. Processing an image may result in disclosure of process memory 2023-06-23 5.5 CVE-2023-32372MISCMISCMISCMISC apple -- macos An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.4, macOS Monterey 12.6.6. Processing a 3D model may result in disclosure of process memory 2023-06-23 5.5 CVE-2023-32375MISCMISC apple -- macos This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. An app may be able to modify protected parts of the file system 2023-06-23 5.5 CVE-2023-32376MISCMISCMISCMISC apple -- macos An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. Processing a 3D model may result in disclosure of process memory 2023-06-23 5.5 CVE-2023-32382MISCMISCMISC apple -- macos A denial-of-service issue was addressed with improved memory handling. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. Opening a PDF file may lead to unexpected app termination 2023-06-23 5.5 CVE-2023-32385MISCMISC apple -- macos A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to bypass Privacy preferences 2023-06-23 5.5 CVE-2023-32388MISCMISCMISCMISCMISCMISC apple -- macos This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. An app may be able to disclose kernel memory 2023-06-23 5.5 CVE-2023-32389MISCMISCMISCMISC apple -- macos A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to read sensitive location information 2023-06-23 5.5 CVE-2023-32392MISCMISCMISCMISCMISCMISC apple -- macos A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to modify protected parts of the file system 2023-06-23 5.5 CVE-2023-32395MISCMISCMISC apple -- macos The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. An app may be able to read sensitive location information 2023-06-23 5.5 CVE-2023-32399MISCMISCMISCMISC apple -- macos This issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5. Entitlements and privacy permissions granted to this app may be used by a malicious app 2023-06-23 5.5 CVE-2023-32400MISCMISCMISC apple -- macos This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to read sensitive location information 2023-06-23 5.5 CVE-2023-32403MISCMISCMISCMISCMISCMISCMISC apple -- macos This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5. An app may be able to bypass Privacy preferences 2023-06-23 5.5 CVE-2023-32404MISCMISCMISC apple -- macos A logic issue was addressed with improved state management. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to bypass Privacy preferences 2023-06-23 5.5 CVE-2023-32407MISCMISCMISCMISCMISCMISCMISC apple -- macos The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Monterey 12.6.6. An app may be able to read sensitive location information 2023-06-23 5.5 CVE-2023-32408MISCMISCMISCMISCMISCMISC apple -- macos An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.4, macOS Big Sur 11.7.7, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6. An app may be able to leak sensitive kernel state 2023-06-23 5.5 CVE-2023-32410MISCMISCMISCMISC apple -- macos This issue was addressed with improved entitlements. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. An app may be able to bypass Privacy preferences 2023-06-23 5.5 CVE-2023-32411MISCMISCMISCMISCMISC apple -- macos This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, tvOS 16.5. An app may be able to read sensitive location information 2023-06-23 5.5 CVE-2023-32415MISCMISCMISC apple -- macos This issue was addressed by adding additional SQLite logging restrictions. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, tvOS 16.5. An app may be able to bypass Privacy preferences 2023-06-23 5.5 CVE-2023-32422MISCMISCMISC trendmicro -- apex_one A link following vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to disclose sensitive information. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. 2023-06-26 5.5 CVE-2023-32556MISCMISC sqlite -- sqlite sqlite3 v3.40.1 was discovered to contain a segmentation violation at /sqlite3_aflpp/shell.c. 2023-06-23 5.5 CVE-2023-36191MISCFEDORA microsoft -- edge   Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2023-07-01 5.4 CVE-2021-34475MISC ladybirdweb -- faveo_helpdesk Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS. 2023-06-24 5.4 CVE-2023-1724MISCMISC apple -- airpods_firmware An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 5E133. When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones. 2023-06-23 5.4 CVE-2023-27964MISC zwaply -- cryptocurrency_all-in-one Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Zwaply Cryptocurrency All-in-One plugin

Read more »

Russian Cybersecurity Executive Arrested for Alleged Role in 2012 Megahacks
Nikita Kislitsin, formerly the head of network security for one of Russia's top cybersecurity firms, was arrested last week in Kazakhstan in response to 10-year-old hacking charges from the U.S. Department of Justice. Experts say Kislitsin's prosecution could soon put the Kazakhstan government in a sticky diplomatic position, as the Kremlin is already signaling that it intends to block his extradition to the United States.

Read more »

U.K. Cyber Thug “PlugwalkJoe” Gets 5 Years in Prison
Joseph James "PlugwalkJoe" O'Connor, a 24-year-old from the United Kingdom who earned his 15 minutes of fame by participating in the July 2020 hack of Twitter, has been sentenced to five years in a U.S. prison. That may seem like harsh punishment for a brief and very public cyber joy ride. But O'Connor also pleaded guilty in a separate investigation involving a years-long spree of cyberstalking and cryptocurrency theft enabled by "SIM swapping," a crime wherein fraudsters trick a mobile provider into diverting a customer's phone calls and text messages to a device they control.

Read more »

Vulnerability Summary for the Week of June 19, 2023
The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. NVD is sponsored by CISA. In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available. Vulnerabilities are based on the Common Vulnerabilities and Exposures (CVE) vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores: High: vulnerabilities with a CVSS base score of 7.0–10.0 Medium: vulnerabilities with a CVSS base score of 4.0–6.9 Low: vulnerabilities with a CVSS base score of 0.0–3.9 Entries may include additional information provided by organizations and efforts sponsored by CISA. This information may include identifying information, values, definitions, and related links. Patch information is provided when available. Please note that some of the information in the bulletin is compiled from external, open-source reports and is not a direct result of CISA analysis. High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info zyxel -- nas326_firmware The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions prior to V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands remotely by sending a crafted HTTP request. 2023-06-19 9.8 CVE-2023-27992MISC marksoft -- marksoft Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Marksoft allows SQL Injection.This issue affects Marksoft: through Mobile:v.7.1.7 ; Login:1.4 ; API:20230605. 2023-06-19 9.8 CVE-2023-2907MISC wordpress -- wordpress The MStore API plugin for WordPress is vulnerable to Unauthenticated Blind SQL Injection via the 'id' parameter in versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. 2023-06-24 9.8 CVE-2023-3197MISCMISC simple_customer_relationship_management -- simple_customer_relationship_management Simple Customer Relationship Management 1.0 is vulnerable to SQL Injection via the email parameter. 2023-06-16 9.8 CVE-2023-34548MISC jeecg_boot -- jeecg_boot jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface. 2023-06-16 9.8 CVE-2023-34659MISC tp-link -- archer_ax10_firmware TP-Link Archer AX10(EU)_V1.2_230220 was discovered to contain a buffer overflow via the function FUN_131e8 - 0x132B4. 2023-06-16 9.8 CVE-2023-34832MISCMISCMISCMISC progress -- moveit_transfer In Progress MOVEit Transfer before 2021.0.8 (13.0.8), 2021.1.6 (13.1.6), 2022.0.6 (14.0.6), 2022.1.7 (14.1.7), and 2023.0.3 (15.0.3), a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint that could result in modification and disclosure of MOVEit database content. These are fixed versions of the DLL drop-in: 2020.1.10 (12.1.10), 2021.0.8 (13.0.8), 2021.1.6 (13.1.6), 2022.0.6 (14.0.6), 2022.1.7 (14.1.7), and 2023.0.3 (15.0.3). 2023-06-16 9.8 CVE-2023-35708MISCMISCMISC wordpress -- wordpress The CMS Commander plugin for WordPress is vulnerable to authorization bypass due to the use of an insufficiently unique cryptographic signature on the 'cmsc_add_site' function in versions up to, and including, 2.287. This makes it possible for unauthenticated attackers to the plugin to change the '_cmsc_public_key' in the plugin config, providing access to the plugin's remote control functionalities, such as creating an admin access URL, which can be used for privilege escalation. This can only be exploited if the plugin has not been configured yet, however, if combined with another arbitrary plugin installation and activation vulnerability, the impact can be severe. 2023-06-20 8.1 CVE-2023-3325MISCMISCMISC microsoft -- sql_server Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 2023-06-16 7.8 CVE-2023-32027MISC microsoft -- sql_server Microsoft OLE DB Remote Code Execution Vulnerability 2023-06-16 7.8 CVE-2023-32028MISC linux -- kernel An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation. 2023-06-16 7.8 CVE-2023-35788MISCMISCMISCMLIST juniper_networks -- junos_os/junos_os_evolved An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When a BGP update message is received over an established BGP session, and that message contains a specific, optional transitive attribute, this session will be torn down with an update message error. This issue cannot propagate beyond an affected system as the processing error occurs as soon as the update is received. This issue is exploitable remotely as the respective attribute can propagate through unaffected systems and intermediate AS (if any). Continuous receipt of a BGP update containing this attribute will create a sustained Denial of Service (DoS) condition. Some customers have experienced these BGP session flaps which prompted Juniper SIRT to release this advisory out of cycle before fixed releases are widely available as there is an effective workaround. This issue affects: Juniper Networks Junos OS 15.1R1 and later versions prior to 20.4R3-S8; 21.1 version 21.1R1 and later versions prior to 21.2R3-S6; 21.3 versions prior to 21.3R3-S5; 21.4 versions prior to 21.4R3-S4; 22.1 versions prior to 22.1R3-S4; 22.2 versions prior to 22.2R3-S2; 22.3 versions prior to 22.2R3-S2; 22.4 versions prior to 22.4R2-S1, 22.4R3; 23.1 versions prior to 23.1R1-S1, 23.1R2. Juniper Networks Junos OS Evolved All versions prior to 20.4R3-S8-EVO; 21.1 version 21.1R1-EVO and later versions prior to 21.2R3-S6-EVO; 21.3 versions prior to 21.3R3-S5-EVO; 21.4 versions prior to 21.4R3-S4-EVO; 22.1 versions prior to 22.1R3-S4-EVO; 22.2 versions prior to 22.2R3-S2-EVO; 22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO; 22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO; 23.1 versions prior to 23.1R1-S1-EVO, 23.1R2-EVO. 2023-06-21 7.5 CVE-2023-0026CONFIRMMISC isc -- bind_9 Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the `max-cache-size` statement in the configuration file; it defaults to 90% of the total amount of memory available on the host. When the size of the cache reaches 7/8 of the configured limit, a cache-cleaning algorithm starts to remove expired and/or least-recently used RRsets from the cache, to keep memory use below the configured limit. It has been discovered that the effectiveness of the cache-cleaning algorithm used in `named` can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured `max-cache-size` limit to be significantly exceeded. This issue affects BIND 9 versions 9.11.0 through 9.16.41, 9.18.0 through 9.18.15, 9.19.0 through 9.19.13, 9.11.3-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1. 2023-06-21 7.5 CVE-2023-2828MISCMISCMISCMISC isc -- bind_9 A `named` instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option (`synth-from-dnssec`) enabled can be remotely terminated using a zone with a malformed NSEC record. This issue affects BIND 9 versions 9.16.8-S1 through 9.16.41-S1 and 9.18.11-S1 through 9.18.15-S1. 2023-06-21 7.5 CVE-2023-2829MISC isc -- bind_9 If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a stack overflow. This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1. 2023-06-21 7.5 CVE-2023-2911MISCMISCMISCMISC microsoft -- yarp Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability 2023-06-23 7.5 CVE-2023-33141MISC jfinal_cms -- jfinal_cms jfinal CMS 5.1.0 has an arbitrary file read vulnerability. 2023-06-16 7.5 CVE-2023-34645MISC wordpress -- wordpress The Abandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress are vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 5.1.3 and 7.12.0 respectively, due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in user input that will execute on the admin dashboard. 2023-06-22 7.2 CVE-2019-25152MISCMISCMISCMISC wordpress -- wordpress The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nsc_bar_content_href' parameter in versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. A partial patch was made available in 2.10.1 and the issue was fully patched in 2.10.2. 2023-06-24 7.2 CVE-2023-3388MISCMISCMISC Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info mattermost -- mattermost Mattermost fails to verify if the requestor is a sysadmin or not, before allowing `install` requests to the Apps allowing a regular user send install requests to the Apps. 2023-06-16 6.5 CVE-2023-2784MISC fortinet -- fortios A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to denial of sslvpn service via specifically crafted request in bookmark parameter. 2023-06-16 6.5 CVE-2023-33306MISC fortinet -- fortios A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to denial of sslvpn service via specifically crafted request in network parameter. 2023-06-16 6.5 CVE-2023-33307MISCMISC jeecg_boot -- jeecg_boot jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface. 2023-06-16 6.5 CVE-2023-34660MISC wordpress -- wordpress The Lana Text to Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lana_text_to_image' and 'lana_text_to_img' shortcode in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. 2023-06-24 6.4 CVE-2023-3387MISCMISCMISC everestthemes -- arya_multipurpose Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Arya Multipurpose theme xwiki/bin/get/FlamingoThemes/Cerulean?xpage=xpart&vm=delete.vm&xredirect=javascript:alert(document.domain). This vulnerability exists since XWiki 6.0-rc-1. The vulnerability has been patched in XWiki 14.10.6 and 15.1. Note that a partial patch has been provided in 14.10.5 but wasn't enough to entirely fix the vulnerability. 2023-06-23 not yet calculated CVE-2023-35156MISCMISCMISCMISCMISCMISCMISC xwiki -- xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to perform an XSS by forging a request to a delete attachment action with a specific attachment name. Now this XSS can be exploited only if the attacker knows the CSRF token of the user, or if the user ignores the warning about the missing CSRF token. The vulnerability has been patched in XWiki 15.1-rc-1 and XWiki 14.10.6. 2023-06-23 not yet calculated CVE-2023-35157MISCMISCMISC xwiki -- xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It's possible to exploit the restore template to perform a XSS, e.g. by using URL such as: > /xwiki/bin/view/XWiki/Main?xpage=restore&showBatch=true&xredirect=javascript:alert(document.domain). This vulnerability exists since XWiki 9.4-rc-1. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1. 2023-06-23 not yet calculated CVE-2023-35158MISCMISCMISCMISC xwiki -- xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It's possible to exploit the deletespace template to perform a XSS, e.g. by using URL such as: > xwiki/bin/deletespace/Sandbox/?xredirect=javascript:alert(document.domain). This vulnerability exists since XWiki 3.4-milestone-1. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1. 2023-06-23 not yet calculated CVE-2023-35159MISCMISCMISCMISC xwiki -- xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It's possible to exploit the resubmit template to perform a XSS, e.g. by using URL such as: > xwiki/bin/view/XWiki/Main xpage=resubmit&resubmit=javascript:alert(document.domain)&xback=javascript:alert(document.domain). This vulnerability exists since XWiki 2.5-milestone-2. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1. 2023-06-23 not yet calculated CVE-2023-35160MISCMISCMISCMISC xwiki -- xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It's possible to exploit the DeleteApplication page to perform a XSS, e.g. by using URL such as: > xwiki/bin/view/AppWithinMinutes/DeleteApplication?appName=Menu&resolve=true&xredirect=javascript:alert(document.domain). This vulnerability exists since XWiki 6.2-milestone-1. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1. 2023-06-23 not yet calculated CVE-2023-35161MISCMISCMISCMISC xwiki -- xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It's possible to exploit the previewactions template to perform a XSS, e.g. by using URL such as: > /xwiki/bin/get/FlamingoThemes/Cerulean xpage=xpart&vm=previewactions.vm&xcontinue=javascript:alert(document.domain). This vulnerability exists since XWiki 6.1-rc-1. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1. 2023-06-23 not yet calculated CVE-2023-35162MISCMISCMISCMISC vegaprotocol -- vega Vega is a decentralized trading platform that allows pseudo-anonymous trading of derivatives on a blockchain. Prior to version 0.71.6, a vulnerability exists that allows a malicious validator to trick the Vega network into re-processing past Ethereum events from Vega’s Ethereum bridge. For example, a deposit to the collateral bridge for 100USDT that credits a party’s general account on Vega, can be re-processed 50 times resulting in 5000USDT in that party’s general account. This is without depositing any more than the original 100USDT on the bridge. Despite this exploit requiring access to a validator's Vega key, a validator key can be obtained at the small cost of 3000VEGA, the amount needed to announce a new node onto the network. A patch is available in version 0.71.6. No known workarounds are available, however there are mitigations in place should this vulnerability be exploited. There are monitoring alerts for `mainnet1` in place to identify any issues of this nature including this vulnerability being exploited. The validators have the ability to stop the bridge thus stopping any withdrawals should this vulnerability be exploited. 2023-06-23 not yet calculated CVE-2023-35163MISCMISCMISC aws -- cloud_development_kit AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages `aws-cdk-lib` 2.0.0 until 2.80.0 and `@aws-cdk/aws-eks` 1.57.0 until 1.202.0, `eks.Cluster` and `eks.FargateCluster` constructs create two roles, `CreationRole` and `default MastersRole`, that have an overly permissive trust policy. The first, referred to as the `CreationRole`, is used by lambda handlers to create the cluster and deploy Kubernetes resources (e.g `KubernetesManifest`, `HelmChart`, ...) onto it. Users with CDK version higher or equal to 1.62.0 (including v2 users) may be affected. The second, referred to as the `default MastersRole`, is provisioned only if the `mastersRole` property isn't provided and has permissions to execute `kubectl` commands on the cluster. Users with CDK version higher or equal to 1.57.0 (including v2 users) may be affected. The issue has been fixed in `@aws-cdk/aws-eks` v1.202.0 and `aws-cdk-lib` v2.80.0. These versions no longer use the account root principal. Instead, they restrict the trust policy to the specific roles of lambda handlers that need it. There is no workaround available for CreationRole. To avoid creating the `default MastersRole`, use the `mastersRole` property to explicitly provide a role. 2023-06-23 not yet calculated CVE-2023-35165MISCMISC xwiki -- xwiki-platform XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute any wiki content with the right of the TipsPanel author by creating a tip UI extension. This has been patched in XWiki 15.1-rc-1 and 14.10.5. 2023-06-20 not yet calculated CVE-2023-35166MISCMISCMISC remult -- remult Remult is a CRUD framework for full-stack TypeScript. If you used the apiPrefilter option of the `@Entity` decorator, by setting it to a function that returns a filter that prevents unauthorized access to data, an attacker who knows the `id` of an entity instance is not authorized to access, can gain read, update and delete access to it. The issue is fixed in version 0.20.6. As a workaround, set the `apiPrefilter` option to a filter object instead of a function. 2023-06-23 not yet calculated CVE-2023-35167MISCMISCMISC webklex -- php-imap PHP-IMAP is a wrapper for common IMAP communication without the need to have the php-imap module installed / enabled. Prior to version 5.3.0, an unsanitized attachment filename allows any unauthenticated user to leverage a directory traversal vulnerability, which results in a remote code execution vulnerability. Every application that stores attachments with `Attachment::save()` without providing a `$filename` or passing unsanitized user input is affected by this attack. An attacker can send an email with a malicious attachment to the inbox, which gets crawled with `webklex/php-imap` or `webklex/laravel-imap`. Prerequisite for the vulnerability is that the script stores the attachments without providing a `$filename`, or providing an unsanitized `$filename`, in `src/Attachment::save(string $path, string $filename = null)`. In this case, where no `$filename` gets passed into the `Attachment::save()` method, the package would use a series of unsanitized and insecure input values from the mail as fallback. Even if a developer passes a `$filename` into the `Attachment::save()` method, e.g. by passing the name or filename of the mail attachment itself (from email headers), the input values never get sanitized by the package. There is also no restriction about the file extension (e.g. ".php") or the contents of a file. This allows an attacker to upload malicious code of any type and content at any location where the underlying user has write permissions. The attacker can also overwrite existing files and inject malicious code into files that, e.g. get executed by the system via cron or requests. Version 5.3.0 contains a patch for this issue. 2023-06-23 not yet calculated CVE-2023-35169MISCMISCMISCMISCMISC nextcloud -- server/enterprise_server NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Starting in version 26.0.0 and prior to version 26.0.2, an attacker could supply a URL that redirects an unsuspecting victim from a legitimate domain to an attacker's site. Nextcloud Server and Nextcloud Enterprise Server 26.0.2 contain a patch for this issue. No known workarounds are available. 2023-06-23 not yet calculated CVE-2023-35171MISCMISCMISC nextcloud -- server/enterprise_server NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 21.0.0 until 21.0.9.12, 22.0.0 until 22.2.10.12, 23.0.0 until 23.0.12.7, 24.0.0 until 24.0.12.2, 25.0.0 until 25.0.7, and 26.0.0 until 26.0.2, an attacker can bruteforce the password reset links. Nextcloud Server n 25.0.7 and 26.0.2 and Nextcloud Enterprise Server 21.0.9.12, 22.2.10.12, 23.0.12.7, 24.0.12.2, 25.0.7, and 26.0.2 contain a patch for this issue. No known workarounds are available. 2023-06-23 not yet calculated CVE-2023-35172MISCMISCMISC nextcloud -- end-to-end_encryption_app Nextcloud End-to-end encryption app provides all the necessary APIs to implement End-to-End encryption on the client side. By providing an invalid meta data file, an attacker can make previously dropped files inaccessible. It is recommended that the Nextcloud End-to-end encryption app is upgraded to version 1.12.4 that contains the fix. 2023-06-23 not yet calculated CVE-2023-35173MISCMISCMISC livebook-dev -- livebook Livebook is a web application for writing interactive and collaborative code notebooks. On Windows, it is possible to open a `livebook://` link from a browser which opens Livebook Desktop and triggers arbitrary code execution on victim's machine. Any user using Livebook Desktop on Windows is potentially vulnerable to arbitrary code execution when they expect Livebook to be opened from browser. This vulnerability has been fixed in version 0.8.2 and 0.9.3. 2023-06-22 not yet calculated CVE-2023-35174MISCMISCMISCMISCMISC progess - whatsup_gold In Progress WhatsUp Gold before 23.0.0, an SNMP-related application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser, aka XSS. 2023-06-23 not yet calculated CVE-2023-35759MISC wordpress -- wordpress   Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Alain Gonzalez Google Map Shortcode plugin

Read more »

SMS Phishers Harvested Phone Numbers, Shipment Data from UPS Tracking Tool
The United Parcel Service (UPS) says fraudsters have been harvesting phone numbers and other information from its online shipment tracking tool in Canada to send highly targeted SMS phishing (a.k.a. "smishing") messages that spoofed UPS and other top brands. The missives addressed recipients by name, included details about recent orders, and warned that those orders wouldn't be shipped unless the customer paid an added delivery fee.

Read more »

Why Malware Crypting Services Deserve More Scrutiny
If you operate a cybercrime business that relies on disseminating malicious software, you probably also spend a good deal of time trying to disguise or "crypt" your malware so that it appears benign to antivirus and security products. In fact, the process of "crypting" malware is sufficiently complex and time-consuming that most serious cybercrooks will outsource this critical function to a handful of trusted third parties. This story explores the history and identity behind Cryptor[.]biz, a long-running crypting service that is trusted by some of the biggest names in cybercrime.

Read more »

Vulnerability Summary for the Week of June 12, 2023
  The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. NVD is sponsored by CISA. In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available. Vulnerabilities are based on the Common Vulnerabilities and Exposures (CVE) vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores: High: vulnerabilities with a CVSS base score of 7.0–10.0 Medium: vulnerabilities with a CVSS base score of 4.0–6.9 Low: vulnerabilities with a CVSS base score of 0.0–3.9 Entries may include additional information provided by organizations and efforts sponsored by CISA. This information may include identifying information, values, definitions, and related links. Patch information is provided when available. Please note that some of the information in the bulletin is compiled from external, open-source reports and is not a direct result of CISA analysis. High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info tmt -- lockcell   Unrestricted Upload of File with Dangerous Type vulnerability in TMT Lockcell allows Command Injection.This issue affects Lockcell: before 15. 2023-06-13 10 CVE-2023-3049MISCMISC danfoss -- ak-em100_firmware The Danfoss AK-EM100 web forms allow for SQL injection in the login forms. 2023-06-11 9.8 CVE-2023-22583MISCMISC wpdirectorykit -- wp_directory_kit The WP Directory Kit plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.1.9 via the 'wdk_public_action' function. This allows unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. 2023-06-13 9.8 CVE-2023-2278MISCMISCMISC danfoss -- ak-em100_firmware The Danfoss AK-EM100 web applications allow for OS command injection through the web application parameters. 2023-06-11 9.8 CVE-2023-25911MISCMISC progressbar.js_project -- progressbar.js All versions of the package progressbar.js are vulnerable to Prototype Pollution via the function extend() in the file utils.js. 2023-06-12 9.8 CVE-2023-26133MISCMISCMISC fortinet -- fortisiem A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions may allow an attacker able to access user DB content to impersonate any admin user on the device GUI. 2023-06-13 9.8 CVE-2023-26204MISC microsoft -- microsoft_sharepoint_server   Microsoft SharePoint Server Elevation of Privilege Vulnerability 2023-06-14 9.8 CVE-2023-29357MISC microsoft -- windows_10   Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability 2023-06-14 9.8 CVE-2023-29363MISC tmt -- lockcell   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMT Lockcell allows SQL Injection.This issue affects Lockcell: before 15. 2023-06-13 9.8 CVE-2023-3047MISCMISC tmt -- lockcell   Reliance on Cookies without Validation and Integrity Checking in a Security Decision vulnerability in TMT Lockcell allows Privilege Abuse, Authentication Bypass.This issue affects Lockcell: before 15. 2023-06-13 9.8 CVE-2023-3050MISCMISC froxlor -- froxlor Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20. 2023-06-09 9.8 CVE-2023-3173MISCCONFIRM microsoft -- windows_10   Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability 2023-06-14 9.8 CVE-2023-32014MISC microsoft -- windows_10   Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability 2023-06-14 9.8 CVE-2023-32015MISC l7_networks -- instantscan   L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service. 2023-06-16 9.8 CVE-2023-32752CONFIRM itpison -- contact itpison   OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service. 2023-06-16 9.8 CVE-2023-32753CONFIRM thinking_software -- efence   Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database. 2023-06-16 9.8 CVE-2023-32754CONFIRM dlink -- dir-600_firmware D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter in the lxmldbc_system() function. 2023-06-12 9.8 CVE-2023-33625MISCMISCMISCMISC dlink -- dir-600_firmware D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a stack overflow via the gena.cgi binary. 2023-06-12 9.8 CVE-2023-33626MISCMISCMISC service_provider_management_system_project -- service_provider_management_system Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2 2023-06-12 9.8 CVE-2023-34581MISCMISCMISCMISC bloofox -- bloofoxcms bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=projects&action=edit. 2023-06-14 9.8 CVE-2023-34750MISC bloofox -- bloofoxcms bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the gid parameter at admin/index.php?mode=user&page=groups&action=edit. 2023-06-14 9.8 CVE-2023-34751MISC bloofox -- bloofoxcms bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&action=edit. 2023-06-14 9.8 CVE-2023-34752MISCMISCMISC bloofox -- bloofoxcms bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the tid parameter at admin/index.php?mode=settings&page=tmpl&action=edit. 2023-06-14 9.8 CVE-2023-34753MISC bloofox -- bloofoxcms bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the pid parameter at admin/index.php?mode=settings&page=plugins&action=edit. 2023-06-14 9.8 CVE-2023-34754MISC bloofox -- bloofoxcms bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the userid parameter at admin/index.php?mode=user&action=edit. 2023-06-14 9.8 CVE-2023-34755MISC bloofox -- bloofoxcms bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=charset&action=edit. 2023-06-14 9.8 CVE-2023-34756MISC atos -- unify_openscape_4000_manager Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users, aka OSFOURK-24033. 2023-06-12 9.8 CVE-2023-35034MISCMISC satos -- satos_mobile   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Satos Satos Mobile allows SQL Injection through SOAP Parameter Tampering.This issue affects Satos Mobile: before 20230607. 2023-06-13 9.8 CVE-2023-35064MISC motopress -- getwid_-_gutenberg_blocks The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Server Side Request Forgery via the get_remote_content REST API endpoint in versions up to, and including, 1.8.3. This can allow authenticated attackers with subscriber-level permissions or above to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. 2023-06-09 9.6 CVE-2023-1895MISCMISC expresstech -- quiz_and_survey_master The Quiz And Survey Master for WordPress is vulnerable to authorization bypass due to a missing capability check on the function associated with the qsm_remove_file_fd_question AJAX action in versions up to, and including, 8.0.8. This makes it possible for unauthenticated attackers to delete arbitrary media files. 2023-06-09 9.1 CVE-2023-0291MISCMISCMISCMISC adobe -- magento_commerce   Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could lead to arbitrary code execution by an admin-privilege authenticated attacker. Exploitation of this issue does not require user interaction. 2023-06-15 9.1 CVE-2023-29297MISC progress -- moveit_transfer In Progress MOVEit Transfer before 2021.0.7 (13.0.7), 2021.1.5 (13.1.5), 2022.0.5 (14.0.5), 2022.1.6 (14.1.6), and 2023.0.2 (15.0.2), SQL injection vulnerabilities have been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint that could result in modification and disclosure of MOVEit database content. 2023-06-12 9.1 CVE-2023-35036MISCCONFIRM fortinet -- fortisiem An Improper Restriction of Excessive Authentication Attempts [CWE-307] in FortiSIEM below 7.0.0 may allow a non-privileged user with access to several endpoints to brute force attack these endpoints. 2023-06-13 8.8 CVE-2022-42478MISC wpwax -- directorist The Directorist plugin for WordPress is vulnerable to an arbitrary user password reset in versions up to, and including, 7.5.4. This is due to a lack of validation checks within login.php. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to reset the password of an arbitrary user and gain elevated (e.g., administrator) privileges. 2023-06-09 8.8 CVE-2023-1888MISCMISC yudiz -- wp_replicate_post The WP Replicate Post plugin for WordPress is vulnerable to SQL Injection via the post_id parameter in versions up to, and including, 4.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for contributor-level attackers or higher to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. 2023-06-09 8.8 CVE-2023-2237MISCMISCMISC gvectors -- wpforo_forum The wpForo Forum plugin for WordPress is vulnerable to Local File Include, Server-Side Request Forgery, and PHAR Deserialization in versions up to, and including, 2.1.7. This is due to the insecure use of file_get_contents without appropriate verification of the data being supplied to the function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to retrieve the contents of files like wp-config.php hosted on the system, perform a deserialization attack and possibly achieve remote code execution, and make requests to internal services. 2023-06-09 8.8 CVE-2023-2249MISCMISCMISC tp-link -- ec70_firmware TP-Link EC-70 devices through 2.3.4 Build 20220902 rel.69498 have a Buffer Overflow. 2023-06-12 8.8 CVE-2023-28478MISC microsoft -- windows_10   Remote Desktop Client Remote Code Execution Vulnerability 2023-06-14 8.8 CVE-2023-29362MISC microsoft -- windows_10   Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 2023-06-14 8.8 CVE-2023-29372MISC microsoft -- windows_10   Microsoft ODBC Driver Remote Code Execution Vulnerability 2023-06-14 8.8 CVE-2023-29373MISC mimsoftware -- mim_local_concurrent_license_server An issue found in MIM software Inc MIM License Server and MIMpacs services v.6.9 thru v.7.0 fixed in v.7.0.10 allows a remote unauthenticated attacker to execute arbitrary code via the RMI Registry service. 2023-06-09 8.8 CVE-2023-30262MISCMISCMISC tmt -- lockcell   Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass.This issue affects Lockcell: before 15. 2023-06-13 8.8 CVE-2023-3048MISCMISC lost_and_found_information_system_project -- lost_and_found_information_system A vulnerability, which was classified as critical, was found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file adminusermanage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-231150 is the identifier assigned to this vulnerability. 2023-06-09 8.8 CVE-2023-3176MISCMISCMISC lost_and_found_information_system_project -- lost_and_found_information_system A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admininquiriesview_inquiry.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231151. 2023-06-09 8.8 CVE-2023-3177MISCMISCMISC microsoft -- windows_10   Windows Collaborative Translation Framework Elevation of Privilege Vulnerability 2023-06-14 8.8 CVE-2023-32009MISC microsoft -- mcirosoft_exchange_server   Microsoft Exchange Server Remote Code Execution Vulnerability 2023-06-14 8.8 CVE-2023-32031MISC unitecms -- unlimited_elements_for_elementor   The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress is vulnerable to arbitrary file uploads due to missing file type validation of files in the file manager functionality in versions up to, and including, 1.5.66 . This makes it possible for authenticated attackers, with contributor-level permissions and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. The issue was partially patched in version 1.5.66 and fully patched in 1.5.67 2023-06-17 8.8 CVE-2023-3295MISCMISC microsoft -- microsoft_office   Microsoft Outlook Remote Code Execution Vulnerability 2023-06-14 8.8 CVE-2023-33131MISC thedaylightstudio -- fuel_cms Fuel CMS v1.5.2 was discovered to contain a SQL injection vulnerability via the id parameter at /controllers/Blocks.php. 2023-06-09 8.8 CVE-2023-33557MISCMISC digitaldruid -- hoteldruid hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability. 2023-06-13 8.8 CVE-2023-33817MISC bytedeco -- javacpp_presets JavaCPP Presets is a project providing Java distributions of native C++ libraries. All the actions in the `bytedeco/javacpp-presets` use the `github.event.head_commit.message?` parameter in an insecure way. For example, the commit message is used in a run statement - resulting in a command injection vulnerability due to string interpolation. No exploitation has been reported. This issue has been addressed in version 1.5.9. Users of JavaCPP Presets are advised to upgrade as a precaution. 2023-06-09 8.8 CVE-2023-34112MISCMISC expresstech -- quiz_and_survey_master The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.8. This is due to missing nonce validation on the function associated with the qsm_remove_file_fd_question AJAX action. This makes it possible for unauthenticated attackers to delete arbitrary media files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2023-06-09 8.1 CVE-2023-0292MISCMISCMISCMISC microsoft -- microsoft_visual_studio   .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability 2023-06-14 8.1 CVE-2023-24936MISC microsoft -- windows_10   Windows Group Policy Elevation of Privilege Vulnerability 2023-06-14 8.1 CVE-2023-29351MISC microsoft -- mcirosoft_exchange_server   Microsoft Exchange Server Remote Code Execution Vulnerability 2023-06-14 8 CVE-2023-28310MISC hp -- softpaq_installer A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution. 2023-06-09 7.8 CVE-2019-16283MISC fortinet -- fortiproxy A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0, FortiOS all versions 6.4, FortiOS all versions 6.2, FortiProxy version 7.2.0 through 7.2.1, FortiProxy version 7.0.0 through 7.0.7 allows attacker to execute unauthorized code or commands via specially crafted commands. 2023-06-13 7.8 CVE-2022-43953MISC wpmet -- metform_elementor_contact_form_builder The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to CSV injection in versions up to, and including, 3.3.0. This allows unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration. 2023-06-09 7.8 CVE-2023-0721MISCMISCMISC adobe -- substance3d_designer   Adobe Substance 3D Designer version 12.4.1 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-06-15 7.8 CVE-2023-21618MISC fortinet -- fortiproxy A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.12, FortiOS all versions 6.2, FortiOS all versions 6.0, FortiProxy version 7.2.0 through 7.2.2, FortiProxy version 7.0.0 through 7.0.8, FortiProxy all versions 2.0, FortiProxy all versions 1.2, FortiProxy all versions 1.1, FortiProxy all versions 1.0 allows attacker to escalation of privilege via specifically crafted commands. 2023-06-13 7.8 CVE-2023-22639MISC microsoft -- .net/visual_studio   .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability 2023-06-14 7.8 CVE-2023-24895MISC microsoft -- .net/visual_studio   .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability 2023-06-14 7.8 CVE-2023-24897MISC fortinet -- fortiadc Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] in Fortinet FortiADCManager version 7.1.0 and before 7.0.0, FortiADC version 7.2.0 and before 7.1.2 allows a local authenticated attacker to execute arbitrary shell code as `root` user via crafted CLI requests. 2023-06-13 7.8 CVE-2023-26210MISC hp -- hp_device_manager Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges. 2023-06-12 7.8 CVE-2023-26294MISC microsoft -- publisher   Microsoft Publisher Remote Code Execution Vulnerability 2023-06-17 7.8 CVE-2023-28287MISC microsoft -- publisher   Microsoft Publisher Remote Code Execution Vulnerability 2023-06-17 7.8 CVE-2023-28295MISC adobe -- animate   Adobe Animate versions 22.0.9 (and earlier) and 23.0.1 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-06-15 7.8 CVE-2023-29321MISC microsoft -- .net   .NET Framework Remote Code Execution Vulnerability 2023-06-14 7.8 CVE-2023-29326MISC microsoft -- windows_10   NTFS Elevation of Privilege Vulnerability 2023-06-14 7.8 CVE-2023-29346MISC microsoft -- windows_10   Microsoft ODBC and OLE DB Remote Code Execution Vulnerability 2023-06-16 7.8 CVE-2023-29349MISC microsoft -- windows_10   Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 2023-06-16 7.8 CVE-2023-29356MISC microsoft -- windows_10   Windows GDI Elevation of Privilege Vulnerability 2023-06-14 7.8 CVE-2023-29358MISC microsoft -- windows_10   GDI Elevation of Privilege Vulnerability 2023-06-14 7.8 CVE-2023-29359MISC microsoft -- windows_10   Windows TPM Device Driver Elevation of Privilege Vulnerability 2023-06-14 7.8 CVE-2023-29360MISC microsoft -- windows_10   Windows Media Remote Code Execution Vulnerability 2023-06-14 7.8 CVE-2023-29365MISC microsoft -- windows_server   Windows Geolocation Service Remote Code Execution Vulnerability 2023-06-14 7.8 CVE-2023-29366MISC microsoft -- windows_server   iSCSI Target WMI Provider Remote Code Execution Vulnerability 2023-06-14 7.8 CVE-2023-29367MISC microsoft -- windows_10   Windows Media Remote Code Execution Vulnerability 2023-06-14 7.8 CVE-2023-29370MISC microsoft -- windows_10   Windows GDI Elevation of Privilege Vulnerability 2023-06-14 7.8 CVE-2023-29371MISC yandex -- navigator An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files. 2023-06-09 7.8 CVE-2023-29749MISC ekatox -- facemoji_emoji_keyboard An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the component. 2023-06-09 7.8 CVE-2023-29752MISC urbanandroid -- twilight An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files. 2023-06-09 7.8 CVE-2023-29755MISC leap -- blue_light_filter An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files. 2023-06-09 7.8 CVE-2023-29757MISC appcrossx -- crossx An issue found in CrossX v.1.15.3 for Android allows a local attacker to cause an escalation of Privileges via the database files. 2023-06-09 7.8 CVE-2023-29766MISC microsoft -- windows_10   Windows Resilient File System (ReFS) Remote Code Execution Vulnerability 2023-06-14 7.8 CVE-2023-32008MISC microsoft -- windows_10   Microsoft PostScript Printer Driver Remote Code Execution Vulnerability 2023-06-14 7.8 CVE-2023-32017MISC microsoft -- windows_11   Windows Hello Remote Code Execution Vulnerability 2023-06-14 7.8 CVE-2023-32018MISC microsoft -- microsoft_sql_server   Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 2023-06-16 7.8 CVE-2023-32025MISC microsoft -- microsoft_sql_server   Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 2023-06-16 7.8 CVE-2023-32026MISC microsoft -- microsoft_sql_server   Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability 2023-06-16 7.8 CVE-2023-32027MISC microsoft -- microsoft_ole_db_driver   Microsoft OLE DB Remote Code Execution Vulnerability 2023-06-16 7.8 CVE-2023-32028MISC microsoft -- microsoft_office   Microsoft Excel Remote Code Execution Vulnerability 2023-06-14 7.8 CVE-2023-32029MISC microsoft -- microsoft_office   Microsoft Excel Remote Code Execution Vulnerability 2023-06-14 7.8 CVE-2023-33133MISC microsoft -- microsoft_office   Microsoft Excel Remote Code Execution Vulnerability 2023-06-14 7.8 CVE-2023-33137MISC microsoft -- microsoft_office   Microsoft Office Remote Code Execution Vulnerability 2023-06-14 7.8 CVE-2023-33146MISC emqx -- nanomq NanoMQ 0.17.5 is vulnerable to heap-buffer-overflow in the conn_handler function of mqtt_parser.c when it processes malformed messages. 2023-06-12 7.8 CVE-2023-34488MISC microsoft -- windows_server_2019   Windows Server Service Security Feature Bypass Vulnerability 2023-06-14 7.6 CVE-2023-32022MISC fortinet -- fortisiem A use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods. 2023-06-13 7.5 CVE-2022-43949MISC grpc -- grpc There exists an vulnerability causing an abort() to be called in gRPC.  The following headers cause gRPC's C++ implementation to abort() when called via http2: te: x (x != trailers) :scheme: x (x != http, https) grpclb_client_stats: x (x == anything) On top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above. 2023-06-09 7.5 CVE-2023-1428MISC adobe -- magento_commerce   Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to leak another user's data. Exploitation of this issue does not require user interaction. 2023-06-15 7.5 CVE-2023-22248MISC danfoss -- ak-em100_firmware The Danfoss AK-EM100 stores login credentials in cleartext. 2023-06-11 7.5 CVE-2023-22584MISCMISC danfoss -- ak-em100_firmware The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter. 2023-06-11 7.5 CVE-2023-22586MISCMISC fortinet -- fortinac An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions 8.7.0 all versions may allow an unauthenticated attacker to perform a DoS attack on the device via client-secure renegotiation. 2023-06-13 7.5 CVE-2023-22633MISC dottie_project -- dottie Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set() function and the current variable in the /dottie.js file. 2023-06-10 7.5 CVE-2023-26132MISCMISCMISC microsoft -- .net/visual_studio   .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability 2023-06-14 7.5 CVE-2023-29331MISC webbax -- winbizpayment Prestashop winbizpayment = V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.4.0), Mendix SAML (Mendix 8 compatible) (All versions >= V2.2.0 < V2.3.0), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= V3.3.1 < V3.6.1), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= V3.1.9 < V3.3.1), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions >= V3.3.0 < V3.6.0), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions >= V3.1.8 < V3.3.0). The affected versions of the module insufficiently verifies the SAML assertions. This could allow unauthenticated remote attackers to bypass authentication and get access to the application. This CVE entry describes the incomplete fix for CVE-2023-25957 in a specific non default configuration. 2023-06-13 not yet calculated CVE-2023-29129MISC fuji_electric_co.,_ltd. -- frenic_rhc_loader   Stack-based buffer overflow vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a specially crafted FNE file, sensitive information on the system where the affected product is installed may be disclosed or arbitrary code may be executed. 2023-06-13 not yet calculated CVE-2023-29160MISCMISC fuji_electric_co.,_ltd. -- frenic_rhc_loader   Out-of-bound reads vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a specially crafted FNE file, sensitive information on the system where the affected product is installed may be disclosed or arbitrary code may be executed. 2023-06-13 not yet calculated CVE-2023-29167MISCMISC fortinet -- multiple_products   An improper certificate validation vulnerability [CWE-295] in FortiOS 6.2 all versions, 6.4 all versions, 7.0.0 through 7.0.10, 7.2.0 and FortiProxy 1.2 all versions, 2.0 all versions, 7.0.0 through 7.0.9, 7.2.0 through 7.2.3 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the vulnerable device and the remote FortiGuard's map server. 2023-06-13 not yet calculated CVE-2023-29175MISC fortinet -- multiple_products   A access of uninitialized pointer vulnerability [CWE-824] in Fortinet FortiProxy version 7.2.0 through 7.2.3 and before 7.0.9 and FortiOS version 7.2.0 through 7.2.4 and before 7.0.11 allows an authenticated attacker to repetitively crash the httpsd process via crafted HTTP or HTTPS requests. 2023-06-13 not yet calculated CVE-2023-29178MISC fuji_electric_co.,_ltd. -- frenic_rhc_loader   Improper restriction of XML external entity reference (XXE) vulnerability exists in FRENIC RHC Loader v1.1.0.3 and earlier. If a user opens a specially crafted project file, sensitive information on the system where the affected product is installed may be disclosed. 2023-06-13 not yet calculated CVE-2023-29498MISCMISC runsystem_co._ltd. -- jiyu_kukan_toku-toku_coupon_app   Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, and Jiyu Kukan Toku-Toku coupon App for Android versions 3.5.0 and earlier are vulnerable to improper server certificate verification. If this vulnerability is exploited, a man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. 2023-06-13 not yet calculated CVE-2023-29501MISCMISCMISCMISC tp-link -- tl-wpa7510   TP-Link TL-WPA7510 (EU)_V2_190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale. 2023-06-13 not yet calculated CVE-2023-29562MISC google -- guava   Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class. Even though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows. 2023-06-14 not yet calculated CVE-2023-2976MISC schneider_electric -- igss_dashboard A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potentially leading to remote code execution when an attacker gets the user to open a malicious file. 2023-06-14 not yet calculated CVE-2023-3001MISC osticket -- osticket A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket application. This can cause the website to go down or stop responding. When a long password is entered, this procedure will consume all available CPU and memory. 2023-06-14 not yet calculated CVE-2023-30082MISC prestashop -- leocustomajax   PrestaShop leocustomajax 1.0 and 1.0.0 are vulnerable to SQL Injection via modules/leocustomajax/leoajax.php. 2023-06-14 not yet calculated CVE-2023-30150MISC craftcms -- craftcms   CraftCMS version 3.7.59 is vulnerable to Server-Side Template Injection (SSTI). An authenticated attacker can inject Twig Template to User Photo Location field when setting User Photo Location in User Settings, lead to Remote Code Execution. 2023-06-13 not yet calculated CVE-2023-30179MISCMISC 4d -- 4d_sas/4d_server   An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to retrieve password hashes for all users via eavesdropping. 2023-06-16 not yet calculated CVE-2023-30222MISCMISC 4d -- 4d_sas/4d_server   A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier allows attackers to send crafted TCP packets containing requests to perform arbitrary actions. 2023-06-16 not yet calculated CVE-2023-30223MISCMISC cloudflare -- cfnts_for_rust   An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e3c4ec2297b71  enabled a remote attacker to trigger a panic by sending an NTSAuthenticator packet with extension length longer than the packet contents. 2023-06-14 not yet calculated CVE-2023-3036MISC cloudflare -- lua-resty-json   A debug function in the lua-resty-json package, up to commit id 3ef9492bd3a44d9e51301d6adc3cd1789c8f534a (merged in PR #14) contained an out of bounds access bug that could have allowed an attacker to launch a DoS if the function was used to parse untrusted input data. It is important to note that because this debug function was only used in tests and demos, it was not exploitable in a normal environment. 2023-06-14 not yet calculated CVE-2023-3040MISCMISC atlassian -- jira   The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter. 2023-06-16 not yet calculated CVE-2023-30453MISCMISC rudderstack -- rudder-server   rudder-server is part of RudderStack, an open source Customer Data Platform (CDP). Versions of rudder-server prior to 1.3.0-rc.1 are vulnerable to SQL injection. This issue may lead to Remote Code Execution (RCE) due to the `rudder` role in PostgresSQL having superuser permissions by default. Version 1.3.0-rc.1 contains patches for this issue. 2023-06-16 not yet calculated CVE-2023-30625MISCMISCMISCMISCMISCMISCMISC oracle -- apache   Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.  The configuration option proxy.config.http.push_method_enabled didn't function.  However, by default the PUSH method is blocked in the ip_allow configuration file.This issue affects Apache Traffic Server: from 8.0.0 through 9.2.0. 8.x users should upgrade to 8.1.7 or later versions 9.x users should upgrade to 9.2.1 or later versions 2023-06-14 not yet calculated CVE-2023-30631MISC siemens -- multiple_products   A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions). The know-how protection feature in affected products does not properly update the encryption of existing program blocks when a project file is updated. This could allow attackers with access to the project file to recover previous - yet unprotected - versions of the project without the knowledge of the know-how protection password. 2023-06-13 not yet calculated CVE-2023-30757MISC kbdevice_inc. -- kb-ahr_series_and_kb-irip_series   Improper authentication vulnerability exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. Affected products and versions are as follows: KB-AHR04D versions prior to 91110.1.101106.78, KB-AHR08D versions prior to 91210.1.101106.78, KB-AHR16D versions prior to 91310.1.101106.78, KB-IRIP04A versions prior to 95110.1.100290.78A, KB-IRIP08A versions prior to 95210.1.100290.78A, and KB-IRIP16A versions prior to 95310.1.100290.78A. 2023-06-13 not yet calculated CVE-2023-30762MISCMISC kbdevice_inc. -- kb-ahr_series_and_kb-irip_series   OS command injection vulnerability exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. Affected products and versions are as follows: KB-AHR04D versions prior to 91110.1.101106.78, KB-AHR08D versions prior to 91210.1.101106.78, KB-AHR16D versions prior to 91310.1.101106.78, KB-IRIP04A versions prior to 95110.1.100290.78A, KB-IRIP08A versions prior to 95210.1.100290.78A, and KB-IRIP16A versions prior to 95310.1.100290.78A. 2023-06-13 not yet calculated CVE-2023-30764MISCMISC kbdevice_inc. -- kb-ahr_series_and_kb-irip_series   Hidden functionality issue exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. Affected products and versions are as follows: KB-AHR04D versions prior to 91110.1.101106.78, KB-AHR08D versions prior to 91210.1.101106.78, KB-AHR16D versions prior to 91310.1.101106.78, KB-IRIP04A versions prior to 95110.1.100290.78A, KB-IRIP08A versions prior to 95210.1.100290.78A, and KB-IRIP16A versions prior to 95310.1.100290.78A. 2023-06-13 not yet calculated CVE-2023-30766MISCMISC siemens -- simatic   A vulnerability has been identified in SIMATIC WinCC (All versions < V7.5.2.13). Affected applications fail to set proper access rights for their installation folder if a non-default installation path was chosen during installation. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges. 2023-06-13 not yet calculated CVE-2023-30897MISC siemens -- power_meter_sicam   A vulnerability has been identified in POWER METER SICAM Q200 family (All versions < V2.70). The web interface of the affected devices are vulnerable to Cross-Site Request Forgery attacks. By tricking an authenticated victim user to click a malicious link, an attacker could perform arbitrary actions on the device on behalf of the victim user. 2023-06-13 not yet calculated CVE-2023-30901MISC hewlett_packard_enterprise -- hp-ux   HP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface is configured with IPv6/inet6. 2023-06-16 not yet calculated CVE-2023-30903MISC hewlett_packard_enterprise -- hpe_insight_remote_support   A security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information. 2023-06-16 not yet calculated CVE-2023-30904MISC hewlett_packard_enterprise -- hpe_mc990_x_rmc_firmware   The MC990 X and UV300 RMC component has and inadequate default configuration that could be exploited to obtain enhanced privilege. 2023-06-16 not yet calculated CVE-2023-30905MISC discourse -- discourse   Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches, if a site has modified their general category permissions, they could be set back to the default. This issue is patched in version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches. A workaround, only if you are modifying the general category permissions, is to use a new category for the same purpose. 2023-06-13 not yet calculated CVE-2023-31142MISC asustek_computer_inc. -- asus_router_rt-ax3000   ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388.23403 uses sensitive cookies without 'Secure' attribute. When an attacker is in a position to be able to mount a man-in-the-middle attack, and a user is tricked to log into the affected device through an unencrypted ('http') connection, the user's session may be hijacked. 2023-06-13 not yet calculated CVE-2023-31195MISCMISC inaba_denki_sangyo_co._ltd. -- wi-fi_ap_unit   Missing authentication for critical function in Wi-Fi AP UNIT allows a remote unauthenticated attacker to obtain sensitive information of the affected products. Affected products and versions are as follows: AC-PD-WAPU v1.05_B04 and earlier, AC-PD-WAPUM v1.05_B04 and earlier, AC-PD-WAPU-P v1.05_B04P and earlier, AC-PD-WAPUM-P v1.05_B04P and earlier, AC-WAPU-300 v1.00_B07 and earlier, AC-WAPUM-300 v1.00_B07 and earlier, AC-WAPU-300-P v1.00_B07 and earlier, and AC-WAPUM-300-P v1.00_B07 and earlier 2023-06-13 not yet calculated CVE-2023-31196MISCMISC inaba_denki_sangyo_co._ltd. -- wi-fi_ap_unit   OS command injection vulnerability exists in Wi-Fi AP UNIT allows. If this vulnerability is exploited, a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command. Affected products and versions are as follows: AC-PD-WAPU v1.05_B04 and earlier, AC-PD-WAPUM v1.05_B04 and earlier, AC-PD-WAPU-P v1.05_B04P and earlier, AC-PD-WAPUM-P v1.05_B04P and earlier, AC-WAPU-300 v1.00_B07 and earlier, AC-WAPUM-300 v1.00_B07 and earlier, AC-WAPU-300-P v1.00_B07 and earlier, and AC-WAPUM-300-P v1.00_B07 and earlier 2023-06-13 not yet calculated CVE-2023-31198MISCMISC siemens -- power_meter_sicam   A vulnerability has been identified in POWER METER SICAM Q200 family (All versions < V2.70). Affected devices are missing cookie protection flags when using the default settings. An attacker who gains access to a session token can use it to impersonate a legitimate application user. 2023-06-13 not yet calculated CVE-2023-31238MISC ckeditor -- ckeditor   A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server. 2023-06-13 not yet calculated CVE-2023-31541MISCMISCMISC linux -- kernel   A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queue_event() fails. 2023-06-12 not yet calculated CVE-2023-3159MISC linux -- kernel   A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font- >width and font- >height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service. 2023-06-12 not yet calculated CVE-2023-3161MISCMISC prestashop -- postfinance   PrestaShop postfinance

Read more »

CISA Order Highlights Persistent Risk at Network Edge
The U.S. government agency in charge of improving the nation's cybersecurity posture is ordering all federal civilian agencies to take new measures to restrict access to Internet-exposed networking equipment. The directive comes amid a surge in attacks targeting previously unknown vulnerabilities in widely used security and networking appliances.

Read more »

Microsoft Patch Tuesday, June 2023 Edition
Microsoft Corp. today released software updates to fix dozens of security vulnerabilities in its Windows operating systems and other software. This month's relatively light patch load has another added bonus for system administrators everywhere: It appears to be the first Patch Tuesday since March 2022 that isn't marred by the active exploitation of a zero-day vulnerability in Microsoft's products.

Read more »

Prime Day Sale: Amazon is taking $200 off every 16″ Apple MacBook Pro
Amazon is offering a $200 discount on 16-inch M2 Pro & Max MacBook Pros as part of their Prime Day 2023 sales. Their prices are currently the lowest available for these models from any Apple retailer: – 16″ MacBook Pro (12-Core M2 Pro/16GB RAM/512GB SSD) Gray or Silver: $2299 $200 off MSRP – 16″ MacBook Pro (12-Core M2 Pro/16GB RAM/1TB SSD) Gray or Silver: $2499 […] The post first appeared on MacPrices.net.

Read more »

Prime Day Sale: Amazon is taking $200 off every 16″ Apple MacBook Pro
Amazon is offering a $200 discount on 16-inch M2 Pro & Max MacBook Pros as part of their Prime Day 2023 sales. Their prices are currently the lowest available for these models from any Apple retailer: – 16″ MacBook Pro (12-Core M2 Pro/16GB RAM/512GB SSD) Gray or Silver: $2299 $200 off MSRP – 16″ MacBook Pro (12-Core M2 Pro/16GB RAM/1TB SSD) Gray or Silver: $2499 […] The post first appeared on MacPrices.net.

Read more »

Prime Day Sale: Amazon is offering a $200 discount on 14″ Apple MacBook Pros
Amazon has Apple’s 14-inch M2 Pro & Max MacBook Pros in stock and on sale today for $200 off MSRP as part of their Prime Day 2023 sales. Prices start at $1799 including free delivery. These are the lowest prices currently available for new 14″ MacBook Pros from Apple’s retailers: – 14″ 10-Core M2 Pro MacBook Pro (Gray or Silver): $1799 $200 off MSRP – […] The post first appeared on MacPrices.net.

Read more »

Take $100 off every Apple iPad Air with this sale for a limited time
Amazon has 10.9″ M1 WiFi iPad Airs on sale for $100 off Apple’s MSRP, with prices starting at $499. Each includes free shipping. Their prices are the lowest available among the Apple retailers we track: – 10.9″ M1 Airs 64GB/WiFi: $499.99 $100 off MSRP – 10.9″ M1 Airs 256GB/WiFi: $649.99 $100 off MSRP – 10.9″ M1 Airs 64GB/WiFi: $649.99 $100 off MSRP – 10.9″ M1 […] The post first appeared on MacPrices.net.

Read more »

Amazon is offering a $30 discount on every Apple Watch SE
Amazon has Apple Watch SE models on sale for $30 off MSRP this week, each including free shipping. Their prices are the lowest currently available for SE Watches: – 40mm Apple Watch SE GPS: $219, save $30 – 44mm Apple Watch SE GPS: $249, save $30 – 40mm Apple Watch SE GPS + Cellular: $269, save $30 – 44mm Apple Watch SE GPS + Cellular: […] The post first appeared on MacPrices.net.

Read more »

Amazon is offering a $70 discount on every Apple Watch Series 8 model
Amazon has Apple Watch Series 8 models on sale for $70 off MSRP, each including free shipping. Their prices are among the lowest currently available for Series 8 Watches anywhere: – 41mm Apple Watch Series 8 GPS (Midnight, Starlight, Silver, Red): $329, save $70 – 45mm Apple Watch Series 8 GPS (Midnight, Starlight, Silver, Red): $359, save $70 – 41mm Apple Watch Series 8 GPS […] The post first appeared on MacPrices.net.

Read more »

Apple iPad mini 6 models on sale for $100-$110 off MSRP
Amazon is offering Apple’s 8.3″ iPad minis for $100-$110 off MSRP, including free shipping, for a limited time. Prices start at $399. Amazon’s prices are the lowest currently available for these minis from any Apple retailer we track: – 64GB WiFi iPad mini 6 (all colors): $399.99 $100 off MSRP – 256GB WiFi iPad mini 6 (Gray, Purple): $549.99 $100 off MSRP – 256GB WiFi […] The post first appeared on MacPrices.net.

Read more »

New low prices: Get a 13-inch Apple M1 MacBook Air for only $749!
Amazon has Apple 13″ M1 MacBook Airs on sale for $250 off MSRP again, only $749.99. Their prices are the lowest available for new MacBooks today among the retailers we track. Stock may come and go, so check their site frequently. However, at the time of this post, all models were in stock with free shipping: 8-Core M1 Silicon CPU, 7-Core GPU: – 13″ M1 […] The post first appeared on MacPrices.net.

Read more »

Sunday Sale: 13-inch Apple M2 MacBook Airs on sale for up to $120 off MSRP
B&H Photo has 13″ MacBook Airs with M2 CPUs in stock today and on sale for up to $120 off Apple’s MSRP with prices available starting at only $979. Free 1-2 day delivery is available to most US addresses. Their prices are the lowest currently available for in-stock M2 MacBook Airs among Apple’s retailers: 8-core M2/8-core GPU/8GB RAM/256GB SSD – 13″ MacBook Air Space Gray: […] The post first appeared on MacPrices.net.

Read more »

Sunday Sale: 13-inch Apple M2 MacBook Airs on sale for up to $120 off MSRP
B&H Photo has 13″ MacBook Airs with M2 CPUs in stock today and on sale for up to $120 off Apple’s MSRP with prices available starting at only $979. Free 1-2 day delivery is available to most US addresses. Their prices are the lowest currently available for in-stock M2 MacBook Airs among Apple’s retailers: 8-core M2/8-core GPU/8GB RAM/256GB SSD – 13″ MacBook Air Space Gray: […] The post first appeared on MacPrices.net.

Read more »

New at Xfinity Mobile: Up to $800 off iPhone with trade-in and new line of service
Switch to Xfinity Mobile with a new line of service, and take up to $800 off the price of a new iPhone — with qualified trade-in — through July 25, 2023. The $800 is applied to your account as credits over a 24 month service term. Get up to $800 promo credit on the iPhone 14, 13, and 12 (SE & 12 mini excluded). The […] The post first appeared on MacPrices.net.

Read more »

Apple has unlocked, Certified Refurbished, iPhone 12 models available starting at $569
Apple has Certified Refurbished, unlocked, iPhone 12 models available on their online store starting at $569. Apple includes a standard one-year warranty, new outer shell, and shipping is free. According to Apple, “Each product is backed with our standard one-year warranty and is eligible for AppleCare to extend the coverage further. with the same 1-year warranty as a brand new iPhone, all manuals and accessories, […] The post first appeared on MacPrices.net.

Read more »