You can now access Apple Music radio shows in the Apple Podcasts app with iOS 17
With iOS 17, Apple has introduced a new interface for its Podcasts app, which now has a new Now Playing screen, as well as more search filters and a better Up Next experience. The company also announced that third-party apps can now connect an App Store subscription to Podcasts. To take advantage of this, Apple Music radio shows are now available in the Apple Podcasts app. more…

Read more »

Does the iPhone 15 Have an Overheating Problem?
Some early adopters of Apple's iPhone 15 have taken to social media to complain about overheating issues. Digital Trends' Bryan Wolfe writes: Over the past few days, various user complaints have popped up online by iPhone 15 owners saying their new devices are overheating. Some, for example, have taken to the Apple discussion groups to express their dismay, while others have left messages on Reddit and elsewhere. New smartphones commonly heat up more than usual during setup and in the first 24 hours of use, even those not manufactured by Apple. The issues being reported may have occurred during these instances. Speaking from personal experience, Android Authority's Aamir Siddiqui said he, too, has noticed his iPhone 15 Pro Max running very hot, even after the initial 24 hours of setup and settling in. Korean YouTuber BullsLab also captured high temperatures using a thermal camera. Read more of this story at Slashdot.

Read more »

Reolink introduces new 4K solar+ security cameras
There are a plethora of options for home security cameras – from the ultralow end to the ultrahigh end. Almost all of them have some drawbacks – a hefty subscription price, low quality, a need to run wires, or an unreasonable upfront cost. But Reolink just launched a new line of 4K solar-powered battery cameras that include 4K recording, dual-band Wi-Fi, and perhaps most valuable – no subscription required! more…

Read more »

Here’s how to prepare your Mac for the macOS Sonoma update
Apple will officially release macOS Sonoma (version 14) to the public on Tuesday, September 26. The update was announced in June at WWDC 2023 and brings some great improvements to the Mac operating system, such as a new Lock Screen, desktop widgets, new effects for FaceTime calls, Game Mode, and more. For those planning to install the new macOS, read on as we detail how to prepare your Mac for the update. more…

Read more »

iPad mini 7 might finally be nearing release
The long wait for a new iPad mini is reportedly finally nearing the end. An updated version is supposedly coming this year. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

iPhone 16 expected to include an additional capacitive ‘Capture Button’
Apple's next-gen iPhone 16 series is expected in 2024 to gain an additional capacitive button, known internally as the "Capture Button." The post appeared first on MacDailyNews.

Read more »

Review: Nomad’s new iPhone 15 leather cases remain the best on the market
iPhone 15 is now here, and shoppers looking to pair their new handset with a leather case are going to be out of luck – at least if they plan on bringing home an official one from Apple. But why would you want to anyway, when Nomad is back with another edition of its popular leather case. Retaining its title of being 9to5Toys’ favorite leather iPhone case, we break down the experience below the fold. more…

Read more »

Learn to code from the ground up with this $10 boot camp bundle
Want to learn how to code? Start your tech education with the 2023 Complete Python Certification Boot Camp Bundle for just $9.97. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

9to5Mac Daily: September 25, 2023 – iPhone 15 Pro durability and battery testing
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by WaterMinder: The best way to track your daily water intake, now with interactive widgets, an all-new Apple Watch app, StandBy support, and more. more…

Read more »

iPhone 16 rumored to gain new capacitive 'Capture Button,' updated Action button
A new rumor suggests an additional "Capture Button" could be included on iPhone 16 models under the sleep/wake button but be capacitive.Action buttonApple allegedly planned to use capacitive buttons on iPhone 15, but the feature was abandoned sometime in development. A new rumor suggests capacitive buttons could still happen, but the implementation differs from what was previously rumored. Read more...

Read more »

iPhone 16 rumored to introduce a new “Capture Button” with unknown purpose
iPhone 15 Pro just launched with the all-new Action button replacing the legacy mute switch. Now a new rumor claims Apple has plans to continue adding buttons to new iPhones. more…

Read more »

Teardown confirms Apple Watch Ultra 2’s larger battery
Teardowns of the Apple Watch Ultra 2 and Apple Watch Series 9 provide a closer look inside the watches, and confirming that the… The post appeared first on MacDailyNews.

Read more »

In a win for Apple, India loosens planned restrictions on MacBook, iPad imports
In a win for Apple, HP, and others, India is loosening its planned restrictions on imports of laptops, tablets and other IT hardware… The post appeared first on MacDailyNews.

Read more »

Apple's FineWoven magnetic band now available for preorder
Those interested in buying a FineWoven magnetic band for their Apple Watch can purchase one from the Apple Store starting Monday — but they won't be shipping until late October.FineWoven magnetic link band | Image Credit: AppleWhile the FineWoven magnetic link band may have leaked hours before September's Apple Event, it wasn't available for purchase until now. Read more...

Read more »

Initial display orders for iPhone 15 Pro far exceeded iPhone 14 Pro mix
In preparation for the launch of the iPhone 15, Apple's shipments of display panels for the series was higher in August 2023 than the iPhone 14 versions the previous year, with the Pro models also having a much higher proportion of units than one year prior.iPhone 15 ProAhead of the September introduction of new iPhones, Apple has to arrange for its supply chain to send shipments of displays to its assembly partners. In the months ahead of the release, the proportion of shipments Apple orders can change over time depending on demand. Read more...

Read more »

iPhone Diary: For one video project, my iPhone was the perfect camera
I may have just taken delivery of my shiny new iPhone 15 Pro Max, but I do get to write one last diary post about its predecessor, before it gets unceremoniously packaged up to be sent back to Apple. Not content with one time-consuming hobby – Argentine tango – I attempted to add another: amateur filmmaking. The latter didn’t get too far, as it struggled to compete for my time and attention (I’ve so far managed just two micro-shorts, totaling all of three-and-a-half minutes), but I did get to combine the two in one project … more…

Read more »

Apple’s FineWoven iPhone cases are trash
Apple recently announced new FineWoven iPhone cases to replace its excellently reviewed leather ones. The review are quite negative… The post appeared first on MacDailyNews.

Read more »

Eddy Cue is set to take the stand as a key witness at Google's antitrust bench trial
Eddy Cue,is set to testify on Tuesday as the Department of Justice pursues its antitrust lawsuit against Google for violating laws and trying to conceal its actions.Google pays to be the defaultApple's Senior Vice President of Services, Eddy Cue, is scheduled to testify as a witness at the U.S. vs. Google antitrust trial, highlighting the significant role Apple plays in the DOJ's allegations against Google's search engine practices, which include paying for preferential placement on both Apple and Android devices. Read more...

Read more »

Apple Watch Series 9 comes out Friday, but you still can’t buy the Magnetic Link band [U]
Update: Three days after Apple Watch Series 9 hit stores, Apple has opened up orders for Magnetic Link bands. They start shipping near the end of next month. Here’s a bit of a mystery: it’s the eve of Apple Watch Series 9 launch day, and you still can’t order the new Magnetic Link band. The product page has been live since the September 12 event ended, but it still shows up as unavailable. If you try to configure an Apple Watch Series 9 with the Magnetic Link when ordering, the checkout flow stops and says to “check back later for availability.” more…

Read more »

Apple Watch doesn’t always know how to check the weather due to watchOS 10 bug
Apple Watch makes checking the weather as easy as glancing at your wrist, but a bug in watchOS 10 is complicating things. Experiencing this issue yourself? You’re not alone. more…

Read more »

Download cozy new Autumn Gradients wallpapers
In the mood for a campfire or a gaze at the northern lights? Basic Apple Guy's new Autumn Gradients wallpapers on your screen might suffice. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

iPhone 15 Pro camera review: Here’s why Stalman calls it ‘the most professional iPhone’
While the iPhone 15 and 15 Pro don’t come with massive changes, most of the upgrades involve the new camera systems. Going in-depth, pro photographer and videographer Tyler Stalman has shared his review of the new iPhones with a focus on the cameras. more…

Read more »

How to automatically delete iPhone 2FA code texts with iOS 17
A seemingly small update with iOS 17 that turns out to be very useful is the ability to have your iPhone clean up 2FA text messages on its own. Here’s how to auto delete iPhone verification codes with iOS 17. more…

Read more »

Why CleanMyMac X is essential Mac-cleaning software [Awesome Apps]
Keep your Mac running clean, quick and clear with CleanMyMac X by MacPaw. You can download a free seven-day trial to give it a proper test. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

How to clean install macOS on your Mac
Macworld In this article, we’re going to show you how to perform a clean install of macOS. There are a number of reasons why you might want to do a clean install: You might want to reinstall the operating system in order to correct problems with your Mac – doing a clean install may be a good option if your Mac is running slow or otherwise misbehaving. Doing a clean install allows you to clear away old files that you might have been accumulating for years before installing the operating system onto a freshly formatted disk.  A clean install is also something you should do before selling your Mac or passing it on. It allows you to remove all your data from your Mac and return it to factory settings for next person. A clean install is also something many computer users resort to when they are trying to get rid of a virus (although there is a lot of debate about whether there are viruses on the Mac). Whatever your reason, a clean install of macOS might solve a lot of problems. However, changes in recent years may mean that a clean install is not necessary, so we will start by explaining why you might not need to do a clean install on your Mac.  You should also keep in mind that there are multiple ways to do a clean installation of macOS. The traditional way was to make a bootable copy of the macOS installer on a USB stick and then reformat your drive before installing the bootable copy onto your Mac. There is also an even simpler method that allows you to use macOS Recovery to reinstall the Mac operating system over the web (we have a separate tutorial about doing a clean install of macOS using Recovery). Plus, if you are running macOS Monterey or later on a M1 or M2 Mac, or an Intel Mac with a T2 chip, then there is a setting in System Preferences that makes wiping your Mac easier than ever. We’ll run through all of these methods below. Should I do a clean install on my Mac? In the past, it was helpful to reinstall the system if you wanted to correct some Mac problems, but today this solution doesn’t make as much sense. Since macOS Big Sur, macOS has its home on its own volume, which is both read-only and cryptographically signed and sealed (referred to as a Sealed System Volume). This seal is stored either in the T2 chip of the newer Intel Macs or in the Secure Enclave of the Apple M1/M2. Each component of the system is signed in hierarchical order, and any change to a component would also invalidate the seal that represents the top level. For further security, these Macs also do not start directly from the system volume, but from a snapshot of the system–and snapshots cannot be changed, even by the system itself. So macOS itself cannot be changed by any software that you install as a user. Should a problem occur with macOS during a restart, perhaps because a storage space on the SSD is defective and thus a system component is no longer intact, this will be recognized by the startup process since the seal will now be invalid. Should this happen you will have to reinstall the system. However, if your Mac boots up without issue then it indicates that there are no problems with the system. As long as your Mac works (which can be determined on the basis of the seal), the Mac is considered to be in working order as it complies with Apple’s specifications. For that reason, even if you do encounter problems on Macs with T2 chip or Apple Silicon while running macOS it makes no sense to reinstall the system yourself. For those who want to do a clean install so that no leftovers that belong to an old system are carried along, this no longer applies because none of this information is carried over. All components are checked after installation, then signed and finally the entire system is sealed again. Again, the seal guarantees that everything is fine and that nothing untoward has crept in. However, there is one component of the system software that is not installed on the read-only system volume. All other user-installed programs reside on the volume with the user data, including Safari. This means Apple can offer a separate update for the browser and WebKit, so that you do not have to reinstall the whole system each time. In the case of Safari and other apps there can be benefits in cleaning up your Library folder since it may still contain remnants of old applications you no longer use. If you feel that you have a lot of this sort of crud on your Mac then wiping your drive could be useful, just be prepared that it can be a risky business and you may end up deleting something important. Beware that a clean install can cause more problems than it fixes. You might prefer to use an application like CleanMyMac X from MacPaw ($39.95/£34.95 a year, free trial), or one of these alternatives: Best Mac Cleaner App. If you are happy to take the risk and still want to wipe your Mac and reinstall macOS – which you should definitely do if you are selling or passing on your Mac – read on! Three ways to clean install macOS As we explained above, there is more than one way to wipe your Mac and reinstall macOS: Make a copy of the macOS installer on a USB stick, reformat your drive and then install the macOS on to your Mac from the installer. Use macOS Recovery to reinstall macOS via the web. Use the Erase All Content and Settings option setting in System Preferences (available if you are running macOS Monterey and later on a M1 or M2 Mac, or an Intel Mac with a T2 chip). Not only are there three different methods (which we’ll run through below) the methods depend on the version of macOS that you are running. There is also the even trickier business of installing a clean copy of an older version of macOS on your Mac (Monterey, Big Sur, Catalina, High Sierra, Sierra, El Capitan, Mojave, Yosemite or an even old version of OS X). Speaking of which, if an old version is what you’re looking for, it may be worth taking a look at another article where we focus on that entirely: How to download and install old versions of OS X on a Mac. Before you begin: Back up your Mac Before you begin we recommend that you make a backup, just in case something goes wrong. Full instructions here: How to back up a Mac. It’s entirely possible that there will be something on your Mac that you thought was in the cloud but was in fact on your Mac (we speak from experience!) Note that with regard to backups, you probably won’t want to recover a Time Machine backup if you don’t want to copy over all the settings and preferences associated with your old system. You could alternatively sync all your Documents and Desktop with iCloud rather than run a full backup, but make sure that everything you need is in the cloud and be aware that you may lose your settings and applications. Option 1: Erase All Content and Settings (macOS Monterey and later) Before the arrival of Monterey, it was necessary to create a bootable USB drive or use Recovery Mode to wipe your disk. However, following Monterey Apple has made it easy to get a factory-fresh installation. An Erase All Content and Settings option arrived with macOS Monterey that allows you to reset your Mac to factory settings without having to work through the many steps to wipe and format your drives. The new option wasn’t available on every Mac running Monterey though. An M1 or later Mac, or an Intel Mac with a T2 chip inside was required to use the Erase All Content and Settings option. These Intel Macs have the T2 security chip: MacBook Air from 2018 MacBook Pro from 2018 Mac mini from 2018 iMac 27-inch from 2020 iMac Pro Mac Pro from 2019 In Ventura and later Foundry In Ventura System Preferences became System Settings, so the method slightly changed and things look completely different, so we will run through both methods. Here’s how to find Erase all Content and Settings in Ventura. Open System Settings. Click on General. Click on Transfer or Reset. Choose Erase all Content and Settings. In Monterey Foundry If you are running macOS Monterey the Erase All Content and Settings option is much easier to find. Open System Preferences. Click on System Preferences in the menu bar at the top of your screen. Click on Erase All Content and Settings. Now that you have located the Erase All Content and Settings option, follow the steps below to wipe your Mac. Select Erase All Content and Settings Enter your password. You’ll be reminded to do a backup with Time Machine before you begin deletion, but you can skip that step. A window will show you what will be deleted, including Apple ID, Touch ID, accessories, and Find My settings. Finally, you will need to log out of your Mac and all related services using your Apple ID. Before your Mac is erased you receive a final warning, so if you have second thoughts at least you can stop at this point! Having clicked the second Erase All Content & Settings your Mac will restart. Eventually, you will see a black screen while it restarts. Once your Mac restarts you can go through the steps to set it up as new, or you can leave it at this stage for the next owner to set up. Just turn the Mac off first. Option 2: Do a clean install via Recovery Foundry We explain how to reinstall macOS via Recovery here: How to reinstall macOS, but we will summarise the steps here. How you enter recovery mode depends on the Mac you own. If you want to enter recovery mode on an M1 or M2-series Mac (or later) you need to press and hold the power button when you start up your Mac and continue to press and hold the button until you see a startup options window appear with an Options icon. Select Options and click Continue. To enter Recovery on an Intel Mac press Command+R. Once Recovery starts up you’ll see a macOS Utilities window with options to Restore From Time Machine Backup, Reinstall macOS [version], Safari (or Get Help Online in older versions) and Disk Utility. If you want to wipe the Mac before reinstalling choose Disk Utility.  Using Disk Utility run through the steps to erase your Mac as detailed in our How to reinstall macOS guide. After you have erased your drive click on Disk Utility > Quit Disk Utility. Or just Command + Q. Now choose Reinstall macOS from the options. Wait while macOS is reinstalled. Expect this to take a while. Option 3: Do a clean install macOS using a bootable USB Now for the method that involves using a bootable USB with the macOS installation on it. This might be the best method if you already have the installation files downloaded and don’t want to wait for hours for Recovery to download the files. At a glance Tools required: A 15GB or larger removable USB flash drive to hold the installer file for our chosen version of macOS. (We’re going to erase it, so make sure it doesn’t contain any valuable data.) Admin privileges for the Mac. A back up, just in case something goes wrong. 1. Format the external drive Foundry We’re going to re-download the installer file for our chosen version of macOS and store it on a USB stick or external drive. But before you do that you can prepare the USB drive by reformatting it. Here’s how to format your USB drive correctly: Plug in the USB drive. Go to Applications > Utilities. Open Disk Utility. Select the drive and click Erase. (The name of the disk needs to be “Untitled”, if the Terminal commands below are to work, so rename it if necessary.) Select Mac OS Extended (Journaled) as the format type.  Choose GUID Partition Map from the Scheme options (if you don’t see this you are in the wrong view – you need to select the external drive, not the container below it). Click Erase. Disk Utility will create the partition and set up the drive (it can take a while). Click Done. 2. Get the macOS install file Foundry If you’re reinstalling the latest version of macOS, or installing a new version of macOS, the next step is relatively easy although the process for obtaining the installer will be different.  How to download the installer via Software Update If you are currently running Ventura and want to do a clean install of macOS Sonoma, for example, then you can download the installation package via System Settings. Open System Setting. Choose General. Choose Software Update. Download the macOS Sonoma install files (don’t install it!) How to download the installer from the Mac App Store Alternatively, find Sonoma on the Mac App Store and click on Get to download it from there (don’t install it). If, on the other hand, if you are running Ventura and you want to reinstall Ventura grab the Ventura installer from the Mac App Store here. If it’s an older version of macOS you are after, you can also find links to those below. Also read: How to install older versions of macOS or OS X, but note that you will need to confirm that you Mac can run that version of macOS. See: What version of macOS can my Mac run. Monterey is on the Mac App Store here. Big Sur is on the Mac App Store here. Catalina is on the Mac App Store here. You can get macOS Mojave via this link. Download High Sierra here. Sierra is here as a direct download. El Capitan can be downloaded from this link. Yosemite is available here.  (If those links don’t work close the Mac App Store and cut and paste the links into Safari. For more advice on getting hold of even older editions of Mac OS, see How to get old versions of OS X.) Once you have located the version of macOS you want on the Mac App Store follow these instructions: Hit Download or Get (depending on the version of the Mac App Store you are using). You may get a warning message at this point, telling you that this version of macOS ‘is already installed on this computer. Would you like to continue?’ Click Continue. Enter your Apple ID and password. The install files will start to download. The installer file will be multiple gigabites. macOS Big Sur was 12.6GB, for example, so expect downloading to take a while. Don’t install yet! Whichever way you get the install file the next step is worth highlighting for what you shouldn’t do, rather than what you should do: When the macOS installer has finished downloading the installer will launch automatically, but we don’t want to use it yet so don’t click to start the installation! Press Command + Q to quit out of the installer. Find the installer file (it will be located in your Applications folder, or you could search for it using Spotlight (command + Space and start typing Sonoma, Ventura, Monterey, Catalina or Big Sur). 3. Create a bootable USB disk Foundry Next we need to turn the USB drive into a bootable USB disk so that we can use it to install a new copy of macOS on our Mac after we have reformatted it (that step will come later in this tutorial). We’ve got full instructions on How to make a bootable macOS install drive in a different article, but we’ll run through the basics here. We’re going to create the bootable drive using Terminal, which you can open on your Mac by pressing Command + Space bar and typing Terminal. Connect the USB drive that you formatted earlier to your Mac. Make sure it’s called Untitled – rename it if necessary (this will help you enter the correct text in Terminal in the next steps). Creating a bootable installer has been pretty easy since the arrival of Mavericks in 2013 thanks to the Terminal command createinstallmedia that arrived in that version. Here’s how to use it (note that the name of the version of macOS will depend on which version you are installing): Open the Terminal application on your Mac (find it by searching using Command + Space and typing Terminal) Now copy and paste the following text into Terminal (This text is for Ventura – we include the text needed for the other versions of macOS in this article). When you cut and paste the following text into Terminal do check that it maintains the — as we have heard of people pasting in the — and it converting to –)sudo /Applications/Install macOS Ventura.app/Contents/Resources/createinstallmedia –volume /Volumes/MyVolume (where MyVolume is the name of the external drive you are using – it could be Untitled). Press Return. Enter your password (you won’t see the password appear). Press Return again. Terminal will warn that it is about to erase the drive. If you want to continue press Y and then Return. The process can take a while, you’ll see “Erasing Disk: 0%… 10%… 20%… 30%…100%… Next Terminal will spend a few minutes copying the installer file to your drive. “Copying installer files to disk… Copy complete” and so on will appear in the Terminal window. Again, this can take a while – it took our Mac ages to go from 0% to 10%… When the bootable drive is prepared you will see the word Done. It can take a while. Now you have the installer on the external drive you can use that to install copies of macOS on multiple Macs – which could be helpful if you are admin for a lot of systems. However, if you are reading this because you want to do wipe your Mac and do a clean install, read on… 4. Wipe your Mac Foundry Now we are ready to install the copy of macOS from the installer drive on our Mac. If you want to do a fresh installation (and completely wipe your Mac) it’s time to reformat your Mac’s start-up drive. If you have a recently modern Mac with Monterey installed, you would be best off wiping your Mac using the Erase all Contents and Settings option. But for those running older Macs with older versions of macOS will need to use Disk Utility to delete their data. If you are running macOS Catalina or Big Sur you will have two volumes: Macintosh HD and Macintosh HD – Data. If you want to do a clean install of macOS over an existing installation you will need to delete the Macintosh HD – Data volume. We cover how to do this in more detail here: How to reset and wipe a Mac. Macintosh HD – Data is where your data is stored separately to the macOS installation. Either click on the – button or go to the menu and choose Edit > Delete APFS volume. You will see a message warning you that this will permanently erase your data. Click on Delete. Do not choose Delete Volume Group. Wait while the volume is deleted. Then you can move on to deleting your Macintosh HD volume as above. Here’s how to do a fresh installation of macOS if you aren’t already running Catalina, Big Sur or later. Connect your boot drive. Start – or restart – your Mac while holding down the Option key (also known as Alt). This will take you to Startup Manager. Choose to install your chosen version of macOS from the external drive. Select Disk Utility. Select your Mac’s start-up disc, probably called Macintosh HD or Home. Click on Erase. Wait for your startup disk to be formatted. Go back to the main Utilities menu and choose Install macOS. Choose your startup drive as the location to install macOS. Once installation is complete, you can restore apps and settings from your backup, or download them again manually. 5. Install macOS IDG Now you can use your bootable installer to do a clean install of macOS on your wiped Mac. The process for installing the OS from the bootable installer is slightly different if you have an M1 or M2-series Mac (also known as Apple Silicon) or an Intel processor inside your Mac. We’ll run through both methods. In both cases, you will need to have your Mac connected to the Internet. It also needs to be compatible with the version of macOS you are trying to install (you can’t install a macOS older than Big Sur on a M1 Mac). How to install macOS from a bootable installer If you have an M1 or M2 Mac here’s how to install macOS from a bootable installer. As we mentioned above, you can’t install a macOS older than Big Sur on an Apple Silicon Mac. Plug in your bootable installer Turn off your Mac. Press the power button to turn on the Mac – but keep it pressed until you see the startup options window including your bootable volume. Choose the bootable installer volume. Click Continue. The macOS installer should open – when it does follow the onscreen instructions to do the clean install. If you have an Intel-powered Mac here’s how to install macOS from a bootable installer: Plug in your bootable installer Turn off your Mac. Press and hold Option/Alt while the Mac starts up – keep pressing the key until you see a screen showing the bootable volume. Choose the bootable installer volume. Click Continue. Select Install macOS from the Utilities window that appears.  Click Continue. Now follow the onscreen instructions to do your clean install. Mac, Personal Software

Read more »

Pixelmator teases full HDR support coming to Photomator on iPhone 15 [Video]
iPhone 15 and iPhone 15 Plus crank up the limit on how bright Apple’s non-Pro phone displays can go. Pixelmator will soon take advantage of the new displays, which reach peak brightness at 1600 nits, with an update to Photomator on iPhone 15. more…

Read more »

Don’t miss this Apple accessories blowout sale, up to 91% off
Woot's big blowout sale on 40 Apple accessories goes on for the next 5 days only, so act fast to score deals. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple's M2 MacBook Air with 16GB RAM, 512GB SSD is on sale for $1,349, plus $40 off AppleCare
Apple's M2 MacBook Air with 16GB RAM and a 512GB SSD is on sale for $1,349, plus $40 off AppleCare with this exclusive month-end deal.Save on Apple's M2 MacBook Air.AppleInsider readers can score the lowest price available on an upgraded M2 MacBook Air with 16GB of memory and 512GB of storage, bringing the price down to $1,349. Plus, get three years of AppleCare for $189. Read more...

Read more »

Today in Apple history: iPod nano gets colorful aluminum upgrade
On September 25, 2006, Apple started shipping its second-generation iPod nano, offering a fancy redesign of the pocket-size original model. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple weaved itself into a fine mess with the awful iPhone 15 FineWoven case
Apple’s new FineWoven cases for iPhone 15 are a huge swing and miss. They suck. Apple should remove them from sale and refund everyone who’s already bought one. You could pretty much stop reading the story at this point, but I’ll offer a few pieces of supporting evidence for my claims. more…

Read more »

LastPass: ‘Horse Gone Barn Bolted’ is Strong Password
The password manager service LastPass is now forcing some of its users to pick longer master passwords. LastPass says the changes are needed to ensure all customers are protected by their latest security improvements. But critics say the move is little more than a public relations stunt that will do nothing to help countless early adopters whose password vaults were exposed in a 2022 breach at LastPass.

Read more »

Who’s Behind the 8Base Ransomware Website?
The victim shaming website operated by the cybercriminals behind 8Base -- currently one of the more active ransomware groups -- was until earlier today leaking quite a bit of information that the crime group probably did not intend to be made public. The leaked data suggests that at least some of website's code was written by a 36-year-old programmer residing in the capital city of Moldova.

Read more »

Vulnerability Summary for the Week of September 11, 2023
  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info wibu -- codemeter_runtime   A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system. 2023-09-13 10 CVE-2023-3935MISCMISC sap -- businessobjects_business_intelligence SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, under certain condition allows an authenticated attacker to view sensitive information which is otherwise restricted. On successful exploitation, the attacker can completely compromise the application causing high impact on confidentiality, integrity, and availability. 2023-09-12 9.9 CVE-2023-40622MISCMISC dlink -- dir-619l_firmware Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login. 2023-09-11 9.8 CVE-2020-19319MISC dlink -- dir-619l_firmware Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login. 2023-09-11 9.8 CVE-2020-19320MISCMISC mofinetwork -- mofi4500-4gxelte-v2_firmware An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass the authentication and execute arbitrary code via crafted HTTP request. 2023-09-08 9.8 CVE-2021-27715MISCMISC rockwell_automation -- factorytalk_view Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted malicious packets.  The device has the functionality, through a CIP class, to execute exported functions from libraries.  There is a routine that restricts it to execute specific functions from two dynamic link library files.  By using a CIP class, an attacker can upload a self-made library to the device which allows the attacker to bypass the security check and execute any code written in the function. 2023-09-12 9.8 CVE-2023-2071MISC xxyopen -- novel-plus novel-plus 3.6.2 is vulnerable to SQL Injection. 2023-09-11 9.8 CVE-2023-30058MISCMISC tsplus -- tsplus_remote_access An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%TSplusClientswww. 2023-09-11 9.8 CVE-2023-31067MISCMISC tsplus -- tsplus_remote_access An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%TSplusUserDesktopthemes. 2023-09-11 9.8 CVE-2023-31068MISCMISC google -- android In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 9.8 CVE-2023-35681MISCMISC phpjabbers -- cleaning_business_software In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accounts. 2023-09-11 9.8 CVE-2023-36140MISCMISC trendylogics -- crypto_currency_tracker Incorrect access control in the User Registration page of Crypto Currency Tracker (CCT) before v9.5 allows unauthenticated attackers to register as an Admin account via a crafted POST request. 2023-09-08 9.8 CVE-2023-37759MISCMISCMISC adobe -- coldfusion   Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. 2023-09-14 9.8 CVE-2023-38204MISC conemu_project -- conemu ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to arbitrary code execution. This is related to an incomplete fix for CVE-2022-46387. 2023-09-12 9.8 CVE-2023-39150MISCMISC golang -- go The go.mod toolchain directive, introduced in Go 1.21, can be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module. This applies to modules downloaded using the "go" command from the module proxy, as well as modules downloaded directly using VCS software. 2023-09-08 9.8 CVE-2023-39320MISCMISCMISCMISC dlink -- dir-816_firmware D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis. 2023-09-12 9.8 CVE-2023-39637MISCMISCMISCMISC arris -- tg852g_firmware An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value by observing a beacon frame. 2023-09-11 9.8 CVE-2023-40039MISCMISCMISC dedecms -- dedecms DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/module_make.php. 2023-09-12 9.8 CVE-2023-40784MISCMISC opencart -- opencart OpenCart v4.0.2.2 is vulnerable to Brute Force Attack. 2023-09-12 9.8 CVE-2023-40834MISCMISC schoolmate -- schoolmate Schoolmate 1.3 is vulnerable to SQL Injection in the variable schoolname from Database at ~header.php. 2023-09-11 9.8 CVE-2023-40944MISC sourcecodester -- doctor_appointment_system Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctorsmyDetails.php. 2023-09-11 9.8 CVE-2023-40945MISC schoolmate -- schoolmate Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php. 2023-09-11 9.8 CVE-2023-40946MISC zoo_management_system_project -- zoo_management_system Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields. 2023-09-08 9.8 CVE-2023-41615MISCMISCMISC jeecg -- jeecg_boot Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show. 2023-09-08 9.8 CVE-2023-42268MISC hutool -- hutool hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray. 2023-09-08 9.8 CVE-2023-42276MISC hutool -- hutool hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath. 2023-09-08 9.8 CVE-2023-42277MISC imoulife -- life The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component. This relates to the com.mm.android.easy4ip.MainActivity activity. JavaScript execution is enabled in the WebView, and direct web content loading occurs. 2023-09-11 9.8 CVE-2023-42470MISCMISCMISC wave-ai -- wave The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. It contains a manifest entry that exports the wave.ai.browser.ui.splash.SplashScreen activity. This activity uses a WebView component to display web content and doesn't adequately validate or sanitize the URI or any extra data passed in the intent by a third-party application (with no permissions). 2023-09-11 9.8 CVE-2023-42471MISCMISCMISC sourcecodester -- simple_membership_system A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file account_edit_query.php. The manipulation of the argument admin_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239254 is the identifier assigned to this vulnerability. 2023-09-09 9.8 CVE-2023-4845MISCMISCMISC sourcecodester -- simple_book_catalog_app A vulnerability classified as critical was found in SourceCodester Simple Book Catalog App 1.0. Affected by this vulnerability is an unknown functionality of the file delete_book.php. The manipulation of the argument delete leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239257 was assigned to this vulnerability. 2023-09-09 9.8 CVE-2023-4848MISCMISCMISC sourcecodester -- online_tours_&_travels_management_system A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file booking.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239351. 2023-09-10 9.8 CVE-2023-4866MISCMISCMISC sourcecodester -- contact_manager_app A vulnerability classified as critical was found in SourceCodester Contact Manager App 1.0. This vulnerability affects unknown code of the file delete.php. The manipulation of the argument contact/contactName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239356. 2023-09-10 9.8 CVE-2023-4871MISCMISCMISC sourcecodester -- contact_manager_app A vulnerability, which was classified as critical, has been found in SourceCodester Contact Manager App 1.0. This issue affects some unknown processing of the file add.php. The manipulation of the argument contact/contactName leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239357 was assigned to this vulnerability. 2023-09-10 9.8 CVE-2023-4872MISCMISCMISC byzoro -- smart_s45f_firmware A vulnerability, which was classified as critical, was found in Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-239358 is the identifier assigned to this vulnerability. 2023-09-10 9.8 CVE-2023-4873MISCMISCMISC mintplexlabs -- anythingllm Relative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. 2023-09-11 9.8 CVE-2023-4897MISCMISC adobe -- commerce   Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution. 2023-09-12 9.1 CVE-2022-24093MISC ibm -- security_directory_server IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view or write to arbitrary files on the system. IBM X-Force ID: 228579. 2023-09-08 9.1 CVE-2022-33164MISCMISC dlink -- dir-605l_firmware Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows authorized attackers execute arbitrary code via sending crafted data to the webserver service program. 2023-09-11 8.8 CVE-2020-19318MISC redhat -- decision_manager A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This flaw allows an authenticated attacker to construct malicious serialized objects (usually called gadgets) and achieve code execution on the server. 2023-09-11 8.8 CVE-2022-1415MISCMISCMISC microsoft -- azure_devops   Azure DevOps Server Remote Code Execution Vulnerability 2023-09-12 8.8 CVE-2023-33136MISC google -- android In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 8.8 CVE-2023-35658MISCMISC google -- android In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 8.8 CVE-2023-35673MISCMISC google -- android In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 8.8 CVE-2023-35684MISCMISC govee -- home Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially crafted site, the attacker can execute JavaScript in context of WebView or steal sensitive user data by displaying phishing content. 2023-09-11 8.8 CVE-2023-3612MISC microsoft -- sharepoint_server   Microsoft SharePoint Server Elevation of Privilege Vulnerability 2023-09-12 8.8 CVE-2023-36764MISC microsoft -- windows_11   Windows Themes Remote Code Execution Vulnerability 2023-09-12 8.8 CVE-2023-38146MISC microsoft -- multiple_products   Windows Miracast Wireless Display Remote Code Execution Vulnerability 2023-09-12 8.8 CVE-2023-38147MISC microsoft -- multiple_products   Internet Connection Sharing (ICS) Remote Code Execution Vulnerability 2023-09-12 8.8 CVE-2023-38148MISC netis-systems -- wf2409e_firmware An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface. 2023-09-11 8.8 CVE-2023-38829MISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application server responds with sensitive information about the server. This could allow an attacker to directly access the database. 2023-09-12 8.8 CVE-2023-40726MISC idreamsoft -- icms icms 7.0.16 is vulnerable to Cross Site Request Forgery (CSRF). 2023-09-08 8.8 CVE-2023-40953MISCMISC wordpress -- wordpress   The BAN Users plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.5.3 due to a missing capability check on the 'w3dev_save_ban_user_settings_callback' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify the plugin settings to access the ban and unban functionality and set the role of the unbanned user. 2023-09-13 8.8 CVE-2023-4153MISCMISCMISC wordpress -- wordpress   The Simplr Registration Form Plus+ plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 2.4.5. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for authenticated attackers with subscriber-level permissions or above to change user passwords and potentially take over administrator accounts. 2023-09-13 8.8 CVE-2023-4213MISCMISC mozilla -- firefox Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occured when allocating too much private shader memory on mac OS. This bug only affects Firefox on macOS. Other operating systems are unaffected. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 8.8 CVE-2023-4582MISCMISCMISCMISC mozilla -- thunderbird Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2. 2023-09-11 8.8 CVE-2023-4584MISCMISCMISCMISCMISCMISC mozilla -- thunderbird Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 8.8 CVE-2023-4585MISCMISCMISCMISC wibu -- codemeter_runtime   A Improper Privilege Management vulnerability through an incorrect use of privileged APIs in CodeMeter Runtime versions prior to 7.60c allow a local, low privileged attacker to use an API call for escalation of privileges in order gain full admin access on the host system. 2023-09-13 8.8 CVE-2023-4701MISCMISC hitachi_energy -- asset_suite A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password validation in T214. This vulnerability can be exploited by an authenticated user per-forming an Equipment Tag Out holder action (Accept, Release, and Clear) for another user and entering an arbitrary password in the holder action confirmation dialog box. Despite entering an arbitrary password in the confirmation box, the system will execute the selected holder action. 2023-09-11 8.8 CVE-2023-4816MISC sourcecodester -- take-note_app A vulnerability has been found in SourceCodester Take-Note App 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239350 is the identifier assigned to this vulnerability. 2023-09-09 8.8 CVE-2023-4865MISCMISCMISC sourcecodester -- contact_manager_app A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239353 was assigned to this vulnerability. 2023-09-10 8.8 CVE-2023-4868MISCMISCMISC sourcecodester -- contact_manager_app A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file update.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-239354 is the identifier assigned to this vulnerability. 2023-09-10 8.8 CVE-2023-4869MISCMISCMISC mintplexlabs -- anything-llm SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. 2023-09-12 8.8 CVE-2023-4899MISCMISC wordpress -- wordpress   The Login with phone number plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.8. This is due to missing nonce validation on the 'lwp_update_password_action' function. This makes it possible for unauthenticated attackers to change user password via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2023-09-13 8.8 CVE-2023-4916MISCMISC mozilla -- firefox On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer overflow potentially leaking sensitive data that could have led to a sandbox escape. *This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2. 2023-09-11 8.6 CVE-2023-4576MISCMISCMISCMISCMISCMISC siemens -- spectrum_power_7   A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q3). The affected product assigns improper access rights to the update script. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges. 2023-09-14 8.2 CVE-2023-38557MISC hichip -- shenzhen_hichip_vision_technology_firmware Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through sending a crafted multicast message in a local network. 2023-09-11 8.1 CVE-2022-23382MISC openpmix -- openpmix OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0. 2023-09-09 8.1 CVE-2023-41915MISCCONFIRMCONFIRM microsoft -- exchange_server   Microsoft Exchange Server Remote Code Execution Vulnerability 2023-09-12 8 CVE-2023-36744MISC microsoft -- exchange_server   Microsoft Exchange Server Remote Code Execution Vulnerability 2023-09-12 8 CVE-2023-36745MISC microsoft -- exchange_server   Microsoft Exchange Server Remote Code Execution Vulnerability 2023-09-12 8 CVE-2023-36756MISC microsoft -- exchange_server   Microsoft Exchange Server Spoofing Vulnerability 2023-09-12 8 CVE-2023-36757MISC foxconn -- live_update_utility An issue was discovered in MmMapIoSpace routine in Foxconn Live Update Utility 2.1.6.26, allows local attackers to escalate privileges. 2023-09-11 7.8 CVE-2020-24088MISCMISCMISC adobe -- indesign Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28831MISC adobe -- indesign Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28832MISC adobe -- indesign Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28833MISC adobe -- incopy Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28834MISC adobe -- incopy Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28835MISC adobe -- incopy Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-28836MISC adobe -- acrobat_reader Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-34224MISC adobe -- acrobat_reader Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.8 CVE-2022-34227MISC adobe -- acrobat_reader   Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-13 7.8 CVE-2023-26369MISC microsoft -- multiple_products   Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-35355MISC google -- android In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35665MISCMISC google -- android In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35666MISCMISC google -- android In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35667MISCMISC google -- android In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35669MISCMISC google -- android In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35670MISCMISC google -- android In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35674MISCMISC google -- android In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35676MISCMISC google -- android In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. 2023-09-11 7.8 CVE-2023-35682MISCMISC google -- android In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-09-11 7.8 CVE-2023-35687MISCMISC microsoft -- 3d_viewer   3D Viewer Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36739MISC microsoft -- 3d_viewer   3D Viewer Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36740MISC microsoft -- visual_studio   Visual Studio Code Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36742MISC microsoft -- visual_studio   Visual Studio Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-36758MISC microsoft -- 3d_viewer   3D Viewer Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36760MISC microsoft -- office   Microsoft Office Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-36765MISC microsoft -- excel   Microsoft Excel Information Disclosure Vulnerability 2023-09-12 7.8 CVE-2023-36766MISC microsoft -- 3d_builder   3D Builder Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36770MISC microsoft -- 3d_builder   3D Builder Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36771MISC microsoft -- 3d_builder   3D Builder Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36772MISC microsoft -- 3d_builder 3D Builder Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36773MISC microsoft -- .net   .NET Framework Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36788MISC microsoft -- visual_studio   Visual Studio Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36792MISC microsoft -- visual_studio   Visual Studio Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36793MISC microsoft -- visual_studio   Visual Studio Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36794MISC microsoft -- visual_studio   Visual Studio Remote Code Execution Vulnerability 2023-09-12 7.8 CVE-2023-36796MISC microsoft -- multiple_products   Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-36802MISC microsoft -- multiple_products   Windows GDI Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-36804MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application is vulnerable to stack-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20818) 2023-09-12 7.8 CVE-2023-38070MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20824) 2023-09-12 7.8 CVE-2023-38071MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20825) 2023-09-12 7.8 CVE-2023-38072MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application contains a type confusion vulnerability while parsing WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20826) 2023-09-12 7.8 CVE-2023-38073MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application contains a type confusion vulnerability while parsing WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20840) 2023-09-12 7.8 CVE-2023-38074MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted WRL files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-20842) 2023-09-12 7.8 CVE-2023-38075MISC siemens -- teamcenter_visualization   A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.1). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21041) 2023-09-12 7.8 CVE-2023-38076MISC microsoft -- multiple_products   Windows Kernel Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38139MISC microsoft -- multiple_products   Windows Kernel Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38141MISC microsoft -- multiple_products   Windows Kernel Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38142MISC microsoft -- multiple_products   Windows Common Log File System Driver Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38143MISC microsoft -- multiple_products   Windows Common Log File System Driver Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38144MISC microsoft -- windows_11   Windows Kernel Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38150MISC microsoft -- multiple_products   Windows GDI Elevation of Privilege Vulnerability 2023-09-12 7.8 CVE-2023-38161MISC microsoft -- windows_defender_security_intelligence_updates Windows Defender Attack Surface Reduction Security Feature Bypass 2023-09-12 7.8 CVE-2023-38163MISC ibm -- qradar_wincollect IBM QRadar WinCollect Agent 10.0 through 10.1.6, when installed to run as ADMIN or SYSTEM, is vulnerable to a local escalation of privilege attack that a normal user could utilize to gain SYSTEM permissions. IBM X-Force ID: 262542. 2023-09-08 7.8 CVE-2023-38736MISCMISC raidenftpd -- raidenftpd Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server name field of the Step by step setup wizard. 2023-09-11 7.8 CVE-2023-39063MISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application uses weak outdated application signing mechanism. This could allow an attacker to tamper the application code. 2023-09-12 7.8 CVE-2023-40727MISC siemens -- parasolid   A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.253), Parasolid V35.1 (All versions < V35.1.184), Parasolid V36.0 (All versions < V36.0.142). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21263) 2023-09-12 7.8 CVE-2023-41032MISC siemens -- parasolid   A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.260), Parasolid V35.1 (All versions < V35.1.246), Parasolid V36.0 (All versions < V36.0.156). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21266) 2023-09-12 7.8 CVE-2023-41033MISC siemens -- parasolid   A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to memory corruption while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. 2023-09-12 7.8 CVE-2023-41846MISC apple -- macos The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13.2, iOS 15.7.8 and iPadOS 15.7.8, watchOS 9.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Big Sur 11.7.9, macOS Monterey 12.6.8. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1. 2023-09-12 7.8 CVE-2023-41990MISCMISCMISCMISCMISCMISCMISC hashicorp -- terraform Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously crafted Terraform configuration. This vulnerability is fixed in Terraform 1.5.7. 2023-09-08 7.8 CVE-2023-4782MISC microsoft -- dynamics_265_for_finance_and_operations   Dynamics Finance and Operations Cross-site Scripting Vulnerability 2023-09-12 7.6 CVE-2023-36800MISC dlink -- dir-619l_firmware An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing remote attackers to restart router via the M-search request ST parameter. No authentication required 2023-09-11 7.5 CVE-2020-19323MISCMISC ibm -- aspera_faspex IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather or persuade a naive user to supply sensitive information. IBM X-Force ID: 222567. 2023-09-08 7.5 CVE-2022-22401MISCMISC siemens -- multiple_products   The ANSI C OPC UA SDK contains an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate. 2023-09-12 7.5 CVE-2023-28831MISC microsoft -- azure_kubernetes_service   Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability 2023-09-12 7.5 CVE-2023-29332MISC ibm -- aspera_faspex IBM Aspera Faspex 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. IBM X-Force ID: 254268. 2023-09-08 7.5 CVE-2023-30995MISCMISC tsplus -- tsplus_remote_access An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML source code of the login page. 2023-09-11 7.5 CVE-2023-31069MISCMISC quboworld -- smart_plug_10a_firmware An issue was discovered in Qubo Smart Plug 10A version HSP02_01_01_14_SYSTEM-10A, allows attackers to cause a denial of service (DoS) via Wi-Fi deauthentication. 2023-09-11 7.5 CVE-2023-36161MISC aptosfoundation -- aptos CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json. 2023-09-08 7.5 CVE-2023-36184MISCMISCMISCMISC microsoft -- outlook   Microsoft Outlook Information Disclosure Vulnerability 2023-09-12 7.5 CVE-2023-36763MISC samsung -- exynos_9810_firmware An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos Mobile Processor, Automotive Processor, and Modem - Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123). In the Shannon MM Task, Missing validation of a NULL pointer can cause abnormal termination via a malformed NR MM packet. 2023-09-08 7.5 CVE-2023-37368MISC samsung -- exynos_980_firmware An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor (Exynos 980, Exynos 850, Exynos 2100, and Exynos W920). Improper handling of length parameter inconsistency can cause incorrect packet filtering. 2023-09-08 7.5 CVE-2023-37377MISC microsoft -- multiple_products   Windows TCP/IP Denial of Service Vulnerability 2023-09-12 7.5 CVE-2023-38149MISC microsoft -- multiple_products   DHCP Server Service Denial of Service Vulnerability 2023-09-12 7.5 CVE-2023-38162MISC adobe -- coldfusion   Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction. 2023-09-14 7.5 CVE-2023-38205MISC golang -- go Processing an incomplete post-handshake message for a QUIC connection can cause a panic. 2023-09-08 7.5 CVE-2023-39321MISCMISCMISCMISC golang -- go QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With fix, connections now consistently reject messages larger than 65KiB in size. 2023-09-08 7.5 CVE-2023-39322MISCMISCMISCMISC hexo -- hexo Hexo up to v7.0.0 (RC2) was discovered to contain an arbitrary file read vulnerability. 2023-09-08 7.5 CVE-2023-39584MISCMISCMISC buffalo -- terastation_nas_5410r_firmware An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest account function. 2023-09-08 7.5 CVE-2023-39620MISCMISC arm -- trusted_firmware-m In Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator, when the CryptoCell PSA Driver software Interface is selected, and the Authenticated Encryption with Associated Data Chacha20-Poly1305 algorithm is used, with the single-part verification function (defined during the build-time configuration phase) implemented with a dedicated function (i.e., not relying on usage of multipart functions), the buffer comparison during the verification of the authentication tag does not happen on the full 16 bytes but just on the first 4 bytes, thus leading to the possibility that unauthenticated payloads might be identified as authentic. This affects TF-Mv1.6.0, TF-Mv1.6.1, TF-Mv1.7.0, and TF-Mv1.8. 2023-09-08 7.5 CVE-2023-40271MISCMISC apple -- macos This issue was addressed with improved state management of S/MIME encrypted emails. This issue is fixed in macOS Monterey 12.6.8. A S/MIME encrypted email may be inadvertently sent unencrypted. 2023-09-12 7.5 CVE-2023-40440MISC jeecg -- jeecg_boot Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection. 2023-09-08 7.5 CVE-2023-41578MISC dairy_farm_shop_management_system -- dairy_farm_shop_management_system Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilities in the Login function via the Username and Password parameters. 2023-09-08 7.5 CVE-2023-41594MISCMISCMISC hutool -- hutool hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse(). 2023-09-08 7.5 CVE-2023-42278MISC mozilla -- multiple_products When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 7.5 CVE-2023-4583MISCMISCMISCMISC sourcecodester -- simple_membership_system A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been classified as critical. This affects an unknown part of the file club_edit_query.php. The manipulation of the argument club_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239253 was assigned to this vulnerability. 2023-09-08 7.5 CVE-2023-4844MISCMISCMISC sourcecodester -- simple_membership_system A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file delete_member.php. The manipulation of the argument mem_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239255. 2023-09-09 7.5 CVE-2023-4846MISCMISCMISC inure -- inure Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92. 2023-09-10 7.5 CVE-2023-4876MISCMISC inure -- inure Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92. 2023-09-10 7.5 CVE-2023-4877MISCMISC mintplexlabs -- anything-llm Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. 2023-09-12 7.5 CVE-2023-4898MISCMISC cecil -- cecil Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1. 2023-09-12 7.5 CVE-2023-4914MISCMISC adobe -- acrobat_dc Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.3 CVE-2019-16470MISC adobe -- acrobat_dc Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-09-11 7.3 CVE-2019-16471MISC microsoft -- multiple_products   Microsoft Word Remote Code Execution Vulnerability 2023-09-12 7.3 CVE-2023-36762MISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). User credentials are found in memory as plaintext. An attacker could perform a memory dump, and get access to credentials, and use it for impersonation. 2023-09-12 7.3 CVE-2023-40724MISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application stores sensitive application data in an external insecure storage. This could allow an attacker to alter content, leading to arbitrary code execution or denial-of-service condition. 2023-09-12 7.3 CVE-2023-40728MISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application lacks security control to prevent unencrypted communication without HTTPS. An attacker who managed to gain machine-in-the-middle position could manipulate or steal confidential information. 2023-09-12 7.3 CVE-2023-40729MISC sap -- businessobjects_business_intelligence_platform Due to insufficient file type validation, SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) - version 420, allows a report creator to upload files from local system into the report over the network. When uploading the image file, an authenticated attacker could intercept the request, modify the content type and the extension to read and modify sensitive data causing a high impact on confidentiality and integrity of the application. 2023-09-12 7.3 CVE-2023-42472MISCMISC microsoft -- azure_hdinsights Azure HDInsight Apache Ambari Elevation of Privilege Vulnerability 2023-09-12 7.2 CVE-2023-38156MISC zohocorp -- manageengine_admanager_plus Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine. 2023-09-11 7.2 CVE-2023-38743MISC insyde -- iscflashx64.sys An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and copy memory is mishandled. This could cause memory corruption or a system crash. 2023-09-08 7.1 CVE-2021-33834MISCMISC sap -- businessobjects SAP BusinessObjects Suite Installer - version 420, 430, allows an attacker within the network to create a directory under temporary directory and link it to a directory with operating system files. On successful exploitation the attacker can delete all the operating system files causing a limited impact on integrity and completely compromising the availability of the system. 2023-09-12 7.1 CVE-2023-40623MISCMISC siemens -- qms_automotive   A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application lacks sufficient authorization checks. This could allow an attacker to access confidential information, perform administrative functions, or lead to a denial-of-service condition. 2023-09-12 7.1 CVE-2023-40730MISC linux -- kernel A stack based out-of-bounds write flaw was found in the netfilter subsystem in the Linux kernel. If the expression length is a multiple of 4 (register size), the `nft_exthdr_eval` family of functions writes 4 NULL bytes past the end of the `regs` argument, leading to stack corruption and potential information disclosure or a denial of service. 2023-09-11 7.1 CVE-2023-4881MISCMISC n-able -- take_control BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PROGRAMDATA%GetSupportService_N-CentralPushUpdates, leading to arbitrary file deletion. 2023-09-11 7 CVE-2023-27470MISC microsoft -- windows_server_2012 Windows MSHTML Platform Security Feature Bypass Vulnerability 2023-09-12 7 CVE-2023-36805MISC microsoft -- azure_devops   Azure DevOps Server Remote Code Execution Vulnerability 2023-09-12 7 CVE-2023-38155MISC Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info solarwinds -- solarwinds_platform   The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges. 2023-09-13 6.8 CVE-2023-23840MISCMISC solarwinds -- solarwinds_platform   The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges. 2023-09-13 6.8 CVE-2023-23845MISCMISC microsoft -- visual_studio   Visual Studio Elevation of Privilege Vulnerability 2023-09-12 6.7 CVE-2023-36759MISC xpand-it -- write-back_manager Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and predictable symmetric encryption keys for license generation and validation. 2023-09-12 6.5 CVE-2023-27169MISCMISCMISCMISC microsoft -- .net/visual_studio   .NET Core and Visual Studio Denial of Service Vulnerability 2023-09-12 6.5 CVE-2023-36799MISC apache -- airflow Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a URL, which could lead to unmasking the secret configuration of the task that otherwise would be masked in the UI. Users are strongly advised to upgrade to version 2.7.1 or later which has removed the vulnerability. 2023-09-12 6.5 CVE-2023-40712MISCMISCMISC mozilla -- thunderbird When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4573MISCMISCMISCMISCMISCMISC mozilla -- thunderbird When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4574MISCMISCMISCMISCMISCMISC mozilla -- thunderbird When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4575MISCMISCMISCMISCMISCMISC mozilla -- thunderbird When `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to entering the function, which could potentially have led to an exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4577MISCMISCMISCMISC mozilla -- thunderbird When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling `convertToRuntimeErrorAndClear`. A path in the function could attempt to allocate memory when none is available which would have caused a newly created Out of Memory exception to be mishandled as a Syntax Error. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4578MISCMISCMISCMISC mozilla -- thunderbird Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-11 6.5 CVE-2023-4580MISCMISCMISCMISC mutt -- mutt Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2

Read more »

FBI Hacker Dropped Stolen Airbus Data on 9/11
In December 2022, KrebsOnSecurity broke the news that a cybercriminal using the handle "USDoD" had infiltrated the FBI's vetted information sharing network InfraGard, and was selling the contact information for all 80,000 members. The FBI responded by reverifying all InfraGard members and by seizing the cybercrime forum where the data was being sold. But on Sept. 11, 2023, USDoD resurfaced after a lengthy absence to leak sensitive employee data stolen from the aerospace giant Airbus, while promising to visit the same treatment on top U.S. defense contractors.

Read more »

Red Hat Security Advisory 2023-5071-01
- Libcap is a library for getting and setting POSIX.1e draft 15 capabilities. Issues addressed include integer overflow and memory leak vulnerabilities.

Read more »

Adobe, Apple, Google & Microsoft Patch 0-Day Bugs
Microsoft today issued software updates to fix at least five dozen security holes in Windows and supported software, including patches for two zero-day vulnerabilities that are already being exploited. Also, Adobe, Google Chrome and Apple iOS users may have their own zero-day patching to do.

Read more »

Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach
In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Since then, a steady trickle of six-figure cryptocurrency heists targeting security-conscious people throughout the tech industry has led some security experts to conclude that crooks likely have succeeded at cracking open some of the stolen LastPass vaults.

Read more »

Why is .US Being Used to Phish So Many of Us?
Domain names ending in “.US” — the top-level domain for the United States — are among the most prevalent in phishing scams, new research shows. This is noteworthy because .US is overseen by the U.S. government, which is frequently the target of phishing domains ending in .US. Also, .US domains are only supposed to be available to U.S. citizens and to those who can demonstrate that they have a physical presence in the United States.

Read more »

U.S. Hacks QakBot, Quietly Removes Botnet Infections
The U.S. government today announced a coordinated crackdown against QakBot, a complex malware family used by multiple cybercrime groups to lay the groundwork for ransomware infections. The international law enforcement operation involved seizing control over the botnet's online infrastructure, and quietly removing the Qakbot malware from tens of thousands of infected Microsoft Windows computer systems.

Read more »

Vulnerability Summary for the Week of August 21, 2023
  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info qemu -- qemu The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code on the host via execute a malformed program in the guest OS. 2023-08-22 10 CVE-2022-36648MISC c-ares -- c-ares Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c. 2023-08-22 9.8 CVE-2020-22217MISC flac_project -- flac Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder. 2023-08-22 9.8 CVE-2020-22219MISC leeco -- letv_x43_firmware An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN02C080080B04121S, allows attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). 2023-08-21 9.8 CVE-2020-28715MISCMISC gnu -- gnu_scientific_library A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_stats_quantile_from_sorted_data of the library may lead to unexpected application termination or arbitrary code execution. 2023-08-22 9.8 CVE-2020-35357MISCMISC libjpeg-turbo -- libjpeg-turbo libjpeg-turbo version 2.0.90 is vulnerable to a heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c. 2023-08-22 9.8 CVE-2021-29390MISC json-c_project -- json-c An issue was discovered in json-c through 0.15-20200726. A stack-buffer-overflow exists in the function parseit located in json_parse.c. It allows an attacker to cause code Execution. 2023-08-22 9.8 CVE-2021-32292MISC dpic_project -- dpic dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y 2023-08-22 9.8 CVE-2021-33388MISC dpic_project -- dpic dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421. 2023-08-22 9.8 CVE-2021-33390MISC terra-master -- terramaster_operating_system TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instantiation to the api.php?mobile/createRaid URI. (Shell metacharacters can be placed in raidtype because popen is used without any sanitization.) The credentials from CVE-2022-24990 exploitation can be used. 2023-08-20 9.8 CVE-2022-24989MISCMISCMISCMISCMISC pandorafms -- pandora_fms Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue ( unrestricted file upload ) to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prior versions on all platforms. 2023-08-22 9.8 CVE-2023-24517MISC danfoss -- ak-sm_800a_firmware Due to improper input validation, a remote attacker could execute arbitrary commands on the target system. 2023-08-21 9.8 CVE-2023-25915MISCMISC nodejs -- node.js The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js. 2023-08-21 9.8 CVE-2023-32002MISC elecom -- lan-w300n/rs_firmware Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allow an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. 2023-08-18 9.8 CVE-2023-32626MISCMISC e-excellence -- u-office_force   e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service. 2023-08-25 9.8 CVE-2023-32757MISC elecom -- lan-wh300andgpe_firmware Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions, LAN-W300N/P all versions, LAN-WH450N/GP all versions, LAN-WH300AN/DGP all versions, LAN-WH300N/DGP all versions, and LAN-WH300ANDGPE all versions. 2023-08-18 9.8 CVE-2023-35991MISCMISC langchain -- langchain An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter. 2023-08-22 9.8 CVE-2023-36281MISCMISC ivanti -- mobileiron_sentry A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration. 2023-08-21 9.8 CVE-2023-38035MISC ibm -- robotic_process_automation IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an LDAP directory. IBM X-Force ID: 262481. 2023-08-22 9.8 CVE-2023-38734MISCMISC jerryscript -- jerryscript Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scanner-until.c. 2023-08-21 9.8 CVE-2023-38961MISC elecom -- wrc-x1800gs-b_firmware Buffer overflow vulnerability in WRC-X1800GS-B v1.13 and earlier, WRC-X1800GSA-B v1.13 and earlier, and WRC-X1800GSH-B v1.13 and earlier allows an unauthenticated attacker to execute arbitrary code. 2023-08-18 9.8 CVE-2023-39454MISCMISC totolink -- x5000r_firmware TOTOLINK X5000R_V9.1.0cu.2089_B20211224 and X5000R_V9.1.0cu.2350_B20230313 were discovered to contain a remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function. 2023-08-21 9.8 CVE-2023-39617MISC totolink -- x5000r_firmware TOTOLINK X5000R B20210419 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg interface. 2023-08-21 9.8 CVE-2023-39618MISC gabrieleventuri -- pandasai An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function. 2023-08-21 9.8 CVE-2023-39660MISCMISC dlink -- dir-842_firmware D-Link DIR-842 fw_revA_1-02_eu_multi_20151008 was discovered to contain multiple buffer overflows in the fgets function via the acStack_120 and acStack_220 parameters. 2023-08-18 9.8 CVE-2023-39666MISCMISCMISC tenda -- ac6_firmware Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets. 2023-08-18 9.8 CVE-2023-39670MISCMISC dlink -- dir-880l_a1_firmware D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function FUN_0001be68. 2023-08-18 9.8 CVE-2023-39671MISCMISCMISC tenda -- wh450a_firmware Tenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets. 2023-08-18 9.8 CVE-2023-39672MISCMISC tenda -- ac15_firmware Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34(). 2023-08-18 9.8 CVE-2023-39673MISCMISC dlink -- dir-880l_a1_firmware D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function fgets. 2023-08-18 9.8 CVE-2023-39674MISCMISCMISC tp-link -- tl-wr940n_v2_firmware TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm. 2023-08-21 9.8 CVE-2023-39747MISC dlink -- dap-2660_firmware D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /adv_resource. This vulnerability is exploited via a crafted GET request. 2023-08-21 9.8 CVE-2023-39749MISCMISC dlink -- dap-2660_firmware D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the f_ipv6_enable parameter at /bsc_ipv6. This vulnerability is exploited via a crafted POST request. 2023-08-21 9.8 CVE-2023-39750MISCMISC tp-link -- tl-wr941nd_v6_firmware TP-Link TL-WR941ND V6 were discovered to contain a buffer overflow via the pSize parameter at /userRpm/PingIframeRpm. 2023-08-21 9.8 CVE-2023-39751MISC nvki -- intelligent_broadband_subscriber_gateway N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection vulnerability via the a_passwd parameter at /portal/user-register.php. 2023-08-21 9.8 CVE-2023-39807MISCMISC nvki -- intelligent_broadband_subscriber_gateway N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root password which allows attackers to login with root privileges via the SSH service. 2023-08-21 9.8 CVE-2023-39808MISCMISC nvki -- intelligent_broadband_subscriber_gateway N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a command injection vulnerability via the system_hostname parameter at /manage/network-basic.php. 2023-08-21 9.8 CVE-2023-39809MISCMISC elecom -- wrc-f1167acf_firmware OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions, WRC-1167GHBK2 all versions, WRC-1750GHBK2-I all versions, and WRC-1750GHBK-E all versions. 2023-08-18 9.8 CVE-2023-40069MISCMISC fobybus -- social-media-skeleton Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly manage the lifecycle of a user's session. Social media skeleton releases prior to 1.0.5 did not properly limit manage user session lifecycles. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this vulnerability. 2023-08-18 9.8 CVE-2023-40174MISCMISC puma -- puma Puma is a Ruby/Rack web server built for parallelism. Prior to versions 6.3.1 and 5.6.7, puma exhibited incorrect behavior when parsing chunked transfer encoding bodies and zero-length Content-Length headers in a way that allowed HTTP request smuggling. Severity of this issue is highly dependent on the nature of the web site using puma is. This could be caused by either incorrect parsing of trailing fields in chunked transfer encoding bodies or by parsing of blank/zero-length Content-Length headers. Both issues have been addressed and this vulnerability has been fixed in versions 6.3.1 and 5.6.7. Users are advised to upgrade. There are no known workarounds for this vulnerability. 2023-08-18 9.8 CVE-2023-40175MISCMISC devolutions -- remote_desktop_manager Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature. 2023-08-21 9.8 CVE-2023-4373MISC wordpress -- wordpress   The Donation Forms by Charitable plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.7.0.12 due to insufficient restriction on the 'update_core_user' function. This makes it possible for unauthenticated attackers to specify their user role by supplying the 'role' parameter during a registration. 2023-08-23 9.8 CVE-2023-4404MISCMISC credit_lite_project -- credit_lite A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4. Affected by this vulnerability is an unknown functionality of the file /portal/reports/account_statement of the component POST Request Handler. The manipulation of the argument date1/date2 leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-237511. 2023-08-18 9.8 CVE-2023-4407MISCMISCMISC totolink -- ex1200l_firmware A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023. This affects the function setDiagnosisCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237513 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 9.8 CVE-2023-4410MISCMISCMISC totolink -- ex1200l_firmware A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-237514 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 9.8 CVE-2023-4411MISCMISCMISC totolink -- ex1200l_firmware A vulnerability was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This issue affects the function setWanCfg. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237515. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 9.8 CVE-2023-4412MISCMISCMISC beijing_baichuo -- smart_s85f_management_platform A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237517 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 9.8 CVE-2023-4414MISCMISCMISC sourcecodester -- inventory_management_system A vulnerability, which was classified as critical, has been found in SourceCodester Inventory Management System 1.0. This issue affects some unknown processing of the file app/action/edit_update.php. The manipulation of the argument user_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237557 was assigned to this vulnerability. 2023-08-20 9.8 CVE-2023-4436MISCMISCMISC sourcecodester -- inventory_management_system A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/search_sell_paymen_report.php. The manipulation of the argument customer leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-237558 is the identifier assigned to this vulnerability. 2023-08-20 9.8 CVE-2023-4437MISCMISCMISC sourcecodester -- inventory_management_system A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file app/ajax/search_sales_report.php. The manipulation of the argument customer leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237559. 2023-08-20 9.8 CVE-2023-4438MISCMISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been classified as critical. This affects an unknown part of the file appointment.php. The manipulation of the argument sheduledate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237561 was assigned to this vulnerability. 2023-08-20 9.8 CVE-2023-4440MISCMISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /patient/appointment.php. The manipulation of the argument sheduledate leads to sql injection. The attack can be initiated remotely. VDB-237562 is the identifier assigned to this vulnerability. 2023-08-21 9.8 CVE-2023-4441MISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been rated as critical. This issue affects some unknown processing of the file vmpatientbooking-complete.php. The manipulation of the argument userid/apponum/scheduleid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237563. 2023-08-21 9.8 CVE-2023-4442MISCMISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0/5.0.12. Affected is an unknown function of the file vmdoctoredit-doc.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237564. 2023-08-21 9.8 CVE-2023-4443MISCMISCMISC sourcecodester -- free_hospital_management_system_for_small_practices A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is an unknown functionality of the file vmpatientedit-user.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237565 was assigned to this vulnerability. 2023-08-21 9.8 CVE-2023-4444MISCMISCMISC mini -- mini-tmall A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20230811. Affected by this issue is some unknown functionality of the file product/1/1?test=1&test2=2&. The manipulation of the argument orderBy leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237566 is the identifier assigned to this vulnerability. 2023-08-21 9.8 CVE-2023-4445MISCMISCMISC openrapid -- rapidcms A vulnerability, which was classified as critical, was found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file template/default/category.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237567. 2023-08-21 9.8 CVE-2023-4446MISCMISCMISC openrapid -- rapidcms A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. This vulnerability affects unknown code of the file admin/article-chat.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237568. 2023-08-21 9.8 CVE-2023-4447MISCMISCMISC openrapid -- rapidcms A vulnerability was found in OpenRapid RapidCMS 1.3.1 and classified as critical. This issue affects some unknown processing of the file admin/run-movepass.php. The manipulation of the argument password/password2 leads to weak password recovery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 4dff387283060961c362d50105ff8da8ea40bcbe. It is recommended to apply a patch to fix this issue. The identifier VDB-237569 was assigned to this vulnerability. 2023-08-21 9.8 CVE-2023-4448MISCMISCMISCMISC jeecg -- jimureport A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-237571. 2023-08-21 9.8 CVE-2023-4450MISCMISCMISC typora -- typora DOM-based XSS in updater/update.html in Typora before 1.6.7 on Windows and Linux allows a crafted markdown file to run arbitrary JavaScript code in the context of Typora main window via loading typora://app/typemark/updater/update.html in tag. This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora. 2023-08-19 9.6 CVE-2023-2317MISCMISC marktext -- marktext DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScript code to run in the context of MarkText main window. This vulnerability can be exploited if a user copies text from a malicious webpage and paste it into MarkText. 2023-08-19 9.6 CVE-2023-2318MISCMISC luxsoft -- luxcal_web_calendar SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote unauthenticated attacker to execute arbitrary queries against the database and obtain or alter the information in it. 2023-08-21 9.1 CVE-2023-39939MISCMISCMISC hdfgroup -- hdf5 Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file. 2023-08-22 8.8 CVE-2020-18232MISC hdfgroup -- hdf5 Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file. 2023-08-22 8.8 CVE-2020-18494MISC gnu -- binutils An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service. 2023-08-22 8.8 CVE-2020-19726MISCMISC freeimage_project -- freeimage Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafted ico file. 2023-08-22 8.8 CVE-2020-24292MISC freeimage_project -- freeimage Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafted psd file. 2023-08-22 8.8 CVE-2020-24293MISC freeimage_project -- freeimage Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine() in FreeImage 3.19.0 [r1859] allows remote attackers to ru narbitrary code via use of crafted psd file. 2023-08-22 8.8 CVE-2020-24295MISC cesanta -- mongoose Buffer overflow in mg_resolve_from_hosts_file in Mongoose 6.18, when reading from a crafted hosts file. 2023-08-22 8.8 CVE-2020-25887MISC freeimage_project -- freeimage A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp. 2023-08-22 8.8 CVE-2021-40265MISC sass-lang -- libsass Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function. 2023-08-22 8.8 CVE-2022-26592MISC geomatika -- isigeo_web An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to execute commands. 2023-08-22 8.8 CVE-2023-23564MISCMISCMISC opensuse -- libeconf A stack overflow vulnerability exists in function econf_writeFile in file atlibeconf/lib/libeconf.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code. 2023-08-22 8.8 CVE-2023-30078MISCMISCMISC opensuse -- libeconf A stack overflow vulnerability exists in function read_file in atlibeconf/lib/getfilecontents.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code. 2023-08-22 8.8 CVE-2023-30079MISCMISCMISC microsoft -- edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2023-08-21 8.8 CVE-2023-36787MISC elecom -- lan-w451ngr_firmware LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service. 2023-08-18 8.8 CVE-2023-38132MISCMISC boidcms -- boidcms File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code via the GIF header component. 2023-08-21 8.8 CVE-2023-38836MISCMISC online_shopping_portal_project -- online_shopping_portal Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks. 2023-08-18 8.8 CVE-2023-38890MISC elecom -- wrc-1467ghbk-a_firmware Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console. 2023-08-18 8.8 CVE-2023-39445MISCMISC elecom -- wrc-600ghbk-a_firmware OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions. 2023-08-18 8.8 CVE-2023-39455MISCMISC elecom -- wrc-f1167acf_firmware OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allow an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. 2023-08-18 8.8 CVE-2023-39944MISCMISC elecom -- wab-s600-ps_firmware OS command injection vulnerability in WAB-S600-PS all versions, and WAB-S300 all versions allow an authenticated user to execute an arbitrary OS command by sending a specially crafted request. 2023-08-18 8.8 CVE-2023-40072MISCMISC fobybus -- social-media-skeleton Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. A Cross-site request forgery (CSRF) attack is a type of malicious attack whereby an attacker tricks a victim into performing an action on a website that they do not intend to do. This can be done by sending the victim a malicious link or by exploiting a vulnerability in the website. Prior to version 1.0.5 Social media skeleton did not properly restrict CSRF attacks. This has been addressed in version 1.0.5 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2023-08-18 8.8 CVE-2023-40172MISCMISC happysoft -- nbs&happysoftwechat A vulnerability, which was classified as critical, has been found in NBS&HappySoftWeChat 1.1.6. Affected by this issue is some unknown functionality. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237512. 2023-08-18 8.8 CVE-2023-4409MISCMISCMISC ruijienetworks -- rg-ew1200g_firmware A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237518 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-08-18 8.8 CVE-2023-4415MISCMISCMISC google -- chrome Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2023-08-23 8.8 CVE-2023-4429MISCMISCMISC google -- chrome Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2023-08-23 8.8 CVE-2023-4430MISCMISCMISC sourcecodester -- free_and_open_source_inventory_management_system A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php?page=member. The manipulation of the argument columns[0][data] leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-237570 is the identifier assigned to this vulnerability. 2023-08-21 8.8 CVE-2023-4449MISCMISCMISC spice-space -- spice-server An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product. There is a security vulnerablility that can restart KVMvirtual machine without any authorization. It is not yet known if there will be other other effects. 2023-08-22 8.6 CVE-2020-23793MISC microsoft -- microsoft_edge   Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2023-08-26 8.3 CVE-2023-36741MISC google -- chrome Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) 2023-08-23 8.1 CVE-2023-4428MISCMISCMISC google -- chrome Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) 2023-08-23 8.1 CVE-2023-4431MISCMISCMISC elecom -- lan-wh300n/re_firmware Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console. 2023-08-18 8 CVE-2023-38576MISCMISC exiv2 -- exiv2 Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file. 2023-08-22 7.8 CVE-2020-18831MISCMISC microsoft -- z3 There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempts to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution. 2023-08-22 7.8 CVE-2020-19725MISC freeimage_project -- freeimage Buffer Overflow vulnerability in function C_IStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. 2023-08-22 7.8 CVE-2020-21426MISC freeimage_project -- freeimage Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. 2023-08-22 7.8 CVE-2020-21427MISC freeimage_project -- freeimage Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. 2023-08-22 7.8 CVE-2020-21428MISC ogg_video_tools_project -- ogg_video_tools Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file. 2023-08-22 7.8 CVE-2020-21722MISCMISC ogg_video_tools_project -- ogg_video_tools Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file. 2023-08-22 7.8 CVE-2020-21724MISCMISC artifex -- ghostscript Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF document. 2023-08-22 7.8 CVE-2020-21890MISC gnu -- binutils Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c. 2023-08-22 7.8 CVE-2022-44840MISC gnu -- binutils Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c. 2023-08-22 7.8 CVE-2022-45703MISC 7-zip -- p7zip p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. 2023-08-22 7.8 CVE-2022-47069MISC gnu -- binutils An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads which may cause a denial of service or other unspecified impacts. 2023-08-22 7.8 CVE-2022-47673MISC gnu -- binutils An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c. 2023-08-22 7.8 CVE-2022-47695MISC gnu -- binutils An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function compare_symbols. 2023-08-22 7.8 CVE-2022-47696MISC berkaygediz -- o_blog SQL injection vulnerability in berkaygediz O_Blog v.1.0 allows a local attacker to escalate privileges via the secure_file_priv component. 2023-08-21 7.8 CVE-2023-38899MISCMISCMISCMISC openvpn -- openvpn Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet. 2023-08-22 7.5 CVE-2020-20813MISC postgresql -- postgresql An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. 2023-08-22 7.5 CVE-2020-21469MISC libssh2 -- libssh2 An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory. 2023-08-22 7.5 CVE-2020-22218MISC memcached -- memcached Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted meta command. 2023-08-22 7.5 CVE-2020-22570MISC freedesktop -- poppler Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input. 2023-08-22 7.5 CVE-2020-23804MISC realtek -- rtl8812au_firmware An issue was discovered in function nl80211_send_chandef in rtl8812au v5.6.4.2 allows attackers to cause a denial of service. 2023-08-22 7.5 CVE-2020-26652MISC linux -- kernel A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgacon_invert_region() function. 2023-08-22 7.5 CVE-2020-27418MISCMISC gnu -- binutils GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak. 2023-08-22 7.5 CVE-2020-35342MISC vsftpd_project -- vsftpd VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed. 2023-08-22 7.5 CVE-2021-30047MISC dpic_project -- dpic dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y. 2023-08-22 7.5 CVE-2021-32420MISCMISC dpic_project -- dpic dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y. 2023-08-22 7.5 CVE-2021-32421MISCMISC dpic_project -- dpic dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array. 2023-08-22 7.5 CVE-2021-32422MISCMISC imagemagick -- imagemagick An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c. 2023-08-22 7.5 CVE-2021-40211MISC gnu -- binutils Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37. 2023-08-22 7.5 CVE-2021-46174MISC python -- python The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service. 2023-08-22 7.5 CVE-2022-25024MISCMISCMISCMISC radare -- radare2 A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28068MISC radare -- radare2 A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28069MISC radare -- radare2 A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28070MISC radare -- radare2 A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28071MISC radare -- radare2 A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28072MISC radare -- radare2 A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0. 2023-08-22 7.5 CVE-2022-28073MISC imagemagick -- imagemagick A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command. 2023-08-22 7.5 CVE-2022-48541MISC python -- python A use-after-free exists in Python through 3.9 via heappushpop in heapq. 2023-08-22 7.5 CVE-2022-48560MISC cryptopp -- crypto++ Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to memory outside of the allocation if the allocated memory was not 16-byte aligned. NOTE: this issue exists because the CVE-2019-14318 fix was intentionally removed for functionality reasons. 2023-08-22 7.5 CVE-2022-48570MISCMISC memcached -- memcached memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP. 2023-08-22 7.5 CVE-2022-48571MISC cisco -- secure_endpoint_private_cloud A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a logic error in the memory management of an affected device. An attacker could exploit this vulnerability by submitting a crafted AutoIt file to be scanned by ClamAV on the affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to restart unexpectedly, resulting in a DoS condition. 2023-08-18 7.5 CVE-2023-20212MISC danfoss -- ak-sm_800a_firmware Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information. 2023-08-21 7.5 CVE-2023-25913MISCMISC danfoss -- ak-sm_800a_firmware Due to improper restriction, attackers could retrieve and read system files of the underlying server through the XML interface. 2023-08-21 7.5 CVE-2023-25914MISCMISC e-excellence -- u-office_force   e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. An unauthenticated remote attacker can exploit this vulnerability to read arbitrary system files but can’t control system or disrupt service. 2023-08-25 7.5 CVE-2023-32756MISC wordpress -- wordpress The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a crafted URL, bypassing the protection offered. 2023-08-21 7.5 CVE-2023-3604MISC qt -- qt In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a situation in which a prefix is greater than a length. 2023-08-20 7.5 CVE-2023-37369MISCMISCMLIST kidus -- minimati SQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain sensitive information via theID parameter in the fulldelete.php component. 2023-08-18 7.5 CVE-2023-38839MISC weaviate -- weaviate An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function. 2023-08-21 7.5 CVE-2023-38976MISC ntsc-crt_project -- ntsc-crt NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmp_rw.c because a file's width, height, and BPP are not validated. NOTE: the vendor's perspective is "this main application was not intended to be a well-tested program, it's just something to demonstrate it works and for the user to see how to integrate it into their own programs." 2023-08-18 7.5 CVE-2023-39125MISC northgrid -- proself Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote unauthenticated attacker to log in to the product's Control Panel and perform an unintended operation. 2023-08-18 7.5 CVE-2023-39415MISCMISCMISC dlink -- dir-880l_a1_firmware D-Link DIR-880 A1_FW107WWb08 was discovered to contain a NULL pointer dereference in the function FUN_00010824. 2023-08-18 7.5 CVE-2023-39669MISCMISCMISC tp-link -- tl-wr940n_v2_firmware TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via the component /userRpm/AccessCtrlAccessRulesRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. 2023-08-21 7.5 CVE-2023-39745MISC tp-link -- tl-wr1041n_v2_firmware An issue in the component /userRpm/NetworkCfgRpm of TP-Link TL-WR1041N V2 allows attackers to cause a Denial of Service (DoS) via a crafted GET request. 2023-08-21 7.5 CVE-2023-39748MISC tenda -- ac8v4_firmware Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the save_virtualser_data function. 2023-08-21 7.5 CVE-2023-39784MISCMISC tenda -- ac8v4_firmware Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the set_qosMib_list function. 2023-08-21 7.5 CVE-2023-39785MISCMISC tenda -- ac8v4_firmware Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sscanf function. 2023-08-21 7.5 CVE-2023-39786MISCMISC fobybus -- social-media-skeleton Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Prior to version 1.0.5 Social media skeleton did not properly salt passwords leaving user passwords susceptible to cracking should an attacker gain access to hashed passwords. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this issue. 2023-08-18 7.5 CVE-2023-40173MISCMISCMISC veilid -- veilid Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service (out-of-memory abort) via crafted packet data, as exploited in the wild in August 2023. 2023-08-20 7.5 CVE-2023-40711MISC typora -- typora Improper path handling in Typora before 1.6.7 on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora. 2023-08-19 7.4 CVE-2023-2316MISCMISC northgrid -- proself Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands. 2023-08-18 7.2 CVE-2023-39416MISCMISCMISC mcafee -- safe_connect McAfee Safe Connect before 2.16.1.126 may allow an adversary with system privileges to achieve privilege escalation by loading arbitrary DLLs. 2023-08-21 7.2 CVE-2023-40352CONFIRMMISC oracle -- apache_xml_graphics_batik Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later. 2023-08-22 7.1 CVE-2022-44729MISCMISCMISCMISC obsidian -- obsidian Improper path handling in Obsidian desktop before 1.2.8 on Windows, Linux and macOS allows a crafted webpage to access local files and exfiltrate them to remote web servers via "app://local/". This vulnerability can be exploited if a user opens a malicious markdown file in Obsidian, or copies text from a malicious webpage and paste it into Obsidian. 2023-08-19 7.1 CVE-2023-2110MISCMISC unity -- parsec Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User" mode. The application intentionally launches DLLs from a user-owned directory but intended to always perform integrity verification of those DLLs. This affects Parsec Loader versions through 8. Parsec Loader 9 is a fixed version. 2023-08-20 7 CVE-2023-37250MISCMISCCONFIRM Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info phplist -- phplist An issue was discovered in phpList 3.6.12. Due to an access error, it was possible to manipulate and edit data of the system's super admin, allowing one to perform an account takeover of the user with super-admin permission. 2023-08-18 6.7 CVE-2023-27576MISC webassembly -- binaryen A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as. 2023-08-22 6.5 CVE-2020-18378MISC webassembly -- binaryen Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-opt. 2023-08-22 6.5 CVE-2020-18382MISC exempi_project -- exempi Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted audio file with ID3V2 frame. 2023-08-22 6.5 CVE-2020-18651MISCMISC exempi_project -- exempi Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file. 2023-08-22 6.5 CVE-2020-18652MISCMISC freedesktop -- poppler Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause a denial of service. 2023-08-22 6.5 CVE-2020-18839MISC gnu -- ncurses Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19185MISC gnu -- ncurses Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19186MISC gnu -- ncurses Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19187MISC gnu -- ncurses Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19188MISC gnu -- ncurses Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19189MISC gnu -- ncurses Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. 2023-08-22 6.5 CVE-2020-19190MISC freeimage_project -- freeimage Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a denial of service via crafted PFM file. 2023-08-22 6.5 CVE-2020-22524MISC libraw -- libraw Buffer Overflow vulnerability in LibRaw::stretch() function in librawsrcpostprocessingaspect_ratio.cpp. 2023-08-22 6.5 CVE-2020-22628MISC freeimage_project -- freeimage Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to cuase a denial of service via opening of crafted psd file. 2023-08-22 6.5 CVE-2020-24294MISC freeimage_project -- freeimage A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp. 2023-08-22 6.5 CVE-2021-40262MISC freeimage_project -- freeimage NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImage_CloneTag function inFreeImageTag.cpp. 2023-08-22 6.5 CVE-2021-40264MISC freeimage_project -- freeimage FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference. 2023-08-22 6.5 CVE-2021-40266MISC upx_project -- upx Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx function. 2023-08-22 6.5 CVE-2021-46179MISC freedesktop -- poppler An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream check before saving an embedded file. 2023-08-22 6.5 CVE-2022-37051MISCMISC freedesktop -- poppler A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject. 2023-08-22 6.5 CVE-2022-37052MISCMISC libtiff -- libtiff An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file. 2023-08-22 6.5 CVE-2022-40090MISCMISC python -- python read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format. 2023-08-22 6.5 CVE-2022-48564MISC geomatika -- isigeo_web An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to obtain sensitive database content via SQL Injection. 2023-08-22 6.5 CVE-2023-23563MISCMISCMISC pandorafms -- pandora_fms Server-Side Request Forgery (SSRF) vulnerability in API checker of Pandora FMS. Application does not have a check on the URL scheme used while retrieving API URL. Rather than validating the http/https scheme, the application allows other scheme such as file, which could allow a malicious user to fetch internal file content. This issue affects Pandora FMS v767 version and prior versions on all platforms. 2023-08-22 6.5 CVE-2023-24515MISC typora -- typora Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora. 2023-08-19 6.5 CVE-2023-2971MISC tp-link -- tapo An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message. 2023-08-22 6.5 CVE-2023-38906MISCMISC tp-link -- tapo An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the TSKEP authentication function. 2023-08-22 6.5 CVE-2023-38908MISCMISCMISC tp-link -- tapo An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the IV component in the AES128-CBC function. 2023-08-22 6.5 CVE-2023-38909MISCMISCMISC oracle -- apache_nifi Apache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS access in several Processors and Controller Services with connection URL validation that does not provide sufficient protection against crafted inputs. An authenticated and authorized user can bypass connection URL validation using custom input formatting. The resolution enhances connection URL validation and introduces validation for additional related properties. Upgrading to Apache NiFi 1.23.1 is the recommended mitigation. 2023-08-18 6.5 CVE-2023-40037MISCMISCMISC devolutions -- remote_desktop_manager Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in the duplication write process. 2023-08-21 6.5 CVE-2023-4417MISC wallabag -- wallabag Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3. 2023-08-21 6.5 CVE-2023-4455MISCMISC redhat -- openshift_logging A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached. 2023-08-21 6.5 CVE-2023-4456MISCMISC samsung -- sww-3400rw_firmware A reflected cross site scripting (XSS) vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bin/command.cgi 2023-08-22 6.1 CVE-2020-22181MISCMISC nagios -- nagios_xi Cross Site Scripting (XSS) in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request. 2023-08-22 6.1 CVE-2020-23992MISC cacti -- cacti Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php. 2023-08-22 6.1 CVE-2022-41444MISC cacti -- cacti A reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML in the "ref" parameter at auth_changepassword.php. 2023-08-22 6.1 CVE-2022-48547MISC pandorafms -- pandora_fms Cross-site Scripting (XSS) vulnerability in Visual Console Module of Pandora FMS could be used to hijack admin users session cookie values, carry out phishing attacks, etc. This issue affects Pandora FMS v767 version and prior versions on all platforms. 2023-08-22 6.1 CVE-2023-24514MISC wordpress -- wordpress Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in UX-themes Flatsome plugin

Read more »

Apple has the iPad mini 6 in stock today for $80-$100 off MSRP, Certified Refurbished
Apple has the 8.3″ WiFi iPad mini 6 in stock and available for $80-$100 off MSRP, Certified Refurbished, each including free shipping. Prices start at $419. Each iPad features a new outer case and includes Apple’s standard one-year warranty: The post first appeared on MacPrices.net.

Read more »

Apple has restocked M2 Mac minis starting at $509, ranging up to $200 off MSRP, Certified Refurbished
Apple has M2-powered Mac minis available again in their Certified Refurbished section starting at $509 and ranging up to $200 off MSRP. Each mini comes with Apple’s one-year warranty, and shipping is free. The following models are in stock today: The post first appeared on MacPrices.net.

Read more »

New promo at AT&T: $300 off any Apple Watch 9 or Ultra 2 when you buy 2 and add a line of service
AT&T is offering Apple Watch Series 9 and Ultra 2 models for $300 off MSRP when you purchase two Watches with AT&T service and add at least one new line... The post New promo at AT&T: $300 off any Apple Watch 9 or Ultra 2 when you buy 2 and add a line of service first appeared on MacPrices.net.

Read more »

Introducing AppleSurfer at MacPrices: All your Apple headline news on one page
Scan all the headlines from Apple and over a dozen major Apple websites on our new page, AppleSurfer. Paying homage to the now defunct MacSurfer website, we update AppleSurfer hourly, 24/7, with headline news links from all the major Mac and Apple websites as an easy to read list on one page. We also show you how recent each post went live. The post first appeared on MacPrices.net.

Read more »

Get a new 15″ M2 MacBook Air for $200 off MSRP with current sales
Get a new 15" M2 MacBook Air for $200 off MSRP with current sales... The post first appeared on MacPrices.net.

Read more »

10th generation Apple iPads on sale for $60 off MSRP, starting at $269
Amazon has Apple's 9th generation 10.2" iPads on sale for $60 off MSRP with prices available starting at $269. Their prices are the lowest new prices available for iPads anywhere: The post first appeared on MacPrices.net.

Read more »

Apple iPad Airs back on sale for $100 off MSRP at Amazon
Amazon has 10.9″ M1 WiFi iPad Airs on sale again for $100 off Apple’s MSRP, with prices starting at $499. Each includes free shipping. Their prices are the lowest available among the Apple retailers we track: The post first appeared on MacPrices.net.

Read more »

New low price: 13″ M2 MacBook Pro for $1049, $250 off Apple’s MSRP
Amazon has the Space Gray 13″ MacBook Pro with an Apple M2 CPU and 256GB of storage in stock and on sale today for $250 off MSRP. Their price is the lowest we’ve seen for this configuration from any Apple retailer. The post first appeared on MacPrices.net.

Read more »

Apple AirPods 2 with USB-C now in stock and on sale for $50 off MSRP, only $199
Amazon has Apple’s 2023 AirPods Pro with USB-C now in stock and on sale for $199.99 including free shipping. Their price is $50 off MSRP, and it’s currently the lowest price available for new AirPods Pro among the retailers we track. Delivery is expected as soon as September 26th. The post first appeared on MacPrices.net.

Read more »

New low prices: Apple’s 15″ M2 MacBook Airs with 512GB of storage for $1249, $250 off MSRP
Amazon has 15" MacBook Airs with M2 CPUs and 512GB of storage in stock and on sale for $1249 shipped. That's $250 off Apple's MSRP, and it's the lowest price available for these M2-powered MacBook Airs: The post first appeared on MacPrices.net.

Read more »

New low price: Clearance 16″ Apple MacBook Pro with 32-core M1 Max GPU for $1100 off original MSRP
B&H Photo has clearance 16″ M1 Max MacBook Pros, 10-core CPU/32-core GPU/1TB SSD/Space Gray or Silver, in stock today for $2399 including free 1-2 day delivery to most US addresses. Their price is $1100 off Apple’s original MSRP, and it’s the lowest price for this configuration among the retailers we track: The post first appeared on MacPrices.net.

Read more »

Switch to Red Pocket Mobile and get a new iPhone 15 for $300 off MSRP, no trade-in required
Red Pocket Mobile has new Apple iPhone 15 and 15 Pro models on sale for $300 off MSRP when you switch and open up a new line of service. Red Pocket Mobile is a nationwide service using all the major wireless carrier networks and offers plans starting at $10 per month. The post first appeared on MacPrices.net.

Read more »