NVD disclosure day
CVE-2018-4878
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A memory management flaw in Adobe Flash Player allows for arbitrary code execution. This impacts organizations by enabling attackers to compromise systems and data. The realistic business risk involves potential unauthorized access and control over affected systems.
CVE-2017-7525
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A deserialization flaw in the jackson-databind library could permit an unauthenticated attacker to execute arbitrary code by sending crafted input. This vulnerability is relevant to systems processing JSON data, potentially leading to system compromise. It is important to identify affected instances and assess exposure
CVE-2017-15095
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A deserialization flaw in the jackson-databind library allows an unauthenticated attacker to execute arbitrary code by sending crafted input. This could impact systems processing untrusted data, potentially leading to compromised integrity and confidentiality.