NVD disclosure day
CVE-2018-6961
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
VMware NSX SD-WAN Edge has a command injection vulnerability in its local web UI, which could allow remote code execution. This component is disabled by default, limiting realistic business risk unless intentionally enabled on untrusted networks. Successful exploitation could impact systems and data.
CVE-2016-9079
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in SVG Animation could allow unauthorized access to data if users interact with malicious content. An exploit targeting specific browsers on Windows has been observed, presenting a business risk of data compromise. Organizations should identify and mitigate affected systems.
CVE-2016-9063
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An integer overflow vulnerability in the Expat XML parsing library could allow an attacker to execute arbitrary code or cause a denial of service when processing crafted XML data. This issue affects applications that use the Expat library, including certain versions of Firefox and Python, and requires careful assessmen