NVD disclosure day

Published threat advisories for January 18, 2019

CVE-2019-3773

Spring Web Services XXE Injection Vulnerability.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

Spring Web Services is susceptible to XML External Entity Injection when processing untrusted XML data, potentially allowing unauthenticated attackers to access or modify sensitive information. This issue impacts systems that rely on this technology for XML communication, posing a risk of data exposure or service disru

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2018-15982

Adobe Flash Player Code Execution Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A use-after-free vulnerability in Adobe Flash Player could allow attackers to execute arbitrary code. This could impact affected organizations by enabling unauthorized access to systems and data, leading to potential business disruption. As Flash Player is end-of-life, remaining instances should be disconnected from th

NVD modified: NVD date unavailable • CISA KEV