NVD disclosure day
CVE-2019-5482
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A heap buffer overflow vulnerability exists in cURL's TFTP protocol handler. If reachable, this could lead to denial of service or arbitrary code execution. Because cURL is widely deployed, understanding its TFTP usage is important for assessing risk.
CVE-2019-5481
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A double-free vulnerability exists in the FTP-kerberos component of the cURL library. If reachable, this flaw could allow for memory corruption, potentially leading to application crashes or unpredictable behavior. This vulnerability affects systems that use specific versions of the cURL library for FTP transfers invol
CVE-2019-16057
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A command injection vulnerability in D-Link DNS-320 devices allows remote attackers to execute arbitrary commands. This could lead to unauthorized access and control of affected systems, posing a business risk to organizations and their data.