NVD disclosure day
CVE-2019-20445
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the Netty networking framework allows for the misinterpretation of HTTP headers, potentially enabling attackers to bypass security controls. This issue arises when conflicting or duplicate `Content-Length` or `Transfer-Encoding` headers are processed, which could lead to unauthorized data access or m
CVE-2019-20444
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Netty's HTTP header parsing contains a vulnerability that could allow attackers to send malformed headers, potentially causing incorrect interpretation and leading to security risks. This affects systems that use Netty for network communication. It's important to confirm if your deployed technologies use the impacted N
CVE-2020-7247
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in OpenSMTPD allows remote attackers to execute commands as root. This impacts organizations using the affected mail server component, potentially leading to unauthorized system access and data compromise. The realistic business risk involves loss of system control and data integrity.