NVD disclosure day
CVE-2019-17026
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A type confusion flaw in the IonMonkey JIT compiler used in certain Mozilla products could allow attackers to compromise systems. Affected organizations face risks to their data and systems due to this vulnerability.
CVE-2020-9548
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in the FasterXML jackson-databind library allows for remote code execution through mishandled serialization. This could lead to unauthorized access and control of affected systems by processing specially crafted data. Confirming its presence and reachability is crucial for assessing risk.
CVE-2020-9546
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The FasterXML jackson-databind library has a vulnerability in how it handles serialization gadgets and typing, specifically related to HikariConfig. This could allow attackers to process data in unintended ways if they can reach a vulnerable application, potentially impacting system data and service behavior. The libra