NVD disclosure day

Published threat advisories for October 12, 2020

CVE-2020-26867

ARC Informatique PcVue Untrusted Data Deserialization Remote Code Execution.

Halo Surface Signal: 3 out of 5 — possibly public-facing.

ARC Informatique PcVue is vulnerable to untrusted data deserialization, which could enable an attacker to execute arbitrary code remotely on the web and mobile back-end server. This vulnerability does not require special privileges or user interaction to exploit, potentially impacting the integrity and availability of

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2020-5135

SonicOS Denial of Service and Code Execution Vulnerability.

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A buffer overflow in SonicOS permits external attackers to disrupt services or execute code by sending malicious requests. This impacts firewall systems, potentially affecting network availability and system integrity. The realistic business risk includes denial of service and unauthorized code execution.

NVD modified: NVD date unavailable • CISA KEV