NVD disclosure day
CVE-2021-22945
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A memory corruption vulnerability exists in libcurl when handling certain data transmissions, which could lead to issues if reachable. This vulnerability impacts software relying on libcurl for network communication, potentially causing crashes or unexpected behavior during data transfer. Confirmation of specific produ
CVE-2021-22941
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
Citrix ShareFile storage zones controllers are affected by improper access control, enabling unauthenticated remote compromise. This presents a business risk of unauthorized data access and operational disruption. The vulnerability has been observed in ransomware campaigns.
CVE-2021-22017
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in VMware vCenter Server allows unauthorized network access to internal endpoints by bypassing proxy controls. This impacts organizations by potentially exposing internal systems and data. Affected organizations face business risk due to unauthorized access.
CVE-2021-22005
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in VMware vCenter Server allows unauthorized network access to upload a malicious file, leading to code execution. This poses a significant risk to affected organizations, potentially compromising server integrity and availability. The vulnerability is exploitable via network access to port 443