NVD disclosure day
CVE-2021-45807
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A command execution vulnerability exists in jpress, a web content system, that could allow an unauthenticated attacker to run arbitrary commands. This is a critical issue if the upload functionality is reachable over the network, potentially impacting server integrity and availability.
CVE-2022-23134
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability exists in Zabbix Frontend's setup process, allowing unauthenticated users to alter system configurations. This could disrupt monitoring operations or impact system integrity. Affected organizations should apply vendor updates.
CVE-2022-23131
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Zabbix Frontend, when SAML SSO is enabled, allows an unauthenticated actor to modify session data and escalate privileges to gain administrative access. This impacts organizations using Zabbix Frontend with SAML SSO configured. The business risk involves unauthorized administrative control over monit