NVD disclosure day
CVE-2022-23227
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
NUUO NVRmini2 devices are affected by a vulnerability allowing unauthorized user creation and code execution. This presents a business risk of system compromise and data access. The vendor has identified the affected product as end-of-life and recommends discontinuing its use.
CVE-2022-23219
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A flaw in the GNU C Library's deprecated `clnt_create` function allows a buffer overflow when processing hostnames, potentially leading to denial of service or arbitrary code execution if stack protection is not enabled. This vulnerability is reachable via network and requires no authentication or user interaction, mak
CVE-2022-23218
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the GNU C Library's sunrpc module allows for a buffer overflow due to improper length validation of a path argument. This could lead to denial of service or arbitrary code execution if the affected function is reachable and the application lacks stack protection. The uncertainty lies in whether this