NVD disclosure day
CVE-2022-25578
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical code injection vulnerability exists in TaoCMS, allowing attackers to execute arbitrary code by editing the `.htaccess` file. This issue is reachable over the network and can lead to server compromise.
CVE-2022-22620
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Apple's Safari, iOS, iPadOS, and macOS allows for arbitrary code execution via crafted web content. This poses a business risk of data compromise and system disruption. The issue has been actively exploited.
CVE-2022-22587
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A memory corruption vulnerability in Apple operating systems could allow a malicious application to execute arbitrary code with kernel privileges, impacting system integrity and data confidentiality. Apple has released updates to address this issue, and the vulnerability has reportedly been actively exploited. Organiza
CVE-2021-45834
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An attacker can upload dangerous file types to the OpenDocMan portal, potentially leading to arbitrary code execution if the files are processed. This vulnerability is relevant if the document management portal is externally accessible.