NVD disclosure day
CVE-2022-28397
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An arbitrary file upload vulnerability in Ghost CMS could allow attackers to execute arbitrary code. The vendor states this feature is intentionally restricted to trusted users, but if reachable, it could impact system integrity. Confirming relevance and system exposure is crucial for assessing risk.
CVE-2022-27262
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An arbitrary file upload vulnerability exists in the file upload module of Skipper, a component used in web applications for processing file uploads. If reachable, attackers could exploit this by uploading a crafted file to execute arbitrary code on affected systems, potentially compromising system integrity and confid
CVE-2022-27260
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An arbitrary file upload vulnerability in ButterCMS allows attackers to execute arbitrary code by uploading a crafted SVG file. This could impact system confidentiality, integrity, and availability if the file upload component is reachable.