NVD disclosure day
CVE-2022-27985
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A SQL injection vulnerability in CuppaCMS could allow unauthenticated attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. This affects the content management system's database integrity and confidentiality.
CVE-2022-27984
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability in CuppaCMS allows unauthenticated attackers to manipulate database queries over a network. This could lead to unauthorized access or modification of sensitive data if the system is reachable. The relevance and exposure of any CuppaCMS installations should be confirmed.
CVE-2022-24706
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An improperly secured default installation of Apache CouchDB allows unauthenticated attackers to gain administrative privileges, impacting organizations using the database. This exposes them to risks of unauthorized data access and control, necessitating immediate security configuration reviews and updates.
CVE-2022-29499
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Mitel MiVoice Connect's Service Appliance component contains a data validation flaw enabling remote code execution. This impacts organizations by allowing unauthorized code execution on affected systems, posing a business risk.