NVD disclosure day
CVE-2022-35293
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
In SAP Enable Now, insecure session management allows unauthenticated attackers to access user accounts, potentially viewing or modifying data and impacting application confidentiality and integrity.
CVE-2021-33643
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in libtar that allows an attacker to trigger an out-of-bounds read by submitting a crafted tar file with a zero-size header. This could potentially impact system stability or lead to further security risks if the affected technology is used to process untrusted tar files.
CVE-2022-0028
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A misconfiguration in PAN-OS URL filtering policies allows network attackers to conduct denial-of-service attacks, appearing to originate from Palo Alto Networks firewalls. This could obscure attacker identity and implicate the firewall, impacting service availability but not data confidentiality or integrity. Realisti