NVD disclosure day
CVE-2022-28321
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the Linux-PAM package affects SSH logins on openSUSE Tumbleweed, potentially allowing unauthorized access when users attempt to connect from IP addresses not resolvable by DNS. This could bypass normal access controls and grant unauthenticated entry to systems. The direct relevance is primarily for o
CVE-2022-40139
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Trend Micro Apex One and Apex One as a Service clients have a rollback validation flaw. An administrator with console access could direct clients to download unverified packages, potentially leading to remote code execution. This poses a risk of client system compromise.
CVE-2022-35914
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in a GLPI module allows for PHP code injection. This could enable unauthorized access to systems and data, posing a business risk. Organizations should review their GLPI instances for potential impact.