NVD disclosure day
CVE-2022-40030
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A SQL injection vulnerability exists in a task management system, allowing unauthenticated network-based attacks that could lead to unauthorized access, modification, or deletion of sensitive data.
CVE-2022-0495
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Koha library software has a critical flaw letting attackers steal or change data without logging in. This fix is urgent for any library using this system.
CVE-2022-2315
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Databank's Accreditation Tracking/Presentation Module has a critical flaw allowing unauthenticated attackers to steal or alter sensitive data, demanding immediate attention for data protection.
CVE-2022-38619
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A SQL injection vulnerability exists in the SmartVista SVFE2 application, which could allow unauthorized individuals to access or alter sensitive data by manipulating database queries. This issue poses a risk to system integrity and data confidentiality if the vulnerable component is reachable over a network.