NVD disclosure day

Published threat advisories for September 30, 2022

CVE-2022-35156

Bus Pass Management System SQL Injection Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A SQL injection vulnerability in Bus Pass Management System 1.0 allows attackers to manipulate database queries via the searchdata parameter. This could lead to unauthorized access and modification of system data. The system is exposed externally, making this a critical concern.

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2022-20775

Cisco SD-WAN Elevated Privilege Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in Cisco SD-WAN software's command-line interface allows an authenticated local attacker to gain elevated privileges. This could allow an attacker to execute arbitrary commands as the root user, potentially compromising the entire SD-WAN infrastructure. Organizations using affected Cisco SD-WAN software

NVD modified: NVD date unavailable • CISA KEV