NVD disclosure day
CVE-2022-4262
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A type confusion vulnerability in Google Chrome's V8 engine could allow remote attackers to corrupt data via a malicious HTML page. This impacts organizations by potentially enabling attackers to execute code, posing a business risk.
CVE-2022-44945
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A SQL injection vulnerability exists in Rukovoditel software, allowing unauthenticated attackers to manipulate database queries via the network. This could lead to unauthorized access, modification, or deletion of sensitive data, posing a critical risk if the software is in use.
CVE-2022-44291
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A SQL injection vulnerability in webTareas's phasesets.php allows unauthenticated attackers to manipulate the database via network requests, potentially leading to unauthorized access or modification of sensitive data. Readers should care because this critical flaw could impact data integrity and access.
CVE-2022-44290
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A SQL injection vulnerability exists in the webTareas application's `deleteapprovalstages.php` script, allowing unauthenticated attackers to manipulate the database via the `id` parameter. This could lead to unauthorized data access, modification, or deletion if the application is reachable.
CVE-2022-2807
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical flaw in Algan's Prens Student Information System lets attackers steal or change sensitive student data over the internet without any special access.