NVD disclosure day

Published threat advisories for February 23, 2023

CVE-2023-23914

Curl Cleartext HSTS Bypass Vulnerability

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

A cleartext transmission vulnerability in curl may allow sensitive information to be transmitted insecurely. This occurs when curl's HSTS functionality fails during serial URL transfers, potentially bypassing HTTPS enforcement. The concern is confirming its relevance and exposure.

NVD modified: NVD date unavailable

CVE advisoryCRITICAL

CVE-2022-2504

SDD-Baro allows attackers to take control of customer data and services

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

An SQL injection flaw in SDD-Baro lets attackers steal or alter sensitive customer data and control services by sending malicious commands over the internet. This is a critical issue for all versions before 2.8.432.

NVD modified: NVD date unavailable