NVD disclosure day

Published threat advisories for March 2, 2023

CVE-2022-46501

Accruent Maintenance Connection SQL Injection Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A SQL injection vulnerability in Accruent Maintenance Connection's E-Mail to Work Order function could allow an unauthenticated attacker to manipulate database queries, potentially exposing or altering system data. This could affect database integrity and confidentiality.

NVD modified: NVD date unavailable

CVE advisoryCRITICAL

CVE-2021-3854

Attacker can take control of Useroam Hotspot or steal sensitive data

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A critical flaw in Glox Technology Useroam Hotspot lets attackers steal data or take control without needing a password, due to SQL injection. This is a serious risk as it's easily exploitable over the internet.

NVD modified: NVD date unavailable