NVD disclosure day
CVE-2023-34752
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A SQL injection vulnerability exists in bloofoxcms, a web content management system. This flaw, affecting the `lid` parameter in the language settings, could allow unauthenticated attackers to execute arbitrary SQL commands, potentially leading to unauthorized database access, data corruption, or system compromise if t
CVE-2023-29360
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw in the Microsoft Streaming Service could allow an attacker with local access to elevate privileges. This impacts affected Windows systems, posing a business risk of unauthorized system control.
CVE-2023-29357
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Microsoft SharePoint Server has an elevation of privilege vulnerability that allows an attacker to gain administrator privileges using spoofed tokens. This could allow unauthorized administrative control over affected systems. Organizations using SharePoint Server face business risk from this vulnerability.