NVD disclosure day
CVE-2023-3376
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical flaw in Zekiweb lets attackers steal sensitive customer data and control systems remotely by injecting malicious code into the application. This issue, affecting versions before 2.0, requires immediate attention due to its broad exposure and potential for serious compromise.
CVE-2023-2963
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An external attacker could take advantage of a security flaw in the Oliva Expertise EKS web interface to bypass access controls. This may allow them to view, modify, or delete sensitive records held within your organization's database.
CVE-2023-2960
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An external attacker could exploit a flaw in Oliva Expertise EKS to inject malicious scripts into the web interface. This allows them to hijack active user sessions, perform unauthorized actions, or take over accounts to access sensitive information.
CVE-2023-2959
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Oliva Expertise EKS has a serious flaw allowing anyone on the internet to access user data without a password. This warrants immediate attention to protect sensitive information.