NVD disclosure day
CVE-2022-48522
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability exists in Perl that could allow remote code execution or local privilege escalation. This issue stems from a flaw in how a function handles uninitialized variables within the interpreter. The potential impact depends on how Perl is deployed in specific applications, meaning it could be reachable via net
CVE-2022-48174
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A stack overflow vulnerability in BusyBox's `ash.c` component allows for arbitrary code execution. This could be exploited if the vulnerable component is reachable, potentially impacting system integrity and operations. Determining if affected systems are present and exposed is crucial.
CVE-2021-32292
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical stack buffer overflow vulnerability exists in an auxiliary sample program within the json-c library. This flaw could allow an attacker to cause a program to crash or potentially be taken over by sending specially crafted JSON data. While the issue is in sample code and exploitation in production is considere