NVD disclosure day
CVE-2023-4501
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Certain OpenText (Micro Focus) COBOL products have a vulnerability in their LDAP-based authentication that allows an attacker to bypass password checks. If reachable, this could enable an attacker to impersonate any user, posing a significant security risk. The vulnerable configurations are considered uncommon, and mit
CVE-2023-36802
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A privilege escalation vulnerability in the Microsoft Streaming Service Proxy impacts Microsoft Windows systems. This flaw allows an attacker with local access to gain elevated privileges, potentially leading to unauthorized system control and data modification. The vulnerability is listed as a known exploited vulnerab
CVE-2023-36761
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Microsoft Word applications are affected by an information disclosure vulnerability. This impacts organizations by potentially exposing sensitive data, increasing the risk of data breaches and unauthorized access to confidential business information. Organizations should consult Microsoft's guidance for mitigation step
CVE-2023-4863
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A heap buffer overflow in the libwebp library can allow attackers to write data outside of allocated memory via a crafted HTML page. This impacts organizations using affected browsers or image viewers, posing a risk to data integrity and system operation.
CVE-2023-39637
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A command injection vulnerability exists in D-Link DIR-816 routers, allowing unauthenticated attackers to execute arbitrary commands over the network. If the affected device's web interface is accessible, this could lead to unauthorized control and disruption. Technical teams should identify deployed units, assess thei
CVE-2023-41990
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Apple operating systems allows for arbitrary code execution when processing a font file. This could impact affected systems and data. Organizations should identify all affected devices and apply vendor-provided security updates.