NVD disclosure day
CVE-2023-41449
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability exists in the phpkobo AjaxNewsTicker component, allowing remote attackers to execute arbitrary code through a crafted payload. This could lead to a system compromise. It is important to determine if this component is present and accessible within the environment.
CVE-2023-20109
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in Cisco's Group Encrypted Transport VPN feature allows an authenticated attacker with administrative control to execute arbitrary code or cause a denial of service. This impacts systems using specific versions of Cisco IOS and IOS XE Software. Business risk includes potential full system compromise or
CVE-2023-4737
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Hedef Tracking Admin Panel has a critical flaw allowing attackers to inject malicious commands to steal data or take over your systems. This affects internet-facing systems and requires immediate attention.
CVE-2023-43234
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
DedeBIZ software contains critical remote code execution vulnerabilities in its file management component. Attackers can exploit these flaws to run arbitrary code over the network without authentication, potentially compromising system integrity and availability. Organizations should identify and assess any instances o
CVE-2023-40044
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A .NET deserialization vulnerability in WS_FTP Server's Ad Hoc Transfer module allows a pre-authenticated attacker to execute commands on the operating system. This affects the integrity of affected systems and poses a business risk of unauthorized access and data compromise.
CVE-2023-36851
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Juniper Networks Junos OS on SRX Series devices are affected by a vulnerability allowing unauthorized file uploads. This could lead to file system integrity loss and potentially enable further compromise. The business risk involves potential data manipulation and unauthorized access to system files.
CVE-2023-35071
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Hackers can steal sensitive customer data and take control of systems using the MRV Tech Logging Administration Panel by injecting malicious commands, an issue that is especially concerning due to its potential internet exposure.