NVD disclosure day
CVE-2023-46233
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
The crypto-js JavaScript library has a critical vulnerability in its PBKDF2 function due to using weak cryptographic standards, significantly reducing its security for password protection and signature generation. If an application uses this library and is reachable, sensitive data could be compromised. Confirming the
CVE-2023-46010
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
SeaCMS versions prior to 12.9 contain a critical vulnerability in the admin_safe.php component that allows unauthenticated attackers to execute arbitrary commands over the network. This could lead to a complete compromise of the affected system.
CVE-2023-34048
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in VMware vCenter Server allows unauthorized network access to execute arbitrary code. This could lead to data compromise and disruption of business operations. Organizations should identify all vCenter Server instances, restrict network access, and apply vendor updates.
CVE-2023-20273
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Cisco IOS XE Software's web UI allows authenticated attackers to inject commands with root privileges. This impacts affected Cisco IOS XE devices, presenting a business risk of unauthorized system control and data compromise. Organizations should identify and secure exposed devices, applying vendor f