NVD disclosure day

Published threat advisories for February 9, 2024

CVE-2023-6677

Oduyo Online Collection can be compromised to steal customer data or disrupt service.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

Oduyo Online Collection has a critical flaw allowing attackers to steal or corrupt financial data without needing a login. This affects systems before version 1.0.2 and requires immediate attention.

NVD published: February 9, 2024

CVE advisoryKnown Exploit

CVE-2024-21762

Fortinet FortiOS and FortiProxy Code Execution Vulnerability.

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A vulnerability in Fortinet FortiOS and FortiProxy enables attackers to execute unauthorized code via crafted requests. This impacts network security devices, potentially leading to data compromise and operational disruption. Business risk is elevated due to the potential for system intrusion.

NVD published: February 9, 2024 • CISA KEV