NVD disclosure day
CVE-2023-6677
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Oduyo Online Collection has a critical flaw allowing attackers to steal or corrupt financial data without needing a login. This affects systems before version 1.0.2 and requires immediate attention.
CVE-2024-25675
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated attacker can trigger export generation in MISP by making a network request, potentially leading to unauthorized access or modification of exported data. This vulnerability affects the MISP threat intelligence platform.
CVE-2024-25674
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
MISP has an insecure file upload vulnerability that lacks checks for file extension and MIME type. This could allow an attacker to upload and potentially execute arbitrary files, impacting system integrity and availability. It is recommended to confirm if your instance is affected and assess potential exposure.
CVE-2024-21762
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in Fortinet FortiOS and FortiProxy enables attackers to execute unauthorized code via crafted requests. This impacts network security devices, potentially leading to data compromise and operational disruption. Business risk is elevated due to the potential for system intrusion.