NVD disclosure day
CVE-2024-29859
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability exists in MISP software that could permit unauthorized file uploads, potentially compromising system integrity and data confidentiality. This issue stems from inadequate file upload validation in a specific feature. If the affected component is reachable, an attacker might exploit this to upload arbitra
CVE-2024-29858
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in MISP allows unauthenticated users to upload unauthorized files by bypassing logo validation checks. This could lead to system compromise, impacting data integrity and availability. Organizations using MISP should confirm its deployment and assess potential exposure to this critical issue.
CVE-2024-1202
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in XPodas Octopod allows for authentication bypass, potentially enabling unauthorized access to systems and data. As the product is no longer supported by the vendor, organizations using it face a significant risk of data compromise and unauthorized system modifications.