NVD disclosure day

Published threat advisories for March 29, 2024

CVE-2024-29640

Aliyundrive-WebDAV Code Execution Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical vulnerability exists in aliyundrive-webdav affecting the QR code query component, allowing remote attackers to execute arbitrary code via a crafted payload. This could lead to unauthorized system control and data manipulation. Understanding your exposure to this WebDAV server is important.

NVD modified: NVD date unavailable

CVE advisoryCRITICAL

CVE-2023-6191

WebPDKS allows attackers to steal customer data or control services.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical flaw in Egehan Security WebPDKS allows anyone to access and steal sensitive employee data or control its services without needing a password. This could expose your company's private information.

NVD modified: NVD date unavailable