NVD disclosure day

Published threat advisories for June 4, 2024

CVE-2024-36104

Apache OFBiz Path Traversal Vulnerability CVE-2024-36104

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A path traversal vulnerability exists in Apache OFBiz, potentially allowing unauthorized access to files. If reachable, this could expose or modify sensitive data. Confirm if your organization uses OFBiz and if it's externally exposed.

NVD modified: NVD date unavailable

CVE advisoryCRITICAL

CVE-2024-29972

Zyxel NAS Command Injection Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A command injection vulnerability in Zyxel NAS devices could allow an unauthenticated attacker to execute operating system commands remotely. This occurs via a crafted HTTP POST request to the "remote_help-cgi" program. If reachable, this could impact device confidentiality, integrity, and availability, as well as stor

NVD modified: NVD date unavailable