NVD disclosure day
CVE-2023-37058
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An insecure permissions vulnerability in Unionman's Jlink AX1800 firmware may allow remote attackers to escalate privileges by sending a crafted command, potentially leading to unauthorized control.
CVE-2023-37057
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in Unionman Technology Co. Ltd Jlink AX1800 devices allows remote attackers to execute arbitrary code via the router's authentication mechanism. This could lead to device compromise. The extent of this issue depends on whether these devices are present in the environment.
CVE-2024-36543
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An unauthenticated attacker can exploit incorrect access control in the Kafka Connect REST API to cause service denial, mirror topic content, and steal Kafka credentials. This vulnerability impacts the STRIMZI Project and requires assessing the reachability and relevance of the affected API.
CVE-2024-6047
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Certain GeoVision devices are vulnerable to remote command execution due to improper user input filtering. This poses a business risk to affected systems and data by allowing unauthorized control. <hr> Certain GeoVision devices have a vulnerability allowing unauthenticated remote attackers to execute system commands. T