NVD disclosure day
CVE-2024-6670
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A SQL injection vulnerability in WhatsUp Gold allows attackers to retrieve encrypted user passwords. This impacts organizations by potentially exposing user credentials and enabling further unauthorized access. The business risk involves compromised data and system security.
CVE-2024-44779
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A reflected cross-site scripting vulnerability in vTiger CRM allows attackers to execute arbitrary code in a user's browser via a crafted link, potentially impacting user sessions.
CVE-2024-44778
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A reflected cross-site scripting vulnerability in vTiger CRM could allow an attacker to execute arbitrary code in a user's browser. This is achieved by tricking a user into visiting a crafted link that exploits a flaw in the index page's 'parent' parameter. This could potentially compromise a user's browser context and
CVE-2024-44777
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A reflected cross-site scripting vulnerability in vTiger CRM allows attackers to execute arbitrary code in a user's browser by injecting a crafted payload into the tag parameter of the index page. This could impact user sessions and data accessible through their browser. Confirm the presence and reachability of vTiger