NVD disclosure day
CVE-2024-33109
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A directory traversal vulnerability in the web interface of certain Tiptel IP phones allows overwriting arbitrary files via the ringtone upload function. This could affect device integrity and functionality if exploited.
CVE-2024-8963
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A path traversal vulnerability in Ivanti CSA allows unauthenticated attackers to access restricted functions. This exposes organizations to unauthorized access and potential disruption of business operations. Organizations should prioritize addressing this vulnerability to mitigate business risk.
CVE-2024-7785
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A cross-site scripting vulnerability exists in an electronic ticket system that affects its ability to handle user input, potentially allowing attackers to execute malicious scripts in user browsers. This could lead to unauthorized access to sensitive data and impact business operations. Organizations using the affecte