NVD disclosure day
CVE-2024-45874
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A DLL hijacking vulnerability in VegaBird Vooki allows attackers to execute arbitrary code or maintain persistence by placing a crafted DLL file in the application's directory. This could result in unauthorized code execution if the vulnerability is reachable. The relevance of this issue depends on whether this softwar
CVE-2024-45873
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A DLL hijacking vulnerability in VegaBird Yaazhini allows attackers to execute arbitrary code by placing a crafted DLL file in the same directory as the application's executable. This requires local file system access to exploit, making it a client-side attack vector.
CVE-2024-46446
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A directory traversal vulnerability in Mecha CMS allows attackers to bypass identity checks via crafted cookies and URIs, potentially leading to arbitrary file deletion or website takeover. This issue is critical due to its network accessibility, lack of authentication requirements, and potential for significant impact
CVE-2024-43047
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Qualcomm chipsets are affected by a memory corruption vulnerability. This could allow unauthorized access and modification of data and systems, posing a business risk by potentially impacting operational integrity.