NVD disclosure day
CVE-2024-57483
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical buffer overflow vulnerability exists in the Tenda i24's MAC filter function, potentially allowing unauthenticated remote attackers to execute arbitrary code. This could lead to unauthorized access, impacting confidentiality, integrity, and availability of the affected network devices. Understanding the prese
CVE-2024-57473
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A buffer overflow vulnerability exists in H3C N12 devices, allowing unauthenticated attackers to crash the device or execute arbitrary commands by sending a malicious POST request to the web interface. This could impact network device stability and allow unauthorized command execution.
CVE-2024-57482
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A buffer overflow vulnerability in H3C N12 devices' 5G wireless network processing function could allow an attacker to crash the device or execute arbitrary commands by sending a POST request. This impacts network device integrity and availability.
CVE-2024-57480
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A buffer overflow vulnerability exists in H3C N12 firmware due to a lack of length verification in its AP configuration function. An attacker could exploit this by sending a POST request to `/bin/webs`, potentially causing the device to crash or allowing for arbitrary command execution. This is concerning because unaut
CVE-2024-57479
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A buffer overflow vulnerability in H3C N12 devices allows remote attackers to crash devices or execute commands by sending a POST request to a web service due to missing length verification. This could impact device availability and integrity. The relevance of this issue depends on the presence of these devices within
CVE-2024-57471
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A buffer overflow vulnerability in H3C N12 devices allows unauthenticated attackers to crash the device or execute arbitrary commands by sending a crafted request. This issue stems from a lack of length verification in the 2.4G wireless network processing function, potentially impacting device availability and integrit
CVE-2025-21335
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Windows Hyper-V allows a local attacker to escalate privileges, potentially impacting system integrity and data confidentiality. Organizations using affected Windows versions should apply vendor-provided updates to mitigate this risk.
CVE-2025-21334
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Windows Hyper-V's NT Kernel Integration VSP could allow a local attacker to elevate privileges to SYSTEM level on affected systems. This could impact data integrity and system control. The risk is internal, requiring local access for exploitation, but is listed in the Known Exploited Vulnerabilities
CVE-2025-21333
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Windows Hyper-V's NT Kernel Integration VSP allows local attackers to elevate privileges. This could result in unauthorized system control and data compromise, posing a business risk.
CVE-2024-13161
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An absolute path traversal vulnerability in Ivanti Endpoint Manager allows unauthenticated attackers to leak sensitive information. This impacts affected organizations by exposing confidential data. The realistic business risk involves potential unauthorized access to organizational information.
CVE-2024-13160
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An absolute path traversal vulnerability in Ivanti Endpoint Manager allows remote, unauthenticated attackers to leak sensitive information. This impacts organizations by potentially exposing confidential data, which could lead to business risk.
CVE-2024-13159
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An absolute path traversal flaw in Ivanti Endpoint Manager allows unauthenticated remote attackers to leak sensitive information. This can expose organizational data to unauthorized parties, posing a business risk.
CVE-2024-55591
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An authentication bypass flaw affects FortiOS and FortiProxy, potentially allowing attackers to gain super-admin privileges. This vulnerability, exploited via crafted requests, poses a significant risk by enabling unauthorized access and control over network resources. Organizations should address this issue promptly.
CVE-2024-48884
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A path traversal vulnerability in Fortinet products could allow an attacker to write arbitrary files or delete folders. This impacts network management, operating system, and proxy devices, posing a risk to system configuration and integrity. It is important to verify if these products and versions are in use and expos
CVE-2024-35276
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A stack-based buffer overflow in Fortinet FortiAnalyzer and FortiManager products allows unauthenticated attackers to execute unauthorized code via crafted packets. This could compromise device integrity and enable further network intrusion. The relevance and exposure of these network management and analysis systems wi