NVD disclosure day
CVE-2025-26319
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical arbitrary file upload vulnerability exists in Flowise AI, potentially allowing unauthenticated attackers to upload malicious files to the server. This could lead to unauthorized access and manipulation of system files, impacting service integrity and availability. Technical readers and security leaders shoul
CVE-2025-1942
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Firefox and Thunderbird could allow uninitialized memory to be incorporated into string results during specific text operations. This could potentially impact data integrity and confidentiality if exploited, affecting users of these common applications. The relevance to our environment needs to be co
CVE-2025-1941
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability in Firefox could allow an unauthenticated attacker to bypass a user-enabled setting, potentially leading to unauthorized access to sensitive information. This issue affects user privacy and browser security when specific conditions are met and the affected browser versions are in use. The vulne
CVE-2025-22226
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
VMware products can leak system memory if an attacker with administrative privileges in a virtual machine exploits a flaw in HGFS. This impacts data confidentiality and presents a business risk by potentially exposing sensitive information.
CVE-2025-22225
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
VMware ESXi has a vulnerability that allows an attacker with internal privileges to write to the kernel, potentially escaping the sandbox. This impacts VMware ESXi systems, risking data and system control. The business risk is elevated due to observed exploitation.
CVE-2025-22224
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in VMware ESXi and Workstation allows a malicious actor with local administrative privileges within a virtual machine to execute code on the host system. This could impact host systems and data, posing a business risk.
CVE-2024-48248
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
NAKIVO Backup & Replication software contains a path traversal vulnerability that may allow unauthorized reading of files. This could expose sensitive information and credentials, posing a risk to enterprise systems and data integrity. Organizations using the affected product should address this issue to protect their