NVD disclosure day
CVE-2025-8077
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in NeuVector allows unauthorized API access if the default `admin` password is not changed, enabling any workload with network access within a cluster to perform any operation. This could lead to a compromise of the container security platform's administrative functions.
CVE-2025-10439
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability exists in the Yordam Library Automation System, allowing remote attackers to manipulate its database. This could lead to unauthorized access, modification, or deletion of sensitive library data. Confirmation of the system's presence and network accessibility is necessary to assess
CVE-2025-10157
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A Protection Mechanism Failure vulnerability in picklescan allows a remote attacker to bypass safety checks and execute malicious code by loading specially crafted payloads through submodules. This could lead to the execution of unauthorized code on systems using the scanner. There is uncertainty about the specific imp
CVE-2025-10156
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in picklescan's ZIP archive scanning may allow a remote attacker to bypass security scans by submitting a malformed ZIP file, potentially leading to malicious code execution. The issue occurs when a ZIP archive with a bad Cyclic Redundancy Check (CRC) causes the scanner to fail before analyzing its cont
CVE-2025-10155
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An Improper Input Validation vulnerability in the scanning logic of picklescan allows a remote attacker to bypass security checks by supplying a specially crafted pickle file with a PyTorch-related extension, which can then lead to malicious code execution. This issue is relevant if the affected technology is used with
CVE-2025-9242
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
Certain WatchGuard Fireware OS versions contain an out-of-bounds write vulnerability. This could allow a remote attacker to execute arbitrary code, affecting VPN services. The risk involves potential unauthorized access and control over network infrastructure. Mitigation is advised.