NVD disclosure day
CVE-2025-62360
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A SQL Injection vulnerability exists in WeGIA, a web manager for institutions, allowing attackers with authenticated access to execute arbitrary SQL commands. This could compromise the confidentiality, integrity, and availability of the database. The issue is present in versions prior to 3.5.1.
CVE-2025-39964
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's AF_ALG socket interface allows concurrent writes to lead to data interleaving and internal state inconsistencies. Exploitation requires local access to a system. Readers should care to ensure system integrity and data handling are not compromised.
CVE-2025-6919
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A SQL injection vulnerability exists in the Aykome License Tracking System, allowing attackers to execute arbitrary SQL commands. This could lead to unauthorized access, modification, or deletion of sensitive data. The system is a license tracking application, commonly accessed over a network, making it a potential tar
CVE-2025-9976
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
An OS command injection vulnerability affects the 3DEXPERIENCE platform's Station Launcher App, potentially allowing an attacker to execute arbitrary code on a user's machine. This could occur if a user interacts with a malicious link or file, leading to unauthorized code execution and potential compromise of the machi
CVE-2025-9265
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical broken authorization vulnerability exists in Kiloview NDI N30 devices, permitting unauthenticated remote attackers to deactivate user verification and execute administrative actions. This poses a risk of unauthorized control over the device's functions and operational state when reachable via the network. Or
CVE-2025-36087
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
Certain IBM identity and access management products contain hard-coded credentials that could enable unauthorized access if reachable. This vulnerability could allow an attacker to authenticate, communicate with external components, or decrypt internal data, posing a significant risk to security functions.