NVD disclosure day
CVE-2025-62376
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A flaw in the pwn.college DOJO platform's workspace endpoint allows unauthorized access to Windows virtual machines by bypassing authentication. Attackers can impersonate users and gain control of data within active Windows VMs and associated Linux home directories.
CVE-2025-49553
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Adobe Connect is affected by a DOM-based Cross-Site Scripting vulnerability. If a user visits a crafted web page, an attacker could execute malicious scripts in their browser, potentially leading to session takeover and impacting data confidentiality and integrity.
CVE-2025-59287
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Windows Server Update Service is affected by a vulnerability allowing unauthorized remote code execution. This poses a significant business risk as attackers can compromise affected systems and operations. Exploitation requires no special privileges or user interaction.
CVE-2025-59230
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An improper access control vulnerability in Windows Remote Access Connection Manager allows a local attacker with authorized access to elevate privileges. This impacts organizations by enabling potential unauthorized access to sensitive data and disruption of business operations. The realistic business risk involves co
CVE-2025-55315
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in ASP.NET Core allows authorized attackers to bypass security features through HTTP request smuggling. This could lead to unauthorized access or manipulation of data by exploiting how the framework interprets network requests. The risk is external, affecting web applications and services.
CVE-2025-54603
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An incorrect OIDC authentication flow in Claroty Secure Access may allow unauthorized user creation or impersonation, potentially leading to unauthorized access. The vulnerability is reachable via the network and requires a complex attack, but its impact could be severe if exploited. Claroty Secure Access is a remote a
CVE-2025-24990
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability was identified in a third-party Agere Modem driver in Windows. This driver's removal impacts fax modem hardware functionality. Organizations should remove dependencies on this hardware to mitigate business risk.
CVE-2025-11548
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in ibi WebFOCUS that allows unauthenticated attackers to escalate privileges to gain administrative access. This could enable further compromise, including unauthenticated remote code execution. Organizations using ibi WebFOCUS should verify its presence and assess potential exposure due
CVE-2025-49201
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical weakness in Fortinet FortiPAM and FortiSwitchManager allows remote attackers to execute unauthorized code or commands. This is possible through specially crafted HTTP requests, potentially compromising management interfaces. Readers should care due to the critical nature of these management tools and their p
CVE-2025-7328
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Broken authentication flaws in Rockwell Automation NAT devices could allow attackers to disrupt network communications, reroute traffic, or take over administrator accounts. Missing authentication checks on critical functions enable unauthorized actions, potentially causing denial-of-service or requiring physical inter
CVE-2025-11721
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A memory safety issue in Firefox and Thunderbird could allow arbitrary code execution if exploited. This vulnerability is reachable via the network without authentication or user interaction, posing a critical risk due to potential system compromise.
CVE-2025-11719
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free memory corruption vulnerability in the native messaging API of specific Firefox and Thunderbird versions on Windows could lead to application crashes. This issue, fixed in later versions, affects how web extensions interact with these applications. If reachable, it could disrupt user workflow through a
CVE-2025-11717
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in Firefox for Android where switching apps after using a password screen can cause a black screen to appear, potentially exposing sensitive information that was previously visible on the password screen. This issue could allow unauthorized viewing of previously displayed password-related data if
CVE-2025-11710
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Mozilla Firefox and Thunderbird could allow a compromised web process to reveal memory blocks to an attacker via malicious IPC messages, potentially exposing sensitive information.
CVE-2025-11709
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Firefox and Thunderbird allows a compromised web process to perform out-of-bounds reads and writes in a more privileged process by manipulating WebGL textures, potentially impacting system integrity and data confidentiality.
CVE-2025-11708
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability in Mozilla's MediaTrackGraphImpl could allow attackers to compromise application stability or integrity. If reachable, this could lead to crashes or unexpected behavior. Confirming software versions and planning updates is essential.
CVE-2025-10610
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A SQL injection vulnerability in Winsure could permit unauthenticated attackers to infer sensitive information or manipulate data by sending specially crafted network input. This impacts the integrity and availability of system data. Technical readers and security-aware leaders should confirm if their organization uses
CVE-2025-40771
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Siemens SIMATIC communication processors have a vulnerability where they do not properly authenticate configuration connections, potentially allowing an unauthenticated remote attacker to access configuration data. This issue is relevant for industrial control systems where unauthorized access to sensitive settings cou
CVE-2025-40765
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability in Siemens TeleControl Server Basic software could allow unauthenticated remote attackers to obtain user password hashes. This could enable them to log in and perform authenticated operations on the database service. The software is often used in industrial control systems, making potential exp
CVE-2025-46581
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical Struts remote code execution vulnerability exists in ZTE's ZXCDN product, allowing unauthenticated attackers to run commands remotely. This could compromise system integrity and data. Confirmation is needed to determine if this product is used and its network exposure.
CVE-2025-42937
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
SAP Print Service has a vulnerability allowing unauthenticated attackers to traverse directories and overwrite system files, potentially impacting confidentiality, integrity, and availability. The relevance and exposure of this service within our SAP printing setup need to be confirmed.
CVE-2025-42910
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in SAP Supplier Relationship Management allows authenticated users to upload arbitrary files, potentially leading to malware execution and high impact on confidentiality, integrity, and availability. The technology affected is SAP Supplier Relationship Management. This is relevant because a user downloa