NVD disclosure day
CVE-2025-62481
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Oracle Marketing allows unauthenticated attackers with network access to compromise the system, potentially leading to a full takeover. This impacts the confidentiality, integrity, and availability of Oracle Marketing.
CVE-2025-61757
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in Oracle Identity Manager allows unauthenticated attackers to take over the system, impacting confidentiality, integrity, and availability. This poses a significant business risk due to the potential for a complete system compromise.
CVE-2025-53072
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability in Oracle Marketing, part of Oracle E-Business Suite, allows unauthenticated network attackers to compromise the system, potentially leading to a complete takeover. This issue impacts confidentiality, integrity, and availability, requiring an assessment of affected versions and their exposure.
CVE-2025-53037
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in Oracle Financial Services Analytical Applications Infrastructure, allowing unauthenticated network attackers to potentially take over the system. This issue could impact confidentiality, integrity, and availability. It is important to confirm if this Oracle component is used within yo
CVE-2025-11534
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Raisecom network devices contain a vulnerability allowing SSH sessions without user authentication, potentially granting attackers unauthenticated shell access. This could impact device configuration and network traffic.
CVE-2025-11625
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An improper host authentication vulnerability exists in wolfSSH clients, potentially allowing authentication bypass and credential leakage. This could occur when a vulnerable client connects to a server, enabling attackers to expose sensitive information. It is important to identify if your organization uses affected w
CVE-2025-10640
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An unauthenticated attacker can bypass login on the WorkExaminer Professional console to gain administrative access, potentially exposing sensitive monitoring data like screenshots and keystrokes. This vulnerability is reachable on TCP port 12306.
CVE-2025-12004
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in the MediaWiki Lockdown Extension, allowing privilege abuse due to incorrect permission assignments. This issue could enable unauthorized actions and manipulation of resources via the Action API. Organizations using MediaWiki should verify their exposure and potential impact.
CVE-2025-10916
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The FormGent WordPress plugin has a vulnerability allowing unauthenticated attackers to delete arbitrary files on the server due to insufficient path validation, potentially impacting system integrity and service availability. This issue is reachable via the network and could lead to denial of service or compromise.
CVE-2025-6542
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical vulnerability exists in various TP-Link routers, enabling unauthenticated remote attackers to execute arbitrary OS commands. This could grant attackers unauthorized control over network edge devices. Confirming relevance and assessing exposure is crucial for security-aware leaders.A critical vulnerability in