NVD disclosure day
CVE-2024-13997
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An authenticated administrator in Nagios XI can exploit the Migrate Server feature to gain root privileges on the host system. This allows for executing commands beyond the application's scope, potentially leading to full operating system control. This vulnerability is relevant for organizations using Nagios XI who nee
CVE-2025-12531
Halo Surface Signal: 3 out of 5 — possibly public-facing.
IBM InfoSphere Information Server has a critical vulnerability where processing XML data could allow a remote attacker to access sensitive information or consume memory. While the product is not typically internet-facing, its network accessibility for data integration warrants assessing exposure.
CVE-2025-12463
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unauthenticated SQL injection vulnerability exists in Geutebruck G-Cam E-Series cameras, potentially allowing attackers to manipulate database queries via a network-accessible script. This could lead to unauthorized access to camera system data or disruption of service.
CVE-2025-11953
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
The React Native Community CLI's Metro Development Server has a vulnerability that allows unauthenticated network attackers to execute arbitrary commands. This can impact an organization's systems and data by enabling unauthorized code execution. The CISA has listed this vulnerability as actively exploited.
CVE-2025-8900
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
The Doccure Core WordPress plugin has a privilege escalation vulnerability that allows unauthenticated attackers to gain administrator roles. This could lead to unauthorized control of the entire website if the registration feature is accessible.
CVE-2025-0987
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An authorization bypass vulnerability in CVLand allows parameter injection, potentially leading to unauthorized data access and modification. The vendor has not responded to inquiries, leaving the full impact and available fixes uncertain. This issue requires attention to confirm its relevance and exposure within your