2012-04-17

2012-04-18

2012-04-19

All (2) Critical (2) High (2) Medium (3) Low (2)

CVE-2012-0278 CRITICAL POC THREAT Emergency

Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via a .fpx file containing a crafted FlashPix image that is not. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 18.3%.

Buffer Overflow RCE Flashpix Plugin

NVD Exploit-DB

CVSS 2.0

9.3

EPSS

18.3%

CVE-2012-1799 CRITICAL Act Now

The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not limit the rate of authentication attempts, which makes it easier. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Siemens Authentication Bypass Scalance S Firmware Scalance S602 Scalance S612 +1

NVD

CVSS 2.0

10.0

EPSS

1.8%