2012-04-17

2012-04-18

2012-04-19

All (3) Critical (2) High (2) Medium (3) Low (2)

CVE-2012-0253 MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities in Demand Media Pluck SiteLife before 5.0.13 allow remote attackers to inject arbitrary web script or HTML via (1) the jsonRequest parameter to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS Pluck Sitelife

NVD

CVSS 2.0

4.3

EPSS

1.8%

CVE-2012-0883 MEDIUM PATCH This Month

envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the. Rated medium severity (CVSS 6.9).

Apache Information Disclosure Http Server Opensuse Apache HTTP Server

NVD

CVSS 2.0

6.9

EPSS

0.2%

CVE-2012-1800 MEDIUM This Month

Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 allows remote. Rated medium severity (CVSS 6.1), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Siemens Denial Of Service RCE Scalance S Firmware +3

NVD

CVSS 2.0

6.1

EPSS

1.5%