2012-05-21 - CVE Archive

CVE-2012-0297 CRITICAL POC THREAT Emergency

The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 89.5%.

Privilege Escalation RCE Web Gateway

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

89.5%

Threat

6.2

CVE-2012-0299 CRITICAL POC THREAT Emergency

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code,. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 82.3%.

Privilege Escalation RCE Web Gateway

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

82.3%

Threat

6.0

CVE-2012-2915 CRITICAL POC THREAT Emergency

Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchematicData definition tag. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 66.1%.

Buffer Overflow RCE Pac Designer

NVD Exploit-DB

CVSS 2.0

9.3

EPSS

66.1%

Threat

5.3

CVE-2012-2271 CRITICAL POC THREAT Emergency

Buffer overflow in the InitLicenKeys function in a certain ActiveX control in SkinCrafter3_vs2005.dll in SkinCrafter 3.0 allows remote attackers to execute arbitrary code via a long string in the. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 41.7%.

Buffer Overflow RCE Skincrafter

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

41.7%

Threat

4.8

CVE-2012-2376 CRITICAL POC THREAT Emergency

Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger incorrect handling of COM. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 37.5%.

PHP Buffer Overflow Microsoft RCE

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

37.5%

Threat

4.6

CVE-2012-2561 CRITICAL Act Now

HP Business Service Management (BSM) 9.12 does not properly restrict the uploading of .war files, which allows remote attackers to execute arbitrary JSP code within the JBOSS Application Server. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation HP Business Service Management

NVD

CVSS 2.0

10.0

EPSS

4.2%