2012-06-19

2012-06-20

2012-06-21

All (3) Critical (3) High (2) Medium (12) Low (1)

CVE-2012-2175 CRITICAL POC THREAT Emergency

Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 66.5%.

Buffer Overflow RCE IBM Lotus Inotes

NVD Exploit-DB

CVSS 2.0

9.3

EPSS

66.5%

Threat

5.4

CVE-2012-2174 CRITICAL POC THREAT Emergency

The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 64.6%.

IBM Code Injection RCE Lotus Notes

NVD Exploit-DB

CVSS 2.0

9.3

EPSS

64.6%

Threat

5.3

CVE-2012-2493 CRITICAL Act Now

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

RCE Java Microsoft Cisco Anyconnect Secure Mobility Client

NVD

CVSS 2.0

9.3

EPSS

1.3%