2012-12-11

2012-12-12

2012-12-13

All (2) Critical (16) High (2) Medium (7) Low (1)

CVE-2012-2539 Dec 12, 00:55 HIGH KEV PATCH THREAT Act Now

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 84.4%.

RCE Buffer Overflow Denial Of Service Memory Corruption Microsoft

NVD VulDB

CVSS 3.1

7.8

EPSS

84.4%

Threat

5.6

CVE-2012-4971 Dec 12, 11:38 HIGH POC This Week

Multiple SQL injection vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) reqclass parameter to editrequestenduser.asp; the (2). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Helpbox Layton Technology

NVD

CVSS 2.0

7.5

EPSS

0.3%