2012-12-19

2012-12-20

2012-12-21

All (2) Critical (3) High (2) Medium (4) Low (1)

CVE-2012-5469 Dec 20, 12:02 HIGH POC This Week

The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Privilege Escalation Phpmyadmin

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

1.8%

CVE-2012-4856 Dec 20, 12:02 HIGH This Week

The Service Processor in the IBM Power 5 91##-### and 940#-### before SF240_418_382 does not ensure that firewall code is executed, which allows remote attackers to execute arbitrary code via. Rated high severity (CVSS 7.9). No vendor patch available.

Authentication Bypass RCE IBM Power 5 System Firmware Power 5

NVD

CVSS 2.0

7.9

EPSS

1.6%