2016-03-16

2016-03-17

2016-03-18

All (2) Critical (2) High (1) Medium (1)

CVE-2016-2345 CRITICAL POC THREAT Emergency

Stack-based buffer overflow in dwrcs.exe in the dwmrcs daemon in SolarWinds DameWare Mini Remote Control 12.0 allows remote attackers to execute arbitrary code via a crafted string. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 53.5%.

RCE Buffer Overflow Mini Remote Control

NVD Exploit-DB

CVSS 3.0

9.8

EPSS

53.5%

Threat

5.1

CVE-2016-3191 CRITICAL POC THREAT Emergency

The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 11.3%.

Denial Of Service RCE Buffer Overflow Pcre Pcre2

NVD

CVSS 3.0

9.8

EPSS

11.3%