Skip to content
OpenAdvisories

Archive

1 June 2013

Vulnerabilities first published on this day (UTC), newest first.

5 results · Feed

  • Unscored —
    CVE-2013-0136 Public exploit EPSS 40%

    Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allo…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the GRAND FlAGallery plugin before 2.72 for WordPress…

  • Low —

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

    java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request info…

  • Medium —
    CVE-2013-2067 EPSS 10%

    Improper Authentication in Apache Tomcat

    java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which al…

  • Medium —
    CVE-2012-3544 EPSS 11%

    Apache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions

    Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.