# CVEs published 2013-04-12

10 CVEs were published on April 12, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-3532](https://cve.now/CVE-2012-3532.md): Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows (no CVSS)
- [CVE-2012-6139](https://cve.now/CVE-2012-6139.md): libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attri (no CVSS)
- [CVE-2013-0270](https://cve.now/CVE-2013-0270.md): Keystone: openstack keystone: denial of service via large http request with long tenant name (CVSS 6.5, Red Hat OpenStack Folsom for RHEL · Red Hat OpenStack Pl… +1)
- [CVE-2013-0282](https://cve.now/CVE-2013-0282.md): OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) (no CVSS, keystone)
- [CVE-2013-0314](https://cve.now/CVE-2013-0314.md): The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip f (no CVSS)
- [CVE-2013-0315](https://cve.now/CVE-2013-0315.md): The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote attackers to read arbitrary files via a craft (no CVSS)
- [CVE-2013-1920](https://cve.now/CVE-2013-1920.md): Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the (no CVSS)
- [CVE-2013-3050](https://cve.now/CVE-2013-3050.md): SQL injection vulnerability in ZAPms 1.41 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter to pro (no CVSS)
- [CVE-2012-5937](https://cve.now/CVE-2012-5937.md): Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integra (no CVSS)
- [CVE-2013-0501](https://cve.now/CVE-2013-0501.md): The EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control, as used in Edraw Office Viewer Component, the client in IBM Cognos Disclosure Managem (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-04-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.