CVEs published June 1, 2013
5 CVEs were published on June 1, 2013: 0 critical, 0 high.
- Published
- 5
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- org.apache.tomcat:tomcat
- 3
Medium, low and unrated 5
- CVE-2012-3544Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remorg.apache.tomcat:tomcat
- CVE-2013-0136Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticate
- CVE-2013-2067java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and org.apache.tomcat:tomcat
- CVE-2013-2071java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeExcorg.apache.tomcat:tomcat
- CVE-2013-3261Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the GRAND FlAGallery plugin before 2.72 for WordPress allows remote attack