Skip to content
OpenAdvisories

Archive

6 August 2013

Vulnerabilities first published on this day (UTC), newest first.

← July 2013 2013 / August /6 September 2013 →
  1. 16
  2. 2 
  3. 35
  4. 47
  5. 54
  6. 69
  7. 715
  8. 82
  9. 934
  10. 10 
  11. 11 
  12. 124
  13. 134
  14. 1424
  15. 156
  16. 1624
  17. 171
  18. 184
  19. 1923
  20. 2030
  21. 2121
  22. 226
  23. 2320
  24. 241
  25. 2524
  26. 26 
  27. 279
  28. 2834
  29. 2912
  30. 309
  31. 3119
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • Unscored —
    CVE-2013-5021

    Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabW…

  • Unscored —
    CVE-2013-5025

    An ActiveX control in exlauncher.dll in the Help subsystem in National Instruments LabWindows/CVI before 2013 allows re…

  • Unscored —
    CVE-2013-5023

    The ActiveX controls in the HelpAsst component in NI Help Links in National Instruments LabWindows/CVI 2012 SP1 and ear…

  • Unscored —
    CVE-2013-5024

    An ActiveX control in NationalInstruments.Help2.dll in National Instruments NI .NET Class Library Help, as used in Meas…

  • Unscored —
    CVE-2013-5026

    An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.…

  • Unscored —
    CVE-2013-5022

    Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindow…

  • High 8.3
    CVE-2013-1633

    Setuptools vulnerable to Man-in-the-middle attacks

    easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default …

    python-pip setuptools Azure Linux PyPI
  • High 8.4
    CVE-2013-1629

    Improper Input Validation in pip

    pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a "pip install" operation.

    python-virtualenv pip python-pip Debian PyPI
  • High —
    CVE-2013-1630

    pyshop vulnerable to man-in-the-middle attacks due to using HTTP to retrieve packages from the PyPI repository

    pyshop before 0.7.1 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a download operation.

    pyshop PyPI