Skip to content
OpenAdvisories

Archive

6 August 2013

Vulnerabilities first published on this day (UTC), newest first.

← July 2013 2013 / August /6 September 2013 →
  1. 16
  2. 2 
  3. 35
  4. 47
  5. 54
  6. 69
  7. 715
  8. 82
  9. 934
  10. 10 
  11. 11 
  12. 124
  13. 134
  14. 1424
  15. 156
  16. 1624
  17. 171
  18. 184
  19. 1923
  20. 2030
  21. 2121
  22. 226
  23. 2320
  24. 241
  25. 2524
  26. 26 
  27. 279
  28. 2834
  29. 2912
  30. 309
  31. 3119
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.3
    CVE-2013-1633

    Setuptools vulnerable to Man-in-the-middle attacks

    easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default …

    python-pip setuptools Azure Linux PyPI
  • High 8.4
    CVE-2013-1629

    Improper Input Validation in pip

    pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a "pip install" operation.

    python-virtualenv pip python-pip Debian PyPI
  • High —
    CVE-2013-1630

    pyshop vulnerable to man-in-the-middle attacks due to using HTTP to retrieve packages from the PyPI repository

    pyshop before 0.7.1 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a download operation.

    pyshop PyPI