Skip to content

CVEs published in August 2013

345 vulnerabilities, 49 critical, 1 exploited.

mozilla firefox, thunderbird, thunderbird esr +2 moreStack-based buffer overflow in maintenanceservice.exe in the Mozilla Maintenance Service in...CVE-2013-17067.2 HighAugust 7, 2013
mozilla firefox, seamonkey +1 moreHeap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox...CVE-2013-170510.0 HighAugust 7, 2013
mozilla firefox, seamonkey +1 moreUse-after-free vulnerability in the nsINode::GetParentNode function in Mozilla Firefox before 23...CVE-2013-17049.3 HighAugust 7, 2013
mozilla firefox, seamonkey +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0 and...CVE-2013-170210.0 HighAugust 7, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreMozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8,...CVE-2013-17175.4 MediumAugust 7, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8,...CVE-2013-17144.3 MediumAugust 7, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreMozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8,...CVE-2013-17134.3 MediumAugust 7, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before...CVE-2013-1710Public exploitEPSS 41.7%10.0 HighAugust 7, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreMozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8,...CVE-2013-17094.3 MediumAugust 7, 2013
mozilla firefox, seamonkey, thunderbird +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0,...CVE-2013-170110.0 HighAugust 7, 2013
ni lookoutAn ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments...CVE-2013-50269.3 HighAugust 6, 2013
ni labwindowsAn ActiveX control in exlauncher.dll in the Help subsystem in National Instruments LabWindows/CVI...CVE-2013-50254.3 MediumAugust 6, 2013
ni measurementstudioAn ActiveX control in NationalInstruments.Help2.dll in National Instruments NI .NET Class Library...CVE-2013-50244.3 MediumAugust 6, 2013
ni labview, labwindows, diadem +2 more +4 moreThe ActiveX controls in the HelpAsst component in NI Help Links in National Instruments...CVE-2013-50234.3 MediumAugust 6, 2013
ni labview, labwindows, measurementstudio +1 more +3 moreAbsolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National...CVE-2013-502210.0 HighAugust 6, 2013
abb datamanager, ni labview, labwindows +2 more +4 moreMultiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in...CVE-2013-50219.3 HighAugust 6, 2013
python setuptoolsSetuptools vulnerable to Man-in-the-middle attacksCVE-2013-1633Fix available6.8 MediumAugust 6, 2013
guillaume gauvrit pyshoppyshop vulnerable to man-in-the-middle attacks due to using HTTP to retrieve packages from the PyPI repositoryCVE-2013-1630Fix available6.8 MediumAugust 6, 2013
pypa pipImproper Input Validation in pipCVE-2013-1629Fix available6.8 MediumAugust 6, 2013
ibm infosphere biginsightsIBM InfoSphere BigInsights 1.1 through 2.1 does not properly handle FRAME elements, which makes...CVE-2013-39964.9 MediumAugust 5, 2013
ibm infosphere biginsightsCross-site scripting (XSS) vulnerability in IBM InfoSphere BigInsights 1.1 through 2.1 allows...CVE-2013-39953.5 LowAugust 5, 2013
ibm infosphere biginsightsCross-site request forgery (CSRF) vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1...CVE-2013-39926.0 MediumAugust 5, 2013
samba, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreInteger overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3...CVE-2013-4124Public exploitFix availableEPSS 69.0%5.0 MediumAugust 5, 2013
hp hotspot laserjet pro m1218nfs mfp firmware, laserjet pro cp1025nw firmware, laserjet pro m1212nf mfp firmware +6 more +8 moreUnspecified vulnerability on the HP LaserJet Pro P1102w, P1606dn, M1212nf MFP, M1213nf MFP,...CVE-2013-48077.8 HighAugust 4, 2013
symantec workspace virtualizationSymantec Workspace Virtualization before 6.x before 6.4.1953.0, when a virtual application layer...CVE-2013-4679Public exploit6.6 MediumAugust 4, 2013
symantec backup execThe NDMP protocol implementation in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012...CVE-2013-46782.7 LowAugust 4, 2013
symantec backup execSymantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions ...CVE-2013-46774.3 MediumAugust 4, 2013
symantec backup execMultiple cross-site scripting (XSS) vulnerabilities in Symantec Backup Exec 2010 R3 before 2010...CVE-2013-46764.3 MediumAugust 4, 2013
symantec backup execHeap-based buffer overflow in the utility program in the Linux agent in Symantec Backup Exec 2010...CVE-2013-45757.9 HighAugust 4, 2013
symantec encryption desktop, pgp desktop +1 moreUnquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through...CVE-2013-16106.8 MediumAugust 4, 2013
hp integrated lights-out firmwareUnspecified vulnerability in HP Integrated Lights-Out 3 (aka iLO3) firmware before 1.60 and 4 ...CVE-2013-48059.0 HighAugust 3, 2013
cisco unified communications managerMultiple cross-site request forgery (CSRF) vulnerabilities in Cisco Unified Communications...CVE-2013-34516.8 MediumAugust 3, 2013
cisco unified communications managerCross-site request forgery (CSRF) vulnerability in the User WebDialer page in Cisco Unified...CVE-2013-34506.8 MediumAugust 3, 2013
cisco unified communications managerThe web portal in Cisco Unified Communications Manager (Unified CM) allows remote authenticated...CVE-2013-34424.0 MediumAugust 3, 2013
cisco fwsm, ios, nx-os +4 more +6 moreThe OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through...CVE-2013-01495.8 MediumAugust 3, 2013
apache tomcat, debian linux +1 moreImproper Access Control in Apache TomcatCVE-2014-7810Fix availableEPSS 13.3%5.0 MediumAugust 2, 2013
apache tomcat, oracle virtualization +1 moreUncontrolled Resource Consumption in Apache TomcatCVE-2014-0230Fix availableEPSS 20.2%7.8 HighAugust 2, 2013
apache tomcatImproper Input Validation in Apache TomcatCVE-2014-0227Fix availableEPSS 21.0%6.4 MediumAugust 2, 2013
otrs, otrs itsm +1 moreMultiple SQL injection vulnerabilities in Open Ticket Request System (OTRS) Help Desk 3.0.x...CVE-2013-4717Fix available8.8 HighAugust 2, 2013
bitcoin coreUnspecified vulnerability in bitcoind and Bitcoin-Qt 0.8.x allows remote attackers to cause a...CVE-2013-46275.0 MediumAugust 1, 2013
bitcoin coreThe HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about...CVE-2013-41654.3 MediumAugust 1, 2013
cisco webex meetings serverCisco WebEx Meetings Server does not check whether a user account is active, which allows remote...CVE-2013-34484.0 MediumAugust 1, 2013
bitcoin bitcoin-qt, bitcoind, core +1 more +3 morebitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8rc2, 0.6.x before 0.6.5rc2, and 0.7.x...CVE-2013-32206.4 MediumAugust 1, 2013
bitcoin corebitcoind and Bitcoin-Qt 0.8.x before 0.8.1 do not enforce a certain block protocol rule, which...CVE-2013-32195.0 MediumAugust 1, 2013
cisco unified computing systemThe C-Series Rack Server component 1.4 in Cisco Unified Computing System (UCS) does not properly...CVE-2013-11905.0 MediumAugust 1, 2013