22 matches found
PrestaShop lgcookieslaw - SQL Injection
The EU Cookie Law GDPR Banner + Blocker PrestaShop module before 2.1.3 allows blind SQL injection via the lglaw or lgcookieslaw cookie used to store user consent choices. id: CVE-2022-44727 info: name: PrestaShop lgcookieslaw - SQL Injection author: mastercho severity: critical description: | The...
Fedora 43 : python-jupyter-server (2026-275d2ecbbd)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-275d2ecbbd advisory. New version fixing high-severity CVE. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...
python311-jupyter-server-2.20.0-1.1 on GA media (moderate)
python311-jupyter-server-2.20.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11159-1 Rating: moderate Cross-References: CVE-2026-44727 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
CVE-2026-44727
A flaw was found in Jupyter Server. The nbconvert HTTP handlers in Jupyter Server render user-authored notebook HTML without a sandbox directive in their Content-Security-Policy. This, combined with nbconvert.HTMLExporter's default non-sanitizing behavior, allows a notebook containing an HTML...
here-search-demo (>=0.8.0, <=0.8.5) potentially affected by CVE-2026-44727 via jupyter-server (1.23.3)
jupyter-server PYPI version 1.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - here-search-demo =0.8.0, =0.8.5 Source cves: CVE-2026-44727 Source advisory: OSV:PYSEC-2026-366...
e2xgrader (0.1.0.dev1) potentially affected by CVE-2026-44727 via jupyter-server (1.19.1)
jupyter-server PYPI version 1.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - e2xgrader 0.1.0.dev1 Source cves: CVE-2026-44727 Source advisory: OSV:PYSEC-2026-366...
aiidalab-widgets-base (>=1.3.4, <=2.0.0a1), categorical-encoding (>=0.0.0, <=0.3.0) +33 more potentially affected by CVE-2026-44727 via jupyter-server (1.15.6)
jupyter-server PYPI version 1.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - aiidalab-widgets-base =1.3.4, =0.0.0, =0.0.1.post7, =0.1.2, =1.2.0, =1.3.1, =1.3.1, =1.3.1, =2.2.0, =1.3.1, =1.2.0, =0.0.0,...
CVE-2026-44727 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, tensorflow-cpu-jupyter...
a2 (>=0.1.0, <=0.3.17), acryl-datahub-gx-plugin (>=0.14.0.3rc1, <=1.1.1rc4) +364 more potentially affected by CVE-2026-44727 via jupyter-server (>=0.0.5, <=2.17.0)
jupyter-server PYPI version =0.0.5, =0.1.0, =0.14.0.3rc1, =0.3.0, =0.1.0b0, =1.3.4, =0.18.3, =0.1.0, =1.0.1, =0.1.0, =1.0.1, =1.0.14 and more Source cves: CVE-2026-44727 Source advisory: MEND:CVE-2026-44727...
CVE-2026-44727
Jupyter Server is the backend for Jupyter web applications. Prior to 2.20, the nbconvert HTTP handlers in jupyterserver render user-authored notebook HTML under the Jupyter origin without a sandbox directive in their Content-Security-Policy. Combined with nbconvert.HTMLExporter's default...
CVE-2026-44727 vulnerabilities
Vulnerabilities for packages: tensorflow-cpu-jupyter...
jupyterlab-tabnine (>=0.0.1, <=0.0.19) potentially affected by CVE-2026-44727 via jupyter-server (1.6.4)
jupyter-server PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - jupyterlab-tabnine =0.0.1, =0.0.19 Source cves: CVE-2026-44727 Source advisory: OSV:GHSA-FCW5-X6J4-CCMP...
xircuits (1.3.0) potentially affected by CVE-2026-44727 via jupyter-server (1.15.4)
jupyter-server PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - xircuits 1.3.0 Source cves: CVE-2026-44727 Source advisory: OSV:GHSA-FCW5-X6J4-CCMP...
a2 (>=0.1.0, <=0.3.17), arcor2-calibration (0.8.0) +100 more potentially affected by CVE-2026-44727 via jupyter-server (>=2.0.0rc3, <=2.17.0)
jupyter-server PYPI version =2.0.0rc3, =0.1.0, =0.1.0, =1.0.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.3.5, =0.3.8 - controlman 0.0.0.dev340 - counterplots 0.0.9 and more Source cves: CVE-2026-44727 Source advisory: GHSA-FCW5-X6J4-CCMP...
here-search-demo (>=0.8.0, <=0.8.5) potentially affected by CVE-2026-44727 via jupyter-server (1.23.3)
jupyter-server PYPI version 1.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - here-search-demo =0.8.0, =0.8.5 Source cves: CVE-2026-44727 Source advisory: OSV:GHSA-FCW5-X6J4-CCMP...
EUVD-2024-44727
Malicious code in bioql PyPI...
CVE-2024-44727
creationtimestamp| type| source ---|---|--- 2024-09-05 19:43:04+00:00| seen| https://t.me/cvedetector/4931...
CVE-2024-44727
Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...
CVE-2024-44727
Sourcecodehero Event Management System 1.0 is vulnerable to an SQL Injection via the username parameter in /event/admin/login.php. Documented across multiple feeds; no patch/version fix details are provided in the supplied materials. Exploitation details, impact, and mitigations beyond the generi...