Lucene search
+L

2800 matches found

PyPA
PyPA
added 2017/09/21 2:29 p.m.9 views

PYSEC-2017-45

Cross-site scripting XSS vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path...

6.1CVSS6AI score0.021EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2017/09/21 2:00 p.m.47 views

CVE-2015-4706

Cross-site scripting XSS vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path...

6AI score0.021EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2017/09/21 2:00 p.m.73 views

CVE-2015-4706

Cross-site scripting XSS vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path...

6.1CVSS6AI score0.021EPSS
SaveExploits0
CVE
CVE
added 2017/09/21 2:00 p.m.71 views

CVE-2015-4706

CVE-2015-4706 affects IPython 3.x before 3.2. It is a cross-site scripting (XSS) vulnerability where remote attackers can inject arbitrary web script or HTML via JSON error messages and the /api/contents path. Connected advisories (GHSA, OSV, CNVD/NVD variants) consistently describe the same issu...

6.1CVSS5.9AI score0.021EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2017/09/20 6:29 p.m.7 views

PYSEC-2017-46

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

6.1CVSS6AI score0.02274EPSS
SaveExploits0References7Affected Software1
Prion
Prion
added 2017/09/20 6:29 p.m.19 views

Cross site scripting

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

4.3CVSS6AI score0.02274EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2017/09/20 6:29 p.m.30 views

PYSEC-2017-46

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

6.1CVSS4.4AI score0.02274EPSS
SaveExploits0References7
NVD
NVD
added 2017/09/20 6:29 p.m.36 views

CVE-2015-4707

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

6.1CVSS6AI score0.02274EPSS
SaveExploits0References6
OSV
OSV
added 2017/09/20 6:29 p.m.13 views

CVE-2015-4707

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

6.1CVSS5.9AI score
SaveExploits0References10
Cvelist
Cvelist
added 2017/09/20 6:00 p.m.47 views

CVE-2015-4707

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

5.9AI score0.02274EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2017/09/20 6:00 p.m.77 views

CVE-2015-4707

Cross-site scripting XSS vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path...

6.1CVSS6.2AI score0.02274EPSS
SaveExploits0
Citrix
Citrix
added 2017/09/12 12:00 a.m.33 views

Unable to access Worx Store and getting errors "could not load store"

On iOS Device while accessing store "cannot complete your request" error message. On Android while accessing store getting error message while accessing store "could not load store" SecureHub Logs "2017-02-02T16:09:51.998+0400","SecureHub","ERROR...

6.7AI score
SaveExploits0
OSV
OSV
added 2017/08/29 9:29 p.m.8 views

CVE-2016-2964

IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may reveal details about the application. IBM X-Force ID: 113813...

5.3CVSS5.8AI score0.01271EPSS
SaveExploits0References3
OSV
OSV
added 2017/08/29 1:35 a.m.10 views

CVE-2016-2970

IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers. IBM X-Force ID: 113851...

4.3CVSS5.8AI score0.01093EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2017/08/29 1:35 a.m.4 views

CVE-2016-2970

IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers. IBM X-Force ID: 113851...

4.3CVSS5.5AI score0.01093EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2017/08/29 12:00 a.m.8 views

IBM Sametime Media Server Information Disclosure Vulnerability

IBM Sametime Media Server is a set of media servers for Sametime chat and conferencing from IBM in the United States. An information disclosure vulnerability exists in IBM Sametime Media Server versions 9 and 8.5, which stems from detailed application information appearing in error messages. An...

4.3CVSS4.3AI score0.01093EPSS
SaveExploits0References1
CVE
CVE
added 2017/08/28 8:00 p.m.55 views

CVE-2016-2970

The CVE-2016-2970 entry concerns IBM Sametime 8.5 and 9.0 Meetings Server, where error messages may disclose detailed information about the application. The underlying issue is information disclosure via verbose error output, which could aid an attacker in understanding the software. Impact detai...

4.3CVSS4.3AI score0.01093EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2017/08/28 12:00 a.m.7 views

PT-2017-19316 · Osnexus · Quantastor

Name of the Vulnerable Software and Affected Versions: OSNEXUS QuantaStor versions prior to 4.3.1 Description: A flaw was found in the error message sent as a response for non-existent users on the system. This could allow an attacker to enumerate valid accounts by searching for common usernames...

5.3CVSS5.3AI score0.04746EPSS
SaveExploits6References5
Veracode
Veracode
added 2017/08/22 7:38 a.m.11 views

Leakage Of Environment Variables

gitPython is vulnerable to the leakage of environment variables. The leakage happens through error messages because it does not use the unsafe variable in the expandpath method. The unsafe variable should be set to False to prevent this. However, the variable is set to True by default...

6.6AI score
SaveExploits0
CNVD
CNVD
added 2017/08/11 12:00 a.m.9 views

IBM Runbook Automation Information Disclosure Vulnerability

IBM Runbook Automation is a suite of automated operations software from IBM in the United States. The software is used to define, build, edit and manage systems and network operational processes, reducing manual tasks. An information disclosure vulnerability exists in IBM Runbook Automation that...

4.3CVSS6AI score0.00947EPSS
SaveExploits0References1
Rows per page
Query Builder