IBM i2 Analysts Notebook and IBM i2 Analysts Notebook Premium Buffer Overflow Vulnerability (CNVD-2020-29555)

IBM i2 Analysts Notebook and IBM i2 Analysts Notebook Premium are both products of IBM Corporation, USA.IBM i2 Analysts Notebook is a data visualization and analysis tool. The product supports features such as data storage and data analysis.IBM i2 Analysts Notebook Premium is an advanced version ...

IBM i2 Analysts Notebook and IBM i2 Analysts Notebook Premium Buffer Overflow Vulnerability (CNVD-2020-28956)

IBM i2 Analysts Notebook and IBM i2 Analysts Notebook Premium are both products of IBM Corporation, USA.IBM i2 Analysts Notebook is a data visualization and analysis tool. The product supports features such as data storage and data analysis.IBM i2 Analysts Notebook Premium is an advanced version ...

IBM i2 Analysts Notebook and IBM i2 Analysts Notebook Premium Buffer Overflow Vulnerability (CNVD-2020-28957)

IBM i2 Analysts Notebook and IBM i2 Analysts Notebook Premium are both products of IBM Corporation, USA.IBM i2 Analysts Notebook is a data visualization and analysis tool. The product supports features such as data storage and data analysis.IBM i2 Analysts Notebook Premium is an advanced version ...

Visual Studio Code Python Extension Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

PT-2020-5538

Name of the Vulnerable Software and Affected Versions IBM i2 Intelligent Analyis Platform version 9.2.1 IBM i2 Analyst's Notebook affected versions not specified Description The issue is caused by a memory corruption error, which could allow a remote attacker to execute arbitrary code on the...

PT-2020-5569

Name of the Vulnerable Software and Affected Versions IBM i2 Intelligent Analyis Platform version 9.2.1 IBM i2 Analyst's Notebook affected versions not specified Description The issue is caused by a memory corruption error, which could allow a remote attacker to execute arbitrary code on the...

PT-2020-5540

Name of the Vulnerable Software and Affected Versions IBM i2 Intelligent Analyis Platform version 9.2.1 IBM i2 Analyst's Notebook affected versions not specified Description The issue is caused by a memory corruption, which could allow a local attacker to execute arbitrary code on the system. Thi...

Security Bulletin: JWT Token Check Vulnerability in Watson Studio Local

Summary An error in how JWT token signature was checked has been addressed. This issue was leading to invalid Jupyter Notebook access. Vulnerability Details Third Party Entry: PSIRT-ADV0010959 DESCRIPTION: CVSS Base score: 5.9 CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected...

CVE-2019-19235

AsLdrSrv.exe in ASUS ATK Package before V1.0.0061 for Windows 10 notebook PCs could lead to unsigned code execution with no additional execution. The user must put an application at a particular path, with a particular file name...

hugo-jupyter (>=0.2.1, <=0.3.0), mumot (>=1.0.0, <=1.1.2) potentially affected by CVE-2018-21030 via notebook (>=5.0.0, <=5.4.1)

notebook PYPI version =5.0.0, =0.2.1, =1.0.0, =1.1.2 Source cves: CVE-2018-21030 Source advisory: GHSA-JQWC-JM56-WCWJ...

vizic (>=0.1.0, <=0.2.0.dev1) potentially affected by CVE-2018-21030 via notebook (4.2.3)

notebook PYPI version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - vizic =0.1.0, =0.2.0.dev1 Source cves: CVE-2018-21030 Source advisory: OSV:GHSA-JQWC-JM56-WCWJ...

Cross-site scripting in Jupyter Notebook

Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document...

GHSA-JQWC-JM56-WCWJ Cross-site scripting in Jupyter Notebook

Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document...

hugo-jupyter (>=0.2.1, <=0.3.0), mumot (>=1.0.0, <=1.1.2) potentially affected by CVE-2018-21030 via notebook (>=5.0.0, <=5.4.1)

notebook PYPI version =5.0.0, =0.2.1, =1.0.0, =1.1.2 Source cves: CVE-2018-21030 Source advisory: OSV:GHSA-JQWC-JM56-WCWJ...

ipynb-path (>=0.1.2, <=0.1.3), jupyter-kernel-gateway (>=0.5.0, <=1.2.2) potentially affected by CVE-2018-21030 via notebook (4.4.1)

notebook PYPI version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - ipynb-path =0.1.2, =0.5.0, =1.2.2 Source cves: CVE-2018-21030 Source advisory: OSV:GHSA-JQWC-JM56-WCWJ...

CVE-2018-21030

Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document...

CVE-2018-21030

Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document...

DEBIAN-CVE-2018-21030

Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document...

PYSEC-2019-157

Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document...

Cross site scripting

Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document...