Lucene search
K

1255 matches found

Fedora
Fedora
added 2023/12/14 1:52 a.m.22 views

[SECURITY] Fedora 38 Update: python-jupyter-server-2.1.0-3.fc38

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila...

4.3CVSS4.8AI score0.00237EPSS
Exploits0
Fedora
Fedora
added 2023/12/14 1:33 a.m.21 views

[SECURITY] Fedora 39 Update: python-jupyter-server-2.7.2-2.fc39

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila...

4.3CVSS4.8AI score0.00237EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/10/20 12:0 a.m.30 views

Ubuntu 16.04 ESM : IPython vulnerability (USN-4855-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4855-1 advisory. It was discovered that IPython did not properly sanitize certain input. If a user were tricked into opening a specially crafted notebook file, a remote attacker...

7.8CVSS7.6AI score0.0011EPSS
Exploits0References2
Lenovo
Lenovo
added 2023/10/10 3:42 p.m.4 views

Multi-vendor BIOS Security Vulnerabilities (October 2023) - Lenovo Support US

No description provided...

7.3AI score
Exploits0
NVD
NVD
added 2023/10/09 7:15 p.m.12 views

CVE-2022-3431

A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable...

7.8CVSS6.7AI score0.00035EPSS
Exploits0References1
Prion
Prion
added 2023/10/09 7:15 p.m.24 views

Design/Logic Flaw

A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable...

4.3CVSS7.5AI score0.00035EPSS
Exploits0References1Affected Software25
CVE
CVE
added 2023/10/09 6:18 p.m.61 views

CVE-2022-3431

CVE-2022-3431 concerns a Lenovo Notebook driver used in manufacturing that was unintentionally included in production. A local attacker with elevated privileges could modify an NVRAM variable to change Secure Boot settings. Lenovo’s advisory LEN-94952 describes firmware updates as the mitigation ...

7.8CVSS7.5AI score0.00035EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/09 6:18 p.m.15 views

CVE-2022-3431

A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable...

6.7CVSS7.1AI score0.00035EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/10/09 6:18 p.m.15 views

CVE-2022-3431

A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable...

6.7CVSS7.7AI score0.00035EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/10/09 12:0 a.m.17 views

Lenovo Notebook Security Breach

Lenovo Notebook is a laptop computer from Lenovo, a Chinese company. The Lenovo Notebook suffers from a security vulnerability that originates from allowing an attacker to modify the secure boot settings by modifying the NVRAM variable...

7.8CVSS6.8AI score0.00035EPSS
Exploits0References2
NVD
NVD
added 2023/10/04 12:15 p.m.10 views

CVE-2023-3361

A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials from the cluster ds pipeline server and saves them in plain text in the generated output instead of an ID for a Kubernetes secret...

7.7CVSS7.6AI score0.00041EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2023/10/04 12:15 p.m.1 views

CVE-2023-3361

A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials from the cluster ds pipeline server and saves them in plain text in the generated output instead of an ID for a Kubernetes secret...

7.7CVSS5.7AI score0.00041EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2023/10/04 11:34 a.m.9 views

CVE-2023-3361 S3 credentials included when exporting elyra notebook

A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials from the cluster ds pipeline server and saves them in plain text in the generated output instead of an ID for a Kubernetes secret...

7.7CVSS7.1AI score0.00041EPSS
Exploits0References3
OSV
OSV
added 2023/09/15 9:15 p.m.4 views

CVE-2023-0923

A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications from making requests to the Jupyter API. This flaw can lead to file content exposure and other issues...

9.8CVSS5.8AI score0.00137EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/09/15 8:16 p.m.12 views

CVE-2023-0923 Odh-notebook-controller-container: missing authorization allows for file contents disclosure

A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications from making requests to the Jupyter API. This flaw can lead to file content exposure and other issues...

8.8CVSS6.7AI score0.00137EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2023/09/13 12:0 a.m.22 views

Fedora: Security Advisory for python-jupyter-server (FEDORA-2023-88c411e973)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.4AI score0.00722EPSS
Exploits0References2
Fedora
Fedora
added 2023/09/09 1:35 a.m.31 views

[SECURITY] Fedora 38 Update: python-jupyter-server-2.1.0-2.fc38

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila...

6.1CVSS7.1AI score0.00722EPSS
Exploits0
NVD
NVD
added 2023/08/23 8:15 p.m.11 views

CVE-2022-3745

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to view incoming and returned data from SMI...

4.4CVSS4.5AI score0.00037EPSS
Exploits0References1
Prion
Prion
added 2023/08/23 8:15 p.m.17 views

Hardcoded credentials

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential...

4CVSS6.3AI score0.00028EPSS
Exploits0References1Affected Software87
Cvelist
Cvelist
added 2023/08/23 7:43 p.m.15 views

CVE-2022-3745

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to view incoming and returned data from SMI...

4.4CVSS4.9AI score0.00037EPSS
Exploits0References1
Rows per page
Query Builder