Lucene search
+L

8 matches found

OSV
OSV
added 2 days ago2 views

CVE-2026-73417 JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 3.3.0 until 4.5.10 and 4.6.2, JupyterLab allows notebook settings to be shared and applied through an overrides.json file using the Import button in the Settings...

8.6CVSS5.6AI score
SaveExploits0References12
Cvelist
Cvelist
added 2 days ago30 views

CVE-2026-73417 JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 3.3.0 until 4.5.10 and 4.6.2, JupyterLab allows notebook settings to be shared and applied through an overrides.json file using the Import button in the Settings...

8.6CVSS0.00552EPSS
SaveExploits0References10
EUVD
EUVD
added 2025/10/03 8:7 p.m.12 views

EUVD-2022-52538

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.03586EPSS
SaveExploits1References9
ATTACKERKB
ATTACKERKB
added 2022/05/15 3:15 a.m.4 views

CVE-2022-30708

Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created i.e., not created in Virtualmin or Cloudmin. This occurs because settings-editorwrite.cgi does not properly restrict the file parameter...

8.8CVSS6.5AI score0.03586EPSS
SaveExploits1References9
OSV
OSV
added 2022/05/15 2:30 a.m.18 views

CVE-2022-30708

Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created i.e., not created in Virtualmin or Cloudmin. This occurs because settings-editorwrite.cgi does not properly restrict the file parameter...

8.8CVSS7.8AI score
SaveExploits0References10
CNNVD
CNNVD
added 2022/05/15 12:0 a.m.13 views

Webmin 安全漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin version 1.991 and prior versions, which stems from settings-editorwrite.cgi not properly restricting the file parameter, leading to remote...

8.8CVSS8.5AI score0.03586EPSS
SaveExploits1References10
Cvelist
Cvelist
added 2021/06/04 3:3 p.m.28 views

CVE-2020-36140

BloofoxCMS 0.5.2.1 allows Cross-Site Request Forgery CSRF via 'mode=settings&page=editor', as demonstrated by use of 'mode=settings&page=editor' to change any file content Locally/Remotely...

6.6AI score0.00569EPSS
SaveExploits1References1
OSV
OSV
added 2018/10/10 3:29 p.m.7 views

CVE-2018-18207

Virtualmin 6.03 allows Frame Injection via the settings-editorread.cgi file parameter...

6.1CVSS5.8AI score0.00655EPSS
SaveExploits0References1
Rows per page
Query Builder