127 matches found
Man D-Tale 跨站脚本漏洞
Man D-Tale is a visualization tool for pandas data structures within the Man company. Versions of Man D-Tale prior to 3.22.0 contained a cross-site scripting vulnerability. This vulnerability could lead to remote code execution attacks when using Redis or Shelf storage layers...
Remote Code Execution
D-Tale is vulnerable to Remote Code Execution. The vulnerability is due to the use of redis or shelf storage layer, where users hosting D-Tale publicly could allow attackers to run malicious code on the server...
GHSA-436G-FHFC-9G5W D-Tale: Remote Code Execution through redis/shelf storage
Impact Users hosting D-Tale publicly while using a redis or shelf storage layer could be vulnerable to remote code execution allowing attackers to run malicious code on the server. Patches Users should upgrade to version 3.22.0. Workarounds There are no workarounds for versions 3.22.0...
D-Tale: Remote Code Execution through redis/shelf storage
Impact Users hosting D-Tale publicly while using a redis or shelf storage layer could be vulnerable to remote code execution allowing attackers to run malicious code on the server. Patches Users should upgrade to version 3.22.0. Workarounds There are no workarounds for versions 3.22.0...
CVE-2026-27194
D-Tale is a visualizer for pandas data structures. Versions prior to 3.20.0 are vulnerable to Remote Code Execution through the /save-column-filter endpoint. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. This issue...
CVE-2026-27194 D-Tale affected by Remote Code Execution through the /save-column-filter endpoint
D-Tale is a visualizer for pandas data structures. Versions prior to 3.20.0 are vulnerable to Remote Code Execution through the /save-column-filter endpoint. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. This issue...
CVE-2026-27194
D-Tale (Python package dtale) is affected by CVE-2026-27194 due to a flaw in the /save-column-filter endpoint that allows Remote Code Execution. The issue arises from improper validation when constructing column filters via pandas DataFrame.query(), enabling an attacker to execute arbitrary code ...
CVE-2026-27194 D-Tale affected by Remote Code Execution through the /save-column-filter endpoint
D-Tale is a visualizer for pandas data structures. Versions prior to 3.20.0 are vulnerable to Remote Code Execution through the /save-column-filter endpoint. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. This issue...
CVE-2026-27194
D-Tale is a visualizer for pandas data structures. Versions prior to 3.20.0 are vulnerable to Remote Code Execution through the /save-column-filter endpoint. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. This issue...
CVE-2026-27194 D-Tale affected by Remote Code Execution through the /save-column-filter endpoint
D-Tale is a visualizer for pandas data structures. Versions prior to 3.20.0 are vulnerable to Remote Code Execution through the /save-column-filter endpoint. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. This issue...
Man D-Tale 注入漏洞
Man D-Tale is a visualization tool for pandas data structures within the Man company. Versions of Man D-Tale prior to 3.20.0 contained an injection vulnerability. This vulnerability stemmed from a remote code execution flaw through the /save-column-filter endpoint, which could allow attackers to...
GHSA-C87C-78RC-VMV2 D-Tale affected by Remote Code Execution through the /save-column-filter endpoint
Impact Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Patches Users should upgrade to version 3.20.0. Workarounds There are no workarounds for versions 3.20.0...
CVE-2025-69749
Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code...
CVE-2025-69749
Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code...
CVE-2025-69749
Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code...
EUVD-2025-206532
Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code...
CVE-2025-69749
Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code...
PT-2026-5324
Name of the Vulnerable Software and Affected Versions tale versions 2.0.5 Description A Cross Site Scripting issue exists in tale version 2.0.5 that could allow an attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version that contains a fix...
Tale Blog Security Vulnerabilities
Tale Blog is a Java blog developed using the Tale Blog System, which is open-source. Version 2.0.5 of Tale Blog has a security vulnerability that can be exploited by cross-site scripting attacks...