Lucene search
+L

11684 matches found

SUSE CVE
SUSE CVE
added 2023/12/06 2:4 a.m.6 views

SUSE CVE-2023-49080

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. Unhandled errors in API requests coming from an authenticated user include traceback information, which can include path information...

4.1CVSS6.9AI score0.00841EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.10 views

The vulnerability of the Parallels Desktop Hypervisor Service allows a attacker to execute arbitrary code and gain elevated privileges.

The vulnerability of the Parallels Desktop Hypervisor Service is related to initialization errors. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

7.8CVSS7.6AI score0.00369EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.14 views

The vulnerability of the Toolgate component in Parallels Desktop hypervisor allows a hacker to execute arbitrary code and increase their privileges.

The vulnerability of the Toolgate controller in Parallels Desktop involves synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

7.5CVSS7.6AI score0.00405EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.10 views

The vulnerability of the FortiOS operating system and the FortiProxy proxy server, related to numerical truncation errors, allows attackers to trigger a service failure.

The vulnerability of the FortiOS operating system and the FortiProxy proxy server, related to numerical truncation errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

6.8CVSS6.5AI score0.01269EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.15 views

The vulnerability of the Updater service in Parallels Desktop hypervisor allows a hacker to execute arbitrary code and increase their privileges.

The vulnerability of the Toolgate controller in Parallels Desktop lies in initialization errors. Exploiting this vulnerability allows an attacker to execute arbitrary code and enhance their privileges...

7.8CVSS7.7AI score0.00363EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/06 12:0 a.m.7 views

PT-2023-29099 · Unknown · Kernel Module

Name of the Vulnerable Software and Affected Versions: Kernel module affected versions not specified Description: The issue is related to data verification errors in the kernel module. Successful exploitation may cause WLAN interruption. Recommendations: At the moment, there is no information abo...

7.5CVSS7.2AI score0.00515EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.8 views

The vulnerability of the Updater service in Parallels Desktop hypervisor allows a hacker to execute arbitrary code and increase their privileges.

The vulnerability of the Updater service in Parallels Desktop operating systems is related to initialization errors. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

7.8CVSS7.6AI score0.00369EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.10 views

The vulnerability of the PowerShell command interpreter for Windows operating systems allows attackers to exploit it to disclose sensitive information.

The vulnerability of PowerShell command interpreters on Windows operating systems is related to authentication process errors. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information remotely...

6.8CVSS6.5AI score0.01436EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/12/05 6:15 p.m.30 views

GHSA-H56G-GQ9V-VC8R jupyter-server errors include tracebacks with path information

Impact Unhandled errors in API requests include traceback information, which can include path information. There is no known mechanism by which to trigger these errors without authentication, so the paths revealed are not considered particularly sensitive, given that the requesting user has...

4.3CVSS4.2AI score0.00841EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2023/12/05 6:15 p.m.20 views

jupyter-server errors include tracebacks with path information

Impact Unhandled errors in API requests include traceback information, which can include path information. There is no known mechanism by which to trigger these errors without authentication, so the paths revealed are not considered particularly sensitive, given that the requesting user has...

4.3CVSS7AI score0.00841EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
added 2023/12/05 7:3 a.m.19 views

Information Disclosure

jupyterserver is vulnerable to Information Disclosure. An information disclosure flaw exists due to unhandled errors in API requests. While not directly allowing unauthorized access, these errors may leak sensitive path information in responses, potentially revealing sensitive server details to...

4.3CVSS6.1AI score0.00841EPSS
SaveExploits0References4Affected Software2
Code423n4
Code423n4
added 2023/12/05 12:0 a.m.13 views

An attacker can manipulate the preDepositvePrice to steal from other users.

Lines of code Vulnerability details Impact The first user that stakes can manipulate the total supply of sfTokens and by doing so create a rounding error for each subsequent user. In the worst case, an attacker can steal all the funds of the next user. Proof of Concept When the first user enters...

6.9AI score
SaveExploits0
UbuntuCve
UbuntuCve
added 2023/12/04 9:15 p.m.26 views

CVE-2023-49080

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. Unhandled errors in API requests coming from an authenticated user include traceback information, which can include path information...

4.3CVSS5.8AI score0.00841EPSS
SaveExploits0References4
OSV
OSV
added 2023/12/04 9:15 p.m.7 views

UBUNTU-CVE-2023-49080

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. Unhandled errors in API requests coming from an authenticated user include traceback information, which can include path information...

4.3CVSS6.1AI score0.00841EPSS
SaveExploits0References5
Prion
Prion
added 2023/12/04 9:15 p.m.18 views

Design/Logic Flaw

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. Unhandled errors in API requests coming from an authenticated user include traceback information, which can include path information...

4CVSS6.7AI score0.00841EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/04 12:0 a.m.8 views

The vulnerability of the Private Key Handler component in the server that unlocks encrypted disks of Tang allows a hacker to disclose the protected information.

The vulnerability of the Private Key Handler component in the server that unlocks encrypted disks of the Tang service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

5.3CVSS5.8AI score0.00568EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/12/04 12:0 a.m.9 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to pointer naming errors, allows attackers to trigger a service failure.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00313EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/01 12:0 a.m.8 views

The vulnerability of graphic drivers in microprogramming software for Intel processors, related to pointer swapping errors, allows attackers to cause system failures.

The vulnerability of graphics drivers in microprogramming software for Intel processors is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.6CVSS5.9AI score0.00181EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/12/01 12:0 a.m.12 views

The vulnerability of the graphics driver of Intel microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the graphics driver of Intel microprogramming systems is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

6.1CVSS5.9AI score0.00206EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/12/01 12:0 a.m.8 views

The vulnerability in the McAfee Web Gateway, related to code errors, allows attackers to trigger a service failure.

The vulnerability of the McAfee Web Gateway is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.2AI score0.0239EPSS
SaveExploits0References3Affected Software4
Rows per page
Query Builder