508 matches found
CVE-2022-21699
IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary...
CVE-2022-21699: Execution with Unnecessary Privileges
IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary...
PT-2022-4801 · Python +4 · Python +4
Name of the Vulnerable Software and Affected Versions: IPython versions prior to 7.31.1 IPython versions prior to 8.0.1 IPython versions prior to 7.16.3 Description: The issue is related to arbitrary code execution achieved by not properly managing cross-user temporary files. This allows one user...
ipython -- Execution with Unnecessary Privileges
IPython project reports: IPython 8.0.1, 7.31.1 and 5.11 are security releases that change some default values in order to prevent potential Execution with Unnecessary Privileges...
cylc-uiserver (>=0.1.0, <=0.3.0), jhub-swarmspawner (>=0.2.0, <=0.2.6) +2 more potentially affected by CVE-2021-41247 via jupyterhub (>=1.0.0, <=1.4.2)
jupyterhub PYPI version =1.0.0, =0.1.0, =0.2.0, =0.2.25, =0.0.1, =0.1.6 Source cves: CVE-2021-41247 Source advisory: OSV:GHSA-CW7P-Q79F-M2V7...
cylc-uiserver (>=0.1.0, <=0.3.0), jhub-swarmspawner (>=0.2.0, <=0.2.6) +2 more potentially affected by CVE-2021-41247 via jupyterhub (>=1.0.0, <=1.4.2)
jupyterhub PYPI version =1.0.0, =0.1.0, =0.2.0, =0.2.25, =0.0.1, =0.1.6 Source cves: CVE-2021-41247 Source advisory: GHSA-CW7P-Q79F-M2V7...
cylc-uiserver (>=0.1.0, <=0.3.0), jhub-swarmspawner (>=0.2.0, <=0.2.6) +2 more potentially affected by CVE-2021-41247 via jupyterhub (>=1.0.0, <=1.4.2)
jupyterhub PYPI version =1.0.0, =0.1.0, =0.2.0, =0.2.25, =0.0.1, =0.1.6 Source cves: CVE-2021-41247 Source advisory: OSV:PYSEC-2021-386...
cylc-uiserver (>=0.1.0, <=0.3.0), jhub-swarmspawner (>=0.2.0, <=0.2.6) +2 more potentially affected by CVE-2021-41247 via jupyterhub (>=1.0.0, <=1.4.2)
jupyterhub PYPI version =1.0.0, =0.1.0, =0.2.0, =0.2.25, =0.0.1, =0.1.6 Source cves: CVE-2021-41247 Source advisory: MEND:CVE-2021-41247...
USN-4855-1: IPython vulnerability
It was discovered that IPython did not properly sanitize certain input. If a user were tricked into opening a specially crafted notebook file, a remote attacker could possibly use this issue to execute arbitrary code...
USN-4855-1 ipython vulnerability
It was discovered that IPython did not properly sanitize certain input. If a user were tricked into opening a specially crafted notebook file, a remote attacker could possibly use this issue to execute arbitrary code...
aiogremlin (>=3.2.4b1, <=3.2.5), goblin (2.0.0b1) +3 more potentially affected by CVE-2021-21330 via aiohttp (1.3.3)
aiohttp PYPI version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiogremlin =3.2.4b1, =0.39.0, =1.0.0b1, =1.0.0b2 - okami 0.1.4 Source cves: CVE-2021-21330 Source advisory: OSV:PYSEC-2021-76...
aiogremlin (>=3.2.4b1, <=3.2.5), goblin (2.0.0b1) +3 more potentially affected by CVE-2021-21330 via aiohttp (1.3.3)
aiohttp PYPI version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiogremlin =3.2.4b1, =0.39.0, =1.0.0b1, =1.0.0b2 - okami 0.1.4 Source cves: CVE-2021-21330 Source advisory: OSV:GHSA-V6WP-4M6F-GCJG...
Pylane - An Python VM Injector With Debug Tools, Based On GDB
Pylane is a python vm injector with debug tools, based on gdb and ptrace. Pylane uses gdb to trace python process, inject and run some code in its python vm. Usage use inject command to inject a python script in an process: pylane inject use shell command to inject an interactive shell: pylane...
Cross-site Scripting (XSS)
invenio-previewer is vulnerable to cross-site scripting XSS. It does not escape the user-uploaded file and directly render the file in the JSON, Markdown and iPython Notebook previewers, allowing an attacker to inject arbitrary Javascript into a victim's browser using a malicious file...
Cross-site Scripting in invenio-previewer
Cross-Site Scripting XSS vulnerability in JSON, Markdown and iPython Notebook previewers Impact Several Cross-Site Scripting XSS vulnerabilities have been found in the JSON, Markdown and iPython Notebook previewers. The vulnerabilities would allow a malicous user to upload a JSON, Markdown or...
GHSA-J9M2-6HQ2-4R3C Cross-site Scripting in invenio-previewer
Cross-Site Scripting XSS vulnerability in JSON, Markdown and iPython Notebook previewers Impact Several Cross-Site Scripting XSS vulnerabilities have been found in the JSON, Markdown and iPython Notebook previewers. The vulnerabilities would allow a malicous user to upload a JSON, Markdown or...
PT-2019-11634
Name of the Vulnerable Software and Affected Versions: invenio-previewer versions prior to 1.0.0a12 Description: A Cross-Site Scripting XSS issue has been found in the JSON, Markdown, and iPython Notebook previewers. This would allow a malicious user to upload a file with embedded scripts that...
Python-Nubia - A Command-Line And Interactive Shell Framework
Nubia is a lightweight framework for building command-line applications with Python. It was originally designed for the “logdevice interactive shell aka. ldshell” at Facebook. Since then it was factored out to be a reusable component and several internal Facebook projects now rely on it as a quic...
Gitlab IPython notebooks component cross-site scripting vulnerability
GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository , which has similar features to Github , you can access the project's file content , commit history , bug lists , etc. GitLab Community Edition CE is...
