508 matches found
CVE-2017-0923
Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting...
CVE-2017-0923
Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting...
CVE-2017-0923
Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting...
CVE-2017-0923
GitLab Community Edition 9.1 is affected by a lack of input validation in the IPython notebooks component, causing persistent cross-site scripting. Root cause: input validation weakness in IPython notebooks. Impact: potential XSS exposure. Exploitation details are not provided in the supplied doc...
CVE-2017-0923
Removed by vendor...
CVE-2017-0923: Improper Neutralization of Input During Web Page Generation
Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting...
PT-2018-5150
Name of the Vulnerable Software and Affected Versions Gitlab Community Edition version 9.1 Description The issue is related to a lack of input validation in the IPython notebooks component, resulting in persistent cross-site scripting. Recommendations For Gitlab Community Edition version 9.1,...
CVE-2018-8768
In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous...
Python Scriptable Reverse Engineering Sandbox: PyREBox
PyREBox is a Python scriptable Reverse Engineering sandbox. It is based on QEMU, and its goal is to aid reverse engineering by providing dynamic analysis and debugging capabilities from a different perspective. PyREBox allows to inspect a running QEMU VM, modify its memory or registers, and to...
Ipython Cross-Site Scripting Vulnerability
IPython is an enhanced version of Python's native interactive shell developed by the IPython team. A cross-site scripting vulnerability exists in version 3.x of Ipython prior to 3.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
Ipython Cross-Site Scripting Vulnerability (CNVD-2017-35321)
IPython is an enhanced version of Python's native interactive shell developed by the IPython team. A cross-site scripting vulnerability exists in versions of Ipython prior to 3.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
IPython Cross-Site Request Forgery Vulnerability
IPython is an enhanced version of Python's native interactive shell developed by the IPython team.The REST API is one of the APIs that supports lightweight REST-style web scripting. A cross-site request forgery vulnerability exists in the REST API in IPython versions 2 and 3. A remote attacker...
CVE-2015-4706
Cross-site scripting XSS vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path...
Cross site scripting
Cross-site scripting XSS vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path...
CVE-2015-4706
Cross-site scripting XSS vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path...
PYSEC-2017-45
Cross-site scripting XSS vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path...
CVE-2015-4706
CVE-2015-4706 affects IPython 3.x before 3.2. It is a cross-site scripting (XSS) vulnerability where remote attackers can inject arbitrary web script or HTML via JSON error messages and the /api/contents path. Connected advisories (GHSA, OSV, CNVD/NVD variants) consistently describe the same issu...
CVE-2015-4706
Cross-site scripting XSS vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path...
