PYSEC-2023-17

IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject to a command injection vulnerability with very specific prerequisites. This vulnerability requir...

GHSA-29GW-9793-FVW7 IPython vulnerable to command injection via set_term_title

IPython provides an interactive Python shell and Jupyter kernel to use Python interactively. Versions prior to 8.10.0 are vulnerable to command injection in the settermtitle function under specific conditions. This has been patched in version 8.10.0. Impact Users are only vulnerable when calling...

IPython vulnerable to command injection via set_term_title

IPython provides an interactive Python shell and Jupyter kernel to use Python interactively. Versions prior to 8.10.0 are vulnerable to command injection in the settermtitle function under specific conditions. This has been patched in version 8.10.0. Impact Users are only vulnerable when calling...

CVE-2023-24816

IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject to a command injection vulnerability with very specific prerequisites. This vulnerability requir...

CVE-2023-24816 set_term_title command injection in ipython

IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject to a command injection vulnerability with very specific prerequisites. This vulnerability requir...

CVE-2023-24816 set_term_title command injection in ipython

IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject to a command injection vulnerability with very specific prerequisites. This vulnerability requir...

CVE-2023-24816 set_term_title command injection in ipython

IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject to a command injection vulnerability with very specific prerequisites. This vulnerability requir...

CVE-2023-24816

CVE-2023-24816 concerns IPython (versions before 8.1.0). The vulnerability arises when the function IPython.utils.terminal.set_term_title is called on Windows in a Python environment where ctypes is not available. The dependency on ctypes in IPython.utils._process_win32 can prevent the vulnerable...

CVE-2023-24816

creationtimestamp| type| source ---|---|--- 2023-02-10 09:23:53+00:00| published-proof-of-concept| https://github.com/ipython/ipython/security/advisories/GHSA-29gw-9793-fvw7...

PT-2023-6832 · Python · Python

Name of the Vulnerable Software and Affected Versions: IPython versions prior to 8.10.0 Description: The issue exists due to the lack of neutralization of special elements used in the operating system command. Exploitation of this issue may allow an attacker to execute arbitrary commands by...

Interactive Python 操作系统命令注入漏洞

Interactive Python IPython is a command shell for interactive computation using multiple programming languages, originally developed for the Python programming language. An operating system command injection vulnerability exists in IPython Interactive Python versions prior to 8.1.0. An attacker...

CVE-2023-24816: Improper Input Validation

IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject to a command injection vulnerability with very specific prerequisites. This vulnerability requir...

Ubuntu: Security Advisory (USN-4855-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : ipython -- Execution with Unnecessary Privileges (35d1e192-628e-11ed-8c5e-641c67a117d8)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 35d1e192-628e-11ed-8c5e-641c67a117d8 advisory. - IPython Interactive Python is a command shell for interactive computing in multiple programming...

Execution with Unnecessary Privileges in JupyterApp

Impact What kind of vulnerability is it? Who is impacted? We’d like to disclose an arbitrary code execution vulnerability in jupytercore that stems from jupytercore executing untrusted files in the current working directory. This vulnerability allows one user to run code as another. Patches Has t...

The vulnerability of the shell command line interface in IPython’s interactive computing environment allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the shell command line interface for interactive IPython computations is related to access control errors. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

openSUSE 15 Security Update : python-ipython (openSUSE-SU-2022:10043-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:10043-1 advisory. - IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python...

Security update for python-ipython (important)

openSUSE Security Update: Security update for python-ipython Announcement ID: openSUSE-SU-2022:10043-1 Rating: important References: 1194936 Cross-References: CVE-2022-21699 CVSS scores: CVE-2022-21699 NVD : 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2022-21699 SUSE: 8.8...

OPENSUSE-SU-2022:10043-1 Security update for python-ipython

This update for python-ipython fixes the following issues: - CVE-2022-21699: Confining executed process to have limited privileges. boo1194936...

GHSA-Q326-JHW3-699G Improper Neutralization of Input During Web Page Generation in IPython

Cross-site scripting XSS vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path...