Lucene search
+L

9729 matches found

PyPA
PyPA
added 2022/03/31 11:15 p.m.13 views

PYSEC-2022-180

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by...

7.5CVSS6.8AI score0.01097EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/03/31 11:15 p.m.46 views

PYSEC-2022-180

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by...

7.5CVSS3.2AI score0.01097EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/31 11:15 p.m.10 views

UBUNTU-CVE-2022-24758

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by...

7.5CVSS6.7AI score0.01097EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/03/31 11:15 p.m.53 views

CVE-2022-24758

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by...

7.5CVSS6.7AI score0.01097EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/03/31 10:35 p.m.42 views

CVE-2022-24758 Insertion of Sensitive Information into Log File affects Jupyter Notebook

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by...

7.5CVSS7.8AI score0.01097EPSS
SaveExploits0References1
CVE
CVE
added 2022/03/31 10:35 p.m.174 views

CVE-2022-24758

CVE-2022-24758 affects Jupyter Notebook. The issue arises from logging: when a 5xx error occurs, auth cookies and other header values are recorded in server logs, potentially exposing sensitive information to anyone with log access. This vulnerability is described as affecting Jupyter Notebook pr...

7.5CVSS7.5AI score0.01097EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/03/31 10:35 p.m.17 views

CVE-2022-24758 Insertion of Sensitive Information into Log File affects Jupyter Notebook

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by...

7.5CVSS6.3AI score
SaveExploits0References3
Debian CVE
Debian CVE
added 2022/03/31 10:35 p.m.88 views

CVE-2022-24758

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by...

7.5CVSS6.4AI score0.01097EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2022/03/31 10:35 p.m.107 views

CVE-2022-24758

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by...

7.5CVSS7.6AI score0.01097EPSS
SaveExploits0
Citrix
Citrix
added 2022/03/31 12:00 a.m.14 views

Gateway page stuck after authentication on Chrome browser v100

- Citrix Gateway integration with Storefront -Custom Themes based on RFWEBUI, but may appear with others too - Observed at CVPN and Regular Storefront Integrations. -Chrome Version updated to 100.0.4896.60 Official Build 64-bit or later triggers the issue. - Page is stuck spinning circle...

6.9AI score
SaveExploits0
CNNVD
CNNVD
added 2022/03/31 12:00 a.m.12 views

Jupyter Notebook 日志信息泄露漏洞

Jupyter Notebook is a suite of open source web applications for creating and sharing code and illustrative text documents. A log information disclosure vulnerability exists in Jupyter Notebook versions prior to 6.4.9, which stems from an unauthorized participant being able to access sensitive...

7.5CVSS6.7AI score0.01097EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/03/31 12:00 a.m.8 views

PT-2022-16860 · Unknown +3 · Jupyter Notebook +3

Name of the Vulnerable Software and Affected Versions: Jupyter notebook versions prior to 6.4.9 Description: The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a...

7.5CVSS6.1AI score0.02094EPSS
SaveExploits1References40
Patchstack
Patchstack
added 2022/03/30 12:00 a.m.22 views

WordPress WP Express Checkout (Accept PayPal Payments) plugin <= 2.1.8 - Plugin Logs Reset vulnerability

Plugin Logs Reset vulnerability discovered in WordPress WP Express Checkout Accept PayPal Payments plugin versions = 2.1.8. Solution Update the WordPress WP Express Checkout Accept PayPal Payments plugin to the latest available version at least 2.1.9...

2.7AI score
SaveExploits0References1Affected Software1
Circl
Circl
added 2022/03/28 10:41 p.m.47 views

CVE-2022-0679

creationtimestamp| type| source ---|---|--- 2022-03-28 22:41:49+00:00| seen| https://t.me/cibsecurity/39663 2024-12-21 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-21 2024-12-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

9.8CVSS7.2AI score0.4783EPSS
SaveIn wildExploits2References4
Kitploit
Kitploit
added 2022/03/28 8:30 p.m.42 views

Fennec - Artifact Collection Tool For *Nix Systems

fennec is an artifact collection tool written in Rust to be used during incident response on nix based systems. fennec allows you to write a configuration file that contains how to collect artifacts. Features A single statically compiled binary Execute any osquery SQL query Execute system command...

7.7AI score
SaveExploits0References2
OSV
OSV
added 2022/03/28 6:15 p.m.12 views

CVE-2021-25070

The Block Bad Bots WordPress plugin before 6.88 does not properly sanitise and escape the User Agent before using it in a SQL statement to record logs, leading to an SQL Injection issue...

9.8CVSS7.4AI score0.01608EPSS
SaveExploits2References1
Prion
Prion
added 2022/03/28 6:15 p.m.22 views

Sql injection

The Block Bad Bots WordPress plugin before 6.88 does not properly sanitise and escape the User Agent before using it in a SQL statement to record logs, leading to an SQL Injection issue...

7.5CVSS9.6AI score0.01608EPSS
SaveExploits2References1Affected Software1
Citrix
Citrix
added 2022/03/25 12:00 a.m.14 views

Power actions fail for all target devices from PVS console

When attempting to power manage Target Devices via Citrix PVS, the power actions for Restart and Shutdown are failing., i.e. right click Target Device Restart or Shutdown, the process starts but fails with status "Failed". No errors are reported in the event logs...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2022/03/23 10:12 p.m.10 views

python-oslo-utils: incorrect password masking in debug output

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

4.9CVSS5.7AI score0.01702EPSS
SaveExploits1References4
NVD
NVD
added 2022/03/23 9:15 p.m.29 views

CVE-2022-24757

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are...

7.5CVSS0.01256EPSS
SaveExploits0References2
Rows per page
Query Builder