CVE-2026-73417 JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 3.3.0 until 4.5.10 and 4.6.2, JupyterLab allows notebook settings to be shared and applied through an overrides.json file using the Import button in the Settings...

Cross-site Scripting (XSS)

Overview @jupyterlab/notebook-extension is a JupyterLab - Notebook Extension Affected versions of this package are vulnerable to Cross-site Scripting XSS via the handling of data-commandlinker-command and data-commandlinker-args attributes in HTML content. An attacker can execute arbitrary...

HP Data Protector LogClientInstallation Method Userid Field SQL Execution

The HP Data Protector DPNECentral web service listening on this port contains a SQL injection vulnerability because it fails to properly sanitize user-supplied input to the userid field of its LogClientInstallation method before using it in a database query. This may allow an attacker to read and...

HP Data Protector Multiple Products LogClientInstallation SQL Injection (CVE-2011-3156)

An SQL injection vulnerability has been reported in HP Data Protector Notebook Extension and HP Data Protector for Personal Computers...

HP Data Protector Notebook Extension Policy Server LogClientInstallation Remote SQL Injection Vulnerabilty

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension. Authentication is not required to exploit this vulnerability. The flaw exists within the dpnepolicyservice component which exposes a DPNECentral Web Service on...

HP Data Protector Notebook Extension Policy Server LogCopyOperation Remote SQL Injection Vulnerabilty

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension. Authentication is not required to exploit this vulnerability. The flaw exists within the dpnepolicyservice component which exposes a DPNECentral Web Service on...

HP Data Protector Notebook Extension Policy Server LogBackupLocationStatus Remote SQL Injection Vulnerabilty

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension. Authentication is not required to exploit this vulnerability. The flaw exists within the dpnepolicyservice component which exposes a DPNECentral Web Service on...

HP Data Protector Notebook Extension Policy Server RequestCopy Remote SQL Injection Vulnerabilty

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension. Authentication is not required to exploit this vulnerability. The flaw exists within the dpnepolicyservice component which exposes a DPNECentral Web Service on...

HP Data Protector Notebook Extension Policy Server FinishedCopy Remote SQL Injection Vulnerabilty

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension. Authentication is not required to exploit this vulnerability. The flaw exists within the dpnepolicyservice component which exposes a DPNECentral Web Service on...

HP Data Protector Notebook Extension multiple security vulnerabilities

No description provided...

CVE-2011-3162

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1296...

CVE-2011-3161

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1229...

CVE-2011-3157

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1225...

CVE-2011-3158

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1226...

CVE-2011-3159

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1227...

Code injection

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1296...

CVE-2011-3162

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1296...

CVE-2011-3160

HP Data Protector Notebook Extension has a remote code execution vulnerability (ZDI-1228) affecting dpnepolicyservice via LogCopyOperation. The flaw exists in the DPNECentral Web Service on TCP port 80; the copyStatus field from a user request is used to construct a query without proper validatio...

CVE-2011-3156

HP Data Protector Notebook Extension (and Data Protector for Personal Computers) module exposes a DPNECentral web service (dpnepolicyservice) with a LogClientInstallation method vulnerable to input validation flaws. The ZDI advisory describes remote arbitrary-code execution via the userid field i...

CVE-2011-3158

HP Data Protector Notebook Extension contains a remote SQL injection in the dpnepolicyservice component (RequestCopy) exposed on TCP port 80. Unauthenticated attackers can craft a RequestCopy with a malicious type, causing the service to construct and execute arbitrary SQL queries under the servi...