1342 matches found
CVE-2024-22421 Potential authentication and CSRF tokens leak in JupyterLab
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. Users of JupyterLab who click on a malicious link may get their Authorization and XSRFToken tokens exposed to a third party when running an older jupyter-server...
CVE-2024-22421
CVE-2024-22421 affects JupyterLab and relates to a redirect vulnerability in older jupyter-server versions. If a user clicks a malicious link, their Authorization and XSRFToken can be exposed to a third party when running vulnerable jupyter-server. Affected JupyterLab releases are 4.1.0b2, 4.0.11...
alactions (>=0.0.7 <=0.0.11), ale-uy (=1.5.0) +36 more potentially affected by CVE-2024-22421 via notebook (>=7.0.0 <=7.0.6)
notebook PYPI version =7.0.0, =0.0.7, =1.0.1, =0.0.1, =0.20.0, =0.0.1, =0.1.1, =0.2.0, =1.6.0, =1.16.0, =1.18.0.post1 - lp-aicloud =4.0.0 and more Source cves: CVE-2024-22421 Source advisory: OSV:GHSA-44CC-43RP-5947...
alactions (>=0.0.7 <=0.0.11), ale-uy (=1.5.0) +36 more potentially affected by CVE-2024-22420 via notebook (>=7.0.0 <=7.0.6)
notebook PYPI version =7.0.0, =0.0.7, =1.0.1, =0.0.1, =0.20.0, =0.0.1, =0.1.1, =0.2.0, =1.6.0, =1.16.0, =1.18.0.post1 - lp-aicloud =4.0.0 and more Source cves: CVE-2024-22420 Source advisory: OSV:GHSA-4M77-CMPX-VJC4...
CVE-2023-51277
nbviewer-app aka Jupyter Notebook Viewer before 0.1.6 has the get-task-allow entitlement for release builds...
Design/Logic Flaw
nbviewer-app aka Jupyter Notebook Viewer before 0.1.6 has the get-task-allow entitlement for release builds...
CVE-2023-51277
nbviewer-app aka Jupyter Notebook Viewer before 0.1.6 has the get-task-allow entitlement for release builds...
CVE-2023-51277
nbviewer-app aka Jupyter Notebook Viewer before 0.1.6 has the get-task-allow entitlement for release builds...
CVE-2023-51277
nbviewer-app aka Jupyter Notebook Viewer before 0.1.6 has the get-task-allow entitlement for release builds...
CVE-2023-51277
CVE-2023-51277 affects nbviewer-app (Jupyter Notebook Viewer) prior to version 0.1.6, where the release build incorrectly included the get-task-allow entitlement. This misconfiguration can enable loading of untrusted code, with reported high impact on confidentiality, integrity, and availability....
Jupyter Notebook Viewer Security Vulnerability
Jupyter Notebook Viewer is a macOS application for viewing Jupyter/IPython notebooks. A security vulnerability exists in Jupyter Notebook Viewer prior to version 0.1.6, which stems from a problem with the get-task-allow function and can be exploited by an attacker to load untrusted code...
January 2, 2024, update for OneNote 2016 (KB5002500)
None None...
Velociraptor 0.7.1 Release
Written by Dr. Michael Cohen Sigma Support, ETW Multiplexing, Local Encrypted Storage and New VQL Capabilities Highlight the Last Release of 2023 Rapid7 is excited to announce that version 0.7.1 of Velociraptor is live and available for download. There are several new features and capabilities th...
Velociraptor 0.7.1 Release
Written by Dr. Michael Cohen Sigma Support, ETW Multiplexing, Local Encrypted Storage and New VQL Capabilities Highlight the Last Release of 2023 Rapid7 is excited to announce that version 0.7.1 of Velociraptor is live and available for download. There are several new features and capabilities th...
MAL-2023-8721 Malicious code in jupyter-notebook-deps (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 149056bec7a565568bd2ddea92746e800266ecb291da0df46551b2d1766551bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in jupyter-notebook-deps (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 149056bec7a565568bd2ddea92746e800266ecb291da0df46551b2d1766551bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
[SECURITY] Fedora 38 Update: python-jupyter-server-2.1.0-3.fc38
The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila...
[SECURITY] Fedora 39 Update: python-jupyter-server-2.7.2-2.fc39
The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila...
Ubuntu 16.04 ESM : IPython vulnerability (USN-4855-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4855-1 advisory. It was discovered that IPython did not properly sanitize certain input. If a user were tricked into opening a specially crafted notebook file, a remote attacker...
