Lucene search
+L

2502 matches found

OSV
OSV
added 2020/11/24 9:15 p.m.12 views

DEBIAN-CVE-2020-26232

Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server could redirect the browser to a different website. All jupyter servers are technically affected, however, these maliciously crafted links can only be reasonably made for known...

5.4CVSS5.7AI score0.01004EPSS
SaveExploits0References1
PyPA
PyPA
added 2020/11/24 9:15 p.m.9 views

PYSEC-2020-234

Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server could redirect the browser to a different website. All jupyter servers are technically affected, however, these maliciously crafted links can only be reasonably made for known...

5.5CVSS6.8AI score0.01004EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2020/11/24 9:15 p.m.15 views

Open redirect

Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server could redirect the browser to a different website. All jupyter servers are technically affected, however, these maliciously crafted links can only be reasonably made for known...

5.5CVSS5.3AI score0.01004EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2020/11/24 9:10 p.m.47 views

CVE-2020-26232

Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server could redirect the browser to a different website. All jupyter servers are technically affected, however, these maliciously crafted links can only be reasonably made for known...

5.5CVSS5.3AI score0.01004EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/11/24 9:10 p.m.31 views

CVE-2020-26232 Open redirect in Jupyter Server

Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server could redirect the browser to a different website. All jupyter servers are technically affected, however, these maliciously crafted links can only be reasonably made for known...

4.1CVSS5.3AI score0.01004EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2020/11/24 12:00 a.m.13 views

Jupyter Server Input Validation Error Vulnerability

Jupyter Server is a Jupyter community application used to provide back-end services for Jupyter web applications. A security vulnerability exists in Jupyter Server versions prior to 1.0.6 that stems from an open redirection vulnerability. A maliciously created link to the jupyter server could...

5.5CVSS6AI score0.01004EPSS
SaveExploits0References4
PyPA
PyPA
added 2020/11/18 10:15 p.m.29 views

PYSEC-2020-215

Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably made for know...

6.1CVSS6.8AI score0.01228EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2020/11/18 10:15 p.m.19 views

PYSEC-2020-215

Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably made for know...

6.1CVSS7AI score0.01228EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2020/11/18 9:06 p.m.44 views

Open redirect in Jupyter Notebook

Impact What kind of vulnerability is it? Who is impacted? Open redirect vulnerability - a maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably...

6.1CVSS5.9AI score0.01228EPSS
SaveExploits0References6Affected Software1
Hacker One
Hacker One
added 2020/11/14 12:40 a.m.19 views

Mail.ru: HTML injection in an email [delivery.city-mobil.ru]

It was possible to inject spoofed HTML content into delivery.city-mobil.ru registration e-mail message via forged user name...

2AI score
SaveExploits0
Hacker One
Hacker One
added 2020/11/11 11:26 a.m.16 views

Rocket.Chat: User Impersonation through sendMessage options

The Meteor call "sendMessage" allowed clients to use custom avatar and alias parameters, which could be used to impersonate other chat room members. This vulnerability has been patched...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/11/06 12:00 a.m.47 views

EulerOS Virtualization 3.0.6.6 : ntp (EulerOS-SA-2020-2461)

According to the version of the ntp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service daemon exit or system time...

7.4CVSS6.5AI score0.03376EPSS
SaveExploits0References2
NVD
NVD
added 2020/10/29 4:15 p.m.22 views

CVE-2020-4864

IBM Resilient SOAR V38.0 could allow an attacker on the internal net work to provide the server with a spoofed source IP address. IBM X-Force ID: 190567...

4.3CVSS4.4AI score0.00446EPSS
SaveExploits0References2
OSV
OSV
added 2020/10/29 4:15 p.m.9 views

CVE-2020-4864

IBM Resilient SOAR V38.0 could allow an attacker on the internal net work to provide the server with a spoofed source IP address. IBM X-Force ID: 190567...

4.3CVSS5.8AI score0.00446EPSS
SaveExploits0References2
Prion
Prion
added 2020/10/29 4:15 p.m.18 views

Code injection

IBM Resilient SOAR V38.0 could allow an attacker on the internal net work to provide the server with a spoofed source IP address. IBM X-Force ID: 190567...

3.3CVSS4.4AI score0.00446EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/10/29 3:50 p.m.27 views

CVE-2020-4864

IBM Resilient SOAR V38.0 could allow an attacker on the internal net work to provide the server with a spoofed source IP address. IBM X-Force ID: 190567...

4.3CVSS4.4AI score0.00446EPSS
SaveExploits0References2
CVE
CVE
added 2020/10/29 3:50 p.m.51 views

CVE-2020-4864

CVE-2020-4864 affects IBM Resilient OnPrem (SOAR) where the X-Forwarded-For header/logging can cause the server to register a spoofed source IP when accessed from a restricted internal network. Root cause: improper handling of the X-Forwarded-For header allowing an attacker on the internal networ...

4.3CVSS4.4AI score0.00446EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/10/28 1:12 p.m.23 views

Security Bulletin: IBM Resilient OnPrem could allow an attacker on a restricted internal network to provide the server with a spoofed source IP address. (CVE-2020-4864)

Summary The X-Forwarded-For Header in a request can inadvertently log an incorrect IP address when connecting to specific internal networks. The affects only on-premises customers within a restricted network. Vulnerability Details CVEID: CVE-2020-4864 DESCRIPTION: IBM Resilient OnPrem could allow...

4.3CVSS0.8AI score0.00446EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/10/26 10:55 p.m.82 views

Security Bulletin: Vulnerabilities in NTPv4 affect AIX (CVE-2020-11868, CVE-2020-13817, and CVE-2020-15025)

Summary There are vulnerabilities in NTPv4 that affect AIX. Vulnerability Details CVEID: CVE-2020-15025 DESCRIPTION: NTP is vulnerable to a denial of service, caused by a memory leak when a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file in ntpd. By sending...

7.5CVSS0.2AI score0.03376EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2020/10/21 12:00 a.m.14 views

Unspecified Vulnerability in Juniper Networks Junos OS (CNVD-2021-28794)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS contains a security vulnerability that can be exploited by an attacker to trigger a denial of...

7.5CVSS6.9AI score0.01288EPSS
SaveExploits0References1
Rows per page
Query Builder