VIR Vulnerability Intelligence Relay

Package impact

python PyPI / ipython

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2015-5607 high 8.8 8.8 4y ago Cross-site request forgery in the REST API in IPython 2 and 3. debianfedorapython
CVE-2014-3429 medium — 6.8 4y ago IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a… debiansusepython
CVE-2015-7337 medium — 6.8 11y ago The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files… debianpython
CVE-2015-4707 medium 6.1 6.1 4y ago Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path. debianpython
CVE-2015-4706 medium 6.1 6.1 9y ago Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path. debianpython
CVE-2015-6938 medium — 4.3 4y ago Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbi… debiansusefedorapython