ipython

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

ipython records in CISA KEV

No ipython vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ipython 5 records HIGH Notebook 2 records LOW Ipython Notebook 1 record LOW

Records

8 records

TI-2022-06075 CVE-2022-21699 · GHSA-pq7m-3gw7-gq5x

Execution with Unnecessary Privileges in ipython

HIGH 73

IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00652 Published 2022-01-19 Fixed in 5.11, 7.16.3 +2 CWE-250

TI-2023-10316 CVE-2023-24816 · GHSA-29gw-9793-fvw7

set_term_title command injection in ipython

MEDIUM 64

IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.01306 Published 2023-02-10 Fixed in 8.10, 8.10.0 CWE-20

TI-2015-04725 CVE-2015-5607 · GHSA-7fc2-rm35-2pp7

Cross-site request forgery in the REST API in IPython 2 and 3.

MEDIUM 40

Cross-site request forgery in the REST API in IPython 2 and 3.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01211 Published 2017-09-20 Fixed in 2.4.1, 3.2.3 CWE-352

TI-2014-02760 CVE-2014-3429 · GHSA-75cw-5cgv-g853

IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket…

LOW 38

IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04686 Published 2014-08-07 Fixed in 1.2.0 CWE-94

TI-2015-06101 CVE-2015-7337 · GHSA-92mr-v722-f48m

The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5…

LOW 35

The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME ty…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02487 Published 2015-09-29 Fixed in 4.0.5, 3.2.2 CWE-20

TI-2015-03937 CVE-2015-4707 · GHSA-66gw-5xpf-gfp5

Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to…

LOW 32

Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02274 Published 2017-09-20 Fixed in 3.2.0 CWE-79

TI-2015-03936 CVE-2015-4706 · GHSA-q326-jhw3-699g

Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote…

LOW 31

Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.021 Published 2017-09-21 Fixed in 3.2.0 CWE-79

TI-2015-05786 CVE-2015-6938 · GHSA-4vwq-x64q-j4cj

Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py…

LOW 25

Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or H…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02792 Published 2015-09-21 Fixed in 4.0.5, 3.2.2 CWE-79

Open these records in search →

Critical	0
High	3
Medium	5
Low	0
No CVSS	0