ipython records

8 published records for vendor ipython.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2015-5607No exploit	Cross-site request forgery in the REST API in IPython 2 and 3.ipython · ipython · CWE-352 Pre-auth CSRF	High8.8	—	1.2%	Sep 20, 2017
35Monitor	CVE-2022-21699No exploit	Execution with Unnecessary Privileges in ipythonipython · ipython · CWE-250 RCE Local privilege escalation	High8.8	—	0.7%	Jan 19, 2022
28Monitor	CVE-2014-3429No exploit	IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute aripython · ipython notebook · CWE-94 pre-auth RCE	Medium6.8	—	4.7%	Aug 7, 2014
28Monitor	CVE-2015-7337No exploit	The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript ipython · notebook · CWE-20 pre-auth RCE	Medium6.8	—	2.5%	Sep 29, 2015
28Monitor	CVE-2023-24816No exploit	set_term_title command injection in ipythonipython · ipython · CWE-20 RCE Command injection	High7.0	—	1.3%	Feb 10, 2023
25Monitor	CVE-2015-4707No exploit	Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors inipython · ipython · CWE-79 Pre-auth XSS	Medium6.1	—	2.3%	Sep 20, 2017
25Monitor	CVE-2015-4706No exploit	Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectoripython · ipython · CWE-79 Pre-auth XSS	Medium6.1	—	2.1%	Sep 21, 2017
18Monitor	CVE-2015-6938No exploit	Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Noteboojupyter · notebook · CWE-79 Pre-auth XSS CSRF	Medium4.3	—	2.8%	Sep 21, 2015

CVE-2015-5607
35Monitor
Cross-site request forgery in the REST API in IPython 2 and 3.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- CSRF
ipython · ipythonSep 20, 2017
CVE-2022-21699
35Monitor
Execution with Unnecessary Privileges in ipython
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Local privilege escalation
ipython · ipythonJan 19, 2022
CVE-2014-3429
28Monitor
IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute ar
MediumCVSS 6.8No exploitEPSS 5%
- pre-auth RCE
ipython · ipython notebookAug 7, 2014
CVE-2015-7337
28Monitor
The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript
MediumCVSS 6.8No exploitEPSS 2%
- pre-auth RCE
ipython · notebookSep 29, 2015
CVE-2023-24816
28Monitor
set_term_title command injection in ipython
HighCVSS 7.0No exploitEPSS 1%
- RCE
- Command injection
ipython · ipythonFeb 10, 2023
CVE-2015-4707
25Monitor
Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors in
MediumCVSS 6.1No exploitEPSS 2%
- Pre-auth
- XSS
ipython · ipythonSep 20, 2017
CVE-2015-4706
25Monitor
Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vector
MediumCVSS 6.1No exploitEPSS 2%
- Pre-auth
- XSS
ipython · ipythonSep 21, 2017
CVE-2015-6938
18Monitor
Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Noteboo
MediumCVSS 4.3No exploitEPSS 3%
jupyter · notebookSep 21, 2015