https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:22:11 +0000 https://cve.radiocsirt.org/vuln/brew-fdroidserver-cve-2015-6938 <p><strong>Affected:</strong> Homebrew: fdroidserver</p> <p>Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.</p> <p><strong>Affected:</strong> Homebrew: fdroidserver</p> <p>Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.</p> https://cve.radiocsirt.org/vuln/brew-fdroidserver-cve-2015-6938 https://cve.radiocsirt.org/vuln/cnvd-2015-06277 cnvd-2015-06277 https://cve.radiocsirt.org/vuln/cnvd-2015-06277 https://cve.radiocsirt.org/vuln/euvd-2026-94613 EUVD-2026-94613 https://cve.radiocsirt.org/vuln/euvd-2026-94613 https://cve.radiocsirt.org/vuln/fkie_cve-2015-6938 <p>Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.</p> <p>Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-6938 https://cve.radiocsirt.org/vuln/ghsa-4vwq-x64q-j4cj <p><strong>Affected:</strong> PyPI: notebook, PyPI: ipython</p> <p>Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.</p> <p><strong>Affected:</strong> PyPI: notebook, PyPI: ipython</p> <p>Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.</p> https://cve.radiocsirt.org/vuln/ghsa-4vwq-x64q-j4cj https://cve.radiocsirt.org/vuln/gsd-2015-6938 gsd-2015-6938 https://cve.radiocsirt.org/vuln/gsd-2015-6938 https://cve.radiocsirt.org/vuln/pysec-2015-24 <p><strong>Affected:</strong> PyPI: ipython</p> <p>Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.</p> <p><strong>Affected:</strong> PyPI: ipython</p> <p>Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.</p> https://cve.radiocsirt.org/vuln/pysec-2015-24 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-6938 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ipython, Ubuntu:18.04:LTS: ipython</p> <p>Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ipython, Ubuntu:18.04:LTS: ipython</p> <p>Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-6938