Lucene search
+L

3005 matches found

CNNVD
CNNVD
added 2022/07/11 12:00 a.m.12 views

Karaokey 路径遍历漏洞

Karaokey is a vocal remover by Vinay Patel personal developer. It can automatically separate vocals and instruments. A security vulnerability exists in Karaokey version 2019-12-11 and prior versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path...

9.3CVSS8.3AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.9 views

Sphere_ImageBackend 路径遍历漏洞

SphereImageBackend is an image processing repository by the individual developer Varij Kapil in Germany. A security vulnerability exists in SphereImageBackend version 2019-10-03 and earlier, which stems from an incorrect call to Flask's sendfile function leading to absolute path traversal...

9.3CVSS8.2AI score0.01209EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.13 views

cockybook 路径遍历漏洞

cockybook is a simple book sharing service on opds server by Leo, an individual developer in China. A security vulnerability exists in cockybook, which stems from an insecure use of the Flask sendfile function...

9.3CVSS8.3AI score0.01299EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.14 views

Harveyzyh Python 路径遍历漏洞

Harveyzyh Python is a private codebase. A security vulnerability exists in GitHub's Harveyzyh/Python version 2022-05-04 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.13 views

csm 路径遍历漏洞

csm is a csm-aut open source automation and orchestration framework for IOS-XR devices. csm 3.5 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource or file path, which can be exploited by...

9.3CVSS5.8AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.15 views

helm 路径遍历漏洞

helm is a Kubernetes package manager. A security vulnerability exists in helm, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01463EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.11 views

bt_lnmp 路径遍历漏洞

btlnmp is a piaoyunsoft personal developer of a pagoda panel-based LNMP environment. btlnmp suffers from a path traversal vulnerability that stems from the failure of the Flask sendfile function to properly filter special elements in a resource or file path, which can be exploited by attackers to...

7.5CVSS5.8AI score0.01302EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.16 views

nursequest 路径遍历漏洞

nursequest is a management system for nurses' tasks by Romain Vincent, an individual developer in France. A security vulnerability exists in nursequest version 2018-02-22 and earlier versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

9.3CVSS8.3AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.12 views

ytdl-sync 路径遍历漏洞

The ytdl-sync repository is a web interface for YTDL by Jake Garza, an individual developer in the United States. A security vulnerability exists in ytdl version 2021-01-02 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.13 views

anuvaad-corpus 路径遍历漏洞

anuvaad-corpus is a Sunbird-AI open source anuvaad translation system. anuvaad-corpus 2020-11-23 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource or file path, which could be exploited...

9.3CVSS5.8AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.14 views

ModelConverter 路径遍历漏洞

ModelConverter is a repository for ml-inory individual developers. It is used to convert models. A security vulnerability exists in ModelConverter version 2021-04-26 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.10 views

Fan_Platform 路径遍历漏洞

FanPlatform is a UI interface automation platform backend for Caoyongqi912 personal developers. 2021-04-20 and earlier versions of FanPlatform are vulnerable to a path traversal vulnerability, which stems from the failure of Flask's sendfile function to properly filter special elements in resourc...

9.3CVSS5.8AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.12 views

Python-Recipe-Database 路径遍历漏洞

Python-Recipe-Database is a recipe storage and retrieval system using Python and Mongo. A path traversal vulnerability exists in Python-Recipe-Database version 2021-03-31 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.9 views

kotekan 路径遍历漏洞

kotekan is a high performance radio data processing pipeline from kotekan open source. A security vulnerability exists in kotekan version 2021.11 and earlier versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

9.3CVSS8.2AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.12 views

glance 路径遍历漏洞

glance is a dictionary visualization repository open source by nlpweb. glance 2014-06-27 version and earlier versions have a security vulnerability , the vulnerability stems from Flask's sendfile function call incorrectly leads to absolute path traversal...

9.3CVSS8.3AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.11 views

golem 路径遍历漏洞

golem is a git continuous integration, testing, and release tool by Dennis Kaarsemaker, an individual developer in the Netherlands. A security vulnerability exists in golem version 2016-05-17 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute pat...

9.3CVSS8.3AI score0.01209EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.11 views

rbtm 路径遍历漏洞

rbtm is a web application for performing computerized tomography experiments by the individual developer meerstein in Russia. A security vulnerability exists in rbtm version 1.5 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.14 views

python-flask-restful-api 路径遍历漏洞

python-flask-restful-api is a python interface repository by the individual developer Akash Talole in India. A security vulnerability exists in python-flask-restful-api, which stems from insecure use of the Flask sendfile function...

9.3CVSS8.3AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.12 views

KG-fashion-chatbot 路径遍历漏洞

KG-fashion-chatbot is a multi-modal chatbot for online shopping assistant by youzhou individual developer. KG-fashion-chatbot has a security vulnerability in versions 2018-05-22 and earlier, which stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...

9.3CVSS8.2AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.11 views

munhak-moa 路径遍历漏洞

munhak-moa is a literary platform for woduq1414 individual developers. A security vulnerability exists in munhak-moa, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01371EPSS
SaveExploits0References3
Rows per page
Query Builder