CVE-2022-33690

Improper input validation in Contacts Storage prior to SMR Jul-2022 Release 1 allows attacker to access arbitrary file...

CVE-2022-33690

Improper input validation in Contacts Storage prior to SMR Jul-2022 Release 1 allows attacker to access arbitrary file...

GiveWP < 2.21.0 - Manager+ Arbitrary File Access via Export

The plugin does not validate the file to be exported, which could allow manager to read arbitrary file on the web server...

SAMSUNG Mobile devices 路径遍历漏洞

Samsung Contacts Storage is the contact storage for Samsung SAMSUNG mobile devices.A path traversal vulnerability exists in Samsung Contacts Storage, which stems from a lack of proper authentication logic in Samsung Contacts Storage. An attacker could use this vulnerability to access arbitrary...

CVE-2022-33690

The CVE-2022-33690 issue concerns Samsung Contacts Storage on Samsung mobile devices, due to improper input validation that enables path traversal. The vulnerability allows an attacker to access arbitrary files via the Contacts Storage component prior to the SMR July 2022 Release 1. Documented im...

CVE-2022-33690

Improper input validation in Contacts Storage prior to SMR Jul-2022 Release 1 allows attacker to access arbitrary file...

CVE-2022-32458

Digiwin BPM has a XML External Entity Injection XXE vulnerability due to insufficient validation for user input. An unauthenticated remote attacker can perform XML injection attack to access arbitrary system files...

CVE-2022-31544

The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31518

The JustAnotherSoftwareDeveloper/Python-Recipe-Database repository through 2021-03-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

bt_lnmp 路径遍历漏洞

btlnmp is a piaoyunsoft personal developer of a pagoda panel-based LNMP environment. btlnmp suffers from a path traversal vulnerability that stems from the failure of the Flask sendfile function to properly filter special elements in a resource or file path, which can be exploited by attackers to...

DSAB 路径遍历漏洞

DSAB is a dataflow algorithm benchmark. A benchmark designed to test the performance of various dataflow algorithms on multiple datasets in a simple way.DSAB suffers from a path traversal vulnerability that stems from the failure of the Flask sendfile function to properly filter special elements ...

Anakin 路径遍历漏洞

Anakin is a cross-platform, high-performance inference engine open-sourced by PaddlePaddle.Anakin 0.1.1 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in resource or file paths, which could be...

Fan_Platform 路径遍历漏洞

FanPlatform is a UI interface automation platform backend for Caoyongqi912 personal developers. 2021-04-20 and earlier versions of FanPlatform are vulnerable to a path traversal vulnerability, which stems from the failure of Flask's sendfile function to properly filter special elements in resourc...

CVE-2022-33690: Improper Input Validation

Improper input validation in Contacts Storage prior to SMR Jul-2022 Release 1 allows attacker to access arbitrary file...

Barry-Voice-Assistant 路径遍历漏洞

Barry-Voice-Assistant is a voice assistant from the Bulgarian personal developer Lyuboslav Karev. Barry-Voice-Assistant 2021-01-18 and earlier versions have a path traversal vulnerability, which stems from the failure of Flask's sendfile function to properly filter special elements in resource or...

caretakerr-api 路径遍历漏洞

caretakerr-api is a Flask API endpoint for the Caretakerr application from sanoj tharindu personal developer. caretakerr-api 2021-05-17 and earlier versions are vulnerable to a path traversal vulnerability that stems from Flask's sendfile function failing to properly filter resource or special...

equanimity 路径遍历漏洞

equanimity is a world-building game by A. F. Dudley, a solo developer with an emphasis on squad-based turn-based combat and balance. equanimity 2014-04-23 and earlier versions are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filte...

Annotation Tool 路径遍历漏洞

Annotation Tool is a Bonn activity map annotation tool open sourced by bonn-activity-maps. 2021-08-31 and earlier versions of Annotation Tool are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource o...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2022:2305-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2305-1 advisory. - A malicious server can serve excessive amounts of Set-Cookie: headers in a HTTP response to curl and curl...

The vulnerability of the QTS operating system, specifically the QuTS hero operating system, arises from an improper definition of the link before accessing a file. This allows attackers to compromise the confidentiality and integrity of information.

The vulnerability of the QTS operating system is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of information...