Lucene search
+L

2472 matches found

OSV
OSV
added 2022/07/12 12:0 a.m.42 views

GHSA-687H-86VC-5X59 ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function

The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS9.3AI score0.01293EPSS
SaveExploits1References3
OSV
OSV
added 2022/07/12 12:0 a.m.33 views

GHSA-QP72-96P2-G644 Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS9.4AI score0.0118EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/07/12 12:0 a.m.29 views

Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.9AI score0.0118EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/07/12 12:0 a.m.39 views

GHSA-X2PC-FQRW-HC7F SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely

The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely. A patch is available on the master branch of the repository...

9.3CVSS9.4AI score0.01398EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2022/07/12 12:0 a.m.28 views

SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely

The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely. A patch is available on the master branch of the repository...

9.3CVSS8.9AI score0.01398EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.4 views

CVE-2022-31587

The yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01242EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.1 views

CVE-2022-31588

The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01242EPSS
SaveExploits1References2
NVD
NVD
added 2022/07/11 1:15 a.m.28 views

CVE-2022-31588

The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS0.01242EPSS
SaveExploits1References1
NVD
NVD
added 2022/07/11 1:15 a.m.18 views

CVE-2022-31583

The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS0.01293EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.4 views

CVE-2022-31582

The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01293EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.3 views

CVE-2022-31581

The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01439EPSS
SaveExploits1References3
OSV
OSV
added 2022/07/11 1:15 a.m.6 views

CVE-2022-31577

The longmaoteamtf/audioalignerapp repository through 2020-01-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01174EPSS
SaveExploits0References1
NVD
NVD
added 2022/07/11 1:15 a.m.19 views

CVE-2022-31576

The heidi-luong1109/shackerpanel repository through 2021-05-25 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS0.01293EPSS
SaveExploits1References1
NVD
NVD
added 2022/07/11 1:15 a.m.17 views

CVE-2022-31577

The longmaoteamtf/audioalignerapp repository through 2020-01-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS0.01174EPSS
SaveExploits0References1
NVD
NVD
added 2022/07/11 1:15 a.m.18 views

CVE-2022-31578

The piaoyunsoft/btlnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

7.5CVSS0.01244EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.4 views

CVE-2022-31577

The longmaoteamtf/audioalignerapp repository through 2020-01-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01174EPSS
SaveExploits0References2
OSV
OSV
added 2022/07/11 1:15 a.m.4 views

CVE-2022-31576

The heidi-luong1109/shackerpanel repository through 2021-05-25 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01293EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/11 1:15 a.m.6 views

CVE-2022-31586

The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01242EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/11 1:15 a.m.4 views

CVE-2022-31581

The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01439EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/11 1:15 a.m.4 views

CVE-2022-31587

The yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01242EPSS
SaveExploits1References1
Rows per page
Query Builder