Lucene search
+L

2470 matches found

CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

cilantro 路径遍历漏洞

cilantro is an open source task runner from Deutsches Archäologisches Institut in Germany. Designed to manage long running distributed jobs that operate on file system objects . cilantro version 0.0.4 and earlier versions of a security vulnerability , the vulnerability stems from Flask's sendfile...

9.3CVSS8.2AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

WindMill 路径遍历漏洞

WindMill is a free open source tool from the individual developers at Lukasavicus. It is used to control job execution in Python. A security vulnerability exists in WindMill version 1.0 and earlier versions, which stems from an incorrect call to Flask's sendfile function that results in absolute...

9.3CVSS8.4AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

VideoServer 路径遍历漏洞

VideoServer is a python3 UPnP/DLNA video server open source by shaolo1. VideoServer in 2019-09-21 and previous versions of a security vulnerability , the vulnerability stems from Flask's sendfile function is used insecurely to allow absolute path traversal...

9.3CVSS8.3AI score0.01293EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.9 views

ModelConverter 路径遍历漏洞

ModelConverter is a repository for ml-inory individual developers. It is used to convert models. A security vulnerability exists in ModelConverter version 2021-04-26 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.7 views

Krypton 路径遍历漏洞

Krypton is a KryptoCurrency data relay service by Bolun Han Personal Developer. A security vulnerability exists in Krypton version 2021-06-03 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

TrainEnergyServer 路径遍历漏洞

TrainEnergyServer is a train energy server by an individual developer in Rustam, South Korea. A security vulnerability exists in GitHub's rusyasoft/TrainEnergyServer project version 2017-08-03 and earlier, which stems from an incorrect call to Flask's sendfile function resulting in absolute path...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

iasset 路径遍历漏洞

iasset is a repository by Ralph Zhang, a personal developer. iasset has a security vulnerability in version 2022-05-04 and earlier that stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...

9.3CVSS8.2AI score0.01174EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

orchest 路径遍历漏洞

orchest is an Orchest open source repository . Used to build data pipelines. A path traversal vulnerability exists in versions prior to orchest v2022.05.0, which stems from insecure use of the Flask sendfile function...

9.3CVSS8.3AI score0.01604EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

usap-dc-website 路径遍历漏洞

usap-dc-website is an open source repository for usap-dc website by Interdisciplinary Earth Data Alliance. It includes a javascript client application and a python/flask server. A path traversal vulnerability exists in usap-dc-website version 1.0.1, which stems from insecure use of the Flask...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.8 views

RealEstate 路径遍历漏洞

RealEstate is a repository for deepaliupadhyay individual developers. RealEstate has a security vulnerability that stems from the insecure use of the Flask sendfile function...

9.3CVSS8.2AI score0.01293EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

DLS 路径遍历漏洞

DLS is a GUI-based deep learning platform open-sourced by SummaLabs. DLS version 0.1.0 and previous versions have a security vulnerability , the vulnerability stems from Flask sendfile function call incorrectly leads to absolute path traversal...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.8 views

python-flask-restful-api 路径遍历漏洞

python-flask-restful-api is a python interface repository by the individual developer Akash Talole in India. A security vulnerability exists in python-flask-restful-api, which stems from insecure use of the Flask sendfile function...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

equanimity 路径遍历漏洞

equanimity is a world-building game by A. F. Dudley, a solo developer with an emphasis on squad-based turn-based combat and balance. equanimity 2014-04-23 and earlier versions are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filte...

9.3CVSS5.8AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.9 views

Harveyzyh Python 路径遍历漏洞

Harveyzyh Python is a private codebase. A security vulnerability exists in GitHub's Harveyzyh/Python version 2022-05-04 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

cockybook 路径遍历漏洞

cockybook is a simple book sharing service on opds server by Leo, an individual developer in China. A security vulnerability exists in cockybook, which stems from an insecure use of the Flask sendfile function...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.5 views

Fan_Platform 路径遍历漏洞

FanPlatform is a UI interface automation platform backend for Caoyongqi912 personal developers. 2021-04-20 and earlier versions of FanPlatform are vulnerable to a path traversal vulnerability, which stems from the failure of Flask's sendfile function to properly filter special elements in resourc...

9.3CVSS5.8AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.7 views

anuvaad-corpus 路径遍历漏洞

anuvaad-corpus is a Sunbird-AI open source anuvaad translation system. anuvaad-corpus 2020-11-23 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource or file path, which could be exploited...

9.3CVSS5.8AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.10 views

SetupBox 路径遍历漏洞

SetupBox is a middleware for implementing your own storage cloud by Kim Taehwan, an individual developer in Korea. A security vulnerability exists in SetupBox version 1.0 and earlier versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.7 views

Solar-system-simulator 路径遍历漏洞

Solar-system-simulator is a simulator of the motion of planets and moons by Jason McGinty, an individual developer in the United States. A security vulnerability exists in Solar-system-simulator version 2021-07-26 and earlier, which stems from an incorrect call to Flask's sendfile function that...

9.3CVSS8.2AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.5 views

Mosiac 路径遍历漏洞

Mosiac is a web application for pixelated images. A security vulnerability exists in Mosiac version 1.0.0 and prior versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
Rows per page
Query Builder