Lucene search
+L

154 matches found

CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

shackerpanel 路径遍历漏洞

shackerpanel is a simple but powerful control panel for heidi-luong1109 personal developers. Web servers can be managed through a web-based GUI graphical user interface. A security vulnerability exists in shackerpanel on 2021-05-25 and earlier versions, which stems from an unsafe use of Flask's...

9.3CVSS8.2AI score0.01293EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.7 views

Karaokey 路径遍历漏洞

Karaokey is a vocal remover by Vinay Patel personal developer. It can automatically separate vocals and instruments. A security vulnerability exists in Karaokey version 2019-12-11 and prior versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.8 views

PythonWeb 路径遍历漏洞

PythonWeb is a repository. A security vulnerability exists in PythonWeb version 2018-10-31 and earlier, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

rbtm 路径遍历漏洞

rbtm is a web application for performing computerized tomography experiments by the individual developer meerstein in Russia. A security vulnerability exists in rbtm version 1.5 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

BaiduWenkuSpider_flaskWeb 路径遍历漏洞

BaiduWenkuSpiderflaskWeb is a python web project based on the FlaskFrame framework for crawling Baidu's library by ChangeWeDer personal developer. path traversal vulnerability exists in versions of BaiduWenkuSpiderflaskWeb prior to 2021-11-29, which The vulnerability stems from a failure of the...

9.3CVSS5.7AI score0.01398EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.8 views

python-flask-restful-api 路径遍历漏洞

python-flask-restful-api is a python interface repository by the individual developer Akash Talole in India. A security vulnerability exists in python-flask-restful-api, which stems from insecure use of the Flask sendfile function...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

equanimity 路径遍历漏洞

equanimity is a world-building game by A. F. Dudley, a solo developer with an emphasis on squad-based turn-based combat and balance. equanimity 2014-04-23 and earlier versions are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filte...

9.3CVSS5.8AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.7 views

KG-fashion-chatbot 路径遍历漏洞

KG-fashion-chatbot is a multi-modal chatbot for online shopping assistant by youzhou individual developer. KG-fashion-chatbot has a security vulnerability in versions 2018-05-22 and earlier, which stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...

9.3CVSS8.2AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.8 views

glance 路径遍历漏洞

glance is a dictionary visualization repository open source by nlpweb. glance 2014-06-27 version and earlier versions have a security vulnerability , the vulnerability stems from Flask's sendfile function call incorrectly leads to absolute path traversal...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.8 views

ytdl-sync 路径遍历漏洞

The ytdl-sync repository is a web interface for YTDL by Jake Garza, an individual developer in the United States. A security vulnerability exists in ytdl version 2021-01-02 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

ceneo-web-scrapper 路径遍历漏洞

ceneo-web-scrapper is a web scraping tool from AdrianKoczurUEK's personal developer. ceneo-web-scrapper is vulnerable to a path traversal vulnerability, which stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, and could be exploited...

9.8CVSS5.7AI score0.01125EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.9 views

csm 路径遍历漏洞

csm is a csm-aut open source automation and orchestration framework for IOS-XR devices. csm 3.5 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource or file path, which can be exploited by...

9.3CVSS5.8AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.8 views

ThunderDocs 路径遍历漏洞

ThunderDocs is an open source tool from the ThundeRatz Robotics Team. Google Docs permissions can be accessed on the desktop to easily view, create, upload and download documents. ThunderDocs version 2020-05-01 and earlier versions have a security vulnerability that stems from an incorrect call t...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

WindMill 路径遍历漏洞

WindMill is a free open source tool from the individual developers at Lukasavicus. It is used to control job execution in Python. A security vulnerability exists in WindMill version 1.0 and earlier versions, which stems from an incorrect call to Flask's sendfile function that results in absolute...

9.3CVSS8.4AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.9 views

ModelConverter 路径遍历漏洞

ModelConverter is a repository for ml-inory individual developers. It is used to convert models. A security vulnerability exists in ModelConverter version 2021-04-26 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

Sphere_ImageBackend 路径遍历漏洞

SphereImageBackend is an image processing repository by the individual developer Varij Kapil in Germany. A security vulnerability exists in SphereImageBackend version 2019-10-03 and earlier, which stems from an incorrect call to Flask's sendfile function leading to absolute path traversal...

9.3CVSS8.2AI score0.01156EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

Fan_Platform 路径遍历漏洞

FanPlatform is a UI interface automation platform backend for Caoyongqi912 personal developers. 2021-04-20 and earlier versions of FanPlatform are vulnerable to a path traversal vulnerability, which stems from the failure of Flask's sendfile function to properly filter special elements in resourc...

9.3CVSS5.8AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.7 views

cockybook 路径遍历漏洞

cockybook is a simple book sharing service on opds server by Leo, an individual developer in China. A security vulnerability exists in cockybook, which stems from an insecure use of the Flask sendfile function...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.9 views

Harveyzyh Python 路径遍历漏洞

Harveyzyh Python is a private codebase. A security vulnerability exists in GitHub's Harveyzyh/Python version 2022-05-04 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.7 views

anuvaad-corpus 路径遍历漏洞

anuvaad-corpus is a Sunbird-AI open source anuvaad translation system. anuvaad-corpus 2020-11-23 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource or file path, which could be exploited...

9.3CVSS5.8AI score0.01242EPSS
SaveExploits1References2
Rows per page
Query Builder