Lucene search
+L

16892 matches found

CNVD
CNVD
added 2022/07/13 12:00 a.m.76 views

Annotation Tool path traversal vulnerability

Annotation Tool is a Bonn activity map annotation tool open sourced by bonn-activity-maps. 2021-08-31 and earlier versions of Annotation Tool are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource o...

9.3CVSS3.6AI score0.01299EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.53 views

equanimity path traversal vulnerability

equanimity is a world-building game by A. F. Dudley, a solo developer with an emphasis on squad-based turn-based combat and balance. equanimity 2014-04-23 and earlier versions are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filte...

9.3CVSS3.5AI score0.01299EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.53 views

ceneo-web-scrapper path traversal vulnerability

ceneo-web-scrapper is a web scraping tool from AdrianKoczurUEK's personal developer. ceneo-web-scrapper is vulnerable to a path traversal vulnerability, which stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, and could be exploited...

9.8CVSS2.9AI score0.01177EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.46 views

Fan_Platform path traversal vulnerability

FanPlatform is a UI interface automation platform backend for Caoyongqi912 personal developers. 2021-04-20 and earlier versions of FanPlatform are vulnerable to a path traversal vulnerability, which stems from the failure of Flask's sendfile function to properly filter special elements in resourc...

9.3CVSS4.2AI score0.01299EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.70 views

AutomatedQuizEval path traversal vulnerability

AutomatedQuizEval, an automated quiz evaluation system from the personal developer Sravani Boinepelli, suffers from a path traversal vulnerability that stems from the failure of Flask's sendfile function to properly filter special elements in resource or file paths, which could be exploited by...

9.3CVSS4.5AI score0.01352EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.51 views

bt_lnmp path traversal vulnerability

btlnmp is a piaoyunsoft personal developer of a pagoda panel-based LNMP environment. btlnmp suffers from a path traversal vulnerability that stems from the failure of the Flask sendfile function to properly filter special elements in a resource or file path, which can be exploited by attackers to...

7.5CVSS4AI score0.01302EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.59 views

csm path traversal vulnerability

csm is a csm-aut open source automation and orchestration framework for IOS-XR devices. csm 3.5 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource or file path, which can be exploited by...

9.3CVSS4.1AI score0.01299EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.65 views

flask-mongo-skel path traversal vulnerability

flask-mongo-skel is a Flask MongoDB framework from Shamail Tayyab's personal developer. flask-mongo-skel 2012-11-01 and earlier versions contain a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter resource or file paths for The vulnerability is...

9.3CVSS2.8AI score0.01299EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.55 views

Barry-Voice-Assistant path traversal vulnerability

Barry-Voice-Assistant is a voice assistant from the Bulgarian personal developer Lyuboslav Karev. Barry-Voice-Assistant 2021-01-18 and earlier versions have a path traversal vulnerability, which stems from the failure of Flask's sendfile function to properly filter special elements in resource or...

9.3CVSS3.6AI score0.01299EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.40 views

CarceresBE path traversal vulnerability

CarceresBE is an SKS parking management system backend open sourced by Delor4. CarceresBE 1.0 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource or file path, which could be exploited by...

9.3CVSS3.6AI score0.01299EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.51 views

DSAB path traversal vulnerability

DSAB is a dataflow algorithm benchmark. A benchmark designed to test the performance of various dataflow algorithms on multiple datasets in a simple way.DSAB suffers from a path traversal vulnerability that stems from the failure of the Flask sendfile function to properly filter special elements ...

8.6CVSS4.3AI score0.01164EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.50 views

Anakin path traversal vulnerability

Anakin is a cross-platform, high-performance inference engine open-sourced by PaddlePaddle.Anakin 0.1.1 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in resource or file paths, which could be...

9.3CVSS3.6AI score0.01299EPSS
SaveExploits1References1
IBM Security Bulletins
IBM Security Bulletins
added 2022/07/12 9:37 a.m.43 views

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring instances may be vulnerable to code injection due to CVE-2022-29622

Summary Node.js module formidable is used internally by IBM App Connect Enterprise Certified Container DesignerAuthoring operands. This bulletin provides patch information to address the reported vulnerability CVE-2022-29622 in Node.js module formidable. Vulnerability Details CVEID:CVE-2022-29622...

9.8CVSS7.7AI score0.03462EPSS
SaveExploits2Affected Software1
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.9 views

Fishtank 路径遍历漏洞

Fishtank is a remote monitoring and control interface by Rentaro Matsukata, a personal developer in the U.S. A path traversal vulnerability exists in Fishtank 2015-06-24 and earlier versions, which stems from a failure of Flask's sendfile function to properly filter special elements in resource o...

9.3CVSS5.8AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.7 views

flask-mongo-skel 路径遍历漏洞

flask-mongo-skel is a Flask MongoDB framework from Shamail Tayyab's personal developer. flask-mongo-skel 2012-11-01 and earlier versions contain a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter resource or file paths for The vulnerability is...

9.3CVSS5.7AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.13 views

csm 路径遍历漏洞

csm is a csm-aut open source automation and orchestration framework for IOS-XR devices. csm 3.5 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource or file path, which can be exploited by...

9.3CVSS5.8AI score0.01299EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.11 views

ceneo-web-scrapper 路径遍历漏洞

ceneo-web-scrapper is a web scraping tool from AdrianKoczurUEK's personal developer. ceneo-web-scrapper is vulnerable to a path traversal vulnerability, which stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, and could be exploited...

9.8CVSS5.7AI score0.01177EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.9 views

evoting 路径遍历漏洞

evoting is an e-voting application open sourced by Idayrus Studio in Indonesia. evoting versions prior to 2022-05-08 contain a path traversal vulnerability that stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, which could be...

9.3CVSS5.8AI score0.01463EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.9 views

chainerrl-visualizer 路径遍历漏洞

chainerrl-visualizer is Chainer's open source way to visually analyze the behavior of ChainerRL agents to make debugging easier. chainerrl-visualizer suffers from a path traversal vulnerability that stems from a failure of the Flask sendfile function to properly filter the resource or file path f...

9.3CVSS5.8AI score0.01363EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.11 views

audio_aligner_app 路径遍历漏洞

audioalignerapp is a kaldi-based text alignment Web application open sourced by LongmaoTeamTf. audioalignerapp 2020-01-10 and earlier versions contain a path traversal vulnerability that stems from Flask's sendfile function failing to properly filter resources or file path, which can be exploited...

9.3CVSS5.7AI score0.01229EPSS
SaveExploits0References2
Rows per page
Query Builder