PT-2022-20792

Name of the Vulnerable Software and Affected Versions Niyaz-Mohamed/mosaic version 1.0.0 and earlier Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 1.0.0 and earlier, consider restricting access to the send...

PT-2022-20840

Name of the Vulnerable Software and Affected Versions DSABenchmark/DSAB repository versions through 2.1 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2.1, consider restricting access to the send fil...

PT-2022-20818

Name of the Vulnerable Software and Affected Versions nlpweb/glance versions prior to 2014-06-27 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2014-06-27, consider updating to a version that safely...

PT-2022-20822

Name of the Vulnerable Software and Affected Versions olmax99/pyathenastack repository through 2019-11-08 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2019-11-08, consider restricting access to the...

PT-2022-20833

Name of the Vulnerable Software and Affected Versions uncleYiba/photo tag repository through 2020-08-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the uncleYiba/photo tag repository through 2020-08-31, consider...

Design/Logic Flaw

An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file...

PT-2022-16970 · Flask +1 · Flask +1

Name of the Vulnerable Software and Affected Versions: Piano LED Visualizer versions 1.3 and prior Description: The issue concerns a path traversal attack. The os.path.join call is unsafe for use with untrusted input, as it ignores all parameters encountered before an absolute path and starts...

Air Cargo Management System v1.0 - SQLi

Title: Air Cargo Management System v1.0 - SQLi Author: nu11secur1ty Date: 02.18.2022 Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/15188/air-cargo-management-system-php-oop-free-source-code.html Reference:...

The vulnerability of the Sphinx search system, related to a path traversal error, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Sphinx search system is related to a path traversal error. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the CALL SNIPPETS operator or the loadfile function...

IBM Business Automation Workflow Cross-Site Scripting Vulnerability (CNVD-2021-101696)

IBM Business Automation Workflow is a workflow automation solution from IBM Corporation of the United States. The product is primarily used for workflow management, compliance management, and has features such as workflow visibility and scalability.IBM Business Automation Workflow has a cross-sit...

PT-2021-30525

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.77 Description The issue is related to the collapse file function for writeback pages, where it may bail out early. This is an automated identification of a potential security issue, but the actual impact a...

PT-2021-26595

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue is related to the collapse file function for writeback pages, where it may bail out early. This could potentially lead to security vulnerabilities, although the actual impact and...

PT-2021-30590

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue is related to the collapse file function for writeback pages, where it may bail out early. This could potentially lead to security vulnerabilities, although the actual impact and...

PT-2021-30659

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15 Description The issue is related to the collapse file function for writeback pages, where it may bail out early. This is an automated identification of a potential security issue, and its actual impact and...

PT-2021-26530

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.77 Description The issue is related to the collapse file function for writeback pages, where it may bail out early. This is an automated identification of a potential security issue, and its actual impact a...

PT-2021-26664

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15 Description: The issue is related to the collapse file function for writeback pages, where it may bail out early. This is an automated ID intended to aid in discovery of potential security vulnerabilities,...

Busybox Resource Management Error Vulnerability (CNVD-2021-88215)

BusyBox is a suite of applications containing several linux commands and tools from Ukrainian individual developer Denis Vlasenko. Busybox's awk applet is vulnerable to a resource management error that could be exploited by an attacker to execute code while processing a carefully crafted awk...

CVE-2020-21595

libde265 v1.0.4 contains a heap buffer overflow in the mcluma function, which can be exploited via a crafted a file...

UBUNTU-CVE-2021-3710

An information disclosure via path traversal was discovered in apport/hookutils.py function readfile. This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior ...

PT-2021-25793

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description The issue is related to extremely large seq buffer allocations in the seq file function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...