Lucene search
+L

2462 matches found

Github Security Blog
Github Security Blog
added 2022/07/12 12:0 a.m.32 views

Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.9AI score0.01209EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/07/12 12:0 a.m.35 views

GHSA-QP72-96P2-G644 Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS9.4AI score0.01209EPSS
SaveExploits0References3
OSV
OSV
added 2022/07/12 12:0 a.m.50 views

GHSA-687H-86VC-5X59 ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function

The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS9.3AI score0.01323EPSS
SaveExploits1References3
OSV
OSV
added 2022/07/12 12:0 a.m.43 views

GHSA-X2PC-FQRW-HC7F SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely

The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely. A patch is available on the master branch of the repository...

9.3CVSS9.4AI score0.01432EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2022/07/12 12:0 a.m.29 views

SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely

The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely. A patch is available on the master branch of the repository...

9.3CVSS8.9AI score0.01432EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/07/11 1:15 a.m.7 views

CVE-2022-31579

The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01202EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.5 views

CVE-2022-31583

The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01323EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.4 views

CVE-2022-31585

The umeshpatil-dev/Homeinternet repository through 2020-08-28 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01272EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/11 1:15 a.m.6 views

CVE-2022-31576

The heidi-luong1109/shackerpanel repository through 2021-05-25 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01323EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/11 1:15 a.m.8 views

CVE-2022-31586

The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01272EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.2 views

CVE-2022-31578

The piaoyunsoft/btlnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

7.5CVSS5.3AI score0.01274EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/11 1:15 a.m.5 views

CVE-2022-31581

The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01474EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/11 1:15 a.m.8 views

CVE-2022-31584

The stonethree/s3label repository through 2019-08-14 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01323EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/11 1:15 a.m.8 views

CVE-2022-31582

The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01323EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.6 views

CVE-2022-31580

The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01323EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/11 1:15 a.m.10 views

CVE-2022-31578

The piaoyunsoft/btlnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

7.5CVSS5.8AI score0.01274EPSS
SaveExploits1References1
NVD
NVD
added 2022/07/11 1:15 a.m.20 views

CVE-2022-31578

The piaoyunsoft/btlnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

7.5CVSS0.01274EPSS
SaveExploits1References1
NVD
NVD
added 2022/07/11 1:15 a.m.24 views

CVE-2022-31579

The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS0.01202EPSS
SaveExploits0References1
NVD
NVD
added 2022/07/11 1:15 a.m.29 views

CVE-2022-31587

The yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS0.01272EPSS
SaveExploits1References1
NVD
NVD
added 2022/07/11 1:15 a.m.20 views

CVE-2022-31577

The longmaoteamtf/audioalignerapp repository through 2020-01-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS0.01202EPSS
SaveExploits0References1
Rows per page
Query Builder