Lucene search
+L

2505 matches found

CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

ceneo-web-scrapper 路径遍历漏洞

ceneo-web-scrapper is a web scraping tool from AdrianKoczurUEK's personal developer. ceneo-web-scrapper is vulnerable to a path traversal vulnerability, which stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, and could be exploited...

9.8CVSS5.7AI score0.01152EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

DSAB 路径遍历漏洞

DSAB is a data streaming algorithm benchmark. A benchmark designed to test the performance of various data streaming algorithms on multiple datasets in a simple manner. A security vulnerability exists in DSAB version 2.1 and earlier versions, which stems from insecure use of Flask's sendfile...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

shackerpanel 路径遍历漏洞

shackerpanel is a simple but powerful control panel for heidi-luong1109 personal developers. Web servers can be managed through a web-based GUI graphical user interface. A security vulnerability exists in shackerpanel on 2021-05-25 and earlier versions, which stems from an unsafe use of Flask's...

9.3CVSS8.2AI score0.01323EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

DLS 路径遍历漏洞

DLS is a GUI-based deep learning platform open-sourced by SummaLabs. DLS version 0.1.0 and previous versions have a security vulnerability , the vulnerability stems from Flask sendfile function call incorrectly leads to absolute path traversal...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.7 views

usap-dc-website 路径遍历漏洞

usap-dc-website is an open source repository for usap-dc website by Interdisciplinary Earth Data Alliance. It includes a javascript client application and a python/flask server. A path traversal vulnerability exists in usap-dc-website version 1.0.1, which stems from insecure use of the Flask...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.7 views

TrainEnergyServer 路径遍历漏洞

TrainEnergyServer is a train energy server by an individual developer in Rustam, South Korea. A security vulnerability exists in GitHub's rusyasoft/TrainEnergyServer project version 2017-08-03 and earlier, which stems from an incorrect call to Flask's sendfile function resulting in absolute path...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.9 views

homepage 路径遍历漏洞

homepage is a web application for personal websites by Neil Lakin, an individual developer in the United States. A security vulnerability exists in homepage version 2017-03-06 and prior versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path travers...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

sleep-learner 路径遍历漏洞

sleep-learner is a Canadian Yutong personal developer used to try to play recordings while a person sleeps in order to convey a message. A security vulnerability exists in sleep-learner version 2021-02-21 and earlier versions, which stems from an incorrect call to Flask's sendfile function that...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

movie-review-sentiment-analysis 路径遍历漏洞

movie-review-sentiment-analysis is used by Rohit Nayak, an individual developer, to perform sentiment analysis on IMDB movie reviews in order to categorize them as positive or negative reviews. A security vulnerability exists in movie-review-sentiment-analysis version 2017-05-07 and earlier, whic...

9.3CVSS8.2AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.7 views

Karaokey 路径遍历漏洞

Karaokey is a vocal remover by Vinay Patel personal developer. It can automatically separate vocals and instruments. A security vulnerability exists in Karaokey version 2019-12-11 and prior versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.9 views

Harveyzyh Python 路径遍历漏洞

Harveyzyh Python is a private codebase. A security vulnerability exists in GitHub's Harveyzyh/Python version 2022-05-04 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.8 views

MSM 路径遍历漏洞

MSM is a sample management tool from the personal developer Holger Graef in France. enables researchers to track their samples from any PC in the lab. A security vulnerability exists in MSM version 2021-04-20 and earlier, which stems from an incorrect call to Flask's sendfile function that result...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

WindMill 路径遍历漏洞

WindMill is a free open source tool from the individual developers at Lukasavicus. It is used to control job execution in Python. A security vulnerability exists in WindMill version 1.0 and earlier versions, which stems from an incorrect call to Flask's sendfile function that results in absolute...

9.3CVSS8.4AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.8 views

Python-Recipe-Database 路径遍历漏洞

Python-Recipe-Database is a recipe storage and retrieval system using Python and Mongo. A path traversal vulnerability exists in Python-Recipe-Database version 2021-03-31 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

Fan_Platform 路径遍历漏洞

FanPlatform is a UI interface automation platform backend for Caoyongqi912 personal developers. 2021-04-20 and earlier versions of FanPlatform are vulnerable to a path traversal vulnerability, which stems from the failure of Flask's sendfile function to properly filter special elements in resourc...

9.3CVSS5.8AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

flask-file-server 路径遍历漏洞

flask-file-server is a file server with a front-end for browsing, uploading, and streaming files from Wildog Personal Developer. flask-file-server 2020-02-20 and earlier versions are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly...

9.3CVSS5.7AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.7 views

OnyxForum 路径遍历漏洞

OnyxForum is an open source forum repository for Space Station 13: Chaotic Onyx. A path traversal vulnerability exists in versions of OnyxForum prior to 2022-05-04, which stems from insecure use of the Flask sendfile function...

9.3CVSS8.3AI score0.01432EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.7 views

Anakin 路径遍历漏洞

Anakin is a cross-platform, high-performance inference engine open-sourced by PaddlePaddle.Anakin 0.1.1 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in resource or file paths, which could be...

9.3CVSS5.8AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.5 views

swagger 路径遍历漏洞

swagger is a tool that provides Pure FlashArray and FlashBlade API documentation into the popular interactive Swagger UI. A security vulnerability exists in swagger version 1.1.5 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.6 views

evoting 路径遍历漏洞

evoting is an e-voting application open sourced by Idayrus Studio in Indonesia. evoting versions prior to 2022-05-08 contain a path traversal vulnerability that stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, which could be...

9.3CVSS5.8AI score0.01432EPSS
SaveExploits1References3
Rows per page
Query Builder