Lucene search
+L

160 matches found

CNNVD
CNNVD
added 2022/07/11 12:00 a.m.9 views

ceneo-web-scrapper 路径遍历漏洞

ceneo-web-scrapper is a web scraping tool from AdrianKoczurUEK's personal developer. ceneo-web-scrapper is vulnerable to a path traversal vulnerability, which stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, and could be exploited...

9.8CVSS5.7AI score0.01152EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.11 views

cockybook 路径遍历漏洞

cockybook is a simple book sharing service on opds server by Leo, an individual developer in China. A security vulnerability exists in cockybook, which stems from an insecure use of the Flask sendfile function...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.9 views

Karaokey 路径遍历漏洞

Karaokey is a vocal remover by Vinay Patel personal developer. It can automatically separate vocals and instruments. A security vulnerability exists in Karaokey version 2019-12-11 and prior versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.13 views

nursequest 路径遍历漏洞

nursequest is a management system for nurses' tasks by Romain Vincent, an individual developer in France. A security vulnerability exists in nursequest version 2018-02-22 and earlier versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.13 views

Harveyzyh Python 路径遍历漏洞

Harveyzyh Python is a private codebase. A security vulnerability exists in GitHub's Harveyzyh/Python version 2022-05-04 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.8 views

Sphere_ImageBackend 路径遍历漏洞

SphereImageBackend is an image processing repository by the individual developer Varij Kapil in Germany. A security vulnerability exists in SphereImageBackend version 2019-10-03 and earlier, which stems from an incorrect call to Flask's sendfile function leading to absolute path traversal...

9.3CVSS8.2AI score0.01184EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.9 views

evoting 路径遍历漏洞

evoting is an e-voting application open sourced by Idayrus Studio in Indonesia. evoting versions prior to 2022-05-08 contain a path traversal vulnerability that stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, which could be...

9.3CVSS5.8AI score0.01432EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.11 views

helm 路径遍历漏洞

helm is a Kubernetes package manager. A security vulnerability exists in helm, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01432EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.8 views

Fan_Platform 路径遍历漏洞

FanPlatform is a UI interface automation platform backend for Caoyongqi912 personal developers. 2021-04-20 and earlier versions of FanPlatform are vulnerable to a path traversal vulnerability, which stems from the failure of Flask's sendfile function to properly filter special elements in resourc...

9.3CVSS5.8AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.9 views

WindMill 路径遍历漏洞

WindMill is a free open source tool from the individual developers at Lukasavicus. It is used to control job execution in Python. A security vulnerability exists in WindMill version 1.0 and earlier versions, which stems from an incorrect call to Flask's sendfile function that results in absolute...

9.3CVSS8.4AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.9 views

rbtm 路径遍历漏洞

rbtm is a web application for performing computerized tomography experiments by the individual developer meerstein in Russia. A security vulnerability exists in rbtm version 1.5 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.11 views

python-flask-restful-api 路径遍历漏洞

python-flask-restful-api is a python interface repository by the individual developer Akash Talole in India. A security vulnerability exists in python-flask-restful-api, which stems from insecure use of the Flask sendfile function...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.10 views

golem 路径遍历漏洞

golem is a git continuous integration, testing, and release tool by Dennis Kaarsemaker, an individual developer in the Netherlands. A security vulnerability exists in golem version 2016-05-17 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute pat...

9.3CVSS8.3AI score0.01184EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.9 views

shackerpanel 路径遍历漏洞

shackerpanel is a simple but powerful control panel for heidi-luong1109 personal developers. Web servers can be managed through a web-based GUI graphical user interface. A security vulnerability exists in shackerpanel on 2021-05-25 and earlier versions, which stems from an unsafe use of Flask's...

9.3CVSS8.2AI score0.01323EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.10 views

flask-yeoman 路径遍历漏洞

flask-yeoman is a Flask blueprint by Thomas Sileo, a French personal developer. It makes creating web applications with Yeoman and Flask a breeze. A security vulnerability exists in flask-yeoman version 2013-09-13 and earlier, which stems from an incorrect call to Flask's sendfile function that...

9.3CVSS8.3AI score0.01184EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.13 views

ModelConverter 路径遍历漏洞

ModelConverter is a repository for ml-inory individual developers. It is used to convert models. A security vulnerability exists in ModelConverter version 2021-04-26 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.9 views

munhak-moa 路径遍历漏洞

munhak-moa is a literary platform for woduq1414 individual developers. A security vulnerability exists in munhak-moa, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01342EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.11 views

KG-fashion-chatbot 路径遍历漏洞

KG-fashion-chatbot is a multi-modal chatbot for online shopping assistant by youzhou individual developer. KG-fashion-chatbot has a security vulnerability in versions 2018-05-22 and earlier, which stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...

9.3CVSS8.2AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.10 views

Python-Recipe-Database 路径遍历漏洞

Python-Recipe-Database is a recipe storage and retrieval system using Python and Mongo. A path traversal vulnerability exists in Python-Recipe-Database version 2021-03-31 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.10 views

glance 路径遍历漏洞

glance is a dictionary visualization repository open source by nlpweb. glance 2014-06-27 version and earlier versions have a security vulnerability , the vulnerability stems from Flask's sendfile function call incorrectly leads to absolute path traversal...

9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
Rows per page
Query Builder