PT-2022-20788

Name of the Vulnerable Software and Affected Versions JustAnotherSoftwareDeveloper/Python-Recipe-Database versions prior to 2021-04-01 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-04-01,...

PT-2022-20859

Name of the Vulnerable Software and Affected Versions umeshpatil-dev/Home internet repository through 2020-08-28 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended...

PT-2022-20820

Name of the Vulnerable Software and Affected Versions nrlakin/homepage repository through 2017-03-06 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

syrabond 路径遍历漏洞

syrabond is an MQTT-based smart home system. A security vulnerability exists in syrabond version 2020-05-25 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PT-2022-20831

Name of the Vulnerable Software and Affected Versions tsileo/flask-yeoman versions through 2013-09-13 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2013-09-13, consider restricting access to the sen...

PT-2022-20819

Name of the Vulnerable Software and Affected Versions noamezekiel/sphere repository through 2020-05-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2020-05-31, consider restricting access to the se...

PT-2022-20824

Name of the Vulnerable Software and Affected Versions project-anuvaad/anuvaad-corpus versions prior to 2020-11-23 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2020-11-23, update to a version that...

PT-2022-20838

Name of the Vulnerable Software and Affected Versions yogson/syrabond versions prior to 2020-05-25 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2020-05-25, update to a version that safely uses the...

PT-2022-20802

Name of the Vulnerable Software and Affected Versions dainst/cilantro versions 0.0.0 through 0.0.4 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 0.0.0 through 0.0.4, consider updating to a version where the...

PT-2022-20812

Name of the Vulnerable Software and Affected Versions kumardeepak/hin-eng-preprocessing repository through 2019-07-16 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2019-07-16, consider restricting...

PT-2022-20843

Name of the Vulnerable Software and Affected Versions adriankoczuruek/ceneo-web-scrapper versions prior to 2021-03-16 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-03-16, update the repository...

Python-Recipe-Database 路径遍历漏洞

Python-Recipe-Database is a recipe storage and retrieval system using Python and Mongo. A path traversal vulnerability exists in Python-Recipe-Database version 2021-03-31 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

BaiduWenkuSpider_flaskWeb 路径遍历漏洞

BaiduWenkuSpiderflaskWeb is a python web project based on the FlaskFrame framework for crawling Baidu's library by ChangeWeDer personal developer. path traversal vulnerability exists in versions of BaiduWenkuSpiderflaskWeb prior to 2021-11-29, which The vulnerability stems from a failure of the...

PT-2022-20290 · Unknown · Semwifiapclient

Name of the Vulnerable Software and Affected Versions: SemWifiApClient versions prior to SMR Jul-2022 Release 1 Description: The issue is related to an improper access control vulnerability in the sendDHCPACKBroadcast function. This vulnerability allows an attacker to access the WiFi AP client MA...

PT-2022-20852

Name of the Vulnerable Software and Affected Versions ralphjzhang/iasset repository through 2022-05-04 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2022-05-04, consider restricting access to the se...

vprj 路径遍历漏洞

vprj is an open source repository for whmacmac. A security vulnerability exists in version 2022-04-06 and earlier versions of vprj, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

wormnest 路径遍历漏洞

wormnest is a Python3 Flask/SQL-Alchemy web server for URL narrowing and manipulating file services by individual developer John Torakis in Greece. A path traversal vulnerability exists in wormnest version 0.4.7, which stems from insecure use of the Flask sendfile function...

ChangePop-Back 路径遍历漏洞

ChangePop-Back is an open source unizar-30226-2019-06 library for ChangePop-Back. ChangePop-Back has a security vulnerability in 2019-06-04 and earlier versions that stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...

PT-2022-11285

Name of the Vulnerable Software and Affected Versions EyesOfNetwork versions prior to 07-07-2021 Description The issue allows for Remote Code Execution on the mail options configuration page. Specifically, in the location of the sendmail application in the cacti configuration page, it is possible...

PT-2022-31883

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to a resource leak in the lpfc sli4 send seq to ulp function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...