Lucene search
+L

643 matches found

CNVD
CNVD
added 2022/07/13 12:00 a.m.76 views

Annotation Tool path traversal vulnerability

Annotation Tool is a Bonn activity map annotation tool open sourced by bonn-activity-maps. 2021-08-31 and earlier versions of Annotation Tool are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource o...

9.3CVSS3.6AI score0.01299EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.47 views

evoting path traversal vulnerability

evoting is an e-voting application open sourced by Idayrus Studio in Indonesia. evoting versions prior to 2022-05-08 contain a path traversal vulnerability that stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, which could be...

9.3CVSS4.4AI score0.01463EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.53 views

ceneo-web-scrapper path traversal vulnerability

ceneo-web-scrapper is a web scraping tool from AdrianKoczurUEK's personal developer. ceneo-web-scrapper is vulnerable to a path traversal vulnerability, which stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, and could be exploited...

9.8CVSS2.9AI score0.01177EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.46 views

Fan_Platform path traversal vulnerability

FanPlatform is a UI interface automation platform backend for Caoyongqi912 personal developers. 2021-04-20 and earlier versions of FanPlatform are vulnerable to a path traversal vulnerability, which stems from the failure of Flask's sendfile function to properly filter special elements in resourc...

9.3CVSS4.2AI score0.01299EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.54 views

bt_lnmp path traversal vulnerability

btlnmp is a piaoyunsoft personal developer of a pagoda panel-based LNMP environment. btlnmp suffers from a path traversal vulnerability that stems from the failure of the Flask sendfile function to properly filter special elements in a resource or file path, which can be exploited by attackers to...

7.5CVSS4AI score0.01302EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.60 views

chainerrl-visualizer路径遍历漏洞

chainerrl-visualizer is Chainer's open source way to visually analyze the behavior of ChainerRL agents to make debugging easier. chainerrl-visualizer suffers from a path traversal vulnerability that stems from a failure of the Flask sendfile function to properly filter the resource or file path f...

9.3CVSS3.6AI score0.01363EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.50 views

caretakerr-api path traversal vulnerability

caretakerr-api is a Flask API endpoint for the Caretakerr application from sanoj tharindu personal developer. caretakerr-api 2021-05-17 and earlier versions are vulnerable to a path traversal vulnerability that stems from Flask's sendfile function failing to properly filter resource or special...

9.3CVSS3.9AI score0.01352EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.59 views

csm path traversal vulnerability

csm is a csm-aut open source automation and orchestration framework for IOS-XR devices. csm 3.5 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource or file path, which can be exploited by...

9.3CVSS4.1AI score0.01299EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.57 views

Barry-Voice-Assistant path traversal vulnerability

Barry-Voice-Assistant is a voice assistant from the Bulgarian personal developer Lyuboslav Karev. Barry-Voice-Assistant 2021-01-18 and earlier versions have a path traversal vulnerability, which stems from the failure of Flask's sendfile function to properly filter special elements in resource or...

9.3CVSS3.6AI score0.01299EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.41 views

CarceresBE path traversal vulnerability

CarceresBE is an SKS parking management system backend open sourced by Delor4. CarceresBE 1.0 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource or file path, which could be exploited by...

9.3CVSS3.6AI score0.01299EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.51 views

DSAB path traversal vulnerability

DSAB is a dataflow algorithm benchmark. A benchmark designed to test the performance of various dataflow algorithms on multiple datasets in a simple way.DSAB suffers from a path traversal vulnerability that stems from the failure of the Flask sendfile function to properly filter special elements ...

8.6CVSS4.3AI score0.01164EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.50 views

Anakin path traversal vulnerability

Anakin is a cross-platform, high-performance inference engine open-sourced by PaddlePaddle.Anakin 0.1.1 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in resource or file paths, which could be...

9.3CVSS3.6AI score0.01299EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/13 12:00 a.m.66 views

flask-mongo-skel path traversal vulnerability

flask-mongo-skel is a Flask MongoDB framework from Shamail Tayyab's personal developer. flask-mongo-skel 2012-11-01 and earlier versions contain a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter resource or file paths for The vulnerability is...

9.3CVSS2.8AI score0.01299EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2022/07/12 12:00 a.m.34 views

Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.9AI score0.01245EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/07/12 12:00 a.m.37 views

GHSA-QP72-96P2-G644 Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS9.4AI score0.01245EPSS
SaveExploits0References3
OSV
OSV
added 2022/07/12 12:00 a.m.56 views

GHSA-687H-86VC-5X59 ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function

The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS9.3AI score0.01363EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/07/12 12:00 a.m.35 views

SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely

The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely. A patch is available on the master branch of the repository...

9.3CVSS8.9AI score0.01475EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/07/12 12:00 a.m.47 views

GHSA-X2PC-FQRW-HC7F SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely

The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely. A patch is available on the master branch of the repository...

9.3CVSS9.4AI score0.01475EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.6 views

CVE-2022-31582

The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01352EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/11 1:15 a.m.7 views

CVE-2022-31581

The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01506EPSS
SaveExploits1References2
Rows per page
Query Builder