641 matches found
CVE-2022-31503
The orchest/orchest repository before 2022.05.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31530
The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31585
The umeshpatil-dev/Homeinternet repository through 2020-08-28 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31505
The cheo0/MercadoEnLineaBack repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31541
The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31558
The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
Discourse < 3.3.3 Backup Disclosure
Discourse versions prior to 3.3.3 are vulnerable to a backup disclosure vulnerability due to improper handling of file downloads in the rails sendfile method. An attacker could exploit this vulnerability to download backup files containing sensitive information, potentially leading to data...
EUVD-2022-52991
Malicious code in bioql PyPI...
EUVD-2022-52992
Malicious code in bioql PyPI...
EUVD-2022-53007
Malicious code in bioql PyPI...
EUVD-2022-53013
Malicious code in bioql PyPI...
EUVD-2022-53024
Malicious code in bioql PyPI...
EUVD-2022-52972
Malicious code in bioql PyPI...
EUVD-2022-52977
Malicious code in bioql PyPI...
EUVD-2022-52963
Malicious code in bioql PyPI...
EUVD-2022-52984
Malicious code in bioql PyPI...
EUVD-2022-52969
Malicious code in bioql PyPI...
EUVD-2022-0110
Malicious code in bioql PyPI...