Search vulnerabilities

Results 425,880

CVE-2022-31564

The woduq1414/munhak-moa repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2022-31563

The whmacmac/vprj repository through 2022-04-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2022-31560

The uncleYiba/photo_tag repository through 2020-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Products
CVE-2022-31559

The tsileo/flask-yeoman repository through 2013-09-13 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Products
CVE-2022-31558

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Products
CVE-2022-31557

The seveas/golem repository through 2016-05-17 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2022-31555

The romain20100/nursequest repository through 2018-02-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Products
CVE-2022-31553

The rainsoupah/sleep-learner repository through 2021-02-21 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Products
CVE-2022-31552

The project-anuvaad/anuvaad-corpus repository through 2020-11-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Products
CVE-2022-31548

The nrlakin/homepage repository through 2017-03-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Products
CVE-2022-31547

The noamezekiel/sphere repository through 2020-05-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2022-31546

The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2022-31545

The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Products