Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,880

CVE-2022-31544

The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Xtomo
Products
Robo-tom
CVE-2022-31543

The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Setupbox Project
Products
Setupbox
CVE-2022-31542

The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Mdweb Project
Products
Mdweb
CVE-2022-31539

The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Kotekan Project
Products
Kotekan
CVE-2022-31536

The jaygarza1982/ytdl-sync repository through 2021-01-02 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Ytdl-sync Project
Products
Ytdl-sync
CVE-2022-31535

The freefood89/Fishtank repository through 2015-06-24 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Fishtank Project
Products
Fishtank
CVE-2022-31534

The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Pythonweb Project
Products
Pythonweb
CVE-2022-31533

The decentraminds/umbral repository through 2020-01-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Umbral Project
Products
Umbral
CVE-2022-31532

The dankolbman/travel_blahg repository through 2016-01-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Travel Blahg Project
Products
Travel Blahg
CVE-2022-31531

The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Dainst
Products
Cilantro
CVE-2022-31530

The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Csm Server Project
Products
Csm Server
CVE-2022-31529

The cinemaproject/monorepo repository through 2021-03-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Monorepo Project
Products
Monorepo
CVE-2022-31526

The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Thunderatz
Products
Thunderdocs