Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,892

CVE-2022-31515

The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Carceresbe Project
Products
Carceresbe
CVE-2022-31514

The Caoyongqi912/Fan_Platform repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Fan Platform Project
Products
Fan Platform
CVE-2022-31513

The BolunHan/Krypton repository through 2021-06-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Krypton Project
Products
Krypton
CVE-2022-31512

The Atom02/flask-mvc repository through 2020-09-14 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.4% KEV · Not listed
Vendors
Flask-mvc Project
Products
Flask-mvc
CVE-2022-31511

The AFDudley/equanimity repository through 2014-04-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Equanimity Project
Products
Equanimity
CVE-2022-31510

The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.5% KEV · Not listed
Vendors
Simple-rat Project
Products
Simple-rat
CVE-2022-31508

The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.5% KEV · Not listed
Vendors
Idayrus
Products
E-voting
CVE-2022-31507

The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.7% KEV · Not listed
Vendors
Ganga Project
Products
Ganga
CVE-2022-31506

The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.5% KEV · Not listed
Vendors
Cmu
Products
Opendiamond
CVE-2022-31503

The orchest/orchest repository before 2022.05.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.6% KEV · Not listed
Vendors
Orchest
Products
Orchest
CVE-2022-31502

The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.5% KEV · Not listed
Vendors
Wormnest Project
Products
Wormnest
CVE-2022-31501

The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.5% KEV · Not listed
Vendors
Onyxforum Project
Products
Onyxforum
CVE-2022-31499

Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.

CVSS 3.1 · 9.8 Critical EPSS 65.0% KEV · Not listed
Vendors
Nortekcontrol
Products
Emerge E3 Emerge E3 Firmware