CWE-22 CVEs and Security Vulnerabilities

CVE-2022-31573

The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.4% KEV · Not listed

Vendors

Chainer

Products

Chainerrl-visualizer

CVE-2022-31572

The ceee-vip/cockybook repository through 2015-04-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Cockybook Project

Products

Cockybook

CVE-2022-31571

The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Python-flask-restful-api Project

Products

Python-flask-restful-api

CVE-2022-31570

The adriankoczuruek/ceneo-web-scrapper repository through 2021-03-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed

Vendors

Ceneo-web-scrapper Project

Products

Ceneo-web-scrapper

CVE-2022-31568

The Rexians/rex-web repository through 2022-06-05 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Rexians

Products

Rex-web

CVE-2022-31567

The DSABenchmark/DSAB repository through 2.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Data Stream Algorithm Benchmark Project

Products

Data Stream Algorithm Benchmark

CVE-2022-31566

The DSAB-local/DSAB repository through 2019-02-18 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 8.6 High EPSS 1.2% KEV · Not listed

Vendors

Data Stream Algorithm Benchmark Project

Products

Data Stream Algorithm Benchmark

CVE-2022-31565

The yogson/syrabond repository through 2020-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Syrabond Project

Products

Syrabond

CVE-2022-31564

The woduq1414/munhak-moa repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.4% KEV · Not listed

Vendors

Munhak

Products

Munhak-moa

CVE-2022-31563

The whmacmac/vprj repository through 2022-04-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Vprj Project

Products

Vprj

CVE-2022-31562

The waveyan/internshipsystem repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Internshipsystem Project

Products

Internshipsystem

CVE-2022-31561

The varijkapil13/Sphere_ImageBackend repository through 2019-10-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Sphere Imagebackend Project

Products

Sphere Imagebackend

CVE-2022-31560

The uncleYiba/photo_tag repository through 2020-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Photo Tag Project

Products

Photo Tag

CVE-2022-31559

The tsileo/flask-yeoman repository through 2013-09-13 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Flask-yeoman Project

Products

Flask-yeoman

CVE-2022-31558

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Shiva-server Project

Products

Shiva-server

CVE-2022-31557

The seveas/golem repository through 2016-05-17 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Golem Project

Products

Golem

CVE-2022-31556

The rusyasoft/TrainEnergyServer repository through 2017-08-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Trainenergyserver Project

Products

Trainenergyserver

CVE-2022-31555

The romain20100/nursequest repository through 2018-02-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Nurse Quest Project

Products

Nurse Quest

CVE-2022-31554

The rohitnayak/movie-review-sentiment-analysis repository through 2017-05-07 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Movie-review-sentiment-analysis Project

Products

Movie-review-sentiment-analysis

CVE-2022-31553

The rainsoupah/sleep-learner repository through 2021-02-21 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed

Vendors

Sleep Learner Project

Products

Sleep Learner

Search vulnerabilities