Search vulnerabilities

Results 11,556

CVE-2022-31532

The dankolbman/travel_blahg repository through 2016-01-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Products
CVE-2022-31531

The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2022-31530

The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Products
CVE-2022-31529

The cinemaproject/monorepo repository through 2021-03-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Products
CVE-2022-31526

The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2022-31524

The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2022-31523

The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2022-31522

The NotVinay/karaokey repository through 2019-12-11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Products
CVE-2022-31521

The Niyaz-Mohamed/mosaic repository through 1.0.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2022-31519

The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Products
CVE-2022-31515

The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Products
CVE-2022-31514

The Caoyongqi912/Fan_Platform repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Products
CVE-2022-31513

The BolunHan/Krypton repository through 2021-06-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1 · 9.3 Critical EPSS 1.3% KEV · Not listed
Vendors
Products