Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-31484 State: PUBLISHED Published: 2022-06-06T16:40:33.983938Z Last Updated: 2024-09-17T01:37:06.347Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: LenelS2, HID Mercury Products: LNL-X2210, LNL-X2220, LNL-X3300, LNL-X4420, LNL-4420, S2-LP-1501, S2-LP-1502, S2-LP-2500, S2-LP-4502, LP1501, LP1502, LP2500, LP4502, EP4502 Problem Types: CWE-425 Description: An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29. The impact
lligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29. The impact of this vulnerability is that an unauthenticated attacker could restrict access to the web interface to legitimate users and potentially requiring them to use the default user dip switch procedure to gain access back. Additional Analyst Notes: - CVE Program Container: References: - https://www.corporate.carrier.com/product-security/advisories-resources/
CVE ID: CVE-2022-31485 State: PUBLISHED Published: 2022-06-06T16:41:09.100189Z Last Updated: 2024-09-17T00:26:24.486Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: LenelS2, HID Mercury Products: LNL-X2210, LNL-X2220, LNL-X3300, LNL-X4420, LNL-4420, S2-LP-1501, S2-LP-1502, S2-LP-2500, S2-LP-4502, LP1501, LP1502, LP2500, LP4502, EP4502 Problem Types: CWE-425 Description: An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions pr
sed on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29. Additional Analyst Notes: - CVE Program Container: References: - https://www.corporate.carrier.com/product-security/advisories-resources/
CVE ID: CVE-2022-31486 State: PUBLISHED Published: 2022-06-06T16:41:46.407824Z Last Updated: 2024-09-16T18:03:16.897Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: LenelS2, HID Mercury Products: LNL-X2210, LNL-X2220, LNL-X3300, LNL-X4420, LNL-4420, S2-LP-1501, S2-LP-1502, S2-LP-2500, S2-LP-4502, LP1501, LP1502, LP2500, LP4502, EP4502 Problem Types: CWE-78 Description: An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell commands. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.
D Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.303 for the LP series and 1.297 for the EP series. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable. Additional Analyst Notes: - CVE Program Container: References: - https://www.corporate.carrier.com/product-security/advisories-resources/
CVE ID: CVE-2022-31487 State: PUBLISHED Published: 2022-05-23T19:45:08 Last Updated: 2024-08-03T07:19:06.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chart_content/master.php symbol SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigb0x/CVEs/blob/main/Blockchain-AltExchanger-121-sqli.md - https://github.com/bigb0x/CVEs/blob/main/Inout-Blockchain-FiatExchanger-221-sqli.md
CVE ID: CVE-2022-31488 State: PUBLISHED Published: 2022-05-23T19:44:59 Last Updated: 2024-08-03T07:19:06.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inout Blockchain AltExchanger 1.2.1 allows index.php/coins/update_marketboxslider marketcurrency SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigb0x/CVEs/blob/main/Blockchain-AltExchanger-121-sqli.md
CVE ID: CVE-2022-31489 State: PUBLISHED Published: 2022-05-23T19:44:50 Last Updated: 2024-08-03T07:19:06.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutio_language cookie SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigb0x/CVEs/blob/main/Blockchain-AltExchanger-121-sqli.md
CVE ID: CVE-2022-31491 State: PUBLISHED Published: 2025-08-22T00:00:00.000Z Last Updated: 2025-08-22T20:21:36.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote attacker to run arbitrary code via an unspecified web interface related to detection of a managed UPS shutting down. An unauthenticated attacker can use this to run arbitrary code immediately regardless of any managed UPS state or presence. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ready2disclose.com/vpow-31491-43110/ - https://www.cisa.gov/news-event
CISA ADP Vulnrichment: References: - https://www.ready2disclose.com/vpow-31491-43110/ - https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-05
CVE ID: CVE-2022-31492 State: PUBLISHED Published: 2022-06-06T19:56:46 Last Updated: 2024-08-03T07:19:06.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroup_admin_add.php Username. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreHealthIO/lh-ehr/tags - https://gitlab.com/librehealth/ehr/lh-ehr/-/tags - https://nitroteam.kz/index.php?action=researches&slug=librehealth2_r
CVE ID: CVE-2022-31493 State: PUBLISHED Published: 2022-06-06T18:18:59 Last Updated: 2024-08-03T07:19:06.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php acl_id XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreHealthIO/lh-ehr/tags - https://gitlab.com/librehealth/ehr/lh-ehr/-/tags - https://nitroteam.kz/index.php?action=researches&slug=librehealth2_r
CVE ID: CVE-2022-31494 State: PUBLISHED Published: 2022-06-06T22:28:14 Last Updated: 2024-08-03T07:19:06.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreHealthIO/lh-ehr/tags - https://gitlab.com/librehealth/ehr/lh-ehr/-/tags - https://nitroteam.kz/index.php?action=researches&slug=librehealth2_r
CVE ID: CVE-2022-31495 State: PUBLISHED Published: 2022-06-07T14:09:53 Last Updated: 2024-08-03T07:19:06.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreHealthIO/lh-ehr/tags - https://gitlab.com/librehealth/ehr/lh-ehr/-/tags - https://nitroteam.kz/index.php?action=researches&slug=librehealth2_r
CVE ID: CVE-2022-31496 State: PUBLISHED Published: 2022-06-08T23:53:04 Last Updated: 2024-08-03T07:19:06.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreHealthIO/lh-ehr/tags - https://gitlab.com/librehealth/ehr/lh-ehr/-/tags - https://nitroteam.kz/index.php?action=researches&slug=librehealth2_r
CVE ID: CVE-2022-31497 State: PUBLISHED Published: 2022-06-08T11:32:38 Last Updated: 2024-08-03T07:19:06.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigation.php patient XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreHealthIO/lh-ehr/tags - https://gitlab.com/librehealth/ehr/lh-ehr/-/tags - https://nitroteam.kz/index.php?action=researches&slug=librehealth2_r
CVE ID: CVE-2022-31498 State: PUBLISHED Published: 2022-06-06T20:10:49 Last Updated: 2024-08-03T07:19:06.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreHealth EHR Base 2.0.0 allows interface/orders/patient_match_dialog.php key XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreHealthIO/lh-ehr/tags - https://gitlab.com/librehealth/ehr/lh-ehr/-/tags - https://nitroteam.kz/index.php?action=researches&slug=librehealth2_r
CVE ID: CVE-2022-31499 State: PUBLISHED Published: 2022-08-25T22:09:38 Last Updated: 2024-08-03T07:19:06.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256. Additional Analyst Notes: - CVE Program Container: References: - https://eg.linkedin.com/in/omar-1-hashem - http://packetstormsecurity.com/files/167991/Nortek-Linear-eMerge-E3-Series-Command-Injection.html - https://gist.github.com/omarhashem123/5f0c6f1394099b555740fdc5c7651ee2
CVE ID: CVE-2022-31500 State: PUBLISHED Published: 2022-05-31T13:03:14 Last Updated: 2024-08-03T07:19:06.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions. Additional Analyst Notes: - CVE Program Container: References: - https://knime.com - https://www.knime.com/security/advisories#CVE-2022-31500
CVE ID: CVE-2022-31501 State: PUBLISHED Published: 2022-07-11T00:52:41 Last Updated: 2024-08-03T07:19:06.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726 - https://github.com/ChaoticOnyx/OnyxForum/commit/f25543dfc62a9694d7e4f67eebfa45e3de916053
CVE ID: CVE-2022-31502 State: PUBLISHED Published: 2022-07-11T00:53:39 Last Updated: 2024-08-03T07:19:06.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726 - https://github.com/operatorequals/wormnest/commit/2dfe96fc2570586ac487b399ac20d41b3c114861
CVE ID: CVE-2022-31503 State: PUBLISHED Published: 2022-07-11T00:53:45 Last Updated: 2024-08-03T07:19:06.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: The orchest/orchest repository before 2022.05.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726 - https://github.com/orchest/orchest/pull/913 - https://github.com/orchest/orchest/releases/tag/v2022.05.0
CVE ID: CVE-2022-31504 State: PUBLISHED Published: 2022-07-11T00:53:50 Last Updated: 2024-08-03T07:19:06.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ChangeWeDer/BaiduWenkuSpider_flaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726 - https://github.com/ChangeWeDer/BaiduWenkuSpider_flaskWeb/pull/3
CVE ID: CVE-2022-31505 State: PUBLISHED Published: 2022-07-11T00:53:56 Last Updated: 2024-08-03T07:19:06.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cheo0/MercadoEnLineaBack repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31506 State: PUBLISHED Published: 2022-07-11T00:54:01 Last Updated: 2024-08-03T07:19:06.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726 - https://github.com/cmusatyalab/opendiamond/commit/398049c187ee644beabab44d6fece82251c1ea56
CVE ID: CVE-2022-31507 State: PUBLISHED Published: 2022-07-11T00:54:07 Last Updated: 2024-08-03T07:19:06.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726 - https://github.com/ganga-devs/ganga/commit/730e7aba192407d35eb37dd7938d49071124be8c - https://github.com/ganga-devs/ganga/releases/tag/8.5.10
CVE ID: CVE-2022-31508 State: PUBLISHED Published: 2022-07-11T00:54:12 Last Updated: 2024-08-03T07:19:06.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726 - https://github.com/idayrus/evoting/commit/241d92a4d68f524365a6322b5bbcfaa7d9abc8a3
CVE ID: CVE-2022-31509 State: PUBLISHED Published: 2022-07-11T00:54:17 Last Updated: 2024-08-03T07:19:06.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31510 State: PUBLISHED Published: 2022-07-11T00:54:24 Last Updated: 2024-08-03T07:19:06.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726 - https://github.com/sergeKashkin/Simple-RAT/pull/11
CVE ID: CVE-2022-31511 State: PUBLISHED Published: 2022-07-11T00:54:30 Last Updated: 2024-08-03T07:19:06.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AFDudley/equanimity repository through 2014-04-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31512 State: PUBLISHED Published: 2022-07-11T00:54:36 Last Updated: 2024-08-03T07:19:06.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Atom02/flask-mvc repository through 2020-09-14 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31513 State: PUBLISHED Published: 2022-07-11T00:54:41 Last Updated: 2024-08-03T07:19:06.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BolunHan/Krypton repository through 2021-06-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31514 State: PUBLISHED Published: 2022-07-11T00:54:48 Last Updated: 2024-08-03T07:19:06.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Caoyongqi912/Fan_Platform repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31515 State: PUBLISHED Published: 2022-07-11T00:54:54 Last Updated: 2024-08-03T07:19:06.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31516 State: PUBLISHED Published: 2022-07-11T00:55:00 Last Updated: 2024-08-03T07:19:06.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Harveyzyh/Python repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31517 State: PUBLISHED Published: 2022-07-11T00:55:06 Last Updated: 2024-08-03T07:19:06.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HolgerGraef/MSM repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31518 State: PUBLISHED Published: 2022-07-11T00:55:11 Last Updated: 2024-08-03T07:19:06.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JustAnotherSoftwareDeveloper/Python-Recipe-Database repository through 2021-03-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31519 State: PUBLISHED Published: 2022-07-11T00:55:19 Last Updated: 2024-08-03T07:19:06.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31520 State: PUBLISHED Published: 2022-07-11T00:55:25 Last Updated: 2024-08-03T07:19:06.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31521 State: PUBLISHED Published: 2022-07-11T00:55:32 Last Updated: 2024-08-03T07:19:06.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Niyaz-Mohamed/mosaic repository through 1.0.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31522 State: PUBLISHED Published: 2022-07-11T00:55:38 Last Updated: 2024-08-03T07:19:06.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NotVinay/karaokey repository through 2019-12-11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31523 State: PUBLISHED Published: 2022-07-11T00:55:44 Last Updated: 2024-08-03T07:19:06.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31524 State: PUBLISHED Published: 2022-07-11T00:55:49 Last Updated: 2024-08-03T07:19:06.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31525 State: PUBLISHED Published: 2022-07-11T00:55:54 Last Updated: 2024-08-03T07:19:06.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SummaLabs/DLS repository through 0.1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31526 State: PUBLISHED Published: 2022-07-11T00:55:59 Last Updated: 2024-08-03T07:19:06.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31527 State: PUBLISHED Published: 2022-07-11T00:56:07 Last Updated: 2024-08-03T07:19:06.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Wildog/flask-file-server repository through 2020-02-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31528 State: PUBLISHED Published: 2022-07-11T00:56:15 Last Updated: 2024-08-03T07:19:06.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bonn-activity-maps/bam_annotation_tool repository through 2021-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31529 State: PUBLISHED Published: 2022-07-11T00:56:20 Last Updated: 2024-08-03T07:19:06.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cinemaproject/monorepo repository through 2021-03-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726