rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-31535 
The freefood89/Fishtank repository through 2015-06-24 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:57:08.000Z
CVE-2022-31536 
The jaygarza1982/ytdl-sync repository through 2021-01-02 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:57:17.000Z
CVE-2022-31537 
The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:57:23.000Z
CVE-2022-31538 
The joaopedro-fg/mp-m08-interface repository through 2020-12-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:57:30.000Z
CVE-2022-31539 
The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:57:36.000Z
CVE-2022-31540 
The kumardeepak/hin-eng-preprocessing repository through 2019-07-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:57:43.000Z
CVE-2022-31541 
The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:57:52.000Z
CVE-2022-31542 
The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:57:57.000Z
CVE-2022-31543 
The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:58:04.000Z
CVE-2022-31544 
The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:58:11.000Z
CVE-2022-31545 
The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:58:16.000Z
CVE-2022-31546 
The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:58:23.000Z
CVE-2022-31547 
The noamezekiel/sphere repository through 2020-05-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:58:29.000Z
CVE-2022-31548 
The nrlakin/homepage repository through 2017-03-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:58:34.000Z
CVE-2022-31549 
The olmax99/helm-flask-celery repository before 2022-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:58:40.000Z
CVE-2022-31550 
The olmax99/pyathenastack repository through 2019-11-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:58:46.000Z
CVE-2022-31551 
The pleomax00/flask-mongo-skel repository through 2012-11-01 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:58:53.000Z
CVE-2022-31552 
The project-anuvaad/anuvaad-corpus repository through 2020-11-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:58:59.000Z
CVE-2022-31553 
The rainsoupah/sleep-learner repository through 2021-02-21 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:59:05.000Z
CVE-2022-31554 
The rohitnayak/movie-review-sentiment-analysis repository through 2017-05-07 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:59:10.000Z
CVE-2022-31555 
The romain20100/nursequest repository through 2018-02-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:59:15.000Z
CVE-2022-31556 
The rusyasoft/TrainEnergyServer repository through 2017-08-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:59:21.000Z
CVE-2022-31557 
The seveas/golem repository through 2016-05-17 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:59:28.000Z
CVE-2022-31558 
The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:59:36.000Z
CVE-2022-31559 
The tsileo/flask-yeoman repository through 2013-09-13 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:59:42.000Z
CVE-2022-31560 
The uncleYiba/photo_tag repository through 2020-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:59:49.000Z
CVE-2022-31561 
The varijkapil13/Sphere_ImageBackend repository through 2019-10-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T00:59:54.000Z
CVE-2022-31562 
The waveyan/internshipsystem repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:00:00.000Z
CVE-2022-31563 
The whmacmac/vprj repository through 2022-04-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:00:09.000Z
CVE-2022-31564 
The woduq1414/munhak-moa repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:00:14.000Z
CVE-2022-31565 
The yogson/syrabond repository through 2020-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:00:20.000Z
CVE-2022-31566 
The DSAB-local/DSAB repository through 2019-02-18 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:00:25.000Z
CVE-2022-31567 
The DSABenchmark/DSAB repository through 2.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:00:30.000Z
CVE-2022-31568 
The Rexians/rex-web repository through 2022-06-05 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:00:36.000Z
CVE-2022-31570 
The adriankoczuruek/ceneo-web-scrapper repository through 2021-03-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:00:46.000Z
CVE-2022-31571 
The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:00:53.000Z
CVE-2022-31572 
The ceee-vip/cockybook repository through 2015-04-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:00:59.000Z
CVE-2022-31573 
The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:01:06.000Z
CVE-2022-31574 
The deepaliupadhyay/RealEstate repository through 2018-11-30 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:01:12.000Z
CVE-2022-31575 
The duducosmos/livro_python repository through 2018-06-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:01:17.000Z
CVE-2022-31576 
The heidi-luong1109/shackerpanel repository through 2021-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:01:23.000Z
CVE-2022-31577 
The longmaoteamtf/audio_aligner_app repository through 2020-01-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:01:30.000Z
CVE-2022-31578 
The piaoyunsoft/bt_lnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:01:36.000Z
CVE-2022-31579 
The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:01:41.000Z
CVE-2022-31580 
The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:01:47.000Z
CVE-2022-31581 
The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:01:52.000Z
CVE-2022-31582 
The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:01:58.000Z
CVE-2022-31583 
The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:02:03.000Z
CVE-2022-31584 
The stonethree/s3label repository through 2019-08-14 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:02:10.000Z
CVE-2022-31585 
The umeshpatil-dev/Home__internet repository through 2020-08-28 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:02:18.000Z
CVE-2022-31586 
The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:02:24.000Z
CVE-2022-31587 
The yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:02:29.000Z
CVE-2022-31588 
The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T01:02:37.000Z
CVE-2022-31589 
Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: SAP SE
product: SAP ERP, localization for CEE countries.
vendor: SAP SE
product: SAP Financials
vendor: SAP SE
product: SAP S/4Hana Core
Published: 2022-06-14T18:36:39.000Z
CVE-2022-31590 
SAP PowerDesigner Proxy - version 16.7, allows an attacker with low privileges and has local access, with the ability to work around system’s root disk access restrictions to Write/Create a program file on system disk root path, which could then be executed with elevated privileges of the application during application start up or reboot, potentially compromising Confidentiality, Integrity and Availability of the system.
Problem types: cwe_id: CWE-428
description: CWE-428
Affected products: vendor: SAP SE
product: SAP PowerDesigner Proxy 16.7
Published: 2022-06-14T18:39:21.000Z
CVE-2022-31591 
SAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an unquoted element. A local attacker can gain elevated privileges by inserting an executable file in the path of the affected service
Problem types: cwe_id: CWE-428
description: CWE-428
Affected products: vendor: SAP SE
product: SAP BusinessObjects (BW Publisher Service)
Published: 2022-07-12T20:27:08.000Z
CVE-2022-31592 
The application SAP Enterprise Extension Defense Forces & Public Security - versions 605, 606, 616,617,618, 802, 803, 804, 805, 806, does not perform necessary authorization checks for an authenticated user over the network, resulting in escalation of privileges leading to a limited impact on confidentiality.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: SAP SE
product: SAP Enterprise Extension Defense Forces & Public Security (EA-DFPS)
Published: 2022-07-12T20:26:34.000Z
CVE-2022-31593 
SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
Problem types: cwe_id: CWE-74
description: CWE-74
Affected products: vendor: SAP SE
product: SAP Business One
Published: 2022-07-12T20:27:15.000Z
CVE-2022-31594 
A highly privileged user can exploit SUID-root program to escalate his privileges to root on a local Unix system.
Problem types: cwe_id: CWE-269
description: CWE-269
Affected products: vendor: SAP SE
product: SAP Adaptive Server Enterprise (ASE)
Published: 2022-06-14T18:44:35.000Z
CVE-2022-31595 
SAP Financial Consolidation - version 1010,�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: SAP SE
product: SAP Financial Consolidation
default_status: unaffected
Published: 2022-06-14T18:45:56.000Z
CVE-2022-31596 
Under certain conditions, an attacker authenticated as a CMS administrator and with high privileges access to the Network in SAP BusinessObjects Business Intelligence Platform (Monitoring DB) - version 430, can access BOE Monitoring database to retrieve and modify (non-personal) system data which would otherwise be restricted. Also, a potential attack could be used to leave the CMS's scope and impact the database. 



A successful attack could have a low impact on confidentiality, a high impact on integrity, and a low impact on availability.




Problem types: cwe_id: CWE-668
description: CWE-668 Exposure of Resource to Wrong Sphere
Affected products: vendor: SAP
product: SAP Business Objects Platform (Monitoring DB) 
default_status: unaffected
Published: 2022-12-12T03:43:40.155Z
CVE-2022-31597 
Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to low impact on confidentiality and integrity of the data.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: SAP SE
product: SAP S/4HANA
Published: 2022-07-12T20:27:00.000Z
CVE-2022-31598 
Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a malicious request through an allowed operation. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
Problem types: cwe_id: CWE-345
description: CWE-345
Affected products: vendor: SAP SE
product: SAP Business Objects
Published: 2022-07-12T20:26:25.000Z
CVE-2022-31599 
NVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause access to an uninitialized pointer, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other components.
Problem types: cwe_id: CWE-824
description: CWE-824 Access of Uninitialized Pointer
Affected products: vendor: NVIDIA
product: NVIDIA DGX A100
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Published: 2022-07-04T18:10:14.000Z
CVE-2022-31600 
NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vulnerability to this vulnerability, causing an integer overflow, possibly leading to code execution, escalation of privileges, denial of service, compromised integrity, and information disclosure. The scope of impact can extend to other components.
Problem types: cwe_id: CWE-190
description: CWE-190 Integer Overflow or Wraparound
Affected products: vendor: NVIDIA
product: NVIDIA DGX A100
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Published: 2022-07-04T18:10:19.000Z
CVE-2022-31601 
NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmbiosPei, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: NVIDIA
product: NVIDIA DGX A100
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2022-07-04T18:10:27.000Z
CVE-2022-31602 
NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploit an out-of-bounds write vulnerability, which may lead to code execution, denial of service, data integrity impact, and information disclosure.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: NVIDIA
product: NVIDIA DGX A100
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.4
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2022-07-04T18:10:31.000Z
CVE-2022-31603 
NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high privileges and preconditioned IpSecDxe global data can exploit improper validation of an array index to cause code execution, which may lead to denial of service, data integrity impact, and information disclosure.
Problem types: cwe_id: CWE-129
description: CWE-129 Improper Validation of Array Index
Affected products: vendor: NVIDIA
product: NVIDIA DGX A100
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.4
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2022-07-04T18:10:36.000Z