CVEs published July 11, 2022
205 CVEs were published on July 11, 2022: 2 critical, 10 high.
- Published
- 205
- Critical
- 2
- High
- 10
- Medium
- 31
- Low
- 13
- Unrated
- 149
- Now in CISA KEV
- 0
- Fix available
- 70
Most affected products
- Samsung Mobile Devices
- 29
- Huawei HarmonyOS · Huawei EMUI +1
- 9
- Dell BSAFE Crypto-C Micro Edition
- 8
- kubeedge · github.com/kubeedge/kubeedge
- 6
- Cybozu Garoon
- 4
- Samsung Mobile Galaxy Store
- 3
- Awin Data Feed
- 2
- CODESYS Control RTE · CODESYS Control Win +18
- 2
- Huawei EMUI · Huawei Magic UI
- 2
- Huawei HarmonyOS · Huawei EMUI
- 2
Critical 2
- CVE-2020-35169Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Improper InpDell BSAFE Crypto-C Micro Edition
- CVE-2022-2302LENZE: Missing password verification in authorisation procedureLENZE cabinet c520 · LENZE cabinet c550 +1
High 10
- CVE-2022-31140Valinor error messages leading to potential data exfiltrationCuyZ Valinor · cuyz/valinor
- CVE-2020-29505Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain a Key ManagemenDell BSAFE Crypto-C Micro Edition
- CVE-2022-31138OS Command Injection in mailcowmailcow-dockerized
- CVE-2022-33704Improper validation vulnerability in ucmRetParcelable of KnoxSDK prior to SMR Jul-2022 Release 1 allows attackers to launch certain activitiSamsung Mobile Devices
- CVE-2022-33703Improper validation vulnerability in CACertificateInfo prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities.Samsung Mobile Devices
- CVE-2022-30756Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with pSamsung Mobile Devices
- CVE-2022-30755Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijaSamsung Mobile Devices
- CVE-2022-30754Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities witSamsung Mobile Devices
- CVE-2022-30792CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channelsCODESYS Control RTE · CODESYS Control Win +18
- CVE-2022-30791CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connectionsCODESYS Control RTE · CODESYS Control Win +18
Medium, low and unrated 193
- CVE-2022-31080KubeEdge Websocket Client in package Viaduct: DoS from large response messagekubeedge · github.com/kubeedge/kubeedge
- CVE-2022-31079KubeEdge Cloud Stream and Edge Stream DoS from large stream messagekubeedge · github.com/kubeedge/kubeedge
- CVE-2022-31078KubeEdge CloudCore Router memory exhaustionkubeedge · github.com/kubeedge/kubeedge
- CVE-2022-31075KubeEdge DoS when signing the CSR from EdgeCorekubeedge · github.com/kubeedge/kubeedge
- CVE-2022-31074KubeEdge Cloud AdmissionController component DoSkubeedge · github.com/kubeedge/kubeedge
- CVE-2022-31073KubeEdge Edge ServiceBus module DoSkubeedge · github.com/kubeedge/kubeedge
- CVE-2020-35168Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable TimDell BSAFE Crypto-C Micro Edition
- CVE-2020-35167Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable TimDell BSAFE Crypto-C Micro Edition
- CVE-2020-35166Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable TimDell BSAFE Crypto-C Micro Edition · Dell BSAFE Micro Editio…
- CVE-2020-35164Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable TimDell BSAFE Crypto-C Micro Edition
- CVE-2020-35163Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain a Use of InsufficDell BSAFE Crypto-C Micro Edition
- CVE-2020-29508Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper InputDell BSAFE Micro Edition Suite
- CVE-2020-29507Dell BSAFE Crypto-C Micro Edition, versions before 4.1.4, and Dell BSAFE Micro Edition Suite, versions before 4.4, contain an Improper InputDell BSAFE Crypto-C Micro Edition
- CVE-2020-29506Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable TDell BSAFE Crypto-C Micro Edition
- CVE-2022-31139No security checking for UnsafeAccess.getInstance() in UnsafeAccessorKarlatemp UnsafeAccessor · io.github.karlatemp:unsafe-acces…
- CVE-2022-31904EGT-Kommunikationstechnik UG Mediacenter before v2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component
- CVE-2020-4150IBM SiteProtector Appliance 3.1.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbounIBM Security SiteProtector System
- CVE-2020-4138IBM SiteProtector Appliance 3.1.1 allows web pages to be stored locally which can be read by another user on the system.IBM Security SiteProtector System
- CVE-2021-36668URL injection in Driva inSync 6.9.0 for MacOS, allows attackers to force a visit to an arbitrary url via the port parameter to the Electron
- CVE-2021-36667Command injection vulnerability in Druva inSync 6.9.0 for MacOS, allows attackers to execute arbitrary commands via crafted payload to the l
- CVE-2021-36666An issue was discovered in Druva 6.9.0 for MacOS, allows attackers to gain escalated local privileges via the inSyncDecommission.
- CVE-2021-36665An issue was discovered in Druva 6.9.0 for macOS, allows attackers to gain escalated local privileges via the inSyncUpgradeDaemon.
- CVE-2022-2366Incorrect defaults can cause attackers to bypass rate limitationsMattermost
- CVE-2021-39999There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200.eSE620X vESS
- CVE-2021-40016Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality.Huawei EMUI · Huawei Magic UI
- CVE-2021-40013Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect integrity.Huawei EMUI · Huawei Magic UI
- CVE-2021-40012Vulnerability of pointers being incorrectly used during data transmission in the video framework.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-34738The SystemUI module has a vulnerability in permission control.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-34737The application security module has a vulnerability in permission assignment.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-34742The system module has a read/write vulnerability.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-34739The fingerprint module has a vulnerability of overflow in arithmetic addition.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-34741The NFC module has a buffer overflow vulnerability.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-34740The NFC module has a buffer overflow vulnerability.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-34743The AT commands of the USB port have an out-of-bounds read vulnerability.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-34736The frame scheduling module has a null pointer dereference vulnerability.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-34735The frame scheduling module has a null pointer dereference vulnerability.Huawei HarmonyOS · Huawei EMUI
- CVE-2021-46741The basic framework and setting module have defects, which were introduced during the design.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-33707Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device.Samsung Mobile FindMyMobile
- CVE-2022-33705Information exposure in Calendar prior to version 12.3.05.10000 allows attacker to access calendar schedule without READ_CALENDAR permissionSamsung Mobile Calendar
- CVE-2022-33713Implicit Intent hijacking vulnerability in Samsung Cloud prior to version 5.2.0 allows attacker to get sensitive information.Samsung Mobile Samsung Cloud
- CVE-2022-33706Improper access control vulnerability in Samsung Gallery prior to version 13.1.05.8 allows physical attackers to access the pictures using SSamsung Mobile Samsung Gallery
- CVE-2022-33711Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allSamsung Mobile Samsung USB Driver Windows Installer for Mob…
- CVE-2022-33712Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Samsung Mobile Camera
- CVE-2022-33710Improper input validation vulnerability in BillingPackageInsraller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launcSamsung Mobile Galaxy Store
- CVE-2022-33709Improper input validation vulnerability in ApexPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch aSamsung Mobile Galaxy Store
- CVE-2022-33708Improper input validation vulnerability in AppsPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch aSamsung Mobile Galaxy Store
- CVE-2022-33702Improper authorization vulnerability in Knoxguard prior to SMR Jul-2022 Release 1 allows local attacker to disable keyguard and bypass KnoxgSamsung Mobile Devices
- CVE-2022-33701Improper access control vulnerability in KnoxCustomManagerService prior to SMR Jul-2022 Release 1 allows attacker to call PowerManaer.goToSlSamsung Mobile Devices
- CVE-2022-33700Exposure of Sensitive Information in putDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via lSamsung Mobile Devices
- CVE-2022-33699Exposure of Sensitive Information in getDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via lSamsung Mobile Devices
- CVE-2022-33698Exposure of Sensitive Information in Telecom application prior to SMR Jul-2022 Release 1 allows local attackers to access ICCID via log.Samsung Mobile Devices
- CVE-2022-33697Sensitive information exposure vulnerability in ImsServiceSwitchBase in ImsCore prior to SMR Jul-2022 Release 1 allows local attackers with Samsung Mobile Devices
- CVE-2022-33696Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via loSamsung Mobile Devices
- CVE-2022-33695Use of improper permission in InputManagerService prior to SMR Jul-2022 Release 1 allows unauthorized access to the service.Samsung Mobile Devices
- CVE-2022-33694Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unSamsung Mobile Devices
- CVE-2022-33693Exposure of Sensitive Information in CID Manager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log.Samsung Mobile Devices
- CVE-2022-33692Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid viSamsung Mobile Devices
- CVE-2022-33691A possible race condition vulnerability in score driver prior to SMR Jul-2022 Release 1 can allow local attackers to interleave malicious opSamsung Mobile Devices
- CVE-2022-33690Improper input validation in Contacts Storage prior to SMR Jul-2022 Release 1 allows attacker to access arbitrary file.Samsung Mobile Devices
- CVE-2022-33689Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows attackers to change preferred network type by unSamsung Mobile Devices
- CVE-2022-33688Sensitive information exposure vulnerability in EventType in SecTelephonyProvider prior to SMR Jul-2022 Release 1 allows local attackers witSamsung Mobile Devices
- CVE-2022-33687Exposure of Sensitive Information in telephony-common.jar prior to SMR Jul-2022 Release 1 allows local attackers to access IMSI via log.Samsung Mobile Devices
- CVE-2022-33686Exposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log.Samsung Mobile Devices
- CVE-2022-33685Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and accSamsung Mobile Devices
- CVE-2022-30758Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to access some protected informatioSamsung Mobile Devices
- CVE-2022-30757Improper authorization in isemtelephony prior to SMR Jul-2022 Release 1 allows attacker to obtain CID without ACCESS_FINE_LOCATION permissioSamsung Mobile Devices
- CVE-2022-30753Improper use of a unique device ID in unprotected SecSoterService prior to SMR Jul-2022 Release 1 allows local attackers to get the device ISamsung Mobile Devices
- CVE-2022-30752Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker toSamsung Mobile Devices
- CVE-2022-30751Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker toSamsung Mobile Devices
- CVE-2022-30750Improper access control vulnerability in updateLastConnectedClientInfo function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows atSamsung Mobile Devices
- CVE-2022-2123WP Opt-in <= 1.4.1 - Arbitrary Settings Update via CSRFWP Opt-in
- CVE-2022-2093WP Duplicate Page < 1.3 - Admin+ Stored Cross Site ScriptingWP Duplicate Page
- CVE-2022-2092WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site ScriptingWooCommerce PDF Invoices & Packing Slips
- CVE-2022-2091Cache Images < 3.2.1 - Image Upload / Import via CSRFCache Images
- CVE-2022-2089Bold Page Builder < 4.3.3 - Admin+ Stored Cross-Site ScriptingBold Page Builder
- CVE-2022-2050WP Paginate < 2.1.9 - Admin+ Stored Cross-Site ScriptingWP-Paginate
- CVE-2022-1957Comment License < 1.4.0 - Arbitrary Settings Update via CSRFComment License
- CVE-2022-1956Shortcut Macros <= 1.3 - Subscriber+ Arbitrary Settings UpdateShortcut Macros
- CVE-2022-1952eaSYNC < 1.1.16 - Unauthenticated Arbitrary File UploadFree Booking Plugin for Hotels, Restaurant and Car Rental –…
- CVE-2022-1951Core Plugin for Kitestudio Themes < 2.3.1 - Reflected Cross-Site-Scriptingcore plugin for kitestudio themes
- CVE-2022-1938Awin Data Feed < 1.8 - Unauthenticated Stored Cross-Site ScriptingAwin Data Feed
- CVE-2022-1937Awin Data Feed < 1.8 - Reflected Cross-Site ScriptingAwin Data Feed
- CVE-2022-1910Shortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-ScriptingShortcodes and extra features for Phlox theme
- CVE-2022-1894Popup Builder < 4.1.11 - Admin+ Stored Cross-Site ScriptingPopup Builder – Create highly converting, mobile friendly m…
- CVE-2022-1757Pagebar < 2.70 - Arbitrary Settings Update via CSRF to Stored XSSpagebar
- CVE-2022-1732Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRFRename wp-login.php
- CVE-2022-1626Sharebar <= 1.4.1 - Arbitrary Settings Update to Stored XSS via CSRFSharebar
- CVE-2022-1599Admin Management Xtended < 2.4.5 - Post Visibility/Date/Comment Status Update via CSRFAdmin Management Xtended
- CVE-2022-1576WP Maintenance Mode & Coming Soon < 2.4.5 - Subscribed Users Deletion via CSRFWP Maintenance Mode & Coming Soon
- CVE-2022-1546WooCommerce - Product Importer <= 1.5.2 - Reflected Cross-Site ScriptingWooCommerce – Product Importer
- CVE-2022-1474WP Event Manager < 3.1.28 - Reflected Cross-Site ScriptingWP Event Manager – Easily Build your Calendar of Events!
- CVE-2022-1220FoxyShop < 4.8.2 - Reflected Cross-Site ScriptingFoxyShop
- CVE-2022-1057Pricing Deals for WooCommerce <= 2.0.2.02 - Unauthenticated SQLiPricing Deals for WooCommerce
- CVE-2022-33911An issue was discovered in Couchbase Server 7.x before 7.0.4.
- CVE-2022-33173An algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4.
- CVE-2021-41396Live555 through 1.08 does not handle socket connections properly.
- CVE-2022-1794Plaintext Storage of a password in CODESYS V3 OPC DA ServerCODESYS OPC DA Server
- CVE-2022-2368Authentication Bypass by Spoofing in microweber/microwebermicroweber/microweber
- CVE-2022-35416H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS.
- CVE-2022-35414softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex cr
- CVE-2022-31588The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask send_file function is used
- CVE-2022-31587The yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask send_file functi
- CVE-2022-31586The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask send_file f
- CVE-2022-31585The umeshpatil-dev/Home__internet repository through 2020-08-28 on GitHub allows absolute path traversal because the Flask send_file functio
- CVE-2022-31584The stonethree/s3label repository through 2019-08-14 on GitHub allows absolute path traversal because the Flask send_file function is used u
- CVE-2022-31583The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because the Flask send_file f
- CVE-2022-31582The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask send_file function is used
- CVE-2022-31581The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsaf
- CVE-2022-31580The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask send_file function
- CVE-2022-31579The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used u
- CVE-2022-31578The piaoyunsoft/bt_lnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask send_file function is used
- CVE-2022-31577The longmaoteamtf/audio_aligner_app repository through 2020-01-10 on GitHub allows absolute path traversal because the Flask send_file funct
- CVE-2022-31576The heidi-luong1109/shackerpanel repository through 2021-05-25 on GitHub allows absolute path traversal because the Flask send_file function
- CVE-2022-31575The duducosmos/livro_python repository through 2018-06-06 on GitHub allows absolute path traversal because the Flask send_file function is u
- CVE-2022-31574The deepaliupadhyay/RealEstate repository through 2018-11-30 on GitHub allows absolute path traversal because the Flask send_file function i
- CVE-2022-31573The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is uchainerrl-visualizer
- CVE-2022-31572The ceee-vip/cockybook repository through 2015-04-16 on GitHub allows absolute path traversal because the Flask send_file function is used u
- CVE-2022-31571The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask send_file
- CVE-2022-31570The adriankoczuruek/ceneo-web-scrapper repository through 2021-03-15 on GitHub allows absolute path traversal because the Flask send_file fu
- CVE-2022-31568The Rexians/rex-web repository through 2022-06-05 on GitHub allows absolute path traversal because the Flask send_file function is used unsa
- CVE-2022-31567The DSABenchmark/DSAB repository through 2.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- CVE-2022-31566The DSAB-local/DSAB repository through 2019-02-18 on GitHub allows absolute path traversal because the Flask send_file function is used unsa
- CVE-2022-31565The yogson/syrabond repository through 2020-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsa
- CVE-2022-31564The woduq1414/munhak-moa repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used
- CVE-2022-31563The whmacmac/vprj repository through 2022-04-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafe
- CVE-2022-31562The waveyan/internshipsystem repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask send_file function is
- CVE-2022-31561The varijkapil13/Sphere_ImageBackend repository through 2019-10-03 on GitHub allows absolute path traversal because the Flask send_file func
- CVE-2022-31560The uncleYiba/photo_tag repository through 2020-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used
- CVE-2022-31559The tsileo/flask-yeoman repository through 2013-09-13 on GitHub allows absolute path traversal because the Flask send_file function is used
- CVE-2022-31558The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsashiva
- CVE-2022-31557The seveas/golem repository through 2016-05-17 on GitHub allows absolute path traversal because the Flask send_file function is used unsafel
- CVE-2022-31556The rusyasoft/TrainEnergyServer repository through 2017-08-03 on GitHub allows absolute path traversal because the Flask send_file function
- CVE-2022-31555The romain20100/nursequest repository through 2018-02-22 on GitHub allows absolute path traversal because the Flask send_file function is us
- CVE-2022-31554The rohitnayak/movie-review-sentiment-analysis repository through 2017-05-07 on GitHub allows absolute path traversal because the Flask send
- CVE-2022-31553The rainsoupah/sleep-learner repository through 2021-02-21 on GitHub allows absolute path traversal because the Flask send_file function is
- CVE-2022-31552The project-anuvaad/anuvaad-corpus repository through 2020-11-23 on GitHub allows absolute path traversal because the Flask send_file functi
- CVE-2022-31551The pleomax00/flask-mongo-skel repository through 2012-11-01 on GitHub allows absolute path traversal because the Flask send_file function i
- CVE-2022-31550The olmax99/pyathenastack repository through 2019-11-08 on GitHub allows absolute path traversal because the Flask send_file function is use
- CVE-2022-31549The olmax99/helm-flask-celery repository before 2022-05-25 on GitHub allows absolute path traversal because the Flask send_file function is
- CVE-2022-31548The nrlakin/homepage repository through 2017-03-06 on GitHub allows absolute path traversal because the Flask send_file function is used uns
- CVE-2022-31547The noamezekiel/sphere repository through 2020-05-31 on GitHub allows absolute path traversal because the Flask send_file function is used u
- CVE-2022-31546The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafe
- CVE-2022-31545The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask send_file function is u
- CVE-2022-31544The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- CVE-2022-31543The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafel
- CVE-2022-31542The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask send_file function is used unsafe
- CVE-2022-31541The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask send_file functio
- CVE-2022-31540The kumardeepak/hin-eng-preprocessing repository through 2019-07-16 on GitHub allows absolute path traversal because the Flask send_file fun
- CVE-2022-31539The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafel
- CVE-2022-31538The joaopedro-fg/mp-m08-interface repository through 2020-12-10 on GitHub allows absolute path traversal because the Flask send_file functio
- CVE-2022-31537The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask send_file fun
- CVE-2022-31536The jaygarza1982/ytdl-sync repository through 2021-01-02 on GitHub allows absolute path traversal because the Flask send_file function is us
- CVE-2022-31535The freefood89/Fishtank repository through 2015-06-24 on GitHub allows absolute path traversal because the Flask send_file function is used
- CVE-2022-31534The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask send_file function is us
- CVE-2022-31533The decentraminds/umbral repository through 2020-01-15 on GitHub allows absolute path traversal because the Flask send_file function is used
- CVE-2022-31532The dankolbman/travel_blahg repository through 2016-01-16 on GitHub allows absolute path traversal because the Flask send_file function is u
- CVE-2022-31531The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- CVE-2022-31530The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- CVE-2022-31529The cinemaproject/monorepo repository through 2021-03-03 on GitHub allows absolute path traversal because the Flask send_file function is us
- CVE-2022-31528The bonn-activity-maps/bam_annotation_tool repository through 2021-08-31 on GitHub allows absolute path traversal because the Flask send_fil
- CVE-2022-31527The Wildog/flask-file-server repository through 2020-02-20 on GitHub allows absolute path traversal because the Flask send_file function is
- CVE-2022-31526The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask send_file function is us
- CVE-2022-31525The SummaLabs/DLS repository through 0.1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- CVE-2022-31524The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask send_file function i
- CVE-2022-31523The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsaf
- CVE-2022-31522The NotVinay/karaokey repository through 2019-12-11 on GitHub allows absolute path traversal because the Flask send_file function is used un
- CVE-2022-31521The Niyaz-Mohamed/mosaic repository through 1.0.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsa
- CVE-2022-31520The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask send_file funct
- CVE-2022-31519The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafe
- CVE-2022-31518The JustAnotherSoftwareDeveloper/Python-Recipe-Database repository through 2021-03-31 on GitHub allows absolute path traversal because the F
- CVE-2022-31517The HolgerGraef/MSM repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsa
- CVE-2022-31516The Harveyzyh/Python repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used uns
- CVE-2022-31515The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- CVE-2022-31514The Caoyongqi912/Fan_Platform repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is
- CVE-2022-31513The BolunHan/Krypton repository through 2021-06-03 on GitHub allows absolute path traversal because the Flask send_file function is used uns
- CVE-2022-31512The Atom02/flask-mvc repository through 2020-09-14 on GitHub allows absolute path traversal because the Flask send_file function is used uns
- CVE-2022-31511The AFDudley/equanimity repository through 2014-04-23 on GitHub allows absolute path traversal because the Flask send_file function is used
- CVE-2022-31510The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is us
- CVE-2022-31509The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask send_file function is used
- CVE-2022-31508The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsaf
- CVE-2022-31507The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafelyganga
- CVE-2022-31506The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used opendiamond
- CVE-2022-31505The cheo0/MercadoEnLineaBack repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is
- CVE-2022-31504The ChangeWeDer/BaiduWenkuSpider_flaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask send_file
- CVE-2022-31503The orchest/orchest repository before 2022.05.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafe
- CVE-2022-31502The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask send_file function is used u
- CVE-2022-31501The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used
- CVE-2022-31472Browse restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to obtain the dataCybozu Garoon
- CVE-2022-30943Browsing restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to obtain the dCybozu Garoon
- CVE-2022-30602Operation restriction bypass in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to alter the fiCybozu Garoon
- CVE-2022-29512Exposure of sensitive information to an unauthorized actor issue in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote auCybozu Garoon
- CVE-2022-27168Cross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker to inject an arbitrary script via unspecifieLiteCart
- CVE-2022-32294Zimbra Collaboration Open Source 8.8.15 does not encrypt the initial-login randomly created password (from the "zmprove ca" command).