Export limit exceeded: 372888 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 27), (line:1, col:28)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (372888 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2022-31514 1 Fan Platform Project 1 Fan Platform 2024-11-21 9.3 Critical
The Caoyongqi912/Fan_Platform repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVE-2022-31513 1 Krypton Project 1 Krypton 2024-11-21 9.3 Critical
The BolunHan/Krypton repository through 2021-06-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVE-2022-31512 1 Flask-mvc Project 1 Flask-mvc 2024-11-21 9.3 Critical
The Atom02/flask-mvc repository through 2020-09-14 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVE-2022-31511 1 Equanimity Project 1 Equanimity 2024-11-21 9.3 Critical
The AFDudley/equanimity repository through 2014-04-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVE-2022-31510 1 Simple-rat Project 1 Simple-rat 2024-11-21 9.3 Critical
The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVE-2022-31509 1 Iedadata 1 Usap-dc Web Submission And Dataset Search 2024-11-21 9.3 Critical
The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVE-2022-31508 1 Idayrus 1 E-voting 2024-11-21 9.3 Critical
The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVE-2022-31507 1 Ganga Project 1 Ganga 2024-11-21 9.3 Critical
The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVE-2022-31506 1 Cmu 1 Opendiamond 2024-11-21 9.3 Critical
The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVE-2022-31505 1 Mercadoenlineaback Project 1 Mercadoenlineaback 2024-11-21 9.3 Critical
The cheo0/MercadoEnLineaBack repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVE-2022-31504 1 Baiduwenkuspider Flaskweb Project 1 Baiduwenkuspider Flaskweb 2024-11-21 9.3 Critical
The ChangeWeDer/BaiduWenkuSpider_flaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVE-2022-31503 1 Orchest 1 Orchest 2024-11-21 9.3 Critical
The orchest/orchest repository before 2022.05.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVE-2022-31502 1 Wormnest Project 1 Wormnest 2024-11-21 9.3 Critical
The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVE-2022-31501 1 Onyxforum Project 1 Onyxforum 2024-11-21 9.3 Critical
The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVE-2022-31500 1 Knime 1 Knime Analytics Platform 2024-11-21 7.8 High
In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions.
CVE-2022-31499 1 Nortekcontrol 2 Emerge E3, Emerge E3 Firmware 2024-11-21 9.8 Critical
Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.
CVE-2022-31498 1 Librehealth 1 Librehealth Ehr 2024-11-21 6.1 Medium
LibreHealth EHR Base 2.0.0 allows interface/orders/patient_match_dialog.php key XSS.
CVE-2022-31497 1 Librehealth 1 Librehealth Ehr 2024-11-21 6.1 Medium
LibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigation.php patient XSS.
CVE-2022-31496 1 Librehealth 1 Librehealth Ehr 2024-11-21 8.8 High
LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access.
CVE-2022-31495 1 Librehealth 1 Librehealth Ehr 2024-11-21 6.1 Medium
LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.