14077 matches found
CVE-2018-3713
angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a malicious user to read content of any file with known path...
CVE-2017-16103
serveryztyzt is a simple http server. serveryztyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16108
gaoxiaotingtingting is an HTTP server. gaoxiaotingtingting is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16092
Sencisho is a simple http server for local development. Sencisho is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16095
serverliujiayi1 is a simple http server. serverliujiayi1 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16097
tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16102
serverhuwenhui is a simple http server. serverhuwenhui is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16133
goserv is an http server. goserv is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16169
looppake is a simple http server. looppake is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16143
commentapp.stetsonwood is an http server. commentapp.stetsonwood is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16096
CVE-2017-16096 affects serveryaozeyan, a simple HTTP server, with a directory traversal vulnerability via URL path components (e.g., ../) that can disclose files outside the intended directory. The issue is documented across multiple sources (GHSA, NVD, CNVD, OSV, etc.) with explicit example requ...
CVE-2017-16141
lab6drewfusbyu is an http server. lab6drewfusbyu is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16134
httpstaticsimple is an http server. httpstaticsimple is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16089
CVE-2017-16089 affects the lightweight HTTP server serverlyr and describes a directory traversal vulnerability. The issue is triggered when an attacker uses URL paths containing sequences like “../” (or multiple variants) to access files outside the intended directory, potentially exposing sensit...
CVE-2017-16092
Sencisho is affected by a directory traversal vulnerability (CVE-2017-16092). The issue allows an attacker to access the filesystem by placing relative paths like ../ in the URL. The GitHub advisory GHSA-6866-X7CF-RMH5 notes affected versions and provides the example request to access /../../../....
CVE-2017-16102
CVE-2017-16102 concerns the simple http server serverhuwenhui , which is vulnerable to a directory traversal flaw that lets an attacker access the host filesystem by placing relative paths such as "../../" in the URL. Connected advisories consistently describe the vulnerability as a directory tra...
CVE-2017-16103
CVE-2017-16103 affects the simple HTTP server serveryztyzt, with a directory traversal vulnerability that allows an attacker to access the filesystem by requesting URLs containing relative paths like ../../. The NVD entry lists a medium (CVSS v2) to high (CVSS v3) impact on confidentiality; the C...
CVE-2017-16105
CVE-2017-16105 affects the simple HTTP server serverwzl . The vulnerability is a directory traversal issue that can be triggered by a URL containing sequences like "../" to access files outside the intended directory root, potentially exposing sensitive filesystem content. Multiple connected sour...
CVE-2017-16141
CVE-2017-16141 affects lab6drewfusbyu (an HTTP server) and is a directory traversal vulnerability exploitable via URL paths containing ../ to access the filesystem. The issue is caused by improper sanitization of path traversal, enabling reading of files outside the intended directory. Related ad...
CVE-2017-16143
This CVE (CVE-2017-16143) is documented across multiple sources as a directory traversal vulnerability in the HTTP server commentapp.stetsonwood. An attacker can cause file-system access by crafting URLs with ../ sequences (for example, ../../../../../etc/passwd). The issue is described consisten...