CVE-2017-16166

CVE-2017-16166 concerns the byucslabsix HTTP server, where a directory traversal vulnerability allows an attacker to access the filesystem by placing traversal sequences like ../ in the URL. The issue is described across multiple sources (NVD entry and corroborating advisories), citing that byucs...

CVE-2017-16169

CVE-2017-16169 affects the lightweight HTTP server looppake , where a directory traversal vulnerability exists. An attacker can craft URLs containing traversal sequences (for example, "../" or similar) to access files outside the intended root, potentially exposing sensitive files on vulnerable s...

CVE-2017-16105

serverwzl is a simple http server. serverwzl is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

CVE-2017-16133

CVE-2017-16133 affects the Go-based HTTP server goserv . The vulnerability is a directory traversal flaw caused by improper handling of URL paths, allowing an attacker to access the filesystem by supplying sequences like "../" in the request. Public references (GHSA and Veracode, plus NVD/ CNVD e...

CVE-2017-16101

CVE-2017-16101 concerns the lightweight HTTP server serverwg , which is vulnerable to a directory-traversal flaw triggered by URL paths containing sequences like ".. /". The issue allows an attacker to access the filesystem, as demonstrated by examples in multiple sources (e.g., the /../../…/etc/...

CVE-2017-16108

gaoxiaotingtingting is an HTTP server. gaoxiaotingtingting is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16166

byucslabsix is an http server. byucslabsix is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2018-3713

angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a malicious user to read content of any file with known path...

CVE-2018-3713

CVE-2018-3713 concerns a path-traversal in the node module angular-http-server caused by lack of validation of possibleFilename, allowing a remote attacker to read arbitrary files on the server. Public reports and advisories (GHSA-4RVG-955W-H68Q; OSV; CNVD; PRION; NVD) consistently identify angul...

CVE-2017-16108

CVE-2017-16108 concerns the gaoxiaotingtingting HTTP server (Node.js module). The vulnerability is a directory traversal flaw that lets attackers access the filesystem by requesting URLs containing ../ (examples show traversal to parts like /../../etc/passwd). Public sources across multiple feeds...

CVE-2017-16095

The CVE-2017-16095 entry relates to serverliujiayi1, a simple http server, which is vulnerable to a directory traversal attack. The vulnerability occurs when an attacker uses path traversal sequences (e.g., ../) in a URL, potentially allowing access to the server’s filesystem. Documented impacts ...

PT-2018-16137 · Node.Js · Angular-Http-Server

Name of the Vulnerable Software and Affected Versions: angular-http-server versions prior to 1.6.0 Description: The angular-http-server node module has a Path Traversal issue due to the lack of validation of the possibleFilename variable, allowing a malicious user to read the content of any file...

CVE-2017-16096: Improper Limitation of a Pathname to a Restricted Directory

serveryaozeyan is a simple HTTP server. serveryaozeyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

PT-2018-6137

Name of the Vulnerable Software and Affected Versions: gaoxiaotingtingting affected versions not specified Description: The issue concerns a directory traversal vulnerability in an HTTP server, allowing an attacker to access the filesystem by manipulating the URL with "../". This can lead to the...

PT-2018-16140 · Unknown · Simplehttpserver

Name of the Vulnerable Software and Affected Versions: Simplehttpserver versions prior to 0.1.0 Description: The issue arises from a lack of validation of file names, leading to a Cross-Site Scripting vulnerability. An attacker can exploit this by controlling the filename of a file used in the...

CVE-2017-16090: Improper Limitation of a Pathname to a Restricted Directory

fsk-server is a simple http server. fsk-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16133: Improper Limitation of a Pathname to a Restricted Directory

goserv is an http server. goserv is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2018-3713: Improper Limitation of a Pathname to a Restricted Directory

angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a malicious user to read content of any file with known path...

H2O HTTP Server < 2.2.5 Heap Overflow Vulnerability

H2O HTTP Server is prone to a heap buffer overflow while trying to emit access log. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Directory traversal

hftp is a static http or ftp server hftp is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...