1414 matches found
CVE-2017-16170
CVE-2017-16170 affects liuyaserver (a static file server) and is a directory traversal vulnerability exploitable by placing ../ in the URL to access the filesystem. The vulnerability is documented with CVSS metrics (v3 base 7.5, HIGH; NETWORK, LOW complexity) and is referenced across multiple sou...
CVE-2017-16171
hcbserver is a static file server. hcbserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16177
CVE-2017-16177 affects chatbyvista (a file server). The vulnerability is a directory traversal flaw triggered by crafted URLs that include path segments like ../, allowing access to the filesystem outside the intended directory. The CVE entry documents this vulnerability with a medium to high imp...
CVE-2018-3724
general-file-server node module suffers from a Path Traversal vulnerability due to lack of validation of currpath, which allows a malicious user to read content of any file with known path...
CVE-2017-16140
lab6.brit95 is a file server. lab6.brit95 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16140
The CVE-2017-16140 entry concerns lab6.brit95, a file server vulnerable to a directory traversal flaw. The root cause is improper handling of path traversal, allowing an attacker to access the filesystem by including ../ in the URL. Public records (GHSA, OSV, CNVD, CNVD-2018-14250, Veracode, NVD)...
CVE-2017-16123
welcomyzt is a simple file server. welcomyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16123
CVE-2017-16123 affects the welcomyzt file server. A directory traversal flaw allows an attacker to access the filesystem by including ../ sequences in the URL, exposing sensitive files. Multiple sources (GitHub advisory GHSA-8FV7-VM2P-5495, OSV, CNVD/CNVD-2018-14369, NVD record) describe the issu...
CVE-2017-16120
liyujing is a static file server. liyujing is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16120
CVE-2017-16120 concerns the static file server liyujing , which is vulnerable to a directory traversal flaw. An attacker can access filesystem paths by placing relative path components (e.g., ../../) in the URL, potentially exposing private files outside the intended directory root. Affected vers...
CVE-2017-16161
shenliru is a simple file server. shenliru is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16161
shenliru, a simple file server, is vulnerable to a directory traversal issue (CVE-2017-16161) where exposing the filesystem is possible by using relative paths like ../ in the URL. The root cause is improper handling of relative path resolution, allowing access to files outside the intended direc...
CVE-2017-16160
11xiaoli is a simple file server. 11xiaoli is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16162
22lixian is a simple file server. 22lixian is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16162
Summary: CVE-2017-16162 affects the 22lixian simple file server, where a directory traversal flaw allows an attacker to access the filesystem by sending URLs containing relative paths like "../". The public sources (NVD/CVE, GHSA advisories, Veracode, CNVD, OSV, GitLab/file, npm advisory) describ...
CVE-2017-16158
dcserver is a static file server. dcserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16160
CVE-2017-16160 affects the 11xiaoli simple file server. A directory traversal vulnerability exists when a URL containing "../" (or similar path traversal sequences) is requested, enabling an attacker to access filesystem paths outside the intended root. Several connected sources corroborate the i...
CVE-2017-16159
caolilinode is a simple file server. caolilinode is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16167
Affected software: yyooopack (a simple file server). Vulnerability: directory traversal via crafted URL segments like ../, allowing access to filesystem outside the intended directory. Root cause/details (as stated): the vulnerability resides in how relative paths are resolved, enabling traversal...