1242 matches found
CVE-2017-16195
CVE-2017-16195 affects pytservce, a static file server, due to a directory traversal flaw where a URL containing relative paths (for example, ../../) can access the filesystem. Multiple connected sources (GHSA, OSV, CNVD, Veracode, NVD mirror) describe the vulnerability as a directory traversal i...
CVE-2017-16223
CVE-2017-16223 affects the static file server nodeaaaaa . The vulnerability is a directory traversal flaw that allows an attacker to access the filesystem by placing "../" in the URL. Multiple sources (NVD entry, GHSA advisory, CNVD, OSV, CNVD) describe that affected versions resolve relative fil...
CVE-2017-16221
CVE-2017-16221 concerns the simple file server yzt , where a directory traversal vulnerability allows an attacker to access the filesystem by placing "../" in the URL. The issue stems from how relative file paths are resolved, enabling access to files outside the intended directory root. This vul...
CVE-2017-16186
360class.jansenhm is a static file server. 360class.jansenhm is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16176
The CVE concerns jansenstuffpleasework, a file server, with a directory traversal vulnerability exploitable by placing sequences like ../ in the URL to access the filesystem. Multiple connected sources confirm the issue and demonstrate that affected versions resolve relative file paths, permittin...
CVE-2017-16159
caolilinode is a simple file server. caolilinode is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16218
dgard8.lab6 is a static file server. dgard8.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16174
whispercast is a file server. whispercast is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16156
myprolyz is a static file server. myprolyz is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16182
serverxxx is a static file server. serverxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16158
dcserver is a static file server. dcserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16182
CVE-2017-16182 affects the static file server named serverxxx, where a directory traversal vulnerability exists due to improper handling of relative file paths in URLs (e.g., ..). The issue, described across multiple sources (GitHub advisory GHSA-wh33-4P32-G7VH, Veracode, CNVD, NVD, CVE list, OSV...
CVE-2017-16200
The CVE concerns uv-tj-demo, a static file server, with a directory-traversal vulnerability exploitable via ../ in the request path. Affected component is the server’s URL handling (paths resolved outside the root). Potential impact is disclosure of private files on the vulnerable system, as desc...
CVE-2017-16197
qinserve is a static file server. qinserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16219
CVE-2017-16219 concerns the static file server yttivy , where a directory traversal flaw allows an attacker to access files outside the intended directory by using relative paths (e.g., ../../). The issue is triggered by how yttivy resolves relative file paths in requests, enabling potential disc...
CVE-2017-16139
CVE-2017-16139 affects the jikes file server. The vulnerability is a directory traversal flaw in path resolution that allows an attacker to access the filesystem by placing sequences like "../" in the URL. The initial description notes that accessible files are restricted to those with .htm and ....
CVE-2017-16180
CVE-2017-16180 is a vulnerability in the static file server serverabc where a URL containing directory traversal sequences (e.g., ../) allows attackers to access the host filesystem. Public datasheets describe the issue as a path traversal that can disclose private files (example: GET /../../../....
CVE-2017-16156
CVE-2017-16156 affects the static file server myprolyz, where a directory traversal flaw allows accessing the filesystem by placing relative paths (e.g., ../ or ../../.. ) in the URL. The vulnerability is demonstrated by examples such as requesting URLs that traverse up the directory tree to reve...