1207 matches found
CVE-2017-16181
wintiwebdev is a static file server. wintiwebdev is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16178
intsol-package is a file server. intsol-package is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16199
susu-sum is a static file server. susu-sum is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2018-3724
general-file-server node module suffers from a Path Traversal vulnerability due to lack of validation of currpath, which allows a malicious user to read content of any file with known path...
CVE-2017-16123
welcomyzt is a simple file server. welcomyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16120
CVE-2017-16120 concerns the static file server liyujing , which is vulnerable to a directory traversal flaw. An attacker can access filesystem paths by placing relative path components (e.g., ../../) in the URL, potentially exposing private files outside the intended directory root. Affected vers...
CVE-2017-16123
CVE-2017-16123 affects the welcomyzt file server. A directory traversal flaw allows an attacker to access the filesystem by including ../ sequences in the URL, exposing sensitive files. Multiple sources (GitHub advisory GHSA-8FV7-VM2P-5495, OSV, CNVD/CNVD-2018-14369, NVD record) describe the issu...
CVE-2017-16161
shenliru, a simple file server, is vulnerable to a directory traversal issue (CVE-2017-16161) where exposing the filesystem is possible by using relative paths like ../ in the URL. The root cause is improper handling of relative path resolution, allowing access to files outside the intended direc...
CVE-2017-16162
22lixian is a simple file server. 22lixian is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16214
peiserver is a static file server. peiserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16152
static-html-server is a static file server. static-html-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16180
CVE-2017-16180 is a vulnerability in the static file server serverabc where a URL containing directory traversal sequences (e.g., ../) allows attackers to access the host filesystem. Public datasheets describe the issue as a path traversal that can disclose private files (example: GET /../../../....
CVE-2017-16213
CVE-2017-16213 affects the mfrserver file server and is a directory traversal vulnerability. The vulnerability is triggered by crafted URLs containing relative path sequences (e.g., ../) which allow an attacker to access files outside the intended directory root, exposing filesystem contents. Con...
CVE-2017-16201
The CVE-2017-16201 issue affects zjjserver, a static file server, due to a directory traversal vulnerability where attackers can exploit URL paths containing ../ to access the filesystem. The vulnerability is triggered by how relative paths are resolved, enabling potential disclosure of private f...
CVE-2017-16199
CVE-2017-16199 corresponds to a directory-traversal vulnerability in susu-sum (a static file server). The issue allows an attacker to access files outside the intended directory by crafting URL paths that include traversal sequences (for example ../../../../../../etc/passwd). Multiple connected s...
CVE-2017-16167
Affected software: yyooopack (a simple file server). Vulnerability: directory traversal via crafted URL segments like ../, allowing access to filesystem outside the intended directory. Root cause/details (as stated): the vulnerability resides in how relative paths are resolved, enabling traversal...
CVE-2017-16200
The CVE concerns uv-tj-demo, a static file server, with a directory-traversal vulnerability exploitable via ../ in the request path. Affected component is the server’s URL handling (paths resolved outside the root). Potential impact is disclosure of private files on the vulnerable system, as desc...
CVE-2017-16182
CVE-2017-16182 affects the static file server named serverxxx, where a directory traversal vulnerability exists due to improper handling of relative file paths in URLs (e.g., ..). The issue, described across multiple sources (GitHub advisory GHSA-wh33-4P32-G7VH, Veracode, CNVD, NVD, CVE list, OSV...
CVE-2017-16223
CVE-2017-16223 affects the static file server nodeaaaaa . The vulnerability is a directory traversal flaw that allows an attacker to access the filesystem by placing "../" in the URL. Multiple sources (NVD entry, GHSA advisory, CNVD, OSV, CNVD) describe that affected versions resolve relative fil...
CVE-2017-16183
CVE-2017-16183 affects iter-server, a static file server. The vulnerability is a directory traversal flaw where crafted URLs containing ../ allow access to the filesystem. Examples and descriptions across multiple sources confirm direct path traversal via relative file paths, potentially exposing...