1247 matches found
CVE-2017-16199
CVE-2017-16199 corresponds to a directory-traversal vulnerability in susu-sum (a static file server). The issue allows an attacker to access files outside the intended directory by crafting URL paths that include traversal sequences (for example ../../../../../../etc/passwd). Multiple connected s...
CVE-2018-3724
general-file-server node module suffers from a Path Traversal vulnerability due to lack of validation of currpath, which allows a malicious user to read content of any file with known path...
CVE-2017-16185
uekw1511server is a static file server. uekw1511server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16211
lessindex is a static file server. lessindex is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16212
Summary: CVE-2017-16212 affects the static file server named ltt , with a directory traversal vulnerability that can be triggered by including relative paths (e.g., "../../"). Public details in connected advisories (GHSA-5JG5-W395-9684, Veracode, CNVD, etc.) describe that affected versions of ltt...
CVE-2017-16175
ewgaddis.lab6 is a file server. ewgaddis.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16167
Affected software: yyooopack (a simple file server). Vulnerability: directory traversal via crafted URL segments like ../, allowing access to filesystem outside the intended directory. Root cause/details (as stated): the vulnerability resides in how relative paths are resolved, enabling traversal...
CVE-2017-16140
lab6.brit95 is a file server. lab6.brit95 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16193
CVE-2017-16193 affects the static file server mfrs . The vulnerability is a directory traversal flaw where a URL containing "../" (and variants) allows access to files outside the intended root. Public documents confirm the root cause is improper resolution of relative file paths, enabling potent...
CVE-2017-16162
Summary: CVE-2017-16162 affects the 22lixian simple file server, where a directory traversal flaw allows an attacker to access the filesystem by sending URLs containing relative paths like "../". The public sources (NVD/CVE, GHSA advisories, Veracode, CNVD, OSV, GitLab/file, npm advisory) describ...
CVE-2017-16161
shenliru is a simple file server. shenliru is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16162
22lixian is a simple file server. 22lixian is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16152
static-html-server is a static file server. static-html-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16170
CVE-2017-16170 affects liuyaserver (a static file server) and is a directory traversal vulnerability exploitable by placing ../ in the URL to access the filesystem. The vulnerability is documented with CVSS metrics (v3 base 7.5, HIGH; NETWORK, LOW complexity) and is referenced across multiple sou...
CVE-2017-16178
Summary: CVE-2017-16178 affects the intsol-package file server and is a directory traversal vulnerability that allows an attacker to access the filesystem by including "../" in the URL. The issue is documented across multiple sources (NVD entry and advisories) with concrete description and exampl...
CVE-2017-16197
qinserve is a static file server vulnerable to a directory traversal issue. An attacker can access the filesystem by supplying relative paths (e.g., ../../… in the URL). The issue is documented across multiple sources (NVD, GHSA advisory, Veracode, OSV, CNVD, etc.). Impact described as potential ...
CVE-2017-16177
chatbyvista is a file server. chatbyvista is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16221
yzt is a simple file server. yzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16201
The CVE-2017-16201 issue affects zjjserver, a static file server, due to a directory traversal vulnerability where attackers can exploit URL paths containing ../ to access the filesystem. The vulnerability is triggered by how relative paths are resolved, enabling potential disclosure of private f...