12093 matches found
CVE-2017-16096
CVE-2017-16096 affects serveryaozeyan, a simple HTTP server, with a directory traversal vulnerability via URL path components (e.g., ../) that can disclose files outside the intended directory. The issue is documented across multiple sources (GHSA, NVD, CNVD, OSV, etc.) with explicit example requ...
CVE-2017-16095
The CVE-2017-16095 entry relates to serverliujiayi1, a simple http server, which is vulnerable to a directory traversal attack. The vulnerability occurs when an attacker uses path traversal sequences (e.g., ../) in a URL, potentially allowing access to the server’s filesystem. Documented impacts ...
CVE-2018-3713
CVE-2018-3713 concerns a path-traversal in the node module angular-http-server caused by lack of validation of possibleFilename, allowing a remote attacker to read arbitrary files on the server. Public reports and advisories (GHSA-4RVG-955W-H68Q; OSV; CNVD; PRION; NVD) consistently identify angul...
CVE-2017-16169
CVE-2017-16169 affects the lightweight HTTP server looppake , where a directory traversal vulnerability exists. An attacker can craft URLs containing traversal sequences (for example, "../" or similar) to access files outside the intended root, potentially exposing sensitive files on vulnerable s...
CVE-2017-16101
CVE-2017-16101 concerns the lightweight HTTP server serverwg , which is vulnerable to a directory-traversal flaw triggered by URL paths containing sequences like ".. /". The issue allows an attacker to access the filesystem, as demonstrated by examples in multiple sources (e.g., the /../../…/etc/...
CVE-2017-16143
commentapp.stetsonwood is an http server. commentapp.stetsonwood is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16143
This CVE (CVE-2017-16143) is documented across multiple sources as a directory traversal vulnerability in the HTTP server commentapp.stetsonwood. An attacker can cause file-system access by crafting URLs with ../ sequences (for example, ../../../../../etc/passwd). The issue is described consisten...
CVE-2017-16141
lab6drewfusbyu is an http server. lab6drewfusbyu is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16102
serverhuwenhui is a simple http server. serverhuwenhui is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16103
CVE-2017-16103 affects the simple HTTP server serveryztyzt, with a directory traversal vulnerability that allows an attacker to access the filesystem by requesting URLs containing relative paths like ../../. The NVD entry lists a medium (CVSS v2) to high (CVSS v3) impact on confidentiality; the C...
CVE-2017-16103
serveryztyzt is a simple http server. serveryztyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16095
serverliujiayi1 is a simple http server. serverliujiayi1 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16133
CVE-2017-16133 affects the Go-based HTTP server goserv . The vulnerability is a directory traversal flaw caused by improper handling of URL paths, allowing an attacker to access the filesystem by supplying sequences like "../" in the request. Public references (GHSA and Veracode, plus NVD/ CNVD e...
CVE-2017-16092
Sencisho is a simple http server for local development. Sencisho is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16166
CVE-2017-16166 concerns the byucslabsix HTTP server, where a directory traversal vulnerability allows an attacker to access the filesystem by placing traversal sequences like ../ in the URL. The issue is described across multiple sources (NVD entry and corroborating advisories), citing that byucs...
CVE-2017-16166
byucslabsix is an http server. byucslabsix is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16169
looppake is a simple http server. looppake is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16133
goserv is an http server. goserv is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...