CVE-2017-16211

lessindex is a static file server. lessindex is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16181

wintiwebdev is a static file server. wintiwebdev is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16183

CVE-2017-16183 affects iter-server, a static file server. The vulnerability is a directory traversal flaw where crafted URLs containing ../ allow access to the filesystem. Examples and descriptions across multiple sources confirm direct path traversal via relative file paths, potentially exposing...

CVE-2017-16198

CVE-2017-16198 affects ritp, a static web server. Documents in multiple sources describe a directory traversal vulnerability caused by crafting URLs with relative path sequences (e.g., ../../..). This can lead to disclosure of files outside the intended directory root (e.g., private files), with ...

CVE-2017-16199

CVE-2017-16199 corresponds to a directory-traversal vulnerability in susu-sum (a static file server). The issue allows an attacker to access files outside the intended directory by crafting URL paths that include traversal sequences (for example ../../../../../../etc/passwd). Multiple connected s...

CVE-2017-16212

Summary: CVE-2017-16212 affects the static file server named ltt , with a directory traversal vulnerability that can be triggered by including relative paths (e.g., "../../"). Public details in connected advisories (GHSA-5JG5-W395-9684, Veracode, CNVD, etc.) describe that affected versions of ltt...

CVE-2017-16180

serverabc is a static file server. serverabc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16152

static-html-server is a static file server. static-html-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16170

CVE-2017-16170 affects liuyaserver (a static file server) and is a directory traversal vulnerability exploitable by placing ../ in the URL to access the filesystem. The vulnerability is documented with CVSS metrics (v3 base 7.5, HIGH; NETWORK, LOW complexity) and is referenced across multiple sou...

CVE-2017-16085

tinyserver2 is a webserver for static files. tinyserver2 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

CVE-2017-16152

CVE-2017-16152 affects the static-html-server static file server. The connected documents describe a directory traversal vulnerability triggered by URL paths containing ../, which can allow an attacker to access files outside the intended directory root and disclose private files. PoC examples ar...

CVE-2017-16181

CVE-2017-16181 affects the static file server wintiwebdev. The vulnerability is a directory traversal flaw that lets an attacker access the filesystem by requesting URLs containing ../ sequences. This is confirmed across multiple sources (NVD entry for CVE-2017-16181 and related advisories). Impa...

CVE-2017-16171

hcbserver is a static file server. hcbserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16226

The CVE-2017-16226 issue affects the static-eval module where untrusted input can access the global Function constructor, enabling arbitrary code execution. Exploitation details are present in multiple connected sources (e.g., npm advisory 548 and OSS/GHSA entries) showing that affected versions ...

CVE-2017-16193

mfrs is a static file server. mfrs is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16199

susu-sum is a static file server. susu-sum is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16094

iter-http is a server for static files. iter-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16120

liyujing is a static file server. liyujing is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16171

CVE-2017-16171 affects hcbserver, a static file server, where a directory traversal vulnerability can be triggered by requesting URLs containing relative paths (e.g., ../) to access files outside the intended directory. Connected sources (GHSA/MWJ7… and OSV, Veracode, CNVD/CNVD-2018‑11655) confir...

CVE-2017-16197

qinserve is a static file server vulnerable to a directory traversal issue. An attacker can access the filesystem by supplying relative paths (e.g., ../../… in the URL). The issue is documented across multiple sources (NVD, GHSA advisory, Veracode, OSV, CNVD, etc.). Impact described as potential ...