CVE-2017-16211

CVE-2017-16211 concerns the static file server lessindex , which is vulnerable to a directory traversal vulnerability. The underlying issue is that the server resolves relative file paths, allowing an attacker to access the filesystem by injecting sequences like "../" in the URL. This can disclos...

CVE-2017-16158

dcserver is a static file server. dcserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16195

CVE-2017-16195 affects pytservce, a static file server, due to a directory traversal flaw where a URL containing relative paths (for example, ../../) can access the filesystem. Multiple connected sources (GHSA, OSV, CNVD, Veracode, NVD mirror) describe the vulnerability as a directory traversal i...

CVE-2017-16185

CVE-2017-16185 affects the static file server uekw1511server . A directory traversal vulnerability allows an attacker to access the filesystem by placing traversal sequences (e.g., ../) in the URL, potentially disclosing private files. Multiple connected sources confirm the issue and describe exp...

CVE-2017-16219

CVE-2017-16219 concerns the static file server yttivy , where a directory traversal flaw allows an attacker to access files outside the intended directory by using relative paths (e.g., ../../). The issue is triggered by how yttivy resolves relative file paths in requests, enabling potential disc...

CVE-2017-16182

serverxxx is a static file server. serverxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16185

uekw1511server is a static file server. uekw1511server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16177

CVE-2017-16177 affects chatbyvista (a file server). The vulnerability is a directory traversal flaw triggered by crafted URLs that include path segments like ../, allowing access to the filesystem outside the intended directory. The CVE entry documents this vulnerability with a medium to high imp...

CVE-2017-16200

The CVE concerns uv-tj-demo, a static file server, with a directory-traversal vulnerability exploitable via ../ in the request path. Affected component is the server’s URL handling (paths resolved outside the root). Potential impact is disclosure of private files on the vulnerable system, as desc...

CVE-2017-16219

yttivy is a static file server. yttivy is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16177

chatbyvista is a file server. chatbyvista is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16176

The CVE concerns jansenstuffpleasework, a file server, with a directory traversal vulnerability exploitable by placing sequences like ../ in the URL to access the filesystem. Multiple connected sources confirm the issue and demonstrate that affected versions resolve relative file paths, permittin...

CVE-2017-16182

CVE-2017-16182 affects the static file server named serverxxx, where a directory traversal vulnerability exists due to improper handling of relative file paths in URLs (e.g., ..). The issue, described across multiple sources (GitHub advisory GHSA-wh33-4P32-G7VH, Veracode, CNVD, NVD, CVE list, OSV...

CVE-2017-16123

CVE-2017-16123 affects the welcomyzt file server. A directory traversal flaw allows an attacker to access the filesystem by including ../ sequences in the URL, exposing sensitive files. Multiple sources (GitHub advisory GHSA-8FV7-VM2P-5495, OSV, CNVD/CNVD-2018-14369, NVD record) describe the issu...

CVE-2017-16223

CVE-2017-16223 affects the static file server nodeaaaaa . The vulnerability is a directory traversal flaw that allows an attacker to access the filesystem by placing "../" in the URL. Multiple sources (NVD entry, GHSA advisory, CNVD, OSV, CNVD) describe that affected versions resolve relative fil...

CVE-2017-16178

intsol-package is a file server. intsol-package is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16148

The CVE-2017-16148 entry concerns the static file server serve46 . The connected advisories document a directory traversal vulnerability where a URL containing relative path segments (for example, ../../) can cause the server to disclose files outside the intended directory. The vulnerability aff...

CVE-2017-16140

The CVE-2017-16140 entry concerns lab6.brit95, a file server vulnerable to a directory traversal flaw. The root cause is improper handling of path traversal, allowing an attacker to access the filesystem by including ../ in the URL. Public records (GHSA, OSV, CNVD, CNVD-2018-14250, Veracode, NVD)...

dgard8.lab6 Directory Traversal Vulnerability

dgard8.lab6 is a static file server. A directory traversal vulnerability exists in dgard8.lab6. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

PT-2018-16150 · Unknown · Crud-File-Server

Name of the Vulnerable Software and Affected Versions: crud-file-server versions prior to 0.8.0 Description: The issue is related to a lack of validation of file names, leading to a Cross-Site Scripting vulnerability. This is due to insufficient sanitization of filenames when the directory index ...