2200 matches found
CVE-2017-16165
calmquist.static-server is a static file server. calmquist.static-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16222
elding is vulnerable to a directory traversal issue in its URL handling that resolves relative paths, allowing an attacker to access files outside the intended directory root. The vulnerability only affects files with extensions; for example, requests like GET /../../../etc/passwd/index.js can le...
CVE-2017-16185
CVE-2017-16185 affects the static file server uekw1511server . A directory traversal vulnerability allows an attacker to access the filesystem by placing traversal sequences (e.g., ../) in the URL, potentially disclosing private files. Multiple connected sources confirm the issue and describe exp...
CVE-2017-16192
getcityapi.yoehoehne is a web server. getcityapi.yoehoehne is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16219
CVE-2017-16219 concerns the static file server yttivy , where a directory traversal flaw allows an attacker to access files outside the intended directory by using relative paths (e.g., ../../). The issue is triggered by how yttivy resolves relative file paths in requests, enabling potential disc...
CVE-2017-16182
serverxxx is a static file server. serverxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16200
The CVE concerns uv-tj-demo, a static file server, with a directory-traversal vulnerability exploitable via ../ in the request path. Affected component is the server’s URL handling (paths resolved outside the root). Potential impact is disclosure of private files on the vulnerable system, as desc...
CVE-2017-16215
The CVE-2017-16215 entry concerns the sgqserve simple file server, which is vulnerable to a directory traversal flaw. Affected behavior is that an attacker can access the filesystem by including directory traversal sequences (for example, ../) in the URL, enabling disclosure of private files. Sev...
CVE-2017-16219
yttivy is a static file server. yttivy is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16173
utahcityfinder constructs lists of Utah cities with a certain prefix. utahcityfinder is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16180
serverabc is a static file server. serverabc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16144
myserver.alexcthomas18 is a file server. myserver.alexcthomas18 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16155
fast-http-cli is the command line interface for fast-http, a simple web server. fast-http-cli is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16167
yyooopack is a simple file server. yyooopack is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16140
lab6.brit95 is a file server. lab6.brit95 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16218
dgard8.lab6 is a static file server. dgard8.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16191
cypserver is a static file server. cypserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16090
fsk-server is a simple http server. fsk-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16130
exxxxxxxxxxx is an Http eX Frame Google Style JavaScript Guide. exxxxxxxxxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Accessible files are restricted to those with a file extension. Files with no extension such as...