1431 matches found
CVE-2017-16213
mfrserver is a simple file server. mfrserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16145
sspa is a server dedicated to single-page apps. sspa is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16135
serverzyy is a static file server. serverzyy is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16175
CVE-2017-16175 concerns a vulnerability in the file server ewgaddis.lab6 where a directory traversal flaw allows an attacker to access the filesystem by placing ".." in the URL (e.g., ../../). Connected sources repeatedly state that the vulnerability stems from improper path resolution, enabling ...
CVE-2017-16221
yzt is a simple file server. yzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16188
reecerver is a web server. reecerver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16194
Picard (a Node.js micro framework) is vulnerable to a directory traversal flaw: an attacker can access the filesystem by including ../ in the URL. The issue is documented across multiple sources (GHSA/NPM advisory, Veracode, CNVD, OSV, etc.), with no patch available in the advisories and recommen...
CVE-2017-16183
iter-server is a static file server. iter-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16141
lab6drewfusbyu is an http server. lab6drewfusbyu is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16175
ewgaddis.lab6 is a file server. ewgaddis.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16163
dylmomo is a simple file server. dylmomo is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16201
The CVE-2017-16201 issue affects zjjserver, a static file server, due to a directory traversal vulnerability where attackers can exploit URL paths containing ../ to access the filesystem. The vulnerability is triggered by how relative paths are resolved, enabling potential disclosure of private f...
CVE-2017-16200
The CVE concerns uv-tj-demo, a static file server, with a directory-traversal vulnerability exploitable via ../ in the request path. Affected component is the server’s URL handling (paths resolved outside the root). Potential impact is disclosure of private files on the vulnerable system, as desc...
CVE-2017-16192
getcityapi.yoehoehne is a web server. getcityapi.yoehoehne is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16156
myprolyz is a static file server. myprolyz is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16197
qinserve is a static file server. qinserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16212
Summary: CVE-2017-16212 affects the static file server named ltt , with a directory traversal vulnerability that can be triggered by including relative paths (e.g., "../../"). Public details in connected advisories (GHSA-5JG5-W395-9684, Veracode, CNVD, etc.) describe that affected versions of ltt...
CVE-2017-16185
CVE-2017-16185 affects the static file server uekw1511server . A directory traversal vulnerability allows an attacker to access the filesystem by placing traversal sequences (e.g., ../) in the URL, potentially disclosing private files. Multiple connected sources confirm the issue and describe exp...
CVE-2017-16220
CVE-2017-16220 affects the wind-mvc framework and is a directory traversal vulnerability that allows an attacker to access the filesystem by placing "../" in the URL. Multiple connected sources (GHSA-7G8M-5QH9-9PGW, Veracode, OSV) state that affected wind-mvc versions have this issue and that no ...