1431 matches found
CVE-2017-16193
CVE-2017-16193 affects the static file server mfrs . The vulnerability is a directory traversal flaw where a URL containing "../" (and variants) allows access to files outside the intended root. Public documents confirm the root cause is improper resolution of relative file paths, enabling potent...
CVE-2017-16219
CVE-2017-16219 concerns the static file server yttivy , where a directory traversal flaw allows an attacker to access files outside the intended directory by using relative paths (e.g., ../../). The issue is triggered by how yttivy resolves relative file paths in requests, enabling potential disc...
CVE-2017-16209
enserver is a simple web server. enserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16179
The CVE refers to a directory traversal vulnerability in the dasafio web server. Connected advisories confirm that certain versions of dasafio expose directory traversal by resolving relative file paths (e.g., ../../../../../../etc/passwd) and can disclose private files outside the intended root....
CVE-2017-16186
360class.jansenhm is a static file server. 360class.jansenhm is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16201
zjjserver is a static file server. zjjserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16110
weather.swlyons is a simple web server for weather updates. weather.swlyons is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16120
liyujing is a static file server. liyujing is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16215
The CVE-2017-16215 entry concerns the sgqserve simple file server, which is vulnerable to a directory traversal flaw. Affected behavior is that an attacker can access the filesystem by including directory traversal sequences (for example, ../) in the URL, enabling disclosure of private files. Sev...
CVE-2017-16213
CVE-2017-16213 affects the mfrserver file server and is a directory traversal vulnerability. The vulnerability is triggered by crafted URLs containing relative path sequences (e.g., ../) which allow an attacker to access files outside the intended directory root, exposing filesystem contents. Con...
CVE-2017-16167
yyooopack is a simple file server. yyooopack is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16208
Affected software: dmmcquay.lab6 (REST server). Vulnerability: Directory traversal via crafted URLs (e.g., using ../) allows access to files outside the intended directory. Impact (as documented): Potential disclosure of private files on the vulnerable system. Evidence from connected docs: GHSA a...
CVE-2017-16200
uv-tj-demo is a static file server. uv-tj-demo is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16125
rtcmulticonnection-client is vulnerable to directory traversal via URLs containing ../../.. sequences, enabling access to files outside the intended directory. This vulnerability is documented across CVE-2017-16125 entries and related advisories (GHSA, OSV, CNVD, CNVD variants). The root cause is...
CVE-2017-16184
scott-blanch-weather-app is a sample Node.js app using Express 4. scott-blanch-weather-app is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16216
tencent-server is a simple web server. tencent-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16095
The CVE-2017-16095 entry relates to serverliujiayi1, a simple http server, which is vulnerable to a directory traversal attack. The vulnerability occurs when an attacker uses path traversal sequences (e.g., ../) in a URL, potentially allowing access to the server’s filesystem. Documented impacts ...
CVE-2017-16152
static-html-server is a static file server. static-html-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...