[ASA-201806-12] cantata: multiple issues

Arch Linux Security Advisory ASA-201806-12 ========================================== Severity: High Date : 2018-06-20 CVE-ID : CVE-2018-12559 CVE-2018-12560 CVE-2018-12561 CVE-2018-12562 Package : cantata Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-721 Summary...

DEBIAN-CVE-2018-12563

An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a user can force lava-server-gunicorn to download any file from the filesystem if it's readable by lavaserver and valid yaml...

Path Traversal in Sprockets

Specially crafted requests can be used to access files that exist on the filesystem that is outside an application's root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately. Workaround:...

Cypserver Directory Traversal Vulnerability

cypserver is a static file server. A directory traversal vulnerability exists in cypserver. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

picard Directory Traversal Vulnerability

picard is a micro-framework based on Node.js. A directory traversal vulnerability exists in picard. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

dcserver Directory Traversal Vulnerability

dcserver is a static file server. A directory traversal vulnerability exists in dcserver. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Serve46 Directory Traversal Vulnerability

Serve46 is a static file server. A directory traversal vulnerability exists in serve46. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

myserver.alexcthomas18 Directory Traversal Vulnerability

myserver.alexcthomas18 is a file server. A directory traversal vulnerability exists in myserver.alexcthomas18. An attacker can exploit this vulnerability by placing ". /" in a URL to access the file system...

peiserver directory traversal vulnerability

peiserver is a static file server. A directory traversal vulnerability exists in peiserver. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

shit-server directory traversal vulnerability

shit-server is a file server. A directory traversal vulnerability exists in shit-server. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Calmquist.static-server Directory Traversal Vulnerability

calmquist.static-server is a static file server. A directory traversal vulnerability exists in calmquist.static-server. An attacker can exploit this vulnerability by placing ". /" in a URL to access the file system...

censorify.tanisjr Directory Traversal Vulnerability

censorify.tanisjr is a web server. A directory traversal vulnerability exists in censorify.tanisjr. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

iter-server directory traversal vulnerability

iter-server is a static file server. A directory traversal vulnerability exists in iter-server. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

CVE-2017-16213

mfrserver is a simple file server. mfrserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16223

nodeaaaaa is a static file server. nodeaaaaa is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16216

tencent-server is a simple web server. tencent-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16212

ltt is a static file server. ltt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16220

wind-mvc is an mvc framework. wind-mvc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16218

dgard8.lab6 is a static file server. dgard8.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16214

peiserver is a static file server. peiserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...