11815 matches found
CVE-2017-16108
gaoxiaotingtingting is an HTTP server. gaoxiaotingtingting is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16102
CVE-2017-16102 concerns the simple http server serverhuwenhui , which is vulnerable to a directory traversal flaw that lets an attacker access the host filesystem by placing relative paths such as "../../" in the URL. Connected advisories consistently describe the vulnerability as a directory tra...
CVE-2017-16108
CVE-2017-16108 concerns the gaoxiaotingtingting HTTP server (Node.js module). The vulnerability is a directory traversal flaw that lets attackers access the filesystem by requesting URLs containing ../ (examples show traversal to parts like /../../etc/passwd). Public sources across multiple feeds...
CVE-2017-16169
CVE-2017-16169 affects the lightweight HTTP server looppake , where a directory traversal vulnerability exists. An attacker can craft URLs containing traversal sequences (for example, "../" or similar) to access files outside the intended root, potentially exposing sensitive files on vulnerable s...
CVE-2017-16092
Sencisho is a simple http server for local development. Sencisho is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16103
serveryztyzt is a simple http server. serveryztyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16143
commentapp.stetsonwood is an http server. commentapp.stetsonwood is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16095
serverliujiayi1 is a simple http server. serverliujiayi1 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16103
CVE-2017-16103 affects the simple HTTP server serveryztyzt, with a directory traversal vulnerability that allows an attacker to access the filesystem by requesting URLs containing relative paths like ../../. The NVD entry lists a medium (CVSS v2) to high (CVSS v3) impact on confidentiality; the C...
CVE-2017-16133
CVE-2017-16133 affects the Go-based HTTP server goserv . The vulnerability is a directory traversal flaw caused by improper handling of URL paths, allowing an attacker to access the filesystem by supplying sequences like "../" in the request. Public references (GHSA and Veracode, plus NVD/ CNVD e...
CVE-2017-16102
serverhuwenhui is a simple http server. serverhuwenhui is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16101
CVE-2017-16101 concerns the lightweight HTTP server serverwg , which is vulnerable to a directory-traversal flaw triggered by URL paths containing sequences like ".. /". The issue allows an attacker to access the filesystem, as demonstrated by examples in multiple sources (e.g., the /../../…/etc/...
CVE-2017-16143
This CVE (CVE-2017-16143) is documented across multiple sources as a directory traversal vulnerability in the HTTP server commentapp.stetsonwood. An attacker can cause file-system access by crafting URLs with ../ sequences (for example, ../../../../../etc/passwd). The issue is described consisten...
CVE-2017-16141
lab6drewfusbyu is an http server. lab6drewfusbyu is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16105
serverwzl is a simple http server. serverwzl is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16092
Sencisho is affected by a directory traversal vulnerability (CVE-2017-16092). The issue allows an attacker to access the filesystem by placing relative paths like ../ in the URL. The GitHub advisory GHSA-6866-X7CF-RMH5 notes affected versions and provides the example request to access /../../../....
CVE-2017-16166
CVE-2017-16166 concerns the byucslabsix HTTP server, where a directory traversal vulnerability allows an attacker to access the filesystem by placing traversal sequences like ../ in the URL. The issue is described across multiple sources (NVD entry and corroborating advisories), citing that byucs...
CVE-2017-16105
CVE-2017-16105 affects the simple HTTP server serverwzl . The vulnerability is a directory traversal issue that can be triggered by a URL containing sequences like "../" to access files outside the intended directory root, potentially exposing sensitive filesystem content. Multiple connected sour...