CVE-2017-16092

Sencisho is a simple http server for local development. Sencisho is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

CVE-2017-16143

This CVE (CVE-2017-16143) is documented across multiple sources as a directory traversal vulnerability in the HTTP server commentapp.stetsonwood. An attacker can cause file-system access by crafting URLs with ../ sequences (for example, ../../../../../etc/passwd). The issue is described consisten...

CVE-2017-16133

CVE-2017-16133 affects the Go-based HTTP server goserv . The vulnerability is a directory traversal flaw caused by improper handling of URL paths, allowing an attacker to access the filesystem by supplying sequences like "../" in the request. Public references (GHSA and Veracode, plus NVD/ CNVD e...

CVE-2017-16103

CVE-2017-16103 affects the simple HTTP server serveryztyzt, with a directory traversal vulnerability that allows an attacker to access the filesystem by requesting URLs containing relative paths like ../../. The NVD entry lists a medium (CVSS v2) to high (CVSS v3) impact on confidentiality; the C...

CVE-2017-16141

lab6drewfusbyu is an http server. lab6drewfusbyu is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16102

serverhuwenhui is a simple http server. serverhuwenhui is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

CVE-2017-16169

looppake is a simple http server. looppake is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16092

Sencisho is affected by a directory traversal vulnerability (CVE-2017-16092). The issue allows an attacker to access the filesystem by placing relative paths like ../ in the URL. The GitHub advisory GHSA-6866-X7CF-RMH5 notes affected versions and provides the example request to access /../../../....

CVE-2017-16166

CVE-2017-16166 concerns the byucslabsix HTTP server, where a directory traversal vulnerability allows an attacker to access the filesystem by placing traversal sequences like ../ in the URL. The issue is described across multiple sources (NVD entry and corroborating advisories), citing that byucs...

CVE-2017-16089

CVE-2017-16089 affects the lightweight HTTP server serverlyr and describes a directory traversal vulnerability. The issue is triggered when an attacker uses URL paths containing sequences like “../” (or multiple variants) to access files outside the intended directory, potentially exposing sensit...

CVE-2017-16105

serverwzl is a simple http server. serverwzl is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

CVE-2017-16097

tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16133

goserv is an http server. goserv is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16134

httpstaticsimple is an http server. httpstaticsimple is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16166

byucslabsix is an http server. byucslabsix is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16105

CVE-2017-16105 affects the simple HTTP server serverwzl . The vulnerability is a directory traversal issue that can be triggered by a URL containing sequences like "../" to access files outside the intended directory root, potentially exposing sensitive filesystem content. Multiple connected sour...

PT-2018-16140 · Unknown · Simplehttpserver

Name of the Vulnerable Software and Affected Versions: Simplehttpserver versions prior to 0.1.0 Description: The issue arises from a lack of validation of file names, leading to a Cross-Site Scripting vulnerability. An attacker can exploit this by controlling the filename of a file used in the...

PT-2018-16137 · Node.Js · Angular-Http-Server

Name of the Vulnerable Software and Affected Versions: angular-http-server versions prior to 1.6.0 Description: The angular-http-server node module has a Path Traversal issue due to the lack of validation of the possibleFilename variable, allowing a malicious user to read the content of any file...

H2O HTTP Server < 2.2.5 Heap Overflow Vulnerability

H2O HTTP Server is prone to a heap buffer overflow while trying to emit access log. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Directory traversal

hftp is a static http or ftp server hftp is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...