12176 matches found
CVE-2018-3713
angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a malicious user to read content of any file with known path...
CVE-2017-16102
CVE-2017-16102 concerns the simple http server serverhuwenhui , which is vulnerable to a directory traversal flaw that lets an attacker access the host filesystem by placing relative paths such as "../../" in the URL. Connected advisories consistently describe the vulnerability as a directory tra...
CVE-2017-16108
CVE-2017-16108 concerns the gaoxiaotingtingting HTTP server (Node.js module). The vulnerability is a directory traversal flaw that lets attackers access the filesystem by requesting URLs containing ../ (examples show traversal to parts like /../../etc/passwd). Public sources across multiple feeds...
CVE-2017-16096
CVE-2017-16096 affects serveryaozeyan, a simple HTTP server, with a directory traversal vulnerability via URL path components (e.g., ../) that can disclose files outside the intended directory. The issue is documented across multiple sources (GHSA, NVD, CNVD, OSV, etc.) with explicit example requ...
CVE-2017-16169
CVE-2017-16169 affects the lightweight HTTP server looppake , where a directory traversal vulnerability exists. An attacker can craft URLs containing traversal sequences (for example, "../" or similar) to access files outside the intended root, potentially exposing sensitive files on vulnerable s...
CVE-2017-16095
The CVE-2017-16095 entry relates to serverliujiayi1, a simple http server, which is vulnerable to a directory traversal attack. The vulnerability occurs when an attacker uses path traversal sequences (e.g., ../) in a URL, potentially allowing access to the server’s filesystem. Documented impacts ...
CVE-2017-16141
CVE-2017-16141 affects lab6drewfusbyu (an HTTP server) and is a directory traversal vulnerability exploitable via URL paths containing ../ to access the filesystem. The issue is caused by improper sanitization of path traversal, enabling reading of files outside the intended directory. Related ad...
CVE-2017-16102
serverhuwenhui is a simple http server. serverhuwenhui is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16095
serverliujiayi1 is a simple http server. serverliujiayi1 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16103
serveryztyzt is a simple http server. serveryztyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16143
commentapp.stetsonwood is an http server. commentapp.stetsonwood is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16092
Sencisho is a simple http server for local development. Sencisho is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...
CVE-2017-16103
CVE-2017-16103 affects the simple HTTP server serveryztyzt, with a directory traversal vulnerability that allows an attacker to access the filesystem by requesting URLs containing relative paths like ../../. The NVD entry lists a medium (CVSS v2) to high (CVSS v3) impact on confidentiality; the C...
CVE-2017-16143
This CVE (CVE-2017-16143) is documented across multiple sources as a directory traversal vulnerability in the HTTP server commentapp.stetsonwood. An attacker can cause file-system access by crafting URLs with ../ sequences (for example, ../../../../../etc/passwd). The issue is described consisten...
CVE-2017-16133
CVE-2017-16133 affects the Go-based HTTP server goserv . The vulnerability is a directory traversal flaw caused by improper handling of URL paths, allowing an attacker to access the filesystem by supplying sequences like "../" in the request. Public references (GHSA and Veracode, plus NVD/ CNVD e...
CVE-2017-16141
lab6drewfusbyu is an http server. lab6drewfusbyu is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16101
CVE-2017-16101 concerns the lightweight HTTP server serverwg , which is vulnerable to a directory-traversal flaw triggered by URL paths containing sequences like ".. /". The issue allows an attacker to access the filesystem, as demonstrated by examples in multiple sources (e.g., the /../../…/etc/...
CVE-2017-16169
looppake is a simple http server. looppake is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16166
CVE-2017-16166 concerns the byucslabsix HTTP server, where a directory traversal vulnerability allows an attacker to access the filesystem by placing traversal sequences like ../ in the URL. The issue is described across multiple sources (NVD entry and corroborating advisories), citing that byucs...