Lucene search
+L

188 matches found

osv_cve
osv_cve
•added 2018/06/07 2:29 a.m.•19 views

CVE-2017-16124

node-server-forfront is a simple static file server. node-server-forfront is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.5CVSS5.8AI score0.01974EPSS
SaveExploits1References2
NVD
NVD
•added 2018/06/07 2:29 a.m.•21 views

CVE-2017-16124

node-server-forfront is a simple static file server. node-server-forfront is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.5CVSS7.5AI score0.01974EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2018/06/07 2:00 a.m.•37 views

CVE-2017-16124

node-server-forfront is a simple static file server. node-server-forfront is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.4AI score0.01974EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/07 12:00 a.m.•9 views

CVE-2017-16124: Improper Limitation of a Pathname to a Restricted Directory

node-server-forfront is a simple static file server. node-server-forfront is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.5CVSS7.2AI score0.01974EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2018/06/07 12:00 a.m.•9 views

PT-2018-6152

Name of the Vulnerable Software and Affected Versions: node-server-forfront versions affected versions not specified Description: The issue concerns a directory traversal problem, allowing an attacker to access the filesystem by manipulating the URL with "../". This can lead to the disclosure of...

7.5CVSS0.01974EPSS
SaveExploits1References7
osv_debian
osv_debian
•added 2018/05/31 8:29 p.m.•16 views

DEBIAN-CVE-2016-10542

ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a ws server, it is possible to crash the node process. This affects ws 1.1.0 and earlier...

7.5CVSS7.4AI score0.07287EPSS
SaveExploits0References1
Veracode
Veracode
•added 2018/03/20 2:49 a.m.•16 views

Directory Traversal

web-node-server is vulnerable to directory traversal attacks. The vulnerability exists due to the lack of ../ sanitization on the user input, allowing attackers to access files outside of the server's scope...

6.7AI score
SaveExploits0
nodejs
nodejs
•added 2017/06/28 4:43 p.m.•50 views

Directory Traversal

Overview Affected versions of node-server-forfront resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the...

5CVSS4.6AI score0.01974EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder