Lucene search
K

89 matches found

CNVD
CNVD
added 2018/06/22 12:0 a.m.2 views

node-srv path traversal vulnerability

node-srv is a static Node.js server with support for Heroku and Grunt.js. A path traversal vulnerability exists in node-srv, which stems from the program's lack of url checksums. An attacker can exploit this vulnerability to read the contents of an arbitrary file with a known path...

6.5CVSS6.4AI score0.08632EPSS
Exploits1References1
CNVD
CNVD
added 2018/06/20 12:0 a.m.1 views

node-server-forfront path traversal vulnerability

node-server-forfront is a static file server. A path traversal vulnerability exists in node-server-forfront. An attacker can gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

7.5CVSS7.6AI score0.02005EPSS
Exploits1References1
Veracode
Veracode
added 2018/06/07 8:26 a.m.16 views

Directory Traversal

node-server-forfront is vulnerable to directory traversal attacks. These attacks are possible by requesting a url such as /..%2f..%2fetc/passwd to get sensitive information...

7.5CVSS7.3AI score0.02005EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2018/06/07 2:29 a.m.1 views

CVE-2017-16124

node-server-forfront is a simple static file server. node-server-forfront is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.5CVSS5.8AI score0.02005EPSS
Exploits1References2
NVD
NVD
added 2018/06/07 2:29 a.m.9 views

CVE-2017-16124

node-server-forfront is a simple static file server. node-server-forfront is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.5CVSS7.5AI score0.02005EPSS
Exploits1References2
Cvelist
Cvelist
added 2018/06/07 2:0 a.m.19 views

CVE-2017-16124

node-server-forfront is a simple static file server. node-server-forfront is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.4AI score0.02005EPSS
Exploits1References2
OSV
OSV
added 2018/05/31 8:29 p.m.2 views

DEBIAN-CVE-2016-10542

ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a ws server, it is possible to crash the node process. This affects ws 1.1.0 and earlier...

7.5CVSS6.9AI score0.07539EPSS
Exploits0References1
Veracode
Veracode
added 2018/03/20 2:49 a.m.9 views

Directory Traversal

web-node-server is vulnerable to directory traversal attacks. The vulnerability exists due to the lack of ../ sanitization on the user input, allowing attackers to access files outside of the server's scope...

6.7AI score
Exploits0
Node.js
Node.js
added 2017/06/28 4:43 p.m.28 views

Directory Traversal

Overview Affected versions of node-server-forfront resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the...

5CVSS4.6AI score0.02005EPSS
Exploits1Affected Software1
Rows per page
Query Builder