6811 matches found
CVE-2017-16210
jnjjserver is a static file server. jnjjserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16223
CVE-2017-16223 affects the static file server nodeaaaaa . The vulnerability is a directory traversal flaw that allows an attacker to access the filesystem by placing "../" in the URL. Multiple sources (NVD entry, GHSA advisory, CNVD, OSV, CNVD) describe that affected versions resolve relative fil...
CVE-2017-16084
CVE-2017-16084 affects list-n-stream, a server for static files to list and stream local videos, with directory traversal in versions
CVE-2017-16219
CVE-2017-16219 concerns the static file server yttivy , where a directory traversal flaw allows an attacker to access files outside the intended directory by using relative paths (e.g., ../../). The issue is triggered by how yttivy resolves relative file paths in requests, enabling potential disc...
CVE-2017-16200
The CVE concerns uv-tj-demo, a static file server, with a directory-traversal vulnerability exploitable via ../ in the request path. Affected component is the server’s URL handling (paths resolved outside the root). Potential impact is disclosure of private files on the vulnerable system, as desc...
CVE-2017-16156
CVE-2017-16156 affects the static file server myprolyz, where a directory traversal flaw allows accessing the filesystem by placing relative paths (e.g., ../ or ../../.. ) in the URL. The vulnerability is demonstrated by examples such as requesting URLs that traverse up the directory tree to reve...
CVE-2017-16186
The CVE CVE-2017-16186 affects 360class.jansenhm, a static file server. A directory traversal flaw allows an attacker to access the host filesystem by crafting URLs containing ../ sequences, enabling potential disclosure of private files. Reported impact supports confidentiality risk (NVD CVSS2/C...
CVE-2017-16180
CVE-2017-16180 is a vulnerability in the static file server serverabc where a URL containing directory traversal sequences (e.g., ../) allows attackers to access the host filesystem. Public datasheets describe the issue as a path traversal that can disclose private files (example: GET /../../../....
CVE-2017-16182
CVE-2017-16182 affects the static file server named serverxxx, where a directory traversal vulnerability exists due to improper handling of relative file paths in URLs (e.g., ..). The issue, described across multiple sources (GitHub advisory GHSA-wh33-4P32-G7VH, Veracode, CNVD, NVD, CVE list, OSV...
CVE-2017-16224
The CVE-2017-16224 entry concerns the Node.js module st, which serves static files. A crafted request can trigger an HTTP 301 redirect to an entirely different domain. This requires st to be serving from the server root (/) rather than a subdirectory (e.g., /static/). The redirect URL ends with U...
CVE-2017-16183
CVE-2017-16183 affects iter-server, a static file server. The vulnerability is a directory traversal flaw where crafted URLs containing ../ allow access to the filesystem. Examples and descriptions across multiple sources confirm direct path traversal via relative file paths, potentially exposing...
CVE-2017-16199
CVE-2017-16199 corresponds to a directory-traversal vulnerability in susu-sum (a static file server). The issue allows an attacker to access files outside the intended directory by crafting URL paths that include traversal sequences (for example ../../../../../../etc/passwd). Multiple connected s...
CVE-2017-16181
wintiwebdev is a static file server. wintiwebdev is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16180
serverabc is a static file server. serverabc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16181
CVE-2017-16181 affects the static file server wintiwebdev. The vulnerability is a directory traversal flaw that lets an attacker access the filesystem by requesting URLs containing ../ sequences. This is confirmed across multiple sources (NVD entry for CVE-2017-16181 and related advisories). Impa...
CVE-2017-16170
CVE-2017-16170 affects liuyaserver (a static file server) and is a directory traversal vulnerability exploitable by placing ../ in the URL to access the filesystem. The vulnerability is documented with CVSS metrics (v3 base 7.5, HIGH; NETWORK, LOW complexity) and is referenced across multiple sou...
CVE-2017-16193
CVE-2017-16193 affects the static file server mfrs . The vulnerability is a directory traversal flaw where a URL containing "../" (and variants) allows access to files outside the intended root. Public documents confirm the root cause is improper resolution of relative file paths, enabling potent...
CVE-2017-16085
tinyserver2 is a webserver for static files. tinyserver2 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...