Directory Traversal

node-server-forfront is vulnerable to directory traversal attacks. These attacks are possible by requesting a url such as /..%2f..%2fetc/passwd to get sensitive information...

CVE-2018-0323

A vulnerability in the web management interface of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to conduct a path traversal attack on a targeted system. The vulnerability is due to insufficient validation of web request parameters. An attacker w...

CVE-2018-8003

Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing an unauthenticated user to craft an HTTP request which provides read-only access to any file on the filesystem of the host the Ambari Server runs on that is accessible by the user the Ambari Server is...

Directory Traversal

micra is vulnerable to directory traversal attacks. The vulnerability exists due to the lack of ../ sanitization on the user input, allowing attackers to access files outside of the server's scope...

Directory Traversal

serveryyl is vulnerable to directory traversal attacks. The vulnerability exists due to the lack of ../ sanitization on the user input, allowing attackers to access files outside of the server's scope...

Path Traversal

general-file-server is vulnerable to path traversal attacks. Using a string including ../, attackers can traverse the server and any file with a known path...

Input validation

SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs...

Directory Traversal

These npm packages are vulnerable to directory traversal attacks. A malicious user can access areas outside of the intended target directory by using a url containing ../...

Debian: Security Advisory (DLA-1046-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-9965

An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can view web server files...

Directory Traversal

node is vulnerable to directory traversal attacks. Attackers can gain access to files due to a change in pathname validation for ".." which affected path checks in community modules...

Directory Traversal

yard is vulnerable to directory traversal attacks. The attacker can read any arbitrary file by passing relative paths with an initial ../ sequence to lib/yard/coreext/file.rb...

International Islamic University Chittagong: Directory Listing

https://ieeeiiucsb.org/assets/reg/assets/ It was observed that the above URLs are vulnerable to Directory Traversal Attack. Properly controlling access to web content is crucial for running a secure web server. Directory Traversal is an HTTP exploit which allows attackers to access restricted...

CVE-2017-12943

CVE-2017-12943 affects D-Link DIR-600 Rev Bx devices with v2.x firmware. The vulnerability is an absolute path traversal in the endpoint model/__show_info.php?REQUIRE_FILE= which allows remote attackers to read passwords (admin credentials) from the device. Public mention in multiple sources (Exp...

Directory Traversal

web-debug is vulnerable to path traversal attacks. An attacker can access any files in the host machine by sending a HTTP GET request with /../ in it to obtain sensitive files such as /../../etc/passwd...

Path traversal

A vulnerability in the AutoVNF VNFStagingView class of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to execute a relative path traversal attack, enabling an attacker to read sensitive files on the system. More Information: CSCvc76662. Known Affected Releases:...

Miele Professional PG 8528 - Directory Traversal

Exploit for hardware platform in category web applications Title: ====== Miele Professional PG 8528 - Web Server Directory Traversal Author: ======= Jens Regel, Schneider & Wulf EDV-Beratung GmbH & Co. KG CVE-ID: ======= CVE-2017-7240 Risk Information: ================= Risk Factor: Medium CVSS...

CVE-2017-6527

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to a NUL-terminated directory traversal attack allowing an unauthenticated attacker to access system files readable by the web server user by using the viewAppletFsa.cgi seqID parameter. Recent assessments: h00die at Mar...

CVE-2016-8827

NVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper.exe where a local web API endpoint, /VisualOPS/v.1.0./, lacks proper access control and parameter validation, allowing for information disclosure via a directory traversal attack...

Directory Traversal

hostr is vulnerable to directory traversal attacks. These attacks can be conducted by sending a request using a small program with ../ in the input. The server will then serve up files outside of the intended directory. Note: These attacks cannot be conducted using cURL...