Export limit exceeded: 11552 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Results 11,552

Export CSV
CVE-2017-16130

exxxxxxxxxxx is an Http eX Frame Google Style JavaScript Guide. exxxxxxxxxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Accessible files are restricted to those with a file extension. Files with no extension such as /etc/passwd throw an error.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16125

rtcmulticonnection-client is a signaling implementation for RTCMultiConnection.js, a multi-session manager. rtcmulticonnection-client is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
CVE-2017-16123

welcomyzt is a simple file server. welcomyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16122

cuciuci is a simple fileserver. cuciuci is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Products
CVE-2017-16121

datachannel-client is a signaling implementation for DataChannel.js. datachannel-client is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
CVE-2017-16120

liyujing is a static file server. liyujing is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16110

weather.swlyons is a simple web server for weather updates. weather.swlyons is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16109

easyquick is a simple web server. easyquick is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Access is constrained, however, to supported file types. Requesting a file such as /etc/passwd returns a "not supported" error.

CVSS 3.0 · 5.3 Medium EPSS 1.7% KEV · Not listed
Products
CVE-2017-16106

tmock is a static file server. tmock is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Products
CVE-2017-16105

serverwzl is a simple http server. serverwzl is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16103

serveryztyzt is a simple http server. serveryztyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16102

serverhuwenhui is a simple http server. serverhuwenhui is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16101

serverwg is a simple http server. serverwg is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16097

tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16096

serveryaozeyan is a simple HTTP server. serveryaozeyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16095

serverliujiayi1 is a simple http server. serverliujiayi1 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products