Search vulnerabilities

Results 425,826

CVE-2017-16157

censorify.tanisjr is a simple web server and API RESTful service. censorify.tanisjr is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
CVE-2017-16156

myprolyz is a static file server. myprolyz is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16155

fast-http-cli is the command line interface for fast-http, a simple web server. fast-http-cli is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16154

earlybird is a web server module for early development. earlybird is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16153

gaoxuyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 1.7% KEV · Not listed
Products
CVE-2017-16152

static-html-server is a static file server. static-html-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
CVE-2017-16151

Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron. Any Electron app that accesses remote content is vulnerable to this exploit, regardless of whether the [sandbox option](https://electron.atom.io/docs/api/sandbox-option) is enabled.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Products
CVE-2017-16150

wanggoujing123 is a simple webserver. wanggoujing123 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16149

zwserver is a weather web server. zwserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16148

serve46 is a static file server. serve46 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Products
CVE-2017-16147

shit-server is a file server. shit-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16146

mockserve is a file server. mockserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16145

sspa is a server dedicated to single-page apps. sspa is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Products
CVE-2017-16142

infraserver is a RESTful server. infraserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16141

lab6drewfusbyu is an http server. lab6drewfusbyu is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16140

lab6.brit95 is a file server. lab6.brit95 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Products
CVE-2017-16139

jikes is a file server. jikes is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Accessible files are restricted to files with .htm and .js extensions.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Products
CVE-2017-16136

nodejs-method-override: Regular expression Denial of Service

method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it. method-override is vulnerable to a regular expression denial of service vulnerability when specially crafted input is passed in to be parsed via the X-HTTP-Method-Override header.

CVSS 3.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Products