2017 CVEs (page 20)
Page 20 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-16226 | Critical | 9.8 | 2018-06-07 | The static-eval module is intended to evaluate statically-analyzable expressions. In affected versions, untrusted user input is able to access the global funct… |
CVE-2017-16225 | High | 7.5 | 2018-06-07 | aegir is a module to help automate JavaScript project management. Version 12.0.0 through and including 12.0.7 bundled and published to npm the user (that perfo… |
CVE-2017-16224 | Medium | 6.1 | 2018-06-07 | st is a module for serving static files. An attacker is able to craft a request that results in an HTTP 301 (redirect) to an entirely different domain. A reque… |
CVE-2017-16223 | High | 7.5 | 2018-06-07 | nodeaaaaa is a static file server. nodeaaaaa is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the… |
CVE-2017-16222 | Medium | 5.3 | 2018-06-07 | elding is a simple web server. elding is vulnerable to a directory traversal issue, allowing an attacker to access the filesystem by placing "../" in the url… |
CVE-2017-16221 | High | 7.5 | 2018-06-07 | yzt is a simple file server. yzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16220 | High | 7.5 | 2018-06-07 | wind-mvc is an mvc framework. wind-mvc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16219 | High | 7.5 | 2018-06-07 | yttivy is a static file server. yttivy is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16218 | High | 7.5 | 2018-06-07 | dgard8.lab6 is a static file server. dgard8.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in… |
CVE-2017-16217 | High | 7.5 | 2018-06-07 | fbr-client sends files through sockets via socket.io and webRTC. fbr-client is vulnerable to a directory traversal issue, giving an attacker access to the file… |
CVE-2017-16216 | High | 7.5 | 2018-06-07 | tencent-server is a simple web server. tencent-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../… |
CVE-2017-16215 | High | 7.5 | 2018-06-07 | sgqserve is a simple file server. sgqserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the ur… |
CVE-2017-16214 | High | 7.5 | 2018-06-07 | peiserver is a static file server. peiserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the… |
CVE-2017-16213 | High | 7.5 | 2018-06-07 | mfrserver is a simple file server. mfrserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the… |
CVE-2017-16212 | High | 7.5 | 2018-06-07 | ltt is a static file server. ltt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16211 | High | 7.5 | 2018-06-07 | lessindex is a static file server. lessindex is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the… |
CVE-2017-16210 | High | 7.5 | 2018-06-07 | jn_jj_server is a static file server. jn_jj_server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" i… |
CVE-2017-16209 | High | 7.5 | 2018-06-07 | enserver is a simple web server. enserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16208 | High | 7.5 | 2018-06-07 | dmmcquay.lab6 is a REST server. dmmcquay.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the… |
CVE-2017-16207 | High | 7.3 | 2018-06-07 | discordi.js is a malicious module based on the discord.js library that exfiltrates login tokens to pastebin. |
CVE-2017-16206 | High | 7.5 | 2018-06-07 | The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation. |
CVE-2017-16205 | High | 7.5 | 2018-06-07 | The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation. |
CVE-2017-16204 | High | 7.5 | 2018-06-07 | The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation. |
CVE-2017-16203 | High | 7.5 | 2018-06-07 | The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation. |
CVE-2017-16202 | High | 7.5 | 2018-06-07 | The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation. |
CVE-2017-16201 | High | 7.5 | 2018-06-07 | zjjserver is a static file server. zjjserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the… |
CVE-2017-16200 | High | 7.5 | 2018-06-07 | uv-tj-demo is a static file server. uv-tj-demo is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in th… |
CVE-2017-16199 | High | 7.5 | 2018-06-07 | susu-sum is a static file server. susu-sum is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the ur… |
CVE-2017-16198 | High | 7.5 | 2018-06-07 | ritp is a static web server. ritp is vulnerable to a directory traversal issue whereby an attacker can gain access to the file system by placing ../ in the URL… |
CVE-2017-16197 | High | 7.5 | 2018-06-07 | qinserve is a static file server. qinserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the ur… |
CVE-2017-16196 | High | 7.5 | 2018-06-07 | quickserver is a simple static file server. quickserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "… |
CVE-2017-16195 | High | 7.5 | 2018-06-07 | pytservce is a static file server. pytservce is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the… |
CVE-2017-16194 | High | 7.5 | 2018-06-07 | picard is a micro framework. picard is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16193 | High | 7.5 | 2018-06-07 | mfrs is a static file server. mfrs is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16192 | High | 7.5 | 2018-06-07 | getcityapi.yoehoehne is a web server. getcityapi.yoehoehne is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing… |
CVE-2017-16191 | High | 7.5 | 2018-06-07 | cypserver is a static file server. cypserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the… |
CVE-2017-16190 | High | 7.5 | 2018-06-07 | dcdcdcdcdc is a static file server. dcdcdcdcdc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in th… |
CVE-2017-16189 | High | 7.5 | 2018-06-07 | sly07 is an API for censoring text. sly07 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16188 | High | 7.5 | 2018-06-07 | reecerver is a web server. reecerver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16187 | High | 7.5 | 2018-06-07 | open-device creates a web interface for any device. open-device is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by pl… |
CVE-2017-16186 | High | 7.5 | 2018-06-07 | 360class.jansenhm is a static file server. 360class.jansenhm is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placi… |
CVE-2017-16185 | High | 7.5 | 2018-06-07 | uekw1511server is a static file server. uekw1511server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "… |
CVE-2017-16184 | High | 7.5 | 2018-06-07 | scott-blanch-weather-app is a sample Node.js app using Express 4. scott-blanch-weather-app is vulnerable to a directory traversal issue, giving an attacker acc… |
CVE-2017-16183 | High | 7.5 | 2018-06-07 | iter-server is a static file server. iter-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in… |
CVE-2017-16182 | High | 7.5 | 2018-06-07 | serverxxx is a static file server. serverxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the… |
CVE-2017-16181 | High | 7.5 | 2018-06-07 | wintiwebdev is a static file server. wintiwebdev is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in… |
CVE-2017-16180 | High | 7.5 | 2018-06-07 | serverabc is a static file server. serverabc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the… |
CVE-2017-16179 | Medium | 5.3 | 2018-06-07 | dasafio is a web server. dasafio is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. File ac… |
CVE-2017-16178 | High | 7.5 | 2018-06-07 | intsol-package is a file server. intsol-package is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in t… |
CVE-2017-16177 | High | 7.5 | 2018-06-07 | chatbyvista is a file server. chatbyvista is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16176 | High | 7.5 | 2018-06-07 | jansenstuffpleasework is a file server. jansenstuffpleasework is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by plac… |
CVE-2017-16175 | High | 7.5 | 2018-06-07 | ewgaddis.lab6 is a file server. ewgaddis.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the… |
CVE-2017-16174 | High | 7.5 | 2018-06-07 | whispercast is a file server. whispercast is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16173 | High | 7.5 | 2018-06-07 | utahcityfinder constructs lists of Utah cities with a certain prefix. utahcityfinder is vulnerable to a directory traversal issue, giving an attacker access to… |
CVE-2017-16172 | High | 7.5 | 2018-06-07 | section2.madisonjbrooks12 is a simple web server. section2.madisonjbrooks12 is vulnerable to a directory traversal issue, giving an attacker access to the file… |
CVE-2017-16171 | High | 7.5 | 2018-06-07 | hcbserver is a static file server. hcbserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the… |
CVE-2017-16170 | High | 7.5 | 2018-06-07 | liuyaserver is a static file server. liuyaserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in… |
CVE-2017-16169 | High | 7.5 | 2018-06-07 | looppake is a simple http server. looppake is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the ur… |
CVE-2017-16168 | High | 7.5 | 2018-06-07 | wffserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16167 | High | 7.5 | 2018-06-07 | yyooopack is a simple file server. yyooopack is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the… |
CVE-2017-16166 | High | 7.5 | 2018-06-07 | byucslabsix is an http server. byucslabsix is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the ur… |
CVE-2017-16165 | High | 7.5 | 2018-06-07 | calmquist.static-server is a static file server. calmquist.static-server is vulnerable to a directory traversal issue, giving an attacker access to the filesys… |
CVE-2017-16164 | High | 7.5 | 2018-06-07 | desafio is a simple web server. desafio is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url… |
CVE-2017-16163 | High | 7.5 | 2018-06-07 | dylmomo is a simple file server. dylmomo is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16162 | High | 7.5 | 2018-06-07 | 22lixian is a simple file server. 22lixian is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the ur… |
CVE-2017-16161 | High | 7.5 | 2018-06-07 | shenliru is a simple file server. shenliru is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the ur… |
CVE-2017-16160 | High | 7.5 | 2018-06-07 | 11xiaoli is a simple file server. 11xiaoli is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the ur… |
CVE-2017-16159 | High | 7.5 | 2018-06-07 | caolilinode is a simple file server. caolilinode is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in… |
CVE-2017-16158 | High | 7.5 | 2018-06-07 | dcserver is a static file server. dcserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the ur… |
CVE-2017-16157 | High | 7.5 | 2018-06-07 | censorify.tanisjr is a simple web server and API RESTful service. censorify.tanisjr is vulnerable to a directory traversal issue, giving an attacker access to… |
CVE-2017-16156 | High | 7.5 | 2018-06-07 | myprolyz is a static file server. myprolyz is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the ur… |
CVE-2017-16155 | High | 7.5 | 2018-06-07 | fast-http-cli is the command line interface for fast-http, a simple web server. fast-http-cli is vulnerable to a directory traversal issue, giving an attacker… |
CVE-2017-16154 | High | 7.5 | 2018-06-07 | earlybird is a web server module for early development. earlybird is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by… |
CVE-2017-16152 | High | 7.5 | 2018-06-07 | static-html-server is a static file server. static-html-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by pla… |
CVE-2017-16151 | Critical | 9.8 | 2018-06-07 | Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions o… |
CVE-2017-16150 | High | 7.5 | 2018-06-07 | wanggoujing123 is a simple webserver. wanggoujing123 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../"… |
CVE-2017-16149 | High | 7.5 | 2018-06-07 | zwserver is a weather web server. zwserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the ur… |
CVE-2017-16148 | High | 7.5 | 2018-06-07 | serve46 is a static file server. serve46 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16147 | High | 7.5 | 2018-06-07 | shit-server is a file server. shit-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16146 | High | 7.5 | 2018-06-07 | mockserve is a file server. mockserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16145 | High | 7.5 | 2018-06-07 | sspa is a server dedicated to single-page apps. sspa is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../"… |
CVE-2017-16144 | High | 7.5 | 2018-06-07 | myserver.alexcthomas18 is a file server. myserver.alexcthomas18 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by pl… |
CVE-2017-16143 | High | 7.5 | 2018-06-07 | commentapp.stetsonwood is an http server. commentapp.stetsonwood is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by p… |
CVE-2017-16142 | High | 7.5 | 2018-06-07 | infraserver is a RESTful server. infraserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the… |
CVE-2017-16141 | High | 7.5 | 2018-06-07 | lab6drewfusbyu is an http server. lab6drewfusbyu is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in… |
CVE-2017-16140 | High | 7.5 | 2018-06-07 | lab6.brit95 is a file server. lab6.brit95 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16139 | High | 7.5 | 2018-06-07 | jikes is a file server. jikes is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Accessible… |
CVE-2017-16138 | High | 7.5 | 2018-06-07 | The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input. |
CVE-2017-16137 | Medium | 5.3 | 2018-06-07 | The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters… |
CVE-2017-16136 | High | 7.5 | 2018-06-07 | method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it. met… |
CVE-2017-16135 | High | 7.5 | 2018-06-07 | serverzyy is a static file server. serverzyy is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the… |
CVE-2017-16134 | High | 7.5 | 2018-06-07 | http_static_simple is an http server. http_static_simple is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "… |
CVE-2017-16133 | High | 7.5 | 2018-06-07 | goserv is an http server. goserv is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. |
CVE-2017-16132 | High | 7.5 | 2018-06-07 | simple-npm-registry is a local npm package cache. simple-npm-registry is vulnerable to a directory traversal issue, giving an attacker access to the filesystem… |
CVE-2017-16131 | High | 7.5 | 2018-06-07 | unicorn-list is a web framework. unicorn-list is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the… |
CVE-2017-16130 | High | 7.5 | 2018-06-07 | exxxxxxxxxxx is an Http eX Frame Google Style JavaScript Guide. exxxxxxxxxxx is vulnerable to a directory traversal issue, giving an attacker access to the fil… |
CVE-2017-16129 | Medium | 5.9 | 2018-06-07 | The HTTP client module superagent is vulnerable to ZIP bomb attacks. In a ZIP bomb attack, the HTTP server replies with a compressed response that becomes seve… |
CVE-2017-16128 | Critical | 9.8 | 2018-06-07 | The module npm-script-demo opened a connection to a command and control server. It has been removed from the npm registry. |
CVE-2017-16127 | Critical | 9.8 | 2018-06-07 | The module pandora-doomsday infects other modules. It's since been unpublished from the registry. |
CVE-2017-16126 | Medium | 5.3 | 2018-06-07 | The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information… |