rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-16161 
shenliru is a simple file server. shenliru is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: shenliru node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16162 
22lixian is a simple file server. 22lixian is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: 22lixian node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16163 
dylmomo is a simple file server. dylmomo is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: dylmomo node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16164 
desafio is a simple web server. desafio is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url, but is limited to accessing only .html files.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: desafio node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16165 
calmquist.static-server is a static file server. calmquist.static-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: calmquist.static-server node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16166 
byucslabsix is an http server. byucslabsix is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: byucslabsix node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16167 
yyooopack is a simple file server. yyooopack is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: yyooopack node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16168 
wffserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: wffserve node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16169 
looppake is a simple http server. looppake is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: looppake node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16170 
liuyaserver is a static file server. liuyaserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: liuyaserver node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16171 
hcbserver is a static file server. hcbserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: hcbserver node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16172 
section2.madisonjbrooks12 is a simple web server. section2.madisonjbrooks12 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: section2.madisonjbrooks12 node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16173 
utahcityfinder constructs lists of Utah cities with a certain prefix. utahcityfinder is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: utahcityfinder node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16174 
whispercast is a file server. whispercast is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: whispercast node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16175 
ewgaddis.lab6 is a file server. ewgaddis.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: ewgaddis.lab6 node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16176 
jansenstuffpleasework is a file server. jansenstuffpleasework is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: jansenstuffpleasework node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16177 
chatbyvista is a file server. chatbyvista is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: chatbyvista node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16178 
intsol-package is a file server. intsol-package is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: intsol-package node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16179 
dasafio is a web server. dasafio is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. File access is restricted to only .html files.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: dasafio node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16180 
serverabc is a static file server. serverabc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: serverabc node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16181 
wintiwebdev is a static file server. wintiwebdev is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: wintiwebdev node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16182 
serverxxx is a static file server. serverxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: serverxxx node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16183 
iter-server is a static file server. iter-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: n/a
product: n/a
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16184 
scott-blanch-weather-app is a sample Node.js app using Express 4. scott-blanch-weather-app is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: scott-blanch-weather-app node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16185 
uekw1511server is a static file server. uekw1511server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: uekw1511server node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16186 
360class.jansenhm is a static file server. 360class.jansenhm is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: 360class.jansenhm node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16187 
open-device creates a web interface for any device. open-device is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: open-device node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16188 
reecerver is a web server. reecerver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: reecerver node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16189 
sly07 is an API for censoring text. sly07 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: sly07 node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16190 
dcdcdcdcdc is a static file server. dcdcdcdcdc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: dcdcdcdcdc node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16191 
cypserver is a static file server. cypserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: cypserver node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16192 
getcityapi.yoehoehne is a web server. getcityapi.yoehoehne is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: getcityapi.yoehoehne node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16193 
mfrs is a static file server. mfrs is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: mfrs node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16194 
picard is a micro framework. picard is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: picard node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16195 
pytservce is a static file server. pytservce is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: pytservce node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16196 
quickserver is a simple static file server. quickserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: quickserver node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16197 
qinserve is a static file server. qinserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: qinserve node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16198 
ritp is a static web server. ritp is vulnerable to a directory traversal issue whereby an attacker can gain access to the file system by placing ../ in the URL. Access is restricted to files with a file extension, so files such as /etc/passwd are not accessible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16199 
susu-sum is a static file server. susu-sum is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: susu-sum node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16200 
uv-tj-demo is a static file server. uv-tj-demo is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: uv-tj-demo node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16201 
zjjserver is a static file server. zjjserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: zjjserver node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16202 
The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
Problem types: cwe_id: CWE-506
description: Embedded Malicious Code (CWE-506)
Affected products: vendor: HackerOne
product: coffeescript node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16203 
The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
Problem types: cwe_id: CWE-506
description: Embedded Malicious Code (CWE-506)
Affected products: vendor: HackerOne
product: coffeescript node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16204 
The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
Problem types: cwe_id: CWE-506
description: Embedded Malicious Code (CWE-506)
Affected products: vendor: HackerOne
product: jquey node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16205 
The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
Problem types: cwe_id: CWE-506
description: Embedded Malicious Code (CWE-506)
Affected products: vendor: HackerOne
product: coffeescript node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16206 
The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16207 
discordi.js is a malicious module based on the discord.js library that exfiltrates login tokens to pastebin.
Problem types: cwe_id: CWE-506
description: Embedded Malicious Code (CWE-506)
Affected products: vendor: HackerOne
product: discordi.js node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16208 
dmmcquay.lab6 is a REST server. dmmcquay.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: dmmcquay.lab6 node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16209 
enserver is a simple web server. enserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: enserver node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16210 
jn_jj_server is a static file server. jn_jj_server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: jn_jj_server node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16211 
lessindex is a static file server. lessindex is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: lessindex node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16212 
ltt is a static file server. ltt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: ltt node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16213 
mfrserver is a simple file server. mfrserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: mfrserver node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16214 
peiserver is a static file server. peiserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: peiserver node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16215 
sgqserve is a simple file server. sgqserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: sgqserve node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16216 
tencent-server is a simple web server. tencent-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: tencent-server node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16217 
fbr-client sends files through sockets via socket.io and webRTC. fbr-client is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: fbr-client node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16218 
dgard8.lab6 is a static file server. dgard8.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: dgard8.lab6 node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16219 
yttivy is a static file server. yttivy is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: yttivy node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16220 
wind-mvc is an mvc framework. wind-mvc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: wind-mvc node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16221 
yzt is a simple file server. yzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: yzt node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16222 
elding is a simple web server. elding is vulnerable to a directory traversal issue, allowing an attacker to access the filesystem by placing "../" in the url. The files accessible, however, are limited to files with a file extension. Sending a GET request to /../../../etc/passwd, for example, will return a 404 on etc/passwd/index.js.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: elding node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16223 
nodeaaaaa is a static file server. nodeaaaaa is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: HackerOne
product: nodeaaaaa node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16224 
st is a module for serving static files. An attacker is able to craft a request that results in an HTTP 301 (redirect) to an entirely different domain. A request for: http://some.server.com//nodesecurity.org/%2e%2e would result in a 301 to //nodesecurity.org/%2e%2e which most browsers treat as a proper redirect as // is translated into the current schema being used. Mitigating factor: In order for this to work, st must be serving from the root of a server (/) rather than the typical sub directory (/static/) and the redirect URL will end with some form of URL encoded .. ("%2e%2e", "%2e.", ".%2e").
Problem types: cwe_id: CWE-601
description: Open Redirect (CWE-601)
Affected products: vendor: HackerOne
product: st node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16225 
aegir is a module to help automate JavaScript project management. Version 12.0.0 through and including 12.0.7 bundled and published to npm the user (that performed a aegir-release) GitHub token.
Problem types: cwe_id: CWE-200
description: Information Disclosure (CWE-200)
Affected products: vendor: HackerOne
product: aegir node module
Published: 2018-06-07T02:00:00.000Z
CVE-2017-16226 
The static-eval module is intended to evaluate statically-analyzable expressions. In affected versions, untrusted user input is able to access the global function constructor, effectively allowing arbitrary code execution.
Problem types: cwe_id: CWE-20
description: Improper Input Validation (CWE-20)
Affected products: vendor: HackerOne
product: static-eval node module node module
Published: 2018-06-07T02:00:00.000Z