CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Page 1

A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root.

Path traversal in simplehttpserver <v0.2.1 allows listing any file on the server.

simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.

CVE ID	Description	Severity	CVSS	EPSS	Ecosystems	Published
CVE-2018-16478	A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root.	MEDIUM	5.3	1.29%	npm	Dec 4, 2018
CVE-2018-3787	Path traversal in simplehttpserver <v0.2.1 allows listing any file on the server.	HIGH	7.5	2.04%	npm	Aug 31, 2018
CVE-2018-3716	simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.	MEDIUM	5.4	0.64%	npm	Jun 7, 2018

Rows per page

Showing 1 to 3 CVEs · page 1