CWE-548: Exposure of Information Through Directory Listing
The product inappropriately exposes a directory listing with an index of all the resources located inside of the directory.
A kind of CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- code-projects food ordering system SililaWijesinghe Food Ordering System admin exposure of information through directory listing 6.9 Medium
- red hat openshift container platform 4, openshift container platform 5 +1 more Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret 7.1 High
- contec co., ltd. configurable type cps-pcs341[][]-ds1-1201, integrated type cps-pc341[][]-*-9201 +1 more An exposure of information through directory listing issue exists in CONPROSYS PAC Series.... 5.3 Medium
- contec co., ltd. m2m controller configurable type cps-mcs341*, m2m controller integrated type cps-mc341, m2m gateway configurable type cps-mgs341* +1 more +3 more An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series... 5.3 Medium
- sourcecodester best employee management system SourceCodester Best Employee Management System Profile exposure of information through directory listing 6.9 Medium
- lms community lyrion music server Lyrion Music Server 9.2.0 Arbitrary Directory Listing 6.9 Medium
- dell powerflex manager, powerflex manager (appliance), powerflex manager (rack) +2 more +4 more Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through... 7.5 High
- givanz vvveb Vvveb < 1.0.8.3 Directory Listing Information Disclosure 6.9 Medium
- ibm cloud pak system Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ] 5.3 Medium
- rack, red hat logging subsystem for red hat openshift, 3scale api management platform 2 +4 more +6 more Rack has a Directory Traversal via Rack:Directory 7.5 High
- red red-v super digital signage system rxv-a740r RED-V Super Digital Signage System 5.1.1 Log Information Disclosure Vulnerability 6.9 Medium
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log Directory 6.9 Medium
- open bmcs openbmcs OpenBMCS Directory Listing Information Disclosure 8.7 High
- ibm qradar siem, qradar security information and event manager +1 more IBM QRadar SIEM is affected by an information disclosure vulnerability 2.7 Low
- janobe farm management system SourceCodester Farm Management System exposure of information through directory listing 6.9 Medium
- moodle Moodle: router (r.php) could expose application directories 5.3 Medium
- ibm content navigator IBM Content Navigator information disclosure 5.3 Medium
- mastra-ai mastra Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure 6.5 Medium
- grandstream gxp1628 firmware Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control. The device is... 7.6 High
- ibm sterling file gateway IBM Sterling File Gateway information disclosure 4.3 Medium
- endress+hauser meac300-fnade4, endress meac300-fnade4 firmware +1 more CVE-2025-27452 5.3 Medium
- lerouxyxchire client database management system SourceCodester Client Database Management System exposure of information through directory listing 6.9 Medium
- senior-walter online student clearance system SourceCodester Online Student Clearance System exposure of information through directory listing 6.9 Medium
- ibm infosphere information server, infosphere information server on cloud +1 more IBM Information Server information disclosure 4.3 Medium
- lopalopa online service management portal A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara... 5.3 Medium
- dell powerscale onefs Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.0, contains an exposure of information... 3.3 Low
- oretnom23 employee and visitor gate pass logging system SourceCodester Employee and Visitor Gate Pass Logging System exposure of information through directory listing 6.9 Medium
- oretnom23 online eyewear shop SourceCodester Online Eyewear Shop admin exposure of information through directory listing 6.9 Medium
- code-projects blood bank management system code-projects Blood Bank Management System upload exposure of information through directory listing 6.9 Medium
- ibm security directory integrator, security verify directory integrator +1 more IBM Security Directory Integrator information disclosure 2.4 Low
- ibm control center IBM Control Center information disclosure 4.3 Medium
-
@saltcorn/servernpm @saltcorn/server arbitrary file and directory listing when accessing build mobile app results 5.5 Medium - oretnom23 food ordering management system SourceCodester Food Ordering Management System includes exposure of information through directory listing 6.9 Medium
- ibm aspera faspex IBM Aspera Faspex information disclosure 6.5 Medium
- codeastro online railway reservation system, online railway reservation system project railway reservation system +1 more CodeAstro Online Railway Reservation System assets exposure of information through directory listing 6.9 Medium
- online graduate tracer system project graduate tracer system, sourcecodester online graduate tracer system +1 more SourceCodester Online Graduate Tracer System nbproject exposure of information through directory listing 6.9 Medium
- noisebynorthwest php-spx SPX (aka php-spx) through 0.4.15 allows SPX_UI_URI Directory Traversal to read arbitrary files. 5.8 Medium
- opengnsys Exposure of Information Through Directory Listing vulnerability in OpenGnsys 5.3 Medium
- theme-fusion avada, themefusion avada | website builder for wordpress & woocommerce +1 more Avada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing 5.3 Medium
- elspec g5 digital fault recorder, elspec-ltd g5dfr firmware +1 more An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before.... 7.5 High
- sourcecodester customer support system, mayurik best student management system +1 more A directory listing vulnerability in Customer Support System v1 allows attackers to list... 7.5 High
- actidata actinas sl 2u-8 rdx firmware A Site-wide directory listing vulnerability in /fm in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1... 7.5 High
- rockwellautomation studio, shopbeat shop beat media player +1 more Directory Traversal on Shop Beat Services 5.3 Medium
- jekbox project jekbox tombh jekbox server.rb exposure of information through directory listing 4.3 Medium
- maps-js-icoads project maps-js-icoads saxman maps-js-icoads exposure of information through directory listing 4.3 Medium
- hitachi vantara pentaho, hitachi vantara pentaho business analytics server +1 more Pentaho Business Analytics Server - Exposure of Information Through Directory Listing 5.0 Medium
- chcnav - p5e gnss, p5e gnss firmware +1 more Chcnav - P5E GNSS Directory listing 5.7 Medium
- myscada mypro mySCADA myPRO Exposure of Information Through Directory Listing 7.5 High
- fresenius kabi vigilant software suite (mastermed dashboard), fresenius-kabi agilia connect firmware, agilia partner maintenance software +4 more +6 more Fresenius Kabi Agilia Connect Infusion System exposure of information through directory listing 5.3 Medium
- dell emc powerscale onefs, powerscale onefs +1 more Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x contain an Exposure of Information... 7.5 High
- Show olderLoading…