CWE-552: Files or Directories Accessible to External Parties
The product makes files or directories accessible to unauthorized actors, even though they should not be.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- siemens tecnomatix plant simulation v2302, tecnomatix plant simulation v2404, tecnomatix plant simulation +2 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.0 High
- beijing zhide intelligent internet technology modern farm digital integrated management systemBeijing Zhide Intelligent Internet Technology Modern Farm Digital Integrated Management System file access6.9 Medium
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 55.3 Medium
- code-projects blood bank management systemcode-projects Blood Bank Management System upload exposure of information through directory listing6.9 Medium
- sucms project sucmsAn issue in the component admin_template.php of SUCMS v1.0 allows attackers to execute a...7.5 High
- seacmsSeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the...6.0 Medium
- moodleArbitrary file read risk through pdfTeX8.6 High
- agito computer health4allImproper Access Control in Agito Computer's Health4All8.3 High
- qardio heart health android mobile application, heart health ios mobile application +1 moreQardio iOS and Android applications Files or Directories Accessible to External Parties6.9 Medium
- progress software progress® telerik® document processing libraries, progress telerik document processing libraries +1 moreTelerik Document Processing RTF Export of Arbitrary File Path7.1 High
- gitlabFiles or Directories Accessible to External Parties in GitLab4.9 Medium
- dhtmlx file explorerLocal File Inclusion vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to...6.5 Medium
- dhtmlx file explorerDirectory Traversal vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to...6.5 Medium
- sparkle project sparkle, netapp hci compute node, oncommand workflow automation +2 moreSigning Checks Bypass7.3 High
- apache dorisApache Doris: allows admin users to read arbitrary files through the REST API5.4 Medium
- 1000mz chestnutcmsChestnutCMS <=1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller...7.5 High
- revenera installshieldPrivilege escalation in InstallShield8.5 High
- ibm jazz for service managementIBM Jazz for Service Management information disclosure5.3 Medium
- apache linkis, apache software foundation linkis metadata query service jdbc +1 moreApache Linkis Metadata Query Service JDBC: JDBC Datasource Module with Mysql has file read vulnerability5.9 Medium
- siemens siprotec 5 6md84 (cp300), siprotec 5 6md85 (cp300), siprotec 5 6md86 (cp300) +40 more +42 moreA vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.80), SIPROTEC...7.1 High
- arista ng firewall, arista networks edge threat management +1 moreSpecially constructed queries targeting ETM could discover active remote access sessions6.4 Medium
- iocharger firmware for ac modelsArbitrary file download using <redacted>.sh7.1 High
- b3log siyuanSiYuan has an arbitrary file deletion vulnerability8.7 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreA widget local file inclusion vulnerability in Trend Micro Apex One could allow a remote attacker...7.5 High
- fortra goanywhere mftLimited Information Disclosure in GoAnywhere MFT Prior to 7.7.05.3 Medium
- huawei emui, harmonyos +1 moreFile replacement vulnerability on some devices Impact: Successful exploitation of this...6.7 Medium
- digi connectport lts firmwareAn issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation...8.8 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreConfiguration Download8.8 High
- hpe insight remote support, hewlett packard enterprise (hpe) hpe insight remote support +1 moreA directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may...9.8 Critical
- tcpdf project tcpdfTCPDF Local File Inclusion vulnerability6.2 Medium
- brocade fabric os, broadcom fabric operating system +1 moreSFTP/FTP password could be captured in plain text in Supportsave generated from SANnav5.9 Medium
- m-files serverLocal file inclusion vulnerability in M-Files Server5.3 Medium
- apache kafka, apache software foundation kafka clients +1 moreApache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider6.5 Medium
- cisco industrial network directorCisco Industrial Network Director File Permissions5.5 Medium
- craftcms cms, craft cms +1 moreCraft Allows Attackers to Read Arbitrary System Files7.7 High
- citrix netscaler adc, netscaler gateway, netscaler adc +2 more +4 moreAuthenticated user can access unintended user capabilities5.8 Medium
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a...3.3 Low
- rapid7 velociraptorRapid7 Velociraptor Local Privilege Escalation In Windows Velociraptor Service8.6 High
- sage 1000, frp 1000 +1 moreA file disclosure vulnerability exists in Sage 1000 v7.0.0. This vulnerability allows remote...7.2 High
- icewhaletech zimaosZimaOS vulnerable to Directory Listing via Parameter Manipulation7.5 High
- ash framework ashpostgres, ash-project ash postgres +1 moreAshPostgres empty, atomic, non-bulk actions, policy bypass for side-effects vulnerability.5.3 Medium
- helmholz rex100, rex 100 firmware, mb connect line mbnet.mini +1 more +3 moreMB connect line/Helmholz: tmp directory exposed via webservice7.5 High
- d-zero burgereditor, burgereditor limited edition +1 moreA directory listing issue in the baserCMS plugin in D-ZERO CO., LTD. BurgerEditor and...5.3 Medium
- bluecms project bluecmsBlueCMS 1.6 suffers from Arbitrary File Deletion via the file_name parameter in an /admin...4.9 Medium
- national keep cyber security services cybermathDirectory Traversal in National Keep's CyberMath6.8 Medium
- convoypanel panelDirectory Browsing in Eliz Software's Panel9.2 Critical
- mercury mnvr816, mercurycom mnvr816 firmware +1 moreMercury MNVR816 web-static file access6.9 Medium
- dell insightiq, powerscale insightiq +1 moreDell PowerScale InsightIQ, versions 5.0 through 5.1, contains a File or Directories Accessible to...7.3 High
- swissphone dical-redcgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an authenticated attacker to...8.8 High
- apache seatunnel, apache software foundation seatunnel web +1 moreApache SeaTunnel Web: Arbitrary file read vulnerability7.5 High
- Show moreLoading…