CWE-552 · Files or Directories Accessible to External Parties (page 4)
Page 4 of 5 — CVEs classified under CWE-552, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-23738 | Medium | 5.7 | 2022-11-01 | An improper cache key vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to access private repository files through a… |
CVE-2022-37424 | Medium | 6.5 | 2022-10-28 | Files or Directories Accessible to External Parties vulnerability in OpenNebula on Linux allows File Discovery. |
CVE-2022-43414 | Medium | 5.3 | 2022-10-19 | Jenkins NUnit Plugin 0.27 and earlier implements an agent-to-controller message that parses files inside a user-specified directory as test results, allowing a… |
CVE-2022-2834 | Medium | 5.3 | 2022-10-17 | The Helpful WordPress plugin before 4.5.26 puts the exported logs and feedbacks in a publicly accessible location and guessable names, which could allow attack… |
CVE-2022-42234 | High | 8.8 | 2022-10-14 | There is a file inclusion vulnerability in the template management module in UCMS 1.6 |
CVE-2022-2981 | Medium | 4.9 | 2022-10-10 | The Download Monitor WordPress plugin before 4.5.98 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high p… |
CVE-2022-40126 | High | 7.8 | 2022-09-29 | A misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute arbitrary commands wh… |
CVE-2022-3287 | Medium | 6.5 | 2022-09-28 | When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction… |
CVE-2022-41343 | High | 7.5 | 2022-09-25 | registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demons… |
CVE-2022-39208 | High | 7.5 | 2022-09-13 | Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. All files in the /opt/onedev/sites/ directory are exposed and can be read by unauthenti… |
CVE-2022-36552 | High | 7.5 | 2022-08-30 | Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi-bin/DownloadFlash which allows attackers to steal all data such… |
CVE-2022-1117 | High | 8.4 | 2022-08-29 | A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression ma… |
CVE-2021-3856 | Medium | 4.3 | 2022-08-26 | ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme re… |
CVE-2021-4112 | High | 8.8 | 2022-08-25 | A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege f… |
CVE-2021-3996 | Medium | 5.5 | 2022-08-23 | A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a… |
CVE-2021-3995 | Medium | 5.5 | 2022-08-23 | A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a… |
CVE-2022-35235 | Medium | 4.9 | 2022-08-23 | Authenticated (admin+) Arbitrary File Read vulnerability in XplodedThemes WPide plugin <= 2.6 at WordPress. |
CVE-2021-3800 | Medium | 5.5 | 2022-08-23 | A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones… |
CVE-2022-2392 | Medium | 6.5 | 2022-08-22 | The Lana Downloads Manager WordPress plugin before 1.8.0 is affected by an arbitrary file download vulnerability that can be exploited by users with "Contribut… |
CVE-2022-36306 | Medium | 6.5 | 2022-08-16 | An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and th… |
CVE-2022-22490 | Medium | 4.9 | 2022-08-10 | IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to obtain sensitive Azure bot credential information. IBM X-Force ID: 2… |
CVE-2022-2357 | High | 7.5 | 2022-08-08 | The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive o… |
CVE-2022-1585 | High | 7.5 | 2022-08-01 | The Project Source Code Download WordPress plugin through 1.0.0 does not protect its backup generation and download functionalities, which may allow any visito… |
CVE-2022-33158 | High | 7.8 | 2022-07-30 | Trend Micro VPN Proxy Pro version 5.2.1026 and below contains a vulnerability involving some overly permissive folders in a key directory which could allow a l… |
CVE-2022-33901 | Medium | 5.3 | 2022-07-22 | Unauthenticated Arbitrary File Read vulnerability in MultiSafepay plugin for WooCommerce plugin <= 4.13.1 at WordPress. |
CVE-2022-31475 | Medium | 5.5 | 2022-07-21 | Authenticated (custom plugin role) Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress. |
CVE-2022-34049 | Medium | 5.3 | 2022-07-20 | An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data. |
CVE-2021-40150 | High | 7.5 | 2022-07-17 | The web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. In th… |
CVE-2021-40149 | Medium | 5.9 | 2022-07-17 | The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory. In this way an attacker can download th… |
CVE-2022-2222 | Medium | 4.9 | 2022-07-17 | The Download Monitor WordPress plugin before 4.5.91 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high p… |
CVE-2022-33686 | Low | 2.3 | 2022-07-12 | Exposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log. |
CVE-2022-34464 | Medium | 6.3 | 2022-07-12 | A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.7.3). The affected application uses an improperly protected file to import S… |
CVE-2022-24138 | High | 7.8 | 2022-07-06 | IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite into ProgramData folder, ProgramData folder has "rwx… |
CVE-2022-32143 | High | 8.8 | 2022-06-24 | In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g. firmware files of the PLC. All re… |
CVE-2022-29720 | High | 7.5 | 2022-05-26 | 74cmsSE v3.5.1 was discovered to contain an arbitrary file read vulnerability via the component \index\controller\Download.php. |
CVE-2022-30428 | High | 7.5 | 2022-05-25 | In ginadmin through 05-10-2022, the incoming path value is not filtered, resulting in arbitrary file reading. |
CVE-2021-3717 | High | 7.8 | 2022-05-24 | A flaw was found in Wildfly. An incorrect JBOSS_LOCAL_USER challenge location when using the elytron configuration may lead to JBOSS_LOCAL_USER access to all u… |
CVE-2022-29447 | Medium | 6.8 | 2022-05-20 | Authenticated (administrator or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Hover Effects plugin <= 2.1 at WordPress. |
CVE-2022-29446 | Medium | 6.8 | 2022-05-19 | Authenticated (administrator or higher role) Local File Inclusion (LFI) vulnerability in Wow-Company's Counter Box plugin <= 1.1.1 at WordPress. |
CVE-2021-42644 | Medium | 6.5 | 2022-05-17 | cmseasy V7.7.5_20211012 is affected by an arbitrary file read vulnerability. After login, the configuration file information of the website such as the databas… |
CVE-2022-29302 | Medium | 5.5 | 2022-05-12 | SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/Solar_Ftp.php. |
CVE-2022-28462 | High | 7.5 | 2022-05-05 | novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability. |
CVE-2022-0656 | High | 7.5 | 2022-04-25 | The Web To Print Shop : uDraw WordPress plugin before 3.3.3 does not validate the url parameter in its udraw_convert_url_to_base64 AJAX action (available to bo… |
CVE-2022-28445 | Medium | 6.5 | 2022-04-21 | KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module. |
CVE-2022-27837 | Medium | 4.4 | 2022-04-11 | A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R(11.0) and 13.0.1.1 in Android S(12.0) allows attacker to access the… |
CVE-2022-26877 | Medium | 6.5 | 2022-04-09 | Asana Desktop before 1.6.0 allows remote attackers to exfiltrate local files if they can trick the Asana desktop app into loading a malicious web page. |
CVE-2022-28002 | High | 7.5 | 2022-04-08 | Movie Seat Reservation v1 was discovered to contain an unauthenticated file disclosure vulnerability via /index.php?page=home. |
CVE-2022-26271 | High | 7.5 | 2022-03-28 | 74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url parameter at \index\controller\Download.php. |
CVE-2022-24075 | Medium | 6.5 | 2022-03-17 | Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files. When the HWP f… |
CVE-2022-25497 | Medium | 5.3 | 2022-03-15 | CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function. |
CVE-2021-32008 | Critical | 9.9 | 2022-03-04 | This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Improper Limitation of a Pathname to restricted directory, allows logged… |
CVE-2022-23377 | High | 7.5 | 2022-03-01 | Archeevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an attacker to retrieve local files. |
CVE-2022-25104 | High | 7.5 | 2022-02-24 | HorizontCMS v1.0.0-beta.2 was discovered to contain an arbitrary file download vulnerability via the component /admin/file-manager/. |
CVE-2022-25297 | High | 7.5 | 2022-02-21 | This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save() method may enable attacker… |
CVE-2022-25299 | Critical | 9.8 | 2022-02-18 | This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to wri… |
CVE-2022-23621 | Medium | 5.5 | 2022-02-09 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with SCRIPT right can re… |
CVE-2022-24694 | Medium | 4.3 | 2022-02-09 | In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the f… |
CVE-2021-25004 | Medium | 4.9 | 2022-02-07 | The SEUR Oficial WordPress plugin before 1.7.2 creates a PHP file with a random name when installed, even though it is used for support purposes, it allows to… |
CVE-2021-44983 | Medium | 4.9 | 2022-02-04 | In taocms 3.0.1 after logging in to the background, there is an Arbitrary file download vulnerability at the File Management column. |
CVE-2022-23316 | Medium | 4.9 | 2022-02-04 | An issue was discovered in taoCMS v3.0.2. There is an arbitrary file read vulnerability that can read any files via admin.php?action=file&ctrl=download&path=… |
CVE-2022-21236 | High | 7.5 | 2022-01-28 | An information disclosure vulnerability exists due to a web server misconfiguration in the Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP reque… |
CVE-2021-33843 | Medium | 5.3 | 2022-01-21 | Fresenius Kabi Agilia SP MC WiFi vD25 and prior has a default configuration page accessible without authentication. An attacker may use this functionality to c… |
CVE-2022-0244 | High | 8.6 | 2022-01-18 | An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5. Arbitrary file read was possible by importing a group was due to incorr… |
CVE-2022-22270 | Medium | 4.4 | 2022-01-10 | An implicit Intent hijacking vulnerability in Dialer prior to SMR Jan-2022 Release 1 allows unprivileged applications to access contact information. |
CVE-2022-22269 | Medium | 4.0 | 2022-01-10 | Keeping sensitive data in unprotected BluetoothSettingsProvider prior to SMR Jan-2022 Release 1 allows untrusted applications to get a local Bluetooth MAC addr… |
CVE-2022-22268 | Medium | 6.1 | 2022-01-10 | Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Guard via Samsung DeX… |
CVE-2022-22267 | Medium | 4.0 | 2022-01-10 | Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information. |
CVE-2021-20148 | Medium | 4.3 | 2022-01-03 | ManageEngine ADSelfService Plus below build 6116 stores the password policy file for each domain under the html/ web root with a predictable filename based on… |
CVE-2021-44315 | High | 7.5 | 2021-12-16 | In Bus Pass Management System v1.0, Directory Listing/Browsing is enabled on the web server which allows an attacker to view the sensitive files of the applica… |
CVE-2021-43821 | Critical | 9.9 | 2021-12-14 | Opencast is an Open Source Lecture Capture & Video Management for Education. Opencast before version 9.10 or 10.6 allows references to local file URLs in inges… |
CVE-2021-25521 | Medium | 4.0 | 2021-12-08 | Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet. |
CVE-2021-31850 | Medium | 6.1 | 2021-12-08 | A denial-of-service vulnerability in Database Security (DBS) prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack a… |
CVE-2021-43772 | Medium | 5.5 | 2021-12-03 | Trend Micro Security 2021 v17.0 (Consumer) contains a vulnerability that allows files inside the protected folder to be modified without any detection. |
CVE-2021-42744 | Medium | 5.5 | 2021-11-19 | Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
CVE-2021-31600 | Medium | 4.3 | 2021-11-08 | An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. They implement a series of web services us… |
CVE-2021-35203 | Medium | 5.7 | 2021-09-30 | NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrary File Read operations via the FDSQueryService endpoint. |
CVE-2021-41573 | High | 7.5 | 2021-09-29 | Hitachi Content Platform Anywhere (HCP-AW) 4.4.5 and later allows information disclosure. If authenticated user creates a link to a file or folder while the sy… |
CVE-2021-22015 | High | 7.8 | 2021-09-23 | The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and directories. An authenticated local us… |
CVE-2021-25741 | High | 8.8 | 2021-09-20 | A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside o… |
CVE-2020-35340 | High | 7.5 | 2021-09-15 | A local file inclusion vulnerability in ExpertPDF 9.5.0 through 14.1.0 allows attackers to read the file contents from files that the running ExpertPDF process… |
CVE-2021-32833 | High | 8.6 | 2021-09-09 | Emby Server is a personal media server with apps on many devices. In Emby Server on Windows there is a set of arbitrary file read vulnerabilities. This vulnera… |
CVE-2021-34765 | Medium | 4.3 | 2021-09-02 | A vulnerability in the web UI for Cisco Nexus Insights could allow an authenticated, remote attacker to view and download files related to the web application… |
CVE-2021-36233 | Medium | 6.5 | 2021-08-31 | The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the file… |
CVE-2021-39316 | High | 7.5 | 2021-08-31 | The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dz… |
CVE-2020-25351 | Medium | 6.5 | 2021-08-20 | An information disclosure vulnerability in rConfig 3.9.5 has been fixed for version 3.9.6. This vulnerability allowed remote authenticated attackers to read fi… |
CVE-2020-22124 | High | 7.5 | 2021-08-18 | A vulnerability in the \inc\config.php component of joyplus-cms v1.6 allows attackers to access sensitive information. |
CVE-2021-38711 | High | 7.5 | 2021-08-16 | In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files. |
CVE-2021-37348 | High | 7.5 | 2021-08-13 | Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of a pathname in index.php. |
CVE-2021-29969 | Medium | 5.9 | 2021-08-05 | If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses prior to the completion of the STARTTLS ha… |
CVE-2021-36763 | High | 7.5 | 2021-08-03 | In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties. |
CVE-2021-32688 | High | 8.8 | 2021-07-12 | Nextcloud Server is a Nextcloud package that handles data storage. Nextcloud Server supports application specific tokens for authentication purposes. These tok… |
CVE-2021-32752 | High | 7.2 | 2021-07-09 | Ether Logs is a package that allows one to check one's logs in the Craft 3 utilities section. A vulnerability was found in versions prior to 3.0.4 that allowed… |
CVE-2021-22769 | Medium | 4.3 | 2021-06-11 | A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Easergy T300 with firmware V2.7.1 and older that could expose files or d… |
CVE-2021-33359 | High | 7.5 | 2021-06-09 | A vulnerability exists in gowitness < 2.3.6 that allows an unauthenticated attacker to perform an arbitrary file read using the file:// scheme in the url param… |
CVE-2021-31831 | Medium | 4.9 | 2021-06-03 | Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to gain access to s… |
CVE-2018-10867 | Critical | 9.1 | 2021-05-26 | Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible b… |
CVE-2018-10863 | High | 7.5 | 2021-05-26 | It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/store/transfer directory… |
CVE-2021-29024 | High | 7.5 | 2021-05-17 | In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download. Allowing an attacker to directory traversal and d… |
CVE-2021-1512 | Medium | 6.0 | 2021-05-06 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of… |
CVE-2021-1256 | Medium | 6.0 | 2021-04-29 | A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwrite files on the file system… |