CWE-552 · Files or Directories Accessible to External Parties (page 5)
Page 5 of 5 — CVEs classified under CWE-552, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-21429 | Medium | 4.0 | 2021-04-27 | OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using `File.cre… |
CVE-2021-24154 | Medium | 4.9 | 2021-04-05 | The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before passing it to the download_file() function, allowing administrators… |
CVE-2021-1434 | Medium | 4.4 | 2021-03-24 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file sys… |
CVE-2021-21355 | High | 8.6 | 2021-03-23 | TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 8.7.40, 9.5.25, 10.4.14, 11.1.1, due to the lack of ensuring file ext… |
CVE-2019-3897 | Medium | 5.3 | 2021-03-16 | It has been discovered in redhat-certification that any unauthorized user may download any file under /var/www/rhcert, provided they know its name. Red Hat Cer… |
CVE-2021-20253 | Medium | 6.7 | 2021-03-09 | A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low priv… |
CVE-2021-1361 | Critical | 9.8 | 2021-02-24 | A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in stand… |
CVE-2021-20182 | High | 8.8 | 2021-02-23 | A privilege escalation flaw was found in openshift4/ose-docker-builder. The build container runs with high privileges using a chrooted environment instead of r… |
CVE-2020-27368 | Medium | 5.5 | 2021-01-14 | Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /icons/ directories via GET Parameter. |
CVE-2020-17519 | High | 7.5 | 2021-01-05 | A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobMana… |
CVE-2020-35658 | Medium | 5.3 | 2020-12-23 | SpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted. |
CVE-2020-26549 | High | 7.5 | 2020-11-17 | An issue was discovered in Aviatrix Controller before R5.4.1290. The htaccess protection mechanism to prevent requests to directories can be bypassed for file… |
CVE-2020-1908 | Medium | 4.6 | 2020-11-03 | Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact wit… |
CVE-2020-26183 | Medium | 6.8 | 2020-10-16 | Dell EMC NetWorker versions prior to 19.3.0.2 contain an improper authorization vulnerability. Certain remote users with low privileges may exploit this vulner… |
CVE-2020-26182 | Medium | 6.8 | 2020-10-16 | Dell EMC NetWorker versions prior to 19.3.0.2 contain an incorrect privilege assignment vulnerability. A non-LDAP remote user with low privileges may exploit t… |
CVE-2020-11642 | High | 7.7 | 2020-10-15 | The local file inclusion vulnerability present in B&R SiteManager versions <9.2.620236042 allows authenticated users to impact availability of SiteManager inst… |
CVE-2020-11641 | High | 7.7 | 2020-10-15 | A local file inclusion vulnerability in B&R SiteManager versions <9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances. |
CVE-2020-15224 | Medium | 6.8 | 2020-10-14 | In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.ed… |
CVE-2020-15175 | High | 7.4 | 2020-10-07 | In GLPI before version 9.5.2, the `pluginimage.send.php` endpoint allows a user to specify an image from a plugin. The parameters can be maliciously crafted… |
CVE-2020-25636 | Medium | 6.6 | 2020-10-05 | A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to… |
CVE-2020-13953 | Medium | 5.3 | 2020-09-30 | In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run. |
CVE-2020-3476 | Medium | 6.0 | 2020-09-24 | A vulnerability in the CLI implementation of a specific command of Cisco IOS XE Software could allow an authenticated, local attacker to overwrite arbitrary fi… |
CVE-2020-24312 | High | 7.5 | 2020-08-26 | mndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fm_backups directory with a .htaccess file. This results in the ability fo… |
CVE-2020-11976 | High | 7.5 | 2020-08-11 | By crafting a special URL it is possible to make Wicket deliver unprocessed HTML templates. This would allow an attacker to see possibly sensitive information… |
CVE-2020-4075 | Medium | 6.8 | 2020-07-07 | In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, arbitrary local file read is possible by defining unsafe window options on a child window opened vi… |
CVE-2020-5356 | High | 7.7 | 2020-07-06 | Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability… |
CVE-2020-3267 | High | 7.1 | 2020-06-03 | A vulnerability in the API subsystem of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to change the availabi… |
CVE-2020-10516 | Critical | 9.8 | 2020-06-03 | An improper access control vulnerability was identified in the GitHub Enterprise Server API that allowed an organization member to escalate permissions and gai… |
CVE-2020-12743 | Critical | 9.8 | 2020-05-11 | An issue was discovered in Gazie 7.32. A successful installation does not remove or block (or in any other way prevent use of) its own file /setup/install/setu… |
CVE-2020-12470 | High | 7.2 | 2020-04-29 | MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template. |
CVE-2019-7306 | Medium | 4.3 | 2020-04-17 | Byobu Apport hook may disclose sensitive information since it automatically uploads the local user's .screenrc which may contain private hostnames, usernames a… |
CVE-2019-7305 | Medium | 5.8 | 2020-04-10 | Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system directories world-accessible over HTTP. Introduced in the Makefile p… |
CVE-2020-11469 | High | 7.8 | 2020-04-01 | Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process (wi… |
CVE-2020-5289 | Medium | 6.8 | 2020-03-30 | In Elide before 4.5.14, it is possible for an adversary to "guess and check" the value of a model field they do not have access to assuming they can read at le… |
CVE-2019-20593 | Medium | 5.3 | 2020-03-24 | An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. Gallery leaks Private Mode thumbnails. The Samsung ID is SVE-2019-14208 (Jul… |
CVE-2019-20529 | High | 7.5 | 2020-03-18 | In core/doctype/prepared_report/prepared_report.py in Frappe 11 and 12, data files generated with Prepared Report were being stored as public files (no authent… |
CVE-2020-5250 | High | 7.6 | 2020-03-05 | In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the id_address in the form, and thus steal someone else's add… |
CVE-2020-10105 | Medium | 5.3 | 2020-03-05 | An issue was discovered in Zammad 3.0 through 3.2. It returns source code of static resources when submitting an OPTIONS request, rather than a GET request. Di… |
CVE-2015-4715 | Medium | 4.9 | 2020-02-17 | The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox s… |
CVE-2020-1726 | Medium | 5.9 | 2020-02-11 | A flaw was discovered in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they are mounted as read-on… |
CVE-2019-13941 | High | 7.5 | 2020-02-11 | A vulnerability has been identified in OZW672 (All versions < V10.00), OZW772 (All versions < V10.00). Vulnerable versions of OZW Web Server use predictable pa… |
CVE-2020-3927 | High | 8.3 | 2020-02-03 | An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary… |
CVE-2020-3926 | Medium | 6.1 | 2020-02-03 | An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary… |
CVE-2019-19843 | Critical | 9.8 | 2020-01-22 | Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credential fetch via an unauthenticated HTTP r… |
CVE-2019-19018 | Low | 2.7 | 2019-12-02 | An issue was discovered in TitanHQ WebTitan before 5.18. It exposes a database configuration file under /include/dbconfig.ini in the web administration interfa… |
CVE-2019-17221 | High | 7.5 | 2019-11-05 | PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. The vulnerability exists in the page… |
CVE-2019-4398 | Low | 3.3 | 2019-10-24 | IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 could allow a local user to obtain sensitive informati… |
CVE-2019-17112 | Medium | 4.3 | 2019-10-09 | An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed service allows a basic user ("Operator" access level) to access th… |
CVE-2019-0381 | Medium | 5.5 | 2019-10-08 | A binary planting in SAP SQL Anywhere, before version 17.0, SAP IQ, before version 16.1, and SAP Dynamic Tier, before versions 1.0 and 2.0, can result in the i… |
CVE-2019-17130 | Medium | 6.5 | 2019-10-04 | vBulletin through 5.5.4 mishandles external URLs within the /core/vb/vurl.php file and the /core/vb/vurl directories. |
CVE-2019-14273 | Medium | 5.3 | 2019-09-26 | In SilverStripe assets 4.0, there is broken access control on files. |
CVE-2019-13140 | Medium | 6.5 | 2019-09-16 | Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON comm… |
CVE-2016-10829 | Medium | 6.5 | 2019-08-01 | cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error (SEC-99). |
CVE-2019-3622 | High | 8.2 | 2019-07-24 | Files or Directories Accessible to External Parties in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows authenticated user to redirec… |
CVE-2019-10930 | High | 7.5 | 2019-07-11 | A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (A… |
CVE-2019-13404 | High | 7.8 | 2019-07-08 | The MSI installer for Python through 2.7.16 on Windows defaults to the C:\Python27 directory, which makes it easier for local users to deploy Trojan horse code… |
CVE-2019-3569 | High | 7.5 | 2019-06-26 | HHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could allow a malicious individual unintended direct access to t… |
CVE-2019-12375 | Medium | 6.3 | 2019-06-03 | Open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to remote information disclosure and arbi… |
CVE-2018-9587 | High | 7.3 | 2019-02-11 | In savePhotoFromUriToUri of ContactPhotoUtils.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is possible unau… |
CVE-2017-6922 | Medium | 6.5 | 2019-01-22 | In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymous user but not permanently attached to… |
CVE-2019-3811 | Medium | 5.2 | 2019-01-15 | A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty str… |
CVE-2018-16946 | High | 7.5 | 2018-09-12 | LG LNB*, LND*, LNU*, and LNV* smart network camera devices have broken access control. Attackers are able to download /updownload/t.report (aka Log & Report) f… |
CVE-2017-2621 | Medium | 5.5 | 2018-07-27 | An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made… |
CVE-2017-2622 | Medium | 5.9 | 2018-07-27 | An accessibility flaw was found in the OpenStack Workflow (mistral) service where a service log directory was improperly made world readable. A malicious syste… |
CVE-2018-10869 | High | 7.5 | 2018-07-19 | redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker may download any file accessible by th… |
CVE-2018-5112 | High | 7.5 | 2018-06-11 | Development Tools panels of an extension are required to load URLs for the panels as relative URLs from the extension manifest file but this requirement was no… |
CVE-2018-1079 | High | 8.7 | 2018-04-12 | pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of the pcsd service did… |
CVE-2017-1602 | Medium | 4.3 | 2018-03-23 | IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to u… |
CVE-2018-0106 | Low | 3.3 | 2018-01-18 | A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, local attacker to access sensitive informati… |
CVE-2017-15104 | High | 7.8 | 2017-12-18 | An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could r… |
CVE-2017-12079 | High | 7.5 | 2017-12-04 | Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote a… |
CVE-2017-16651 | High | 7.8 | 2017-11-09 | Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including c… |
CVE-2017-7079 | Medium | 5.5 | 2017-10-23 | An issue was discovered in certain Apple products. iTunes before 12.7 is affected. The issue involves the "Data Sync" component. It allows attackers to access… |
CVE-2017-11829 | Medium | 5.5 | 2017-10-13 | Microsoft Windows 10 allows an elevation of privilege vulnerability when the Windows Update Delivery Optimization does not properly enforce file share permissi… |
CVE-2017-14942 | Critical | 9.8 | 2017-09-30 | Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/Downl… |
CVE-2017-2551 | High | 7.5 | 2017-09-28 | Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download. |
CVE-2017-10930 | Critical | 9.8 | 2017-09-19 | The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being able to download con… |
CVE-2017-6774 | Medium | 5.0 | 2017-08-17 | A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to… |
CVE-2017-7737 | Medium | 4.9 | 2017-08-10 | An information disclosure vulnerability in Fortinet FortiWeb 5.8.2 and below versions allows logged-in admin user to view SNMPv3 user password in cleartext in… |
CVE-2017-11746 | High | 7.5 | 2017-07-30 | Tenshi 0.15 creates a tenshi.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging… |
CVE-2017-1308 | Medium | 6.5 | 2017-07-13 | IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not have access to due t… |
CVE-2015-5211 | Critical | 9.6 | 2017-05-25 | Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflected File Do… |
CVE-2016-3715 | Medium | 5.5 | 2016-05-05 | The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image. |
CVE-2015-1350 | Medium | 5.5 | 2016-05-02 | The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege att… |
CVE-2009-3597 | | 2009-10-08 | Digitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database… | |
CVE-2005-1835 | | 2005-06-01 | NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information vi… |