CWE-552

Files or Directories Accessible to External Parties

Parent: CWE-668 - Exposure of Resource to Wrong Sphere

The product makes files or directories accessible to unauthorized actors, even though they should not be.

474 vulnerabilities with CWE-552
CVE-2022-45129 HIGH
Payara <2022-11-04 - Info Disclosure
CVSS 7.5
CVE-2022-43449 MEDIUM
OpenHarmony <v3.1.2 - Info Disclosure
CVSS 6.2
CVE-2022-41710 MEDIUM
Markdownify 1.4.1 - Info Disclosure
CVSS 5.5
CVE-2022-23738 MEDIUM
GitHub Enterprise Server < 3.2.20 - Unauthorized Private Repository File Access via Cache Key Manipulation
CVSS 5.7
CVE-2022-37424 MEDIUM
OpenNebula <Linux - Info Disclosure
CVSS 6.5
CVE-2022-43414 MEDIUM
Jenkins NUnit Plugin <0.27 - Info Disclosure
CVSS 5.3
CVE-2022-2834 MEDIUM
Helpful WP <4.5.26 - Info Disclosure
CVSS 5.3
CVE-2022-42234 HIGH
UCMS 1.6 - File Inclusion in Template Management Module
CVSS 8.8
CVE-2022-2981 MEDIUM
WordPress Download Monitor <4.5.98 - Privilege Escalation
CVSS 4.9
CVE-2022-40126 HIGH
Clash for Windows <0.19.9 - Privilege Escalation
CVSS 7.8
CVE-2022-3287 MEDIUM
fwupd < 1.8.5 - Unauthenticated Sensitive Information Exposure via Redfish Plugin Configuration
CVSS 6.5
CVE-2022-41343 HIGH
dompdf < 2.0.1 - Remote File Inclusion via @font-face Rule
CVSS 7.5
CVE-2022-39208 HIGH
OneDev < 7.3.0 - Unauthenticated Arbitrary File Read via Project Directory Exposure
CVSS 7.5
CVE-2022-36552 HIGH
Tenda AC6 Firmware < 02.03.01.114 - Unauthenticated Arbitrary File Read via DownloadFlash Endpoint
CVSS 7.5
CVE-2022-1117 HIGH
fapolicyd 1.1.2 - Runtime Linker Detection Bypass Allows Execution
CVSS 8.4
CVE-2022-35235 MEDIUM
XplodedThemes WPide <2.6 - Info Disclosure
CVSS 4.9
CVE-2022-2392 MEDIUM
Lana Downloads Manager <1.8.0 - Info Disclosure
CVSS 6.5
CVE-2022-36306 MEDIUM
AirVelocity <15.18.00.2511 - Info Disclosure
CVSS 6.5
CVE-2022-22490 MEDIUM
IBM Robotic Process Automation <21.0.3 - Info Disclosure
CVSS 4.9
CVE-2022-2357 HIGH
WSM Downloader <1.4.0 - Info Disclosure
CVSS 7.5
CVE-2022-1585 HIGH
WordPress Plugin <1.0.0 - Info Disclosure
CVSS 7.5
CVE-2022-33158 HIGH
Trend Micro VPN Proxy Pro <5.2.1026 - Privilege Escalation
CVSS 7.8
CVE-2022-33901 MEDIUM
MultiSafepay <4.13.1 - Info Disclosure
CVSS 5.3
CVE-2022-31475 MEDIUM
GiveWP <= 2.20.2 - Authenticated Arbitrary File Read via Export Function
CVSS 5.5
CVE-2022-34049 MEDIUM
Wavlink WN530HG4 M30HG4.V5030.191116 - Info Disclosure
CVSS 5.3
Details
Vulnerabilities 474
Links
MITRE CWE Entry Search this CWE With Exploits