CWE-552

Files or Directories Accessible to External Parties

Parent: CWE-668 - Exposure of Resource to Wrong Sphere

The product makes files or directories accessible to unauthorized actors, even though they should not be.

453 vulnerabilities with CWE-552
CVE-2025-12648 MEDIUM
WP-Members Membership Plugin <3.5.4.4 - Info Disclosure
CVSS 5.3
CVE-2025-15065 MEDIUM
Kings Information & Network Co. KESS Enterprise <*.25.9.19.exe - Pr...
CVSS 6.3
CVE-2025-15153 LOW
PbootCMS <3.2.12 - Info Disclosure
CVSS 3.7
CVE-2025-14896 HIGH
Vega - Info Disclosure
CVSS 7.5
CVE-2025-68109 CRITICAL
Churchcrm < 6.5.3 - Remote Code Execution
CVSS 9.1
CVE-2025-14697 LOW
Shenzhen Sixun Software Sixun Shanghui Group Business Management Sy...
CVSS 3.7
CVE-2025-14442 MEDIUM
WordPress <4.9.2 - Info Disclosure
CVSS 5.3
CVE-2025-66625 MEDIUM
Umbraco <13.12.0 - Info Disclosure
CVSS 4.9
CVE-2025-12747 MEDIUM
Tainacan plugin - Info Disclosure
CVSS 5.3
CVE-2025-12894 MEDIUM
Import WP - Sensitive Information Exposure
CVSS 5.3
CVE-2025-64185 MEDIUM
Open OnDemand <4.0.8-3.1.16 - Info Disclosure
CVE-2025-13225 MEDIUM
Tanium TanOS 1.8.4.0000 through 1.8.4.0229 - Arbitrary File Deletion
CVSS 5.6
CVE-2025-13200 MEDIUM
SourceCodester Farm Management System 1.0 - Info Disclosure
CVSS 5.3
CVE-2025-11959 HIGH
Premierturk Information Technologies Inc. Excavation Management Inf...
CVSS 8.1
CVE-2025-33150 MEDIUM
IBM Cognos Analytics Certified Containers 12.1.0 - Info Disclosure
CVSS 5.3
CVE-2025-58152 MEDIUM
FutureNet MA/IP-K - Info Disclosure
CVSS 5.3
CVE-2025-11965 HIGH
Eclipse Vert.x <4.5.21 & <5.0.4 - Info Disclosure
CVSS 7.5
CVE-2025-31996 MEDIUM
HCL Unica Platform - Info Disclosure
CVSS 5.3
CVE-2025-11371 HIGH KEV
Gladinet CentreStack/Triofox Path Traversal
CVSS 7.5
CVE-2025-59976 MEDIUM
Juniper Networks Junos Space <24.1R3 - File Download
CVSS 6.5
CVE-2025-61734 HIGH
Apache Kylin <5.0.2 - Info Disclosure
CVSS 7.5
CVE-2025-37130 MEDIUM
EdgeConnect SD-WAN - Info Disclosure
CVSS 6.5
CVE-2025-3025 HIGH
Gen Digital CCleaner <6.36.11508 - Privilege Escalation
CVSS 7.3
CVE-2025-59054 HIGH
dstack <0.5.4 - Info Disclosure
CVE-2025-58753 HIGH
Copyparty <1.19.8 - Info Disclosure
CVSS 7.5
Details
Vulnerabilities 453