CWE-552

Files or Directories Accessible to External Parties

Parent: CWE-668 - Exposure of Resource to Wrong Sphere

The product makes files or directories accessible to unauthorized actors, even though they should not be.

453 vulnerabilities with CWE-552
CVE-2024-6878 CRITICAL
Eliz Software Panel <2.3.24 - Info Disclosure
CVE-2024-8655 MEDIUM
Mercury MNVR816 <2.0.1.0.5 - Info Disclosure
CVSS 5.3
CVE-2024-39581 HIGH
Dell PowerScale InsightIQ <5.2 - Info Disclosure
CVSS 7.3
CVE-2024-36442 HIGH
Swissphone DiCal-RED 4009 - File Access
CVSS 8.8
CVE-2024-41699 MEDIUM
Priority - Info Disclosure
CVSS 4.4
CVE-2024-7729 HIGH
CAYIN Technology CMS - Info Disclosure
CVSS 7.5
CVE-2024-3913 MEDIUM
Phoenixcontact Phoenix Contact CHARX SEC-3000/3050/3100/3150 Firmware <= 1.6.3 - Unauthenticated Configuration Change
CVSS 5.9
CVE-2024-38876 HIGH
Omnivise T3000 - Code Injection
CVSS 7.8
CVE-2024-27182 MEDIUM
Apache Linkis <=1.5.0 - Privilege Escalation
CVSS 4.9
CVE-2024-38429 HIGH
Matrix Tafnit v8 - Info Disclosure
CVSS 7.5
CVE-2024-40767 MEDIUM
OpenStack Nova <27.4.1,28.2.1,29.1.1 - Info Disclosure
CVSS 6.5
CVE-2024-6911 HIGH
PerkinElmer ProcessPlus <1.11.6507.0 - Info Disclosure
CVSS 7.5
CVE-2024-6421 HIGH
Pepperl+Fuchs OIT Series Firmware <= 2.11.0 - Information Disclosure via FTP
CVSS 7.5
CVE-2024-6209 CRITICAL
ABB ASPECT - Enterprise <3.08.01 - Info Disclosure
CVSS 10.0
CVE-2024-32498 MEDIUM
OpenStack <24.0.0, <28.0.2, <29.0.3 - Info Disclosure
CVSS 6.5
CVE-2024-39931 CRITICAL
Gogs <0.14.0 - Info Disclosure
CVSS 9.9
CVE-2024-4836 HIGH
Edito CMS <3.26 - Info Disclosure
CVSS 7.5
CVE-2024-0949 CRITICAL
Talya Informatics Elektraweb <17.0.68 - Auth Bypass
CVSS 9.8
CVE-2024-4098 CRITICAL
Shariff Wrapper <4.6.13 - RCE
CVSS 9.8
CVE-2024-5056 MEDIUM
Firmware Update - Info Disclosure
CVSS 6.5
CVE-2024-23282 MEDIUM
Apple Ipados < 16.7.8 - Denial of Service
CVSS 5.5
CVE-2024-5262 CRITICAL
ProjectDiscovery Interactsh - Path Traversal
CVSS 9.8
CVE-2024-5587 MEDIUM
Casdoor <1.335.0 - Info Disclosure
CVSS 5.3
CVE-2024-3564 HIGH
Content Blocks (Custom Post Widget) <3.3.0 - Code Injection
CVSS 8.8
CVE-2024-5045 MEDIUM
SourceCodester Online Birth Certificate Management System 1.0 - Inf...
CVSS 5.3
Details
Vulnerabilities 453
Links
MITRE CWE Entry Search this CWE With Exploits