Vulnerabilities (CVE)

Filtered by CWE-552
Total 385 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-7107 1 Nationalkeep 1 Cybermath 2024-10-03 N/A 7.5 HIGH
Files or Directories Accessible to External Parties vulnerability in National Keep Cyber Security Services CyberMath allows Collect Data from Common Resource Locations.This issue affects CyberMath: before CYBM.240816253.
CVE-2024-39581 1 Dell 1 Insightiq 2024-09-16 N/A 9.8 CRITICAL
Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a File or Directories Accessible to External Parties vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to read, modify, and delete arbitrary files.
CVE-2024-8655 2024-09-11 5.0 MEDIUM 5.3 MEDIUM
A vulnerability was found in Mercury MNVR816 up to 2.0.1.0.5. It has been classified as problematic. This affects an unknown part of the file /web-static/. The manipulation leads to files or directories accessible. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2024-41699 1 Priority-software 1 Priority 2024-09-03 N/A 7.5 HIGH
Priority – CWE-552: Files or Directories Accessible to External Parties
CVE-2024-7729 2024-08-14 N/A 7.5 HIGH
The CAYIN Technology CMS lacks proper access control, allowing unauthenticated remote attackers to download arbitrary CGI files.