VulnSea

CWE-548

CVEs classified under CWE-548, newest first.

8 CVEsRSS

CVE-2026-82778Medium· 4.3
1mo ago

An exposure of information through directory listing issue exists in CONPROSYS PAC Series

An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication.

▾ SunlitContec Co., Ltd. · Integrated Type CPS-PC341[][]-*-9201EPSS 0.45%via NVD
CVE-2026-82775Medium· 4.3
1mo ago

An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series

An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the dir…

▾ SunlitContec Co., Ltd. · M2M Gateway Integrated Type CPS-MG341*EPSS 0.45%via NVD
CVE-2025-32750High· 7.5
5mo ago

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Informatio…

▾ Twilightdell · powerflex_appliance_intelligent_catalogEPSS 0.35%via NVD
CVE-2026-22860High· 7.5
8mo ago

Rack is a modular Ruby web server interface

Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, `Rack::Directory`’s path check used a string prefix match on the expanded path. A request like `/../root_example/` can escape the configured root i…

▾ Twilightrack · rackEPSS 0.76%via NVD
CVE-2022-50788High· 7.5PoC
10mo ago

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log Directory

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive log files. Attackers can directly browse the /log directory to retrieve system and sensitive i…

▾ MidnightSOUND4 Ltd. · Impact/Pulse/FirstEPSS 0.83%via CVEORG
CVE-2024-56464Low· 2.7
10mo ago

IBM QRadar SIEM 7.5 - 7.5.0 UP14 IF01 is affected by an information disclosure vulnerability involving exposure of directory information

IBM QRadar SIEM 7.5 - 7.5.0 UP14 IF01 is affected by an information disclosure vulnerability involving exposure of directory information. IBM has addressed this vulnerability in the latest update.

▾ Sunlitibm · qradar_security_information_and_event_managerEPSS 0.29%via NVD
CVE-2025-13200Medium· 5.3
11mo ago

A vulnerability was determined in SourceCodester Farm Management System 1.0

A vulnerability was determined in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality. This manipulation causes exposure of information through directory listing. The attack is possible t…

▾ Sunlitjanobe · farm_management_systemEPSS 0.49%via NVD
CVE-2025-27906Medium· 5.3
1y ago

IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon using an application URL

IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon using an application URL. Application files and folders are visible in the browser to a user; however, the contents of the …

▾ Sunlitibm · content_navigatorEPSS 0.31%via NVD
CWE-548 vulnerabilities (CVEs) · VulnSea