CWE-552
CVEs classified under CWE-552, newest first.
93 CVEsRSS
CVE-2021-22769Medium· 4.3A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Easergy T300 with firmware V2.7.1 and older that could expose files or directory content when access from an attacker is not restricted or incorrectly…
A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Easergy T300 with firmware V2.7.1 and older that could expose files or directory content when access from an attacker is not restricted or incorrectly…
▾ Sunlitschneider-electric · easergy_t300_firmwareEPSS 0.65%via NVD
CVE-2021-29024High· 7.5In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download
In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download. Allowing an attacker to directory traversal and download files suppose to be private without authentication.
▾ Twilightinvoiceplane · invoiceplaneEPSS 1.6%via NVD
CVE-2021-1256Medium· 6.0A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwrite files on the file system of an affected device by using directory traversal techniques
A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwrite files on the file system of an affected device by using directory traversal techniques. A successful ex…
▾ Sunlitcisco · secure_firewall_threat_defenseEPSS 0.50%via NVD