Storage of File with Sensitive Data Under Web Root

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Astro - Information DisclosureCVE-2024-56159withastro · CVSS 7.8 · 1.5% likely

   Withastro

2. Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spelling.php3, and (4) l…CVE-2002-2024Horde · CVSS 5.3 · 1.9% likely

   Horde

3. An information disclosure vulnerability exists due to a web server misconfiguration in the Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a dis…CVE-2022-21236Reolink · CVSS 8.1 · 1.8% likely

   Reolink

4. An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configu…CVE-2022-36306Airspan · 1.0% likely

   Airspan

5. Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure VulnerabilityCVE-2023-39467Triangle MicroWorks · CVSS 5.3 · 0.6% likely

   Triangle MicroWorks

6. Avtec Outpost Storage of File with Sensitive Data Under Web RootCVE-2024-39776Avtec · CVSS 7.5 · 0.4% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.