Skip to content

CWE-548 · weakness in Information Disclosure

Exposure of Information Through Directory Listing

65 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

check available
3

Every one of the 65 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Avada < 7.11.7 - Information DisclosureCVE-2024-2340ThemeFusion · CVSS 5.3 · 28% likely

    ThemeFusion

  2. WordPress BackWPup < 4.0.4 - Backup File DisclosureCVE-2023-7164Inpsyde · CVSS 7.5 · 2.2% likely
  3. PrestaShop < 1.7.6.6 - Information Exposure via Upload DirectoryCVE-2020-15081PrestaShop · CVSS 5.3 · 1.6% likely

    PrestaShop

  4. A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack w…CVE-2020-8161https://github.com/rack/rack · 3.4% likely
  5. NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The directory of the device is listed openly without authentication.CVE-2018-14785ICS-CERT · 2.1% likely

    ICS-CERT

  6. A path traversal vulnerability was found in module static-resource-server 1.7.2 that allows unauthorized read access to any file on the server by appending slashes in the URL.CVE-2018-16493HackerOne · 1.8% likely

    HackerOne

  7. An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. The…CVE-2017-6045Trihedral VTScada · 1.7% likely
  8. A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to.CVE-2019-5415serve · 1.6% likely
  9. In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…CVE-2018-10590Advantech · 1.6% likely

    Advantech

  10. Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rules.Vulnerable versio…CVE-2019-5437harp · 1.3% likely
  11. SourceCodester Online Student Clearance System exposure of information through directory listingCVE-2025-4807SourceCodester · CVSS 5.3 · 1.2% likely

    SourceCodester

  12. AquaNPlayer directory traversing vulnerabilityCVE-2020-7858cdnetworks · CVSS 6.8 · 1.1% likely
  13. mySCADA myPRO Exposure of Information Through Directory ListingCVE-2021-27505mySCADA · CVSS 7.5 · 1.1% likely

    mySCADA

  14. Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x contain an Exposure of Information through Directory Listing vulnerability. This vulnerability is triggered when upgradi…CVE-2021-21528Dell · CVSS 7.5 · 1.0% likely

    Dell

  15. A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8). If configured in an insecure manner, the web server might be susceptible to a directory listing…CVE-2020-15790Siemens AG · 0.9% likely

    Siemens

  16. QSAN Storage Manager - Exposure of Information Through Directory Listing Following via ViewBroserList functionCVE-2021-32511QSAN · CVSS 4.3 · 0.9% likely

    QSAN

  17. QSAN Storage Manager - Exposure of Information Through Directory Listing Following via Antivirus functionCVE-2021-32510QSAN · CVSS 4.3 · 0.9% likely

    QSAN

  18. Fresenius Kabi Agilia Connect Infusion System exposure of information through directory listingCVE-2021-23195Fresenius Kabi · CVSS 5.3 · 0.8% likely

    Fresenius Kabi

  19. SourceCodester Food Ordering Management System includes exposure of information through directory listingCVE-2024-8711SourceCodester · CVSS 5.3 · 0.8% likely

    SourceCodester

  20. SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log DirectoryCVE-2022-50788SOUND4 Ltd. · CVSS 7.5 · 0.8% likely

    SOUND4 Ltd.

  21. CodeAstro Online Railway Reservation System assets exposure of information through directory listingCVE-2024-7912CodeAstro · CVSS 5.3 · 0.8% likely

    CodeAstro

  22. saxman maps-js-icoads exposure of information through directory listingCVE-2014-125069saxman · CVSS 4.3 · 0.8% likely
  23. QSAN Storage Manager - Exposure of Information Through Directory ListingCVE-2021-32515QSAN · CVSS 5.3 · 0.8% likely

    QSAN

  24. tombh jekbox server.rb exposure of information through directory listingCVE-2016-15019tombh · CVSS 4.3 · 0.8% likely
  25. SourceCodester Online Graduate Tracer System nbproject exposure of information through directory listingCVE-2024-7809SourceCodester · CVSS 5.3 · 0.8% likely

    SourceCodester

  26. A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization.CVE-2023-49979Mayurik · CVSS 7.5 · 0.7% likely

    Mayuri K

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in