CWE-548 · weakness in Information Disclosure
Exposure of Information Through Directory Listing
65 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- check available
- 3
Every one of the 65 is a mark on the map. Named now: 1 to 26, most at risk first.
- Avada < 7.11.7 - Information Disclosure
- WordPress BackWPup < 4.0.4 - Backup File Disclosure
- PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory
- A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack w…
- NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The directory of the device is listed openly without authentication.
- A path traversal vulnerability was found in module static-resource-server 1.7.2 that allows unauthorized read access to any file on the server by appending slashes in the URL.
- An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. The…
- A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to.
- In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…
- Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rules.Vulnerable versio…
- SourceCodester Online Student Clearance System exposure of information through directory listing
- AquaNPlayer directory traversing vulnerability
- mySCADA myPRO Exposure of Information Through Directory Listing
- Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x contain an Exposure of Information through Directory Listing vulnerability. This vulnerability is triggered when upgradi…
- A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8). If configured in an insecure manner, the web server might be susceptible to a directory listing…
- QSAN Storage Manager - Exposure of Information Through Directory Listing Following via ViewBroserList function
- QSAN Storage Manager - Exposure of Information Through Directory Listing Following via Antivirus function
- Fresenius Kabi Agilia Connect Infusion System exposure of information through directory listing
- SourceCodester Food Ordering Management System includes exposure of information through directory listing
- SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log Directory
- CodeAstro Online Railway Reservation System assets exposure of information through directory listing
- saxman maps-js-icoads exposure of information through directory listing
- QSAN Storage Manager - Exposure of Information Through Directory Listing
- tombh jekbox server.rb exposure of information through directory listing
- SourceCodester Online Graduate Tracer System nbproject exposure of information through directory listing
- A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization.
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.