CWE-548 · Information Disclosure
Exposure of Information Through Directory Listing
65CVEs
SortMost likely exploited
65 CVEs with CWE-548 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-2340CheckAvada < 7.11.7 - Information DisclosureThemeFusion · Avada | Website Builder For WordPress & WooCommerce · CVSS 5.3 · 2024-04-09 | 5.3 | 28% | 2024-04-09 |
| CVE-2023-7164CheckWordPress BackWPup < 4.0.4 - Backup File DisclosureInpsyde · BackWPup · CVSS 7.5 · 2024-04-08 | 7.5 | 2.2% | 2024-04-08 |
| CVE-2020-15081CheckPrestaShop < 1.7.6.6 - Information Exposure via Upload DirectoryPrestaShop · PrestaShop · CVSS 5.3 · 2020-07-02 | 5.3 | 1.6% | 2020-07-02 |
| CVE-2020-8161A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack w…Rack Project · https://github.com/rack/rack · 2020-07-02 | – | 3.4% | 2020-07-02 |
| CVE-2018-14785NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The directory of the device is listed openly without authentication.ICS-CERT · NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.2… · 2018-08-10 | – | 2.1% | 2018-08-10 |
| CVE-2018-16493A path traversal vulnerability was found in module static-resource-server 1.7.2 that allows unauthorized read access to any file on the server by appending slashes in the URL.HackerOne · static-resource-server · 2019-02-01 | – | 1.8% | 2019-02-01 |
| CVE-2017-6045An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. The…Trihedral · Trihedral VTScada · 2017-06-21 | – | 1.7% | 2017-06-21 |
| CVE-2019-5415A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to.Zeit · serve · 2019-03-17 | – | 1.6% | 2019-03-17 |
| CVE-2018-10590In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…Advantech · WebAccess · 2018-05-15 | – | 1.6% | 2018-05-15 |
| CVE-2019-5437Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rules.Vulnerable versio…Harpjs · harp · 2019-05-10 | – | 1.3% | 2019-05-10 |
| CVE-2025-4807SourceCodester Online Student Clearance System exposure of information through directory listingSourceCodester · Online Student Clearance System · CVSS 5.3 · 2025-05-16 | 5.3 | 1.2% | 2025-05-16 |
| CVE-2020-7858AquaNPlayer directory traversing vulnerabilitycdnetworks · AquaNPlayer · CVSS 6.8 · 2021-04-22 | 6.8 | 1.1% | 2021-04-22 |
| CVE-2021-27505mySCADA myPRO Exposure of Information Through Directory ListingmySCADA · myPRO · CVSS 7.5 · 2022-05-13 | 7.5 | 1.1% | 2022-05-13 |
| CVE-2021-21528Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x contain an Exposure of Information through Directory Listing vulnerability. This vulnerability is triggered when upgradi…Dell · PowerScale OneFS · CVSS 7.5 · 2021-11-12 | 7.5 | 1.0% | 2021-11-12 |
| CVE-2020-15790A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8). If configured in an insecure manner, the web server might be susceptible to a directory listing…Siemens AG · Spectrum Power 4 · 2020-09-09 | – | 0.9% | 2020-09-09 |
| CVE-2021-32511QSAN Storage Manager - Exposure of Information Through Directory Listing Following via ViewBroserList functionQSAN · Storage Manager · CVSS 4.3 · 2021-07-07 | 4.3 | 0.9% | 2021-07-07 |
| CVE-2021-32510QSAN Storage Manager - Exposure of Information Through Directory Listing Following via Antivirus functionQSAN · Storage Manager · CVSS 4.3 · 2021-07-07 | 4.3 | 0.9% | 2021-07-07 |
| CVE-2021-23195Fresenius Kabi Agilia Connect Infusion System exposure of information through directory listingFresenius Kabi · Vigilant Software Suite (Mastermed Dashboard) · CVSS 5.3 · 2022-01-21 | 5.3 | 0.8% | 2022-01-21 |
| CVE-2024-8711SourceCodester Food Ordering Management System includes exposure of information through directory listingSourceCodester · Food Ordering Management System · CVSS 5.3 · 2024-09-12 | 5.3 | 0.8% | 2024-09-12 |
| CVE-2022-50788SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log DirectorySOUND4 Ltd. · Impact/Pulse/First · CVSS 7.5 · 2025-12-30 | 7.5 | 0.8% | 2025-12-30 |
| CVE-2024-7912CodeAstro Online Railway Reservation System assets exposure of information through directory listingCodeAstro · Online Railway Reservation System · CVSS 5.3 · 2024-08-18 | 5.3 | 0.8% | 2024-08-18 |
| CVE-2014-125069saxman maps-js-icoads exposure of information through directory listingsaxman · maps-js-icoads · CVSS 4.3 · 2023-01-08 | 4.3 | 0.8% | 2023-01-08 |
| CVE-2021-32515QSAN Storage Manager - Exposure of Information Through Directory ListingQSAN · Storage Manager · CVSS 5.3 · 2021-07-07 | 5.3 | 0.8% | 2021-07-07 |
| CVE-2016-15019tombh jekbox server.rb exposure of information through directory listingtombh · jekbox · CVSS 4.3 · 2023-01-15 | 4.3 | 0.8% | 2023-01-15 |
| CVE-2024-7809SourceCodester Online Graduate Tracer System nbproject exposure of information through directory listingSourceCodester · Online Graduate Tracer System · CVSS 5.3 · 2024-08-15 | 5.3 | 0.8% | 2024-08-15 |
| CVE-2023-49979A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization.Mayurik · Best Student Management System · CVSS 7.5 · 2024-03-06 | 7.5 | 0.7% | 2024-03-06 |
| CVE-2022-36243Directory Traversal on Shop Beat ServicesShop Beat · studio · CVSS 5.3 · 2023-05-30 | 5.3 | 0.7% | 2023-05-30 |
| CVE-2023-51948A Site-wide directory listing vulnerability in /fm in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to list the files hosted by the web application.Actidata · Actinas Sl 2u-8 Rdx Firmware · CVSS 7.5 · 2024-01-19 | 7.5 | 0.7% | 2024-01-19 |
| CVE-2025-2651SourceCodester Online Eyewear Shop admin exposure of information through directory listingSourceCodester · Online Eyewear Shop · CVSS 5.3 · 2025-03-23 | 5.3 | 0.7% | 2025-03-23 |
| CVE-2025-2652SourceCodester Employee and Visitor Gate Pass Logging System exposure of information through directory listingSourceCodester · Employee and Visitor Gate Pass Logging System · CVSS 5.3 · 2025-03-23 | 5.3 | 0.7% | 2025-03-23 |
| CVE-2024-42007SPX (aka php-spx) through 0.4.15 allows SPX_UI_URI Directory Traversal to read arbitrary files.No vendor recorded · CVSS 5.8 · 2024-07-26 | 5.8 | 0.6% | 2024-07-26 |
| CVE-2024-22082An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Unauthenticated directory listing can occur: the web interface cay be abused be an attack…Elspec-Ltd · G5dfr Firmware · CVSS 7.5 · 2024-03-20 | 7.5 | 0.6% | 2024-03-20 |
| CVE-2025-2038code-projects Blood Bank Management System upload exposure of information through directory listingcode-projects · Blood Bank Management System · CVSS 7.3 · 2025-03-06 | 7.3 | 0.6% | 2025-03-06 |
| CVE-2025-61685Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposuremastra-ai · mastra · CVSS 6.5 · 2025-10-03 | 6.5 | 0.6% | 2025-10-03 |
| CVE-2023-6821Error Log Viewer < 1.1.3 - Directory Listing to Sensitive Data ExposureBestwebsoft · Error Log Viewer by BestWebSoft · CVSS 6.5 · 2024-03-18 | 6.5 | 0.6% | 2024-03-18 |
| CVE-2021-47718OpenBMCS Directory Listing Information DisclosureOPEN BMCS · OpenBMCS · CVSS 8.7 · 2025-12-09 | 8.7 | 0.6% | 2025-12-09 |
| CVE-2025-4909SourceCodester Client Database Management System exposure of information through directory listingSourceCodester · Client Database Management System · CVSS 7.3 · 2025-05-19 | 7.3 | 0.6% | 2025-05-19 |
| CVE-2026-19987SourceCodester Best Employee Management System Profile exposure of information through directory listingSourceCodester · Best Employee Management System · CVSS 5.3 · 2026-08-17 | 5.3 | 0.5% | 2026-08-17 |
| CVE-2021-45446Pentaho Business Analytics Server - Exposure of Information Through Directory ListingHitachi Vantara · Pentaho Business Analytics Server · CVSS 5 · 2022-11-02 | 5.0 | 0.5% | 2022-11-02 |
| CVE-2025-13200SourceCodester Farm Management System exposure of information through directory listingSourceCodester · Farm Management System · CVSS 5.3 · 2025-11-15 | 5.3 | 0.5% | 2025-11-15 |
| CVE-2024-3707Exposure of Information Through Directory Listing vulnerability in OpenGnsysOpenGnsys · OpenGnsys · CVSS 5.3 · 2024-04-12 | 5.3 | 0.5% | 2024-04-12 |
| CVE-2025-27452CVE-2025-27452Endress+Hauser · Endress+Hauser MEAC300-FNADE4 · CVSS 5.3 · 2025-07-03 | 5.3 | 0.5% | 2025-07-03 |
| CVE-2026-82778An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to…Contec Co., Ltd. · Integrated Type CPS-PC341[][]-*-9201 · CVSS 4.3 · 2026-09-14 | 4.3 | 0.4% | 2026-09-14 |
| CVE-2026-82775An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. Accessing a specific URL on this product may…Contec Co., Ltd. · M2M Gateway Integrated Type CPS-MG341* · CVSS 4.3 · 2026-09-14 | 4.3 | 0.4% | 2026-09-14 |
| CVE-2020-36921RED-V Super Digital Signage System 5.1.1 Log Information Disclosure VulnerabilityRED · RED-V Super Digital Signage System RXV-A740R · CVSS 7.5 · 2026-01-06 | 7.5 | 0.4% | 2026-01-06 |
| CVE-2024-7762Simple Job Board < 2.12.6 - Unauthenticated Resumes DownloadPresstigers · Simple Job Board · CVSS 3.7 · 2025-05-15 | 3.7 | 0.4% | 2025-05-15 |
| CVE-2024-1076SSL Zen <= 4.5.3 - Unauthenticated Private Keys AccessSslzen · SSL Zen · CVSS 6.5 · 2024-05-08 | 6.5 | 0.4% | 2024-05-08 |
| CVE-2025-45320A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0.Lopalopa · Online Service Management Portal · CVSS 7.5 · 2025-05-05 | 7.5 | 0.4% | 2025-05-05 |
| CVE-2026-123988SililaWijesinghe Food Ordering System admin exposure of information through directory listingSililaWijesinghe · Food Ordering System · CVSS 5.3 · 2026-11-07 | 5.3 | 0.4% | 2026-11-07 |
| CVE-2024-45096IBM Aspera Faspex information disclosureIBM · Aspera Faspex · CVSS 6.5 · 2024-09-05 | 6.5 | 0.4% | 2024-09-05 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.