CWE-552 · File and Path Handling
Files or Directories Accessible to External Parties
449CVEs
5exploited
21with a public check
7likely (EPSS 10%+)
SortMost likely exploited
449 CVEs with CWE-552 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-21589In CISA KEVExploitedAtlassian Jira/Confluence/Bitbucket - Pre-Auth Arbitrary File ReadAtlassian · Bamboo Data Center · CVSS 9.3 · 2026-10-05 | 9.3 | 100% | 2026-10-05 |
| CVE-2020-17519In CISA KEVExploitedApache Flink - Local File InclusionApache Software Foundation · Apache Flink · CVSS 9.1 · 2021-01-05 | 9.1 | 98% | 2021-01-05 |
| CVE-2025-11371In CISA KEVExploitedGladinet CentreStack & TrioFox - Local File InclusionGladinet · CentreStack and TrioFox · CVSS 7.5 · 2025-10-09 | 7.5 | 92% | 2025-10-09 |
| CVE-2016-3715In CISA KEVExploitedThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.ImageMagick · ImageMagick · CVSS 5.5 · 2016-05-05 | 5.5 | 75% | 2016-05-05 |
| CVE-2017-16651In CISA KEVExploitedRoundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including configuration files,…Roundcube · Roundcube Webmail · CVSS 7.8 · 2017-11-09 | 7.8 | 46% | 2017-11-09 |
| CVE-2017-14942CheckIntelbras WRN 150 - Authentication BypassIntelbras · Wrn 150 Firmware · 2017-09-29 | – | 61% | 2017-09-29 |
| CVE-2023-2766CheckWeaver OA 9.5 - Information DisclosureWeaver · OA · CVSS 5.3 · 2023-05-17 | 5.3 | 54% | 2023-05-17 |
| CVE-2020-24312CheckWordPress Plugin File Manager (wp-file-manager) Backup DisclosureFilemanagerpro · File Manager · 2020-08-26 | – | 16% | 2020-08-26 |
| CVE-2023-33568CheckDolibarr Unauthenticated Contacts Database TheftDolibarr · Dolibarr Erp/crm · 2023-06-13 | – | 15% | 2023-06-13 |
| CVE-2021-40149CheckReolink E1 Zoom Camera <=3.0.0.716 - Private Key DisclosureReolink · E1 Zoom Firmware · 2022-07-17 | – | 8.3% | 2022-07-17 |
| CVE-2022-0656CheckuDraw <3.3.3 - Local File InclusionWebtoprint · Web To Print Shop : uDraw · 2022-04-25 | – | 7.9% | 2022-04-25 |
| CVE-2024-6911CheckPerkinElmer ProcessPlus <= 1.11.6507.0 - Local File InclusionPerkinElmer · ProcessPlus · CVSS 8.7 · 2024-07-22 | 8.7 | 4.9% | 2024-07-22 |
| CVE-2022-26271Check74cmsSE v3.4.1 - Arbitrary File Read74cms · 74cms · 2022-03-28 | – | 4.5% | 2022-03-28 |
| CVE-2021-40150CheckReolink E1 Zoom Camera <=3.0.0.716 - Information DisclosureReolink · E1 Zoom Firmware · 2022-07-17 | – | 4.0% | 2022-07-17 |
| CVE-2022-25497CheckCuppa CMS v1.0 - Local File InclusionCuppacms · Cuppacms · 2022-03-15 | – | 3.7% | 2022-03-15 |
| CVE-2022-4140CheckWordPress Welcart e-Commerce <2.8.5 - Arbitrary File AccessWelcart · Welcart e-Commerce · CVSS 7.5 · 2023-01-02 | 7.5 | 3.2% | 2023-01-02 |
| CVE-2022-44356CheckWAVLINK Quantum D4G (WL-WN531G3) - Information DisclosureWavlink · Wl-Wn531g3 Firmware · CVSS 7.5 · 2022-11-29 | 7.5 | 3.1% | 2022-11-29 |
| CVE-2022-33901CheckWordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File ReadMultiSafepay · MultiSafepay plugin for WooCommerce (WordPress plugin) · CVSS 5.3 · 2022-07-22 | 5.3 | 2.8% | 2022-07-22 |
| CVE-2022-34049CheckWAVLINK WN530HG4 - Improper Access ControlWavlink · Wl-Wn530hg4 Firmware · 2022-07-20 | – | 2.7% | 2022-07-20 |
| CVE-2023-38952CheckZKTeco BioTime <= 9.0.1 - Privilege EscalationZkteco · Biotime · CVSS 7.5 · 2023-08-03 | 7.5 | 2.7% | 2023-08-03 |
| CVE-2024-4836CheckEdito CMS - Sensitive Data LeakEdito · Edito CMS · CVSS 7.5 · 2024-07-02 | 7.5 | 2.6% | 2024-07-02 |
| CVE-2026-25231CheckFileRise <= 3.3.0 - Unauthenticated File Readerror311 · FileRise · CVSS 7.5 · 2026-02-09 | 7.5 | 1.7% | 2026-02-09 |
| CVE-2024-9765CheckEKC Tournament Manager WordPress plugin - Path TraversalLukashuser · EKC Tournament Manager · CVSS 6.5 · 2025-05-15 | 6.5 | 1.6% | 2025-05-15 |
| CVE-2021-4463CheckLongjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File DownloadShenzhen Longjing Technology Co. Ltd. · BEMS API · CVSS 8.7 · 2025-11-12 | 8.7 | 1.5% | 2025-11-12 |
| CVE-2026-29066CheckTinaCMS - Path Traversal@tinacms · cli · CVSS 6.2 · 2026-03-12 | 6.2 | 1.1% | 2026-03-12 |
| CVE-2024-13126CheckWordPress Download Manager < 3.3.07 - Unauthenticated Data ExposureW3eden · Download Manager · CVSS 4.6 · 2025-03-16 | 4.6 | 0.5% | 2025-03-16 |
| CVE-2023-50164Apache Struts: File upload component had a directory traversal vulnerabilityApache Software Foundation · Apache Struts · 2023-12-07 | – | 81% | 2023-12-07 |
| CVE-2020-15175Unauthenticated File Deletion in GLPIglpi-project · glpi · CVSS 7.4 · 2020-10-07 | 7.4 | 70% | 2020-10-07 |
| CVE-2024-53676A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution.Hewlett Packard Enterprise (HPE) · HPE Insight Remote Support · CVSS 9.8 · 2024-11-27 | 9.8 | 56% | 2024-11-27 |
| CVE-2024-39931Gogs through 0.13.0 allows deletion of internal files.Gogs · Gogs · CVSS 9.9 · 2024-07-04 | 9.9 | 53% | 2024-07-04 |
| CVE-2025-61734Apache Kylin: improper restriction of file readApache Software Foundation · Apache Kylin · CVSS 7.5 · 2025-10-02 | 7.5 | 29% | 2025-10-02 |
| CVE-2024-6209unauthorized file accessABB · ASPECT-Enterprise · CVSS 10 · 2024-07-05 | 10.0 | 17% | 2024-07-05 |
| CVE-2026-25137NixOs Odoo database and filestore publicly accessible with default odoo configurationNixOS · nixpkgs · CVSS 9.1 · 2026-02-02 | 9.1 | 10% | 2026-02-02 |
| CVE-2018-16946LG LNB*, LND*, LNU*, and LNV* smart network camera devices have broken access control. Attackers are able to download /updownload/t.report (aka Log & Report) files and download ba…Lg · Lnb5110 Firmware · 2018-09-12 | – | 9.3% | 2018-09-12 |
| CVE-2025-32819A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting…SonicWall · SMA100 · CVSS 8.8 · 2025-05-07 | 8.8 | 6.6% | 2025-05-07 |
| CVE-2022-41343registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-fa…Dompdf Project · Dompdf · CVSS 7.5 · 2022-09-25 | 7.5 | 6.0% | 2022-09-25 |
| CVE-2023-34834A Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default port 5080, allows attackers to gain sensitive information about the configured databa…Mcl-Collection · Mcl-Net Firmware · 2023-06-29 | – | 4.0% | 2023-06-29 |
| CVE-2023-36664Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).Artifex · Ghostscript · 2023-06-25 | – | 3.9% | 2023-06-25 |
| CVE-2017-11829Microsoft Windows 10 allows an elevation of privilege vulnerability when the Windows Update Delivery Optimization does not properly enforce file share permissions.Microsoft Corporation · Microsoft Windows 10 · 2017-10-13 | – | 3.8% | 2017-10-13 |
| CVE-2020-11976By crafting a special URL it is possible to make Wicket deliver unprocessed HTML templates. This would allow an attacker to see possibly sensitive information inside a HTML templa…Apache · Apache Wicket · 2020-08-11 | – | 3.8% | 2020-08-11 |
| CVE-2019-17221PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. The vulnerability exists in the page.open() function of t…Phantomjs · Phantomjs · 2019-11-05 | – | 3.4% | 2019-11-05 |
| CVE-2009-3597Digitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct re…Digitaldesign Cms Project · Digitaldesign Cms · 2009-10-08 | – | 3.2% | 2009-10-08 |
| CVE-2021-37348Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of a pathname in index.php.Nagios · Nagios Xi · 2021-08-13 | – | 2.8% | 2021-08-13 |
| CVE-2018-10869redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker may download any file accessible by the user running httpd.Redhat · redhat-certification · CVSS 7.5 · 2018-07-19 | 7.5 | 2.7% | 2018-07-19 |
| CVE-2020-13953In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run.Apache · Apache Tapestry · 2020-09-30 | – | 2.7% | 2020-09-30 |
| CVE-2015-5211Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflected File Download (RFD) attack.…Vmware · Spring Framework · 2017-05-25 | – | 2.6% | 2017-05-25 |
| CVE-2022-23377Archeevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an attacker to retrieve local files.Keep · Archeevo · 2022-03-01 | – | 2.2% | 2022-03-01 |
| CVE-2019-17112An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed service allows a basic user ("Operator" access level) to access the configuration file…Zohocorp · Manageengine Datasecurity Plus · CVSS 4.3 · 2019-10-09 | 4.3 | 2.1% | 2019-10-09 |
| CVE-2019-13140Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON commands to ubus. The 3D…Intenogroup · Eg200 Firmware · 2019-09-16 | – | 2.0% | 2019-09-16 |
| CVE-2021-43821Files Accessible to External Parties in Opencastopencast · opencast · CVSS 9.9 · 2021-12-14 | 9.9 | 2.0% | 2021-12-14 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.