Vulnerabilities (CVE)

Filtered by CWE-548
Total 13 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-2827 3 Ibm, Linux, Microsoft 4 Aix, Sterling File Gateway, Linux Kernel and 1 more 2025-08-02 N/A 4.3 MEDIUM
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 could disclose sensitive installation directory information to an authenticated user that could be used in further attacks against the system.
CVE-2025-23378 1 Dell 1 Powerscale Onefs 2025-07-15 N/A N/A
Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.0, contains an exposure of information through directory listing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
CVE-2024-28766 1 Ibm 2 Security Directory Integrator, Security Verify Directory Integrator 2025-07-14 N/A 7.5 HIGH
IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive information about directory contents that could aid in further attacks against the system.
CVE-2025-1138 1 Ibm 2 Infosphere Information Server, Infosphere Information Server On Cloud 2025-06-04 N/A 4.3 MEDIUM
IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in further attacks against the system through a directory listing.
CVE-2025-4807 1 Senior-walter 1 Online Student Clearance System 2025-05-28 N/A 7.5 HIGH
A vulnerability, which was classified as problematic, was found in SourceCodester Online Student Clearance System 1.0. This affects an unknown part. The manipulation leads to exposure of information through directory listing. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-2651 1 Oretnom23 1 Online Eyewear Shop 2025-05-14 N/A 5.3 MEDIUM
A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /oews/admin/. The manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. Multiple sub-directories are affected.
CVE-2025-2038 1 Code-projects 1 Blood Bank Management System 2025-05-13 N/A 7.3 HIGH
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /upload/. The manipulation leads to exposure of information through directory listing. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-35113 1 Ibm 1 Control Center 2025-03-04 N/A 6.5 MEDIUM
IBM Control Center 6.2.1 and 6.3.1 could allow an authenticated user to obtain sensitive information exposed through a directory listing.
CVE-2024-3707 2024-07-05 N/A N/A
Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to enumerate all files in the web tree by accessing a php file.
CVE-2021-27505 1 Myscada 1 Mypro 2022-05-24 5.0 MEDIUM 7.5 HIGH
mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive directory listing information.
CVE-2021-32511 1 Qsan 1 Storage Manager 2021-09-20 4.0 MEDIUM 4.3 MEDIUM
QSAN Storage Manager through directory listing vulnerability in ViewBroserList allows remote authenticated attackers to list arbitrary directories via the file path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.
CVE-2021-32510 1 Qsan 1 Storage Manager 2021-09-20 4.0 MEDIUM 4.3 MEDIUM
QSAN Storage Manager through directory listing vulnerability in antivirus function allows remote authenticated attackers to list arbitrary directories by injecting file path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.
CVE-2021-32515 1 Qsan 1 Storage Manager 2021-09-20 5.0 MEDIUM 5.3 MEDIUM
Directory listing vulnerability in share_link in QSAN Storage Manager allows attackers to list arbitrary directories and further access credential information. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.