CWE-548.

Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret

• Red Hat OpenShift Container Platform 4
• Red Hat OpenShift Container Platform 5
• CWE-548

An exposure of information through directory listing issue exists in CONPROSYS PAC Series.

• Contec Co., Ltd. Integrated Type CPS-PC341[][]-*-9201
• Contec Co., Ltd. Configurable type CPS-PCS341[][]-DS1-1201
• CWE-548

An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series.

• Contec Co., Ltd. M2M Gateway Integrated Type CPS-MG341*
• Contec Co., Ltd. M2M Gateway Configurable type CPS-MGS341*
• CWE-548

SourceCodester Best Employee Management System Profile exposure of information through directory listing

• SourceCodester Best Employee Management System
• Information disclosure
• CWE-548

Lyrion Music Server 9.2.0 Arbitrary Directory Listing

• LMS Community Lyrion Music Server
• CWE-548

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability.

• Dell PowerFlex Manager (Appliance)
• Dell PowerFlex Manager (Rack)
• CWE-548

Vvveb < 1.0.8.3 Directory Listing Information Disclosure

• givanz Vvveb
• CWE-548

Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]

• IBM Cloud Pak System
• CWE-548

Rack has a Directory Traversal via Rack:Directory

• Path traversal
• CWE-548

<2.2.22 || >=3.0.0.beta1, <3.1.20 || >=3.2.0, <3.2.5 · fixed in 2.2.22, 3.1.20, 3.2.5

RED-V Super Digital Signage System 5.1.1 Log Information Disclosure Vulnerability

• RED-V Super Digital Signage System RXV-A740R
• CWE-548

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log Directory

• SOUND4 Ltd. Impact/Pulse/First
• SOUND4 Ltd. Impact/Pulse Eco
• CWE-548

OpenBMCS Directory Listing Information Disclosure

• OPEN BMCS OpenBMCS
• CWE-548

IBM QRadar SIEM is affected by an information disclosure vulnerability

• IBM QRadar SIEM
• CWE-548

SourceCodester Farm Management System exposure of information through directory listing

• SourceCodester Farm Management System
• Information disclosure
• CWE-548

Moodle's error handling leads to sensitive information disclosure

• CWE-548

>=4.5.0-beta, <4.5.7 || >=5.0.0-beta, <5.0.3 · fixed in 4.5.7, 5.0.3

IBM Content Navigator information disclosure

• IBM Content Navigator
• CWE-548

Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure

• CWE-548

<0.17.0 · fixed in 0.17.0

Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control.

• CWE-548

IBM Sterling File Gateway information disclosure

• IBM Sterling File Gateway
• CWE-548

CVE-2025-27452

• Endress+Hauser MEAC300-FNADE4
• CWE-548

SourceCodester Client Database Management System exposure of information through directory listing

• SourceCodester Client Database Management System
• Information disclosure
• CWE-548

SourceCodester Online Student Clearance System exposure of information through directory listing

• SourceCodester Online Student Clearance System
• Information disclosure
• CWE-548

IBM Information Server information disclosure

• IBM InfoSphere Information Server
• CWE-548

A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0.

• CWE-548

Dell PowerScale OneFS: Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.0…

• Dell PowerScale OneFS
• CWE-548

SourceCodester Employee and Visitor Gate Pass Logging System exposure of information through directory listing

• SourceCodester Employee and Visitor Gate Pass Logging System
• Information disclosure
• CWE-548

SourceCodester Online Eyewear Shop admin exposure of information through directory listing

• SourceCodester Online Eyewear Shop
• Information disclosure
• CWE-548

code-projects Blood Bank Management System upload exposure of information through directory listing

• code-projects Blood Bank Management System
• Information disclosure
• CWE-548

IBM Security Directory Integrator information disclosure

• IBM Security Directory Integrator
• IBM Security Verify Directory Integrator
• CWE-548

IBM Control Center information disclosure

• IBM Control Center
• CWE-548

@saltcorn/server arbitrary file and directory listing when accessing build mobile app results

• CWE-548

<1.0.0-beta.14 · fixed in 1.0.0-beta.14

SourceCodester Food Ordering Management System includes exposure of information through directory listing

• SourceCodester Food Ordering Management System
• CWE-548

IBM Aspera Faspex information disclosure

• IBM Aspera Faspex
• CWE-548

CodeAstro Online Railway Reservation System assets exposure of information through directory listing

• CodeAstro Online Railway Reservation System
• CWE-548

SourceCodester Online Graduate Tracer System nbproject exposure of information through directory listing

• SourceCodester Online Graduate Tracer System
• CWE-548

SPX (aka php-spx) through 0.4.15 allows SPX_UI_URI Directory Traversal to read arbitrary files.

• Path traversal
• CWE-548

Exposure of Information Through Directory Listing vulnerability in OpenGnsys

• OpenGnsys
• CWE-548

Avada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing

• ThemeFusion Avada | Website Builder For WordPress & WooCommerce
• CWE-548

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before.

• CWE-548

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization.

• CWE-548

A Site-wide directory listing vulnerability in /fm in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to list the files hosted by the web application.

• CWE-548

Directory Traversal on Shop Beat Services

• Shop Beat studio
• CWE-548

tombh jekbox server.rb exposure of information through directory listing

• tombh jekbox
• CWE-548

saxman maps-js-icoads exposure of information through directory listing

• saxman maps-js-icoads
• CWE-548

Pentaho Business Analytics Server - Exposure of Information Through Directory Listing

• Hitachi Vantara Pentaho Business Analytics Server
• CWE-548

Chcnav - P5E GNSS Directory listing

• Chcnav - P5E GNSS
• CWE-548

mySCADA myPRO Exposure of Information Through Directory Listing

• mySCADA myPRO
• CWE-548

Fresenius Kabi Agilia Connect Infusion System exposure of information through directory listing

• Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard)
• CWE-548

Dell PowerScale OneFS: Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x…

• Dell PowerScale OneFS
• CWE-548

QSAN Storage Manager - Exposure of Information Through Directory Listing

• QSAN Storage Manager
• CWE-548

QSAN Storage Manager - Exposure of Information Through Directory Listing Following via ViewBroserList function

• QSAN Storage Manager
• CWE-548

QSAN Storage Manager - Exposure of Information Through Directory Listing Following via Antivirus function

• QSAN Storage Manager
• CWE-548

AquaNPlayer directory traversing vulnerability

• cdnetworks AquaNPlayer
• CWE-548

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8).

• Siemens AG Spectrum Power 4
• CWE-548

Directory traversal in Rack::Directory app bundled with Rack

• Path traversal
• CWE-548

<2.1.3 · fixed in 2.1.3

Information exposure in the upload directory in PrestaShop

• PrestaShop
• CWE-548

Unauthorized File Access in harp

• CWE-548

<0.40.2 · fixed in 0.40.2

Path Traversal in serve

• CWE-548

<7.0.0 · fixed in 7.0.0

Path Traversal in simplehttpserver

• CWE-548

<=1.7.2 · no fixed version yet

NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior.

• ICS-CERT NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior.
• CWE-548