The vulnerability of the Zabbix universal monitoring system, related to the use of files and directories accessible to external parties, allows a intruder to gain access to confidential data.

The vulnerability of the Zabbix universal monitoring system lies in the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

CVE-2023-5101

Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged remote attacker to download various files from the server via HTTP requests...

CVE-2023-5101

CVE-2023-5101 affects the SICK APU’s RDT400 component, where an unprivileged remote attacker can download various files from the server via HTTP requests. Public descriptions indicate an information-disclosure risk with low confidentiality impact (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N; b...

CVE-2023-3712

CVE-2023-3712 affects Honeywell PM43 printers (32-bit ARM) via Files or Directories Accessible to External Parties in printer web page modules, enabling privilege escalation. Affected are PM43 versions prior to P10.19.050004; remediation advised to update to MR19.5 (e.g., P10.19.050006). The init...

CVE-2023-2538

A CWE-552 "Files or Directories Accessible to External Parties” in the web interface of the Tyan S5552 BMC version 3.00 allows an unauthenticated remote attacker to retrieve the private key of the TLS certificate in use by the BMC via forced browsing. This can then be abused to perform...

CVE-2023-31066

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Different users in InLong could delete, edit, stop, and start others' sources! Users are advised to upgrade to Apache InLong's...

CVE-2023-31066

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Different users in InLong could delete, edit, stop, and start others' sources! Users are advised to upgrade to Apache InLong's...

CVE-2023-31064 Apache InLong: Insecurity direct object references cancelling applications

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. the user in InLong could cancel an application that doesn't belongs to it. Users are advised to upgrade to Apache InLong's 1.7....

CVE-2021-43772: Files or Directories Accessible to External Parties

Trend Micro Security 2021 v17.0 Consumer contains a vulnerability that allows files inside the protected folder to be modified without any detection...

CVE-2018-10867: Files or Directories Accessible to External Parties

Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible by the apached user...

CVE-2018-12408 TIBCO ActiveMatrix BusinessWorks 5.X XML eXternal Entity Vulnerability

The BusinessWorks engine component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks, TIBCO ActiveMatrix BusinessWorks for z/Linux, and TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO Silver Fabric contains a vulnerability that may allow XML eXternal Entity XXE attacks via incomin...

CVE-2005-4825

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service disk consumption, or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue to CVE-2005-4332...