The Lana Downloads Manager WordPress plugin before 1.8.0 is affected by an arbitrary file download vulnerability that can be exploited by users with "Contributor" permissions or higher.

CVE-2022-24075MEDIUMCVSS 6.5EG 6.5

2022-03-17

Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files. When the HWP files were opened, the replaced script could read the files.

CVE-2022-24138HIGHCVSS 7.8EG 7.8

2022-07-06

IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite into ProgramData folder, ProgramData folder has "rwx" permissions for unprivileged users. Low privilege users can use SetOpLock to w…

CVE-2022-24694MEDIUMCVSS 4.3EG 4.3

2022-02-09

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. (Only folder names are affected. Neither file names nor file contents ar…

CVE-2022-25104HIGHCVSS 7.5EG 7.5

2022-02-24

HorizontCMS v1.0.0-beta.2 was discovered to contain an arbitrary file download vulnerability via the component /admin/file-manager/.

CVE-2022-25297HIGHCVSS 7.5EG 7.5

2022-02-21

This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save() method may enable attackers to write files to arbitrary locations outside the designated target folder.

CVE-2022-25299CRITICALCVSS 9.8EG 9.8

2022-02-18

This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder.

CVE-2022-25497MEDIUMCVSS 5.3EG 5.3

2022-03-15

CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function.

CVE-2022-26271HIGHCVSS 7.5EG 7.5

2022-03-28

74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url parameter at \index\controller\Download.php.

CVE-2022-26877MEDIUMCVSS 6.5EG 6.5

2022-04-09

Asana Desktop before 1.6.0 allows remote attackers to exfiltrate local files if they can trick the Asana desktop app into loading a malicious web page.

CVE-2022-27837MEDIUMCVSS 4.4EG 7.8

2022-04-11

A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R(11.0) and 13.0.1.1 in Android S(12.0) allows attacker to access the file with system privilege.

CVE-2022-28002HIGHCVSS 7.5EG 7.5

2022-04-08

Movie Seat Reservation v1 was discovered to contain an unauthenticated file disclosure vulnerability via /index.php?page=home.

CVE-2022-28283MEDIUMCVSS 6.5EG 6.5

2022-12-22

The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or other files that should have been inaccessible. This vulnerability affects Firefox < 99.

CVE-2022-2834MEDIUMCVSS 5.3EG 5.3

2022-10-17

The Helpful WordPress plugin before 4.5.26 puts the exported logs and feedbacks in a publicly accessible location and guessable names, which could allow attackers to download them and retrieve sensitive information such as IP, Names and Em…

CVE-2022-28445MEDIUMCVSS 6.5EG 6.5

2022-04-21

KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module.

CVE-2022-28462HIGHCVSS 7.5EG 7.5

2022-05-05

novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability.

CVE-2022-29302MEDIUMCVSS 5.5EG 5.5

2022-05-12

SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/Solar_Ftp.php.

CVE-2022-29446MEDIUMCVSS 6.8EG 7.2

2022-05-19

Authenticated (administrator or higher role) Local File Inclusion (LFI) vulnerability in Wow-Company's Counter Box plugin <= 1.1.1 at WordPress.

CVE-2022-29447MEDIUMCVSS 6.8EG 7.2

2022-05-20

Authenticated (administrator or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Hover Effects plugin <= 2.1 at WordPress.

CVE-2022-29720HIGHCVSS 7.5EG 7.5

2022-05-26

74cmsSE v3.5.1 was discovered to contain an arbitrary file read vulnerability via the component \index\controller\Download.php.

CVE-2022-2981MEDIUMCVSS 4.9EG 4.9

2022-10-10

The Download Monitor WordPress plugin before 4.5.98 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even i…

CVE-2022-30428HIGHCVSS 7.5EG 7.5

2022-05-25

In ginadmin through 05-10-2022, the incoming path value is not filtered, resulting in arbitrary file reading.

CVE-2022-31475MEDIUMCVSS 5.5EG 4.9

2022-07-21

Authenticated (custom plugin role) Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress.

CVE-2022-32143HIGHCVSS 8.8EG 8.8

2022-06-24

In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g. firmware files of the PLC. All requests are processed on the controller only if no level 1 password is configured…

CVE-2022-3287MEDIUMCVSS 6.5EG 6.5

2022-09-28

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.

CVE-2022-33158HIGHCVSS 7.8EG 7.8

2022-07-30

Trend Micro VPN Proxy Pro version 5.2.1026 and below contains a vulnerability involving some overly permissive folders in a key directory which could allow a local attacker to obtain privilege escalation on an affected system.

CVE-2022-33686LOWCVSS 2.3EG 2.3

2022-07-12

Exposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log.

CVE-2022-33901MEDIUMCVSS 5.3EG 7.5

2022-07-22

Unauthenticated Arbitrary File Read vulnerability in MultiSafepay plugin for WooCommerce plugin <= 4.13.1 at WordPress.

CVE-2022-34049MEDIUMCVSS 5.3EG 5.3

2022-07-20

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data.

CVE-2022-34464MEDIUMCVSS 6.3EG 5.5

2022-07-12

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.7.3). The affected application uses an improperly protected file to import SSH keys. This could allow attackers with access to the filesystem of the host on…

CVE-2022-35235MEDIUMCVSS 4.9EG 4.9

2022-08-23

Authenticated (admin+) Arbitrary File Read vulnerability in XplodedThemes WPide plugin <= 2.6 at WordPress.

CVE-2022-36306MEDIUMCVSS 6.5EG 6.5

2022-08-16

An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configuration file. These vulnerabilities were found in AirVelocity…

CVE-2022-36552HIGHCVSS 7.5EG 7.5

2022-08-30

Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi-bin/DownloadFlash which allows attackers to steal all data such as source code and system files via a crafted GET request.

CVE-2022-3691HIGHCVSS 7.5EG 7.5

2022-11-21

The DeepL Pro API translation plugin WordPress plugin before 1.7.5 discloses sensitive information (including the DeepL API key) in files that are publicly accessible to an external, unauthenticated visitor.

CVE-2022-37424MEDIUMCVSS 6.5EG 6.5

2022-10-28

Files or Directories Accessible to External Parties vulnerability in OpenNebula on Linux allows File Discovery.

CVE-2022-39208HIGHCVSS 7.5EG 7.5

2022-09-13

Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. All files in the /opt/onedev/sites/ directory are exposed and can be read by unauthenticated users. This directory contains all projects, including their bare git repo…

CVE-2022-40126HIGHCVSS 7.8EG 7.8

2022-09-29

A misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute arbitrary commands when Service Mode is activated.

CVE-2022-4106HIGHCVSS 7.5EG 7.5

2022-12-19

The Wholesale Market for WooCommerce WordPress plugin before 1.0.7 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download arbitrary file from …

CVE-2022-4108MEDIUMCVSS 4.9EG 4.9

2022-12-19

The Wholesale Market for WooCommerce WordPress plugin before 1.0.8 does not validate user input used to generate system path, allowing high privilege users such as admin to download arbitrary file from the server even when they should not …

CVE-2022-41343HIGHCVSS 7.5EG 7.5

2022-09-25

registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule.

CVE-2022-4140HIGHCVSS 7.5EG 7.5

2023-01-02

The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file, which could allow unauthenticated attacker to read arbitrary files on the server

CVE-2022-41710MEDIUMCVSS 5.5EG 5.5

2022-11-03

Markdownify version 1.4.1 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Markdownify. This is possible because the application does not have a CSP …

CVE-2022-42234HIGHCVSS 8.8EG 8.8

2022-10-14

There is a file inclusion vulnerability in the template management module in UCMS 1.6

CVE-2022-4236MEDIUMCVSS 6.5EG 6.5

2023-01-02

The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file via an AJAX action available to any authenticated users, which could allow users with a role as low as subscr…

CVE-2022-42834LOWCVSS 3.3EG 3.3

2023-06-23

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13, macOS Big Sur 11.7.3. An app may be able to access mail folder attachments through a temporary directory used …

CVE-2022-43414MEDIUMCVSS 5.3EG 5.3

2022-10-19

Jenkins NUnit Plugin 0.27 and earlier implements an agent-to-controller message that parses files inside a user-specified directory as test results, allowing attackers able to control agent processes to obtain test results from files in an…

CVE-2022-43449MEDIUMCVSS 6.2EG 5.5

2022-11-03

OpenHarmony-v3.1.2 and prior versions had an Arbitrary file read vulnerability via download_server. Local attackers can install an malicious application on the device and reveal any file from the filesystem that is accessible to download_s…

CVE-2022-4346MEDIUMCVSS 5.3EG 5.3

2023-01-23

The All-In-One Security (AIOS) WordPress plugin before 5.1.3 leaked settings of the plugin publicly, including the used email address.

CVE-2022-44343HIGHCVSS 7.5EG 7.5

2023-02-06

CRMEB 4.4.4 is vulnerable to Any File download.

CVE-2022-44356HIGHCVSS 7.5EG 7.5

2022-11-29

WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access control issue which allows unauthenticated attackers to download configuration data and log files.

CWE-552— Files or Directories Accessible to External Parties

CVEs classified under CWE-552page 4 of 10

Map vulnerabilities like CWE-552 to your infrastructure