Vulnerabilities > File and Directory Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2018-06-11 CVE-2017-5387 File and Directory Information Exposure vulnerability in Mozilla Firefox
The existence of a specifically requested local file can be found due to the double firing of the "onerror" when the "source" attribute on a "<track>" tag refers to a file that does not exist if the source page is loaded locally.
local
low complexity
mozilla CWE-538
3.3
2018-05-15 CVE-2018-10590 File and Directory Information Exposure vulnerability in Advantech products
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an information exposure vulnerability through directory listing has been identified, which may allow an attacker to find important files that are not normally visible.
network
low complexity
advantech CWE-538
7.5
2017-07-27 CVE-2016-10399 File and Directory Information Exposure vulnerability in Sendio
Sendio versions before 8.2.1 were affected by a Local File Inclusion vulnerability that allowed an unauthenticated, remote attacker to read potentially sensitive system files via a specially crafted URL.
network
low complexity
sendio CWE-538
7.5