CWE-219

7 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 1High 3Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-45140
Chamilo LMS CStudio upload flow allows unauthenticated remote code execution
chamilo · chamilo-lms
Critical9.8
CVE-2024-56159
Server source code is exposed to the public if sourcemaps are enabled
withastro · astro
High7.8
CVE-2024-39776
Avtec Outpost Storage of File with Sensitive Data Under Web Root
Avtec · Outpost 0810
High8.7
CVE-2023-39467
Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability
Triangle MicroWorks · SCADA Data Gateway
Medium5.3
CVE-2022-36306
An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and…
Airspan · AirVelocity
Medium6.5
CVE-2022-21236
An information disclosure vulnerability exists due to a web server misconfiguration in the Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP…
Product not named
High8.1
CVE-2002-2024
Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3)…
Product not named
Medium5.3