CWE-530 · 11 records

Exposure of Backup File to an Unauthorized Control Sphere

CVEs in this class

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2024-56462No exploit	IBM QRadar SIEM is vulnerable to using components with known vulnerabilitiesibm · qradar security information and event manager · CWE-530	High8.8	—	0.4%	May 27, 2026
34Monitor	CVE-2020-36899No exploit	QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Disclosurehowfor · qihang media web digital signage · CWE-530 Pre-auth Auth bypass	High8.7	—	0.9%	Dec 10, 2025
32Monitor	CVE-2014-125136No exploit	C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Database Backup Exposure via /admin/backupc97net · qengine cms · CWE-530 Pre-auth	High8.2	—	0.4%	Oct 28, 2026
30Monitor	CVE-2023-5297No exploit	Xinhu RockOA start backuprockoa · rockoa · CWE-530 Pre-auth	High7.5	—	0.8%	Sep 29, 2023
30Monitor	CVE-2024-12330No exploit	WP Database Backup – Unlimited Database & Files Backup by Backup for WP <= 7.3 - Unauthenticated Database Back-Up Exposuredatabasebackup · wp database backup – unlimited database & files backup by backup for wp · CWE-530 Pre-auth	High7.5	—	0.5%	Jan 9, 2025
18Monitor	CVE-2024-2364No exploit	Musicshelf Backup androidmanifest.xml backupkirillmakarov · musicshelf · CWE-530	Medium4.6	—	0.3%	Mar 10, 2024
9Monitor	CVE-2024-3124No exploit	fridgecow smartalarm Backup File androidmanifest.xml backupfridgecow · smartalarm · CWE-530	Low2.4	—	0.2%	Apr 1, 2024
9Monitor	CVE-2024-3128No exploit	Replify-Messenger Backup File androidmanifest.xml backupCWE-530	Low2.4	—	0.2%	Apr 1, 2024
9Monitor	CVE-2024-3430No exploit	QKSMS Backup File androidmanifest.xml backupCWE-530	Low2.4	—	0.2%	Apr 7, 2024
7Monitor	CVE-2024-2567No exploit	jurecapuder AndroidWeatherApp Backup File androidmanifest.xml backupjurecapuder · androidweatherapp · CWE-530	Low1.8	—	0.2%	Mar 17, 2024
0Monitor	CVE-2025-3773No exploit	A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin localtrellix · system information reporter · CWE-530	—0.0	—	0.1%	Jun 26, 2025

CVE-2024-56462
35Monitor
IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
HighCVSS 8.8No exploitEPSS 0%
ibm · qradar security information and event managerMay 27, 2026
CVE-2020-36899
34Monitor
QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Disclosure
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
howfor · qihang media web digital signageDec 10, 2025
CVE-2014-125136
32Monitor
C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Database Backup Exposure via /admin/backup
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
c97net · qengine cmsOct 28, 2026
CVE-2023-5297
30Monitor
Xinhu RockOA start backup
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
rockoa · rockoaSep 29, 2023
CVE-2024-12330
30Monitor
WP Database Backup – Unlimited Database & Files Backup by Backup for WP <= 7.3 - Unauthenticated Database Back-Up Exposure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
databasebackup · wp database backup – unlimited database & files backup by backup for wpJan 9, 2025
CVE-2024-2364
18Monitor
Musicshelf Backup androidmanifest.xml backup
MediumCVSS 4.6No exploitEPSS 0%
kirillmakarov · musicshelfMar 10, 2024
CVE-2024-3124
9Monitor
fridgecow smartalarm Backup File androidmanifest.xml backup
LowCVSS 2.4No exploitEPSS 0%
fridgecow · smartalarmApr 1, 2024
CVE-2024-3128
9Monitor
Replify-Messenger Backup File androidmanifest.xml backup
LowCVSS 2.4No exploitEPSS 0%
Apr 1, 2024
CVE-2024-3430
9Monitor
QKSMS Backup File androidmanifest.xml backup
LowCVSS 2.4No exploitEPSS 0%
Apr 7, 2024
CVE-2024-2567
7Monitor
jurecapuder AndroidWeatherApp Backup File androidmanifest.xml backup
LowCVSS 1.8No exploitEPSS 0%
jurecapuder · androidweatherappMar 17, 2024
CVE-2025-3773
0Monitor
A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local
CVSS 0.0No exploitEPSS 0%
trellix · system information reporterJun 26, 2025

All vulnerability classes