CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Wing FTP Server Information Disclosure Vulnerability (CVE-2025-47813) - Full Installation Path Leakage Advisory
[Affected Scope] All Wing FTP Server installations running versions prior to 7.4.4
[Impact] Attackers can disclose the full local installation path of the application by supplying an excessively long value in the UID cookie, facilitating subsequent targeted attacks
[Mitigation] Immediately upgrade Wing FTP Server to version 7.4.4 or later, and deploy WAF rules to restrict anomalous cookie lengths in the interim
Microsoft .NET Framework Information Disclosure Vulnerability (CVE-2024-29059) Security Advisory
[Affected Scope] Systems running affected versions of Microsoft .NET Framework and .NET Core, particularly within IIS or web application server environments.
[Impact] Unauthenticated remote attackers can trigger specific exceptions to obtain sensitive debugging information, including internal system paths and memory states.
[Mitigation] Apply the official Microsoft cumulative security updates immediately and disable detailed error messages in the web.config configuration.
Microsoft Windows XMLDOM ActiveX Control Information Disclosure Vulnerability (CVE-2013-7331)
[Affected Scope] Microsoft.XMLDOM ActiveX control and Internet Explorer on Microsoft Windows 8.1 and earlier
[Impact] Remote attackers can determine the existence of local pathnames, UNC shares, intranet hostnames, and IP addresses via error code analysis
[Mitigation] Apply the MS14-052 cumulative security update or restrict ActiveX execution in Internet Explorer