CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
SolarWinds Serv-U Directory Traversal and Sensitive File Disclosure Vulnerability (CVE-2024-28995) Security Advisory
[Affected Scope] SolarWinds Serv-U FTP Server versions 15.4.2 Hotfix 1 and prior
[Impact] Unauthenticated remote attackers can exploit a directory traversal vulnerability to read sensitive host system and configuration files
[Mitigation] Immediately upgrade to SolarWinds Serv-U version 15.4.2 Hotfix 2 or later
Ruby on Rails Action View Arbitrary File Content Disclosure Vulnerability (CVE-2019-5418) Analysis and Mitigation Guide
[Affected Scope] Ruby on Rails Action View versions prior to 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1, and all v3 versions
[Impact] Unauthenticated remote attackers can exploit specially crafted Accept headers to read arbitrary files from the target system's filesystem, leading to sensitive data exposure
[Mitigation] Immediately upgrade Ruby on Rails and Action View to the patched versions, or apply temporary web server filtering rules
Roundcube Webmail Arbitrary File Disclosure Vulnerability (CVE-2017-16651) Security Advisory
[Affected Scope] Roundcube Webmail versions prior to 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3
[Impact] An authenticated attacker can read arbitrary files on the host's filesystem, including sensitive configuration files containing database credentials
[Mitigation] Immediately upgrade Roundcube Webmail to the patched versions (1.1.10, 1.2.7, 1.3.3, or later)