CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Gladinet CentreStack and Triofox Hardcoded Cryptographic Key Arbitrary Local File Inclusion (LFI) Vulnerability (CVE-2025-14611) Security Advisory
[Affected Scope] Gladinet CentreStack and Triofox solutions prior to version 16.12.10420.56791
[Impact] Unauthenticated remote attackers can exploit hardcoded AES keys to read arbitrary local files and potentially achieve full system compromise
[Mitigation] Immediately upgrade to version 16.12.10420.56791 or later and restrict access to publicly exposed endpoints
Juniper Networks Junos OS J-Web Local File Inclusion (LFI) and Remote Code Execution Vulnerability (CVE-2020-1631) Analysis and Mitigation Guide
[Affected Scope] Juniper Networks Junos OS devices with HTTP/HTTPS services (J-Web, Web Authentication, Dynamic-VPN, etc.) enabled
[Impact] Unauthenticated attackers can read arbitrary system files, hijack active administrator session tokens, or inject commands into web logs to execute limited commands
[Mitigation] Upgrade Junos OS to the recommended patched release, or disable HTTP/HTTPS and J-Web services if they are not business-critical
Apache Tomcat AJP Connector File Read and Remote Code Execution Vulnerability (Ghostcat, CVE-2020-1938)
[Affected Scope] Apache Tomcat versions 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50, and 7.0.0 to 7.0.99
[Impact] Attackers with access to the AJP port (default 8009) can read arbitrary files from the web application or execute arbitrary code (RCE) if file upload is permitted
[Mitigation] Upgrade to Apache Tomcat 9.0.31, 8.5.51, 7.0.100 or later, or disable/restrict the AJP Connector in the configuration
Paessler PRTG Network Monitor Authentication Bypass and Admin Creation Vulnerability (CVE-2018-19410) Analysis & Mitigation Guide
[Affected Scope] Paessler PRTG Network Monitor versions prior to 18.2.40.1683
[Impact] Unauthenticated remote attackers can exploit a Local File Inclusion (LFI) vulnerability to create unauthorized accounts with administrative privileges, leading to full system compromise
[Mitigation] Immediately upgrade PRTG Network Monitor to version 18.2.40.1683 or later and restrict external access to the web console
Adobe ColdFusion Administrator Console Directory Traversal LFI Vulnerability (CVE-2010-2861)
[Affected Scope] Adobe ColdFusion 9.0.1 and earlier versions containing the CFIDE/administrator console
[Impact] Unauthenticated remote attackers can exploit directory traversal to read arbitrary system and configuration files, potentially retrieving administrator password hashes and fully compromising the server
[Mitigation] Apply the official APSB10-18 security patch, restrict external access to the CFIDE directory, or upgrade to a supported secure version