CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
SolarWinds Serv-U Directory Traversal and Sensitive File Disclosure Vulnerability (CVE-2024-28995) Security Advisory
[Affected Scope] SolarWinds Serv-U FTP Server versions 15.4.2 Hotfix 1 and prior
[Impact] Unauthenticated remote attackers can exploit a directory traversal vulnerability to read sensitive host system and configuration files
[Mitigation] Immediately upgrade to SolarWinds Serv-U version 15.4.2 Hotfix 2 or later
Ruby on Rails Action View Arbitrary File Content Disclosure Vulnerability (CVE-2019-5418) Analysis and Mitigation Guide
[Affected Scope] Ruby on Rails Action View versions prior to 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1, and all v3 versions
[Impact] Unauthenticated remote attackers can exploit specially crafted Accept headers to read arbitrary files from the target system's filesystem, leading to sensitive data exposure
[Mitigation] Immediately upgrade Ruby on Rails and Action View to the patched versions, or apply temporary web server filtering rules