NVD disclosure day

Published threat advisories for June 6, 2024

CVE-2024-3166

AnythingLLM Cross-Site Scripting Leading to Remote Code Execution

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A cross-site scripting vulnerability exists in AnythingLLM, allowing arbitrary JavaScript execution when embedding external web content. In the desktop version, this could escalate to remote code execution, posing a risk to users and systems interacting with the application's content integration features. This is a cri

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2024-28995

SolarWinds Serv-U: Sensitive File Access Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

SolarWinds Serv-U has a directory traversal vulnerability, allowing unauthorized access to sensitive host files. This impacts affected organizations by risking data confidentiality and potentially facilitating further compromise.

NVD modified: NVD date unavailable • CISA KEV