18 matches found
EUVD-2018-8519
Malware in sbrugna...
EUVD-2018-8518
Malware in sbrugna...
CVE-2018-16716
A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...
CVE-2018-16718
An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...
Cross site scripting
An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...
Path traversal
A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...
Heap overflow
A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...
CVE-2018-16718
An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...
CVE-2018-16717
The CVE-2018-16717 entry concerns a heap-based buffer overflow in nph-viewgif.cgi within legacy NCBI ToolBox versions 2.0.7–2.2.26. Public records cite a critical impact (CVSSv3 base score 9.8) with network attack vector and no authentication, indicating a high-risk condition that could lead to c...
CVE-2018-16717
A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...
CVE-2018-16716
Summary of CVE-2018-16716 Affected software: NCBI ToolBox legacy versions 2.0.7 through 2.2.26. Vulnerability: Path traversal via viewcgi.cgi (and potential file deletion via nph-viewgif.cgi), enabling reading of arbitrary server files and significant information disclosure. Root cause (per sourc...
CVE-2018-16716
A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...
PT-2019-9369
Name of the Vulnerable Software and Affected Versions NCBI ToolBox versions 2.0.7 through 2.2.26 Description A cross-site scripting XSS issue exists due to a crafted -z1 argument. Recommendations For versions 2.0.7 through 2.2.26, avoid using the -z1 argument until a fix is available...
PT-2019-9368
Name of the Vulnerable Software and Affected Versions NCBI ToolBox versions 2.0.7 through 2.2.26 Description A heap-based buffer overflow issue exists in the nph-viewgif.cgi component. Recommendations For versions 2.0.7 through 2.2.26, consider disabling the nph-viewgif.cgi component until a patc...
PT-2019-9367
Name of the Vulnerable Software and Affected Versions NCBI ToolBox versions 2.0.7 through 2.2.26 Description A path traversal issue exists in the NCBI ToolBox, potentially allowing the reading of arbitrary files or file deletion. This is achieved via the nph-viewgif.cgi query string...
CVE-2018-16717: Out-of-bounds Write
A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...
CVE-2018-16718: Improper Neutralization of Input During Web Page Generation
An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...
CVE-2018-16716: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...