15 matches found
EUVD-2018-8518
Malware in sbrugna...
EUVD-2018-8519
Malware in sbrugna...
Cross site scripting
An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...
Heap overflow
A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...
CVE-2018-16716
A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...
Path traversal
A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...
CVE-2018-16718
An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...
CVE-2018-16718
An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...
CVE-2018-16717
A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...
CVE-2018-16717
The CVE-2018-16717 entry concerns a heap-based buffer overflow in nph-viewgif.cgi within legacy NCBI ToolBox versions 2.0.7–2.2.26. Public records cite a critical impact (CVSSv3 base score 9.8) with network attack vector and no authentication, indicating a high-risk condition that could lead to c...
CVE-2018-16716
Summary of CVE-2018-16716 Affected software: NCBI ToolBox legacy versions 2.0.7 through 2.2.26. Vulnerability: Path traversal via viewcgi.cgi (and potential file deletion via nph-viewgif.cgi), enabling reading of arbitrary server files and significant information disclosure. Root cause (per sourc...
CVE-2018-16716
A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...
CVE-2018-16716: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...
CVE-2018-16718: Improper Neutralization of Input During Web Page Generation
An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...