CVE-2018-16718

The CVE-2018-16718 entry describes an XSS vulnerability in the NCBI ToolBox component wwwblast.c for legacy versions 2.0.7–2.2.26, exploitable via a crafted -z1 argument. The affected code path and exact root cause are not elaborated in the provided documents beyond stating XSS exists. No explici...

CVE-2018-16717

A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...

CVE-2018-16717

The CVE-2018-16717 entry concerns a heap-based buffer overflow in nph-viewgif.cgi within legacy NCBI ToolBox versions 2.0.7–2.2.26. Public records cite a critical impact (CVSSv3 base score 9.8) with network attack vector and no authentication, indicating a high-risk condition that could lead to c...

CVE-2018-16716

Summary of CVE-2018-16716 Affected software: NCBI ToolBox legacy versions 2.0.7 through 2.2.26. Vulnerability: Path traversal via viewcgi.cgi (and potential file deletion via nph-viewgif.cgi), enabling reading of arbitrary server files and significant information disclosure. Root cause (per sourc...

CVE-2018-16716

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...

PT-2019-9368

Name of the Vulnerable Software and Affected Versions NCBI ToolBox versions 2.0.7 through 2.2.26 Description A heap-based buffer overflow issue exists in the nph-viewgif.cgi component. Recommendations For versions 2.0.7 through 2.2.26, consider disabling the nph-viewgif.cgi component until a patc...

PT-2019-9367

Name of the Vulnerable Software and Affected Versions NCBI ToolBox versions 2.0.7 through 2.2.26 Description A path traversal issue exists in the NCBI ToolBox, potentially allowing the reading of arbitrary files or file deletion. This is achieved via the nph-viewgif.cgi query string...

PT-2019-9369

Name of the Vulnerable Software and Affected Versions NCBI ToolBox versions 2.0.7 through 2.2.26 Description A cross-site scripting XSS issue exists due to a crafted -z1 argument. Recommendations For versions 2.0.7 through 2.2.26, avoid using the -z1 argument until a fix is available...

CVE-2018-16718: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...

CVE-2018-16717: Out-of-bounds Write

A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...

CVE-2018-16716: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...

[SECURITY] Fedora 30 Update: toolbox-0.0.8-2.fc30

Toolbox is offers a familiar RPM based environment for developing and debugging software that runs fully unprivileged using Podman...

Softing OPC Toolbox Detection (Windows SMB Login)

SMB login-based detection of Softing OPC Toolbox. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Intel Solid State Drive Toolbox Elevation of Privilege Vulnerability

Intel Solid State Drive Toolbox is a driver management software from Intel USA for browsing SSD Solid State Drive information. An elevation of privilege vulnerability exists in Intel Solid State Drive Toolbox versions prior to 3.5.7, which can be exploited by a local attacker to elevate privilege...

CVE-2018-18097

Improper directory permissions in Intel Solid State Drive Toolbox before 3.5.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2018-18097

Improper directory permissions in Intel Solid State Drive Toolbox before 3.5.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2018-18097

Improper directory permissions in Intel Solid State Drive Toolbox before 3.5.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2018-18097

CVE-2018-18097 affects Intel® Solid State Drive Toolbox before 3.5.7, where improper directory permissions may allow an authenticated local user to escalate privileges. The issue is confirmed by multiple connected sources, including Intel’s advisory (INTEL-SA-00205) and CNVD/NVD records, which de...

CVE-2018-18097: Incorrect Permission Assignment for Critical Resource

Improper directory permissions in Intel Solid State Drive Toolbox before 3.5.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2018-14344

Name of the Vulnerable Software and Affected Versions Intel Solid State Drive Toolbox versions prior to 3.5.7 Description The issue is related to improper directory permissions, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations F...