NCBI ToolBox - Directory Traversal

NCBI ToolBox 2.0.7 through 2.2.26 legacy versions contain a path traversal vulnerability via viewcgi.cgi which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string. id: CVE-2018-16716 info: name: NCBI ToolBox -...

EUVD-2018-8519

Malware in sbrugna...

EUVD-2018-8518

Malware in sbrugna...

All Vulnerabilities for dtd.wip.ncbi.nlm.nih.gov Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| dtd.wip.ncbi.nlm.nih.gov ---|--- Open B...

ncbi.nlm.nih.gov Cross Site Scripting vulnerability OBB-1459143

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Heap overflow

A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...

Cross site scripting

An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...

Path traversal

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...

CVE-2018-16717

A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...

CVE-2018-16716

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...

CVE-2018-16718

An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...

CVE-2018-16718

An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...

CVE-2018-16718

The CVE-2018-16718 entry describes an XSS vulnerability in the NCBI ToolBox component wwwblast.c for legacy versions 2.0.7–2.2.26, exploitable via a crafted -z1 argument. The affected code path and exact root cause are not elaborated in the provided documents beyond stating XSS exists. No explici...

CVE-2018-16717

A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...

CVE-2018-16717

The CVE-2018-16717 entry concerns a heap-based buffer overflow in nph-viewgif.cgi within legacy NCBI ToolBox versions 2.0.7–2.2.26. Public records cite a critical impact (CVSSv3 base score 9.8) with network attack vector and no authentication, indicating a high-risk condition that could lead to c...

CVE-2018-16716

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...

CVE-2018-16716

Summary of CVE-2018-16716 Affected software: NCBI ToolBox legacy versions 2.0.7 through 2.2.26. Vulnerability: Path traversal via viewcgi.cgi (and potential file deletion via nph-viewgif.cgi), enabling reading of arbitrary server files and significant information disclosure. Root cause (per sourc...

PT-2019-9368

Name of the Vulnerable Software and Affected Versions NCBI ToolBox versions 2.0.7 through 2.2.26 Description A heap-based buffer overflow issue exists in the nph-viewgif.cgi component. Recommendations For versions 2.0.7 through 2.2.26, consider disabling the nph-viewgif.cgi component until a patc...

PT-2019-9367

Name of the Vulnerable Software and Affected Versions NCBI ToolBox versions 2.0.7 through 2.2.26 Description A path traversal issue exists in the NCBI ToolBox, potentially allowing the reading of arbitrary files or file deletion. This is achieved via the nph-viewgif.cgi query string...

PT-2019-9369

Name of the Vulnerable Software and Affected Versions NCBI ToolBox versions 2.0.7 through 2.2.26 Description A cross-site scripting XSS issue exists due to a crafted -z1 argument. Recommendations For versions 2.0.7 through 2.2.26, avoid using the -z1 argument until a fix is available...