CVE-2018-16717

A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...

CVE-2018-16717

The CVE-2018-16717 entry concerns a heap-based buffer overflow in nph-viewgif.cgi within legacy NCBI ToolBox versions 2.0.7–2.2.26. Public records cite a critical impact (CVSSv3 base score 9.8) with network attack vector and no authentication, indicating a high-risk condition that could lead to c...

CVE-2018-16716

Summary of CVE-2018-16716 Affected software: NCBI ToolBox legacy versions 2.0.7 through 2.2.26. Vulnerability: Path traversal via viewcgi.cgi (and potential file deletion via nph-viewgif.cgi), enabling reading of arbitrary server files and significant information disclosure. Root cause (per sourc...

CVE-2018-16716

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...

CVE-2018-16718: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...

CVE-2018-16716: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...

CVE-2018-16717: Out-of-bounds Write

A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...

[SECURITY] Fedora 30 Update: toolbox-0.0.8-2.fc30

Toolbox is offers a familiar RPM based environment for developing and debugging software that runs fully unprivileged using Podman...

Softing OPC Toolbox Detection (Windows SMB Login)

SMB login-based detection of Softing OPC Toolbox. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Intel Solid State Drive Toolbox Elevation of Privilege Vulnerability

Intel Solid State Drive Toolbox is a driver management software from Intel USA for browsing SSD Solid State Drive information. An elevation of privilege vulnerability exists in Intel Solid State Drive Toolbox versions prior to 3.5.7, which can be exploited by a local attacker to elevate privilege...

CVE-2018-18097

Improper directory permissions in Intel Solid State Drive Toolbox before 3.5.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2018-18097

Improper directory permissions in Intel Solid State Drive Toolbox before 3.5.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2018-18097

CVE-2018-18097 affects Intel® Solid State Drive Toolbox before 3.5.7, where improper directory permissions may allow an authenticated local user to escalate privileges. The issue is confirmed by multiple connected sources, including Intel’s advisory (INTEL-SA-00205) and CNVD/NVD records, which de...

CVE-2018-18097

Improper directory permissions in Intel Solid State Drive Toolbox before 3.5.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2018-18097: Incorrect Permission Assignment for Critical Resource

Improper directory permissions in Intel Solid State Drive Toolbox before 3.5.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® Solid State Drive Toolbox File Permissions Advisory

Summary: A potential security vulnerability in Intel® Solid State Drive Toolbox may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-18097 Description: Improper directory permissions in IntelR Solid...

Code Execution Vulnerabilities in Multiple Crestron Products

Crestron TSW-1060 and others are touch screen devices from Crestron Electronics, USA. A security vulnerability exists in several Crestron products. The vulnerability can be exploited by remote attackers to execute code with the help of the Bash shell service in the Crestron Toolbox Protocol CTP...

Command injection

Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via command injection in Crestron Toolbox Protocol CTP...

CVE-2018-11228

Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via a Bash shell service in Crestron Toolbox Protocol CTP...

CVE-2018-11229

Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via command injection in Crestron Toolbox Protocol CTP...