CVE-2019-16256

Some Samsung devices include the SIMalliance Toolbox Browser aka S@T Browser on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit STK instructions in an SMS message, aka Simjacker. Recent...

PT-2019-6137

Name of the Vulnerable Software and Affected Versions SIMalliance Toolbox Browser aka S@T Browser versions not specified Description The issue is related to insecure privilege management in the SIMalliance Toolbox Browser on certain Samsung devices. This could allow a remote attacker to disclose...

VulnCheck KEV: CVE-2019-16257

Some Motorola devices include the SIMalliance Toolbox Browser aka S@T Browser on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit STK instructions in an SMS message, aka Simjacker...

PC-Doctor Toolbox Arbitrary Code Execution Vulnerability

PC-Doctor Toolbox is a hardware diagnostic and system information monitoring tool from PC-Doctor Toolbox USA. A security vulnerability exists in PC-Doctor Toolbox versions prior to 7.3. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service in the...

CVE-2019-12280

PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element...

CVE-2019-12280

PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element...

Design/Logic Flaw

PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element...

CVE-2019-12280

PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element...

CVE-2019-12280

CVE-2019-12280 affects PC-Doctor Toolbox before 7.3, enabling Uncontrolled Search Path Element with DLL hijacking. Dell/PC-Doctor components (SupportAssist for Business/Home PCs) run with SYSTEM privileges and may load unsigned DLLs from user-writable PATH locations, enabling local privilege esca...

CVE-2019-12280: Uncontrolled Search Path Element

PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element...

PT-2019-12732

Name of the Vulnerable Software and Affected Versions PC-Doctor Toolbox versions prior to 7.3 Dell SupportAssist versions prior to 2.0.1 for Business PCs Dell SupportAssist versions prior to 3.2.2 for Home PCs Description The issue concerns an uncontrolled search path element in the PC-Doctor...

CVE-2018-16716

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...

CVE-2018-16718

An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...

CVE-2018-16716

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...

CVE-2018-16717

A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...

Cross site scripting

An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...

Path traversal

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string...

Heap overflow

A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...

CVE-2018-16718

An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...

CVE-2018-16718

The CVE-2018-16718 entry describes an XSS vulnerability in the NCBI ToolBox component wwwblast.c for legacy versions 2.0.7–2.2.26, exploitable via a crafted -z1 argument. The affected code path and exact root cause are not elaborated in the provided documents beyond stating XSS exists. No explici...