Vendors / dropbox Records 22 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 8
Exploited now dropbox records in CISA KEV No dropbox vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful login or new account creation.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.0092 · Published 2019-07-08 · No fix listed CWE-312
Priority LOW 30
dropboxd in Dropbox 0.7.110 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVSS 2.0 MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00291 · Published 2010-10-20 · No fix listed
Priority LOW 29
An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS.
CVSS 3.0 MEDIUM 6.4· Physical · No auth · No interaction · EPSS 0.00424 · Published 2018-06-13 · No fix listed CWE-287
Priority LOW 17
An issue was discovered in the com.dropbox.android application 98.2.2 for Android.
CVSS 3.0 LOW 3.6· Local · Low privileges · No interaction · EPSS 0.00279 · Published 2018-06-20 · No fix listed CWE-287
Priority LOW 15
An issue was discovered in the com.dropbox.android application 98.2.2 for Android.
CVSS 3.0 LOW 3.1· Physical · No auth · No interaction · EPSS 0.0031 · Published 2018-06-20 · No fix listed CWE-287
Open these records in search → All records by CVSS severity
3 8 8 3 0
THREATIST.IORead the docs