Ithoughts

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ithoughts records in CISA KEV

No Ithoughts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ithoughtshd 3 records LOW

Records

3 records

TI-2014-01430 CVE-2014-1828 · GHSA-3g2v-jg49-4hc7

The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows…

LOW 22

The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows remote attackers to cause a denial of service (disk consumption) by uploading a large file.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01153 Published 2014-03-26 No fix listed CWE-20

TI-2014-01429 CVE-2014-1827 · GHSA-6pwx-x4rc-c5mx

The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used…

LOW 22

The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .htm…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01007 Published 2014-03-26 No fix listed CWE-20

TI-2014-01428 CVE-2014-1826 · GHSA-rjp7-x9w7-vxr7

Cross-site scripting (XSS) vulnerability in the iThoughtsHD app 4.19 for iOS on iPad…

LOW 15

Cross-site scripting (XSS) vulnerability in the iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to inject arbitrary web script or HTML via a crafted map name.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.00898 Published 2014-03-26 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	1
No CVSS	0