Vendors / NIH Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 3
Exploited now NIH records in CISA KEV No NIH vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files (i.e., significant information disclosure) or file deleti…
CVSS 3.0 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0857 · Published 2019-05-02 · No fix listed CWE-22
Priority MEDIUM 45
A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01589 · Published 2019-05-02 · No fix listed CWE-787
Priority LOW 29
An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0084 · Published 2019-05-02 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
4 3 3 0 0
