Vulnerabilities

TI-2018-11968 CVE-2018-16718 · GHSA-2vm7-46v4-pr85

An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of…

LOW 29

An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0084 Published 2019-05-02 No fix listed CWE-79

TI-2018-11967 CVE-2018-16717 · GHSA-q596-jxfw-6v4j

A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox.

MEDIUM 45

A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01589 Published 2019-05-02 No fix listed CWE-787

TI-2018-11966 CVE-2018-16716 · GHSA-pcqx-g45m-pmqh

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy…

MEDIUM 50

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files (i.e., significant information disclosure) or file deleti…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.0857 Published 2019-05-02 No fix listed CWE-22

Vulnerabilities

Filters

An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of…

A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox.

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy…