Vulnerabilities

TI-2014-01430 CVE-2014-1828 · GHSA-3g2v-jg49-4hc7

The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows…

LOW 22

The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows remote attackers to cause a denial of service (disk consumption) by uploading a large file.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01153 Published 2014-03-26 No fix listed CWE-20

TI-2014-01429 CVE-2014-1827 · GHSA-6pwx-x4rc-c5mx

The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used…

LOW 22

The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .htm…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01007 Published 2014-03-26 No fix listed CWE-20

TI-2014-01428 CVE-2014-1826 · GHSA-rjp7-x9w7-vxr7

Cross-site scripting (XSS) vulnerability in the iThoughtsHD app 4.19 for iOS on iPad…

LOW 15

Cross-site scripting (XSS) vulnerability in the iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to inject arbitrary web script or HTML via a crafted map name.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.00898 Published 2014-03-26 No fix listed CWE-79

Vulnerabilities

Filters

The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows…

The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used…

Cross-site scripting (XSS) vulnerability in the iThoughtsHD app 4.19 for iOS on iPad…