Approved changes feed: RSS · Atom

cpe:2.3:a:nih:ncbi_toolbox:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNih (dc2cde8a-b090-5b02-b6c6-53f5b9eeaba3)
ProductNcbi Toolbox (78090e16-eb17-52ef-b632-0541714251bc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-16718 vulnerable 2026-06-08 05:11:05.359246 Details available
An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument.
Published: 2019-05-02T19:27:17.000Z
Updated: 2024-08-05T10:32:53.962Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16717 vulnerable 2026-06-08 05:11:05.358841 Details available
A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox.
Published: 2019-05-02T19:25:16.000Z
Updated: 2024-08-05T10:32:53.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16716 vulnerable 2026-06-08 05:11:05.358458 Details available
A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files (i.e., significant information disclosure) or file deletion via the nph-viewgif.cgi query string.
Published: 2019-05-02T19:19:48.000Z
Updated: 2024-08-05T10:32:53.963Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.