Nih Ncbi Toolbox — known CVE vulnerabilities

Every CVE whose affected-product data names Nih Ncbi Toolbox, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-16717 — CVSS 9.8 (critical): A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox.
• CVE-2018-16716 — CVSS 9.1 (critical): A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in…
• CVE-2018-16718 — CVSS 6.1 (medium): An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument.