Known vulnerabilities in lepton

Known vulnerabilities in lepton

Vendor: Dropbox

Software: lepton

Software CPE: cpe:2.3:a:dropbox:lepton:*:*:*:*:*:*:*:*

Website: https://www.dropbox.com/

Total vulnerabilities: 14

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU69609 - Improper input validation CVE-2022-4104	CWE-20	Medium	No	No	-	25.11.2022	SB2022112512
#VU35975 - Memory corruption CVE-2018-20819	CWE-119	High	No	No	-	23.04.2019	SB2017040605
#VU35976 - Integer overflow CVE-2018-20820	CWE-190	Medium	No	No	-	23.04.2019	SB2017040605
#VU37061 - Improper input validation CVE-2018-12108	CWE-20	Medium	No	No	-	11.06.2018	SB2017040605
#VU39057 - Improper input validation CVE-2017-8891	CWE-20	Medium	No	No	-	10.05.2017	SB2017040605
#VU39270 - Divide By Zero CVE-2017-7448	CWE-369	Medium	No	No	-	06.04.2017	SB2017040605
#VU39747 - Improper input validation CVE-2016-6234	CWE-20	Medium	No	No	-	02.02.2017	SB2017020208
#VU39748 - Resource Management Errors CVE-2016-6235	CWE-399	Medium	No	No	-	02.02.2017	SB2017020208
#VU39749 - Out-of-bounds read CVE-2016-6236	CWE-125	Medium	No	No	-	02.02.2017	SB2017020208
#VU39750 - Out-of-bounds write CVE-2016-6237	CWE-787	Medium	No	No	-	02.02.2017	SB2017020208
#VU39751 - Out-of-bounds read CVE-2016-6238	CWE-125	Medium	No	No	-	02.02.2017	SB2017020208
#VU44227 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2012-0998	CWE-22	Medium	No	No	-	24.02.2012	SB2012022401
#VU44228 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2012-0999	CWE-89	Medium	No	No	-	24.02.2012	SB2012022401
#VU44229 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2012-1000	CWE-79	Low	No	No	-	24.02.2012	SB2012022401