Lucene search
+L

99 matches found

OSV
OSV
•added 2019/03/11 5:29 a.m.•18 views

UBUNTU-CVE-2019-9656

An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofxsgml.cpp, as demonstrated by ofxdump...

8.8CVSS7.2AI score0.02141EPSS
SaveExploits1References5
Prion
Prion
•added 2019/03/11 5:29 a.m.•20 views

Null pointer dereference

An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofxsgml.cpp, as demonstrated by ofxdump...

6.8CVSS8.6AI score0.02141EPSS
SaveExploits1References4Affected Software3
Cvelist
Cvelist
•added 2019/03/11 4:00 a.m.•39 views

CVE-2019-9656

An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofxsgml.cpp, as demonstrated by ofxdump...

8.5AI score0.02141EPSS
SaveExploits1References4
CVE
CVE
•added 2019/03/11 4:00 a.m.•121 views

CVE-2019-9656

CVE-2019-9656 affects LibOFX 0.9.14, with a NULL pointer dereference in OFXApplication::startElement in lib/ofx_sgml.cpp (as demonstrated by ofxdump). Connected advisories indicate patches exist for libofx to fix this vulnerability (e.g., SUSE/MGASA-2019-0409 and OSV entries). Impact details in t...

8.8CVSS8.4AI score0.02141EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2019/03/11 4:00 a.m.•4 views

CVE-2019-9656

An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofxsgml.cpp, as demonstrated by ofxdump...

8.8CVSS0.02141EPSS
SaveExploits1References6
Debian CVE
Debian CVE
•added 2019/03/11 4:00 a.m.•62 views

CVE-2019-9656

An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofxsgml.cpp, as demonstrated by ofxdump...

8.8CVSS8.6AI score0.02141EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/11 12:00 a.m.•8 views

CVE-2019-9656: NULL Pointer Dereference

An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofxsgml.cpp, as demonstrated by ofxdump...

8.8CVSS5.5AI score0.02141EPSS
SaveExploits1References2
CNVD
CNVD
•added 2019/03/11 12:00 a.m.•20 views

LibOFX Null Pointer Backreference Vulnerability

LibOFX is a library that allows programs to support OFX financial data bi-directional exchange command responses. A null pointer back-reference vulnerability exists in the 'OFXApplication::startElement' function in the lib/ofxsgml.cpp file in LibOFX version 0.9.14. No detailed vulnerability detai...

8.8CVSS7AI score0.02141EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2019/01/03 12:00 a.m.•21 views

Fedora 28 : libofx (2018-8a208fba70)

This update fixes assorted CVEs in LibOFX. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

6.5CVSS7AI score0.01264EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2018/08/08 12:00 a.m.•29 views

openSUSE: Security Advisory for libofx (openSUSE-SU-2018:2229-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS7.2AI score0.02393EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2018/08/08 12:00 a.m.•27 views

openSUSE Security Update : libofx (openSUSE-2018-820)

This update for libofx fixes the following issues : The following security vulnerabilities have been addressed : - CVE-2017-2920: Fixed an exploitable buffer overflow in the tag parsing functionality, which could result in an out of bounds write and could be triggered via a specially crafted OFX...

8.8CVSS7.3AI score0.02393EPSS
SaveExploits3References4
OPENSUSE Linux
OPENSUSE Linux
•added 2018/08/07 3:07 p.m.•83 views

Security update for libofx (important)

This update for libofx fixes the following issues: The following security vulnerabilities have been addressed: - CVE-2017-2920: Fixed an exploitable buffer overflow in the tag parsing functionality, which could result in an out of bounds write and could be triggered via a specially crafted OFX fi...

6.8CVSS7.3AI score0.02393EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2018/07/27 12:00 a.m.•28 views

SUSE SLED12 Security Update : libofx (SUSE-SU-2018:2064-1)

This update for libofx fixes the following issues: Security issues fixed : - CVE-2017-2816: Fix an exploitable buffer overflow vulnerability in the tag parsing functionality bsc1058673. - CVE-2017-2920: Fix a buffer overflow vulnerability in sanitizeproprietarytags in lib/ofxpreproc.cpp bsc106196...

8.8CVSS7.2AI score0.02393EPSS
SaveExploits4References10
OSV
OSV
•added 2018/07/26 2:51 p.m.•7 views

SUSE-SU-2018:2064-1 Security update for libofx

This update for libofx fixes the following issues: Security issues fixed: - CVE-2017-2816: Fix an exploitable buffer overflow vulnerability in the tag parsing functionality bsc1058673. - CVE-2017-2920: Fix a buffer overflow vulnerability in sanitizeproprietarytags in lib/ofxpreproc.cpp bsc1061964...

8.8CVSS7.2AI score0.02393EPSS
SaveExploits4References7
OSV
OSV
•added 2018/07/24 7:20 a.m.•12 views

SUSE-SU-2018:2045-1 Security update for libofx

This update for libofx fixes the following issues: Security issues fixed: - CVE-2017-2816: Fix an exploitable buffer overflow vulnerability in the tag parsing functionality bsc1058673. - CVE-2017-2920: Fix a buffer overflow vulnerability in sanitizeproprietarytags in lib/ofxpreproc.cpp bsc1061964...

8.8CVSS7.2AI score0.02393EPSS
SaveExploits4References7
ArchLinux
ArchLinux
•added 2018/05/20 12:00 a.m.•31 views

[ASA-201805-19] libofx: denial of service

Arch Linux Security Advisory ASA-201805-19 ========================================== Severity: Medium Date : 2018-05-20 CVE-ID : CVE-2017-14731 Package : libofx Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-536 Summary ======= The package libofx before version...

6.5CVSS7.1AI score0.01264EPSS
SaveExploits1References5
OSV
OSV
•added 2018/04/30 7:08 p.m.•11 views

MGASA-2018-0214 Updated libofx packages fix security vulnerabilities

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability...

8.8CVSS7.3AI score0.02393EPSS
SaveExploits4References3
Mageia
Mageia
•added 2018/04/30 7:08 p.m.•46 views

Updated libofx packages fix security vulnerabilities

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability...

8.8CVSS7.4AI score0.02393EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2018/04/13 12:00 a.m.•30 views

Fedora Update for libofx FEDORA-2018-4a2b875d6b

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6AI score0.02393EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2018/04/13 12:00 a.m.•37 views

Fedora Update for libofx FEDORA-2018-1b3a73b45f

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.6AI score
SaveExploits0References2
Rows per page
Query Builder