nsoftware vulnerabilities

Products

• ibiz e-banking integrator 1
• ipworks ssh 1
• unitronics uniopc 1

Latest nsoftware CVEs

Newest publication first

1. CVE-2024-6580 /n software IPWorks SSH insufficient file access verification

   Published 2024-07-08

   Low·CVSS 2.3 EPSS 0.14%

   The /n software IPWorks SSH library SFTPServer component can be induced to make unintended filesystem or network path requests when loading a SSH public key or certificate. To be exploitable, an application calling the SFTPServer component must grant user access without verifying...

2. CVE-2011-5086 https50.ocx in IP*Works! SSL in the server in Unitronics UniOPC before 2.0.0 does not properly implement an unspecified function, which allows remote attackers to cause a denial of service (applicatio...

   Published 2012-04-18

   Medium·CVSS 6.8 EPSS 1.7%

   https50.ocx in IP*Works! SSL in the server in Unitronics UniOPC before 2.0.0 does not properly implement an unspecified function, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site.

3. CVE-2008-1725 The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator) 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attack...

   Published 2008-04-11

   High·CVSS 9.0 EPSS 2.9% Public exploit

   The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator) 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.