Vendors / Mini-xml Project Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 3 CVSS 7.0–8.9
Exploited now Mini-xml Project records in CISA KEV No Mini-xml Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 42
An issue has been found in Mini-XML (aka mxml) 2.12.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.02025 · Published 2018-12-10 · No fix listed CWE-787
Priority LOW 35
A stack buffer overflow exists in Mini-XML v3.2.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01037 · Published 2022-05-26 · No fix listed CWE-772
Priority LOW 35
A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01037 · Published 2022-05-26 · No fix listed CWE-772
Priority LOW 28
The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01589 · Published 2017-02-03 · No fix listed CWE-400
Priority LOW 28
The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01589 · Published 2017-02-03 · No fix listed CWE-400
Open these records in search → All records by CVSS severity
Critical0 High3 Medium2 Low0 No CVSS0