Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Msweet records in CISA KEVNo Msweet vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 28
In Mini-XML (aka mxml) v2.12, there is a use-after-free in the mxmlAdd function of the mxml-node.c file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01492 · Published 2018-12-30 · No fix listed CWE-416
Priority LOW 27
In Mini-XML (aka mxml) v2.12, there is stack-based buffer overflow in the scan_file function in mxmldoc.c.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01303 · Published 2018-12-30 · No fix listed CWE-787
Priority LOW 27
An issue has been found in Mini-XML (aka mxml) 2.12.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01106 · Published 2018-12-10 · No fix listed CWE-416
Open these records in search →