Skip to content
Noroxi

xmlstarlet records

3 published records for vendor xmlstarlet.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
100%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

      The weakness classes this vendor ships most often: where to look.

      CWE

      Attack profile

      All records

      3 records
      • Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrar

        CriticalCVSS 10.0Proof of conceptEPSS 21%

        xmlsoft · libxmlMar 1, 2005

      • Multiple buffer overflows in XMLStarlet Command Line XML Toolkit 0.9.3 have unknown impact and attack vectors via (1) xml_elem.c and (2) xml

        CriticalCVSS 10.0No exploitEPSS 1%

        xmlstarlet · command line xml toolkitDec 31, 2004

      • CVE-2004-2160
        26Monitor

        Format string vulnerability in xml_elem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or

        MediumCVSS 6.4No exploitEPSS 1%

        xmlstarlet · command line xml toolkitDec 31, 2004