Lucene search
+L

86 matches found

RedhatCVE
RedhatCVE
•added 2026/09/24 6:10 p.m.•36 views

CVE-2026-88385

A flaw was found in mxml. A remote attacker could cause a Denial of Service DoS by supplying specially crafted, malformed XML data to an application utilizing the library. When handling parsing errors, the parser fails to release certain allocated text nodes, leading to a persistent memory leak o...

5.6AI score0.00155EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•5 views

PT-2026-97931

Mini-XML 4.0.5 contains a memory leak vulnerability in mxml load data during malformed XML parsing. Specially crafted XML input can cause text nodes allocated by mxmlNewText to become unlinked before a parse error transfers control to the cleanup path. These orphaned nodes are not released,...

5.7AI score0.00155EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/31 8:37 a.m.•14 views

SUSE CVE-2026-5037

A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...

4.8CVSS6.2AI score0.00174EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/03/30 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-5037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing ...

4.8CVSS5.3AI score0.00174EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/29 9:30 a.m.•13 views

EUVD-2026-16983

A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...

4.8CVSS6.2AI score0.00174EPSS
SaveExploits0References8
NVD
NVD
•added 2026/03/29 9:15 a.m.•14 views

CVE-2026-5037

A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...

4.8CVSS0.00174EPSS
SaveExploits0References7
OSV
OSV
•added 2026/03/29 9:15 a.m.•16 views

UBUNTU-CVE-2026-5037

A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...

4.8CVSS6.2AI score0.00174EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/03/29 9:15 a.m.•11 views

CVE-2026-5037

A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...

4.8CVSS5.6AI score0.00174EPSS
SaveExploits0References8
OSV
OSV
•added 2026/03/29 8:45 a.m.•13 views

CVE-2026-5037 mxml mxmlIndexNew mxml-index.c index_sort stack-based overflow

A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...

4.8CVSS6.1AI score
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/03/29 8:45 a.m.•6 views

CVE-2026-5037 mxml mxmlIndexNew mxml-index.c index_sort stack-based overflow

A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...

4.8CVSS5.4AI score0.00174EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2026/03/29 8:45 a.m.•17 views

CVE-2026-5037

A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...

4.8CVSS6.2AI score0.00174EPSS
SaveExploits0References7
CVE
CVE
•added 2026/03/29 8:45 a.m.•61 views

CVE-2026-5037

CVE-2026-5037 affects mxml up to 4.0.4, specifically the mxmlIndexNew component in mxml-index.c. The issue is a stack-based buffer overflow triggered by manipulating the tempr argument, with exploitation restricted to local execution. Public exploit details exist and a patch identified by the has...

4.8CVSS5.4AI score0.00174EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2026/03/29 8:45 a.m.•22 views

CVE-2026-5037

A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...

4.8CVSS5.4AI score0.00174EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/03/29 8:45 a.m.•56 views

CVE-2026-5037 mxml mxmlIndexNew mxml-index.c index_sort stack-based overflow

A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...

4.8CVSS0.00174EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/29 12:00 a.m.•1 views

CVE-2026-5037: Stack-based Buffer Overflow

A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...

4.8CVSS5.2AI score0.00174EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•20 views

PT-2026-28748

Name of the Vulnerable Software and Affected Versions mxml versions up to 4.0.4 Description A flaw exists in mxml up to version 4.0.4 related to a stack-based buffer overflow. The issue resides within the index sort function in the mxml-index.c file, specifically within the mxmlIndexNew component...

4.8CVSS5.6AI score0.00174EPSS
SaveExploits0References18
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2016-5557

Malware in sbrugna...

7.1CVSS6.1AI score0.01589EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2016-4570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service stack consumption via crafted...

7.1CVSS5.5AI score0.01589EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2018-20005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been found in Mini-XML aka mxml 2.12. It is a use-after-free in mxmlWalkNext in mxml- search.c, as demonstrated by mxmldoc. CVE-2018-20005 Note tha...

5.5CVSS6.1AI score0.01111EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/02/15 5:02 a.m.•11 views

SUSE CVE-2016-4571

The mxmlwritenode function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service stack consumption via crafted xml file...

5.5CVSS6.9AI score0.01589EPSS
SaveExploits0References5
Rows per page
Query Builder