Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ezxml project ezxml vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2019-20198
An issue exists in ezXML 0.8.3 up to and including 0.8.6. The function ezxml_ent_ok() mishandles recursion, leading to stack consumption for a crafted XML file.
Ezxml Project Ezxml
1 Github repository
6.5
CVSSv3
CVE-2019-20199
An issue exists in ezXML 0.8.3 up to and including 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while running strlen() on a NULL pointer.
Ezxml Project Ezxml
6.5
CVSSv3
CVE-2019-20200
An issue exists in ezXML 0.8.3 up to and including 0.8.6. The function ezxml_decode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the "normalize line endings" feature.
Ezxml Project Ezxml
6.5
CVSSv3
CVE-2019-20201
An issue exists in ezXML 0.8.3 up to and including 0.8.6. The ezxml_parse_* functions mishandle XML entities, leading to an infinite loop in which memory allocations occur.
Ezxml Project Ezxml
6.5
CVSSv3
CVE-2019-20202
An issue exists in ezXML 0.8.3 up to and including 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault.
Ezxml Project Ezxml
8.1
CVSSv3
CVE-2021-26220
The ezxml_toxml function in ezxml 0.8.6 and previous versions is vulnerable to OOB write when opening XML file after exhausting the memory pool.
Ezxml Project Ezxml
8.1
CVSSv3
CVE-2021-26221
The ezxml_new function in ezXML 0.8.6 and previous versions is vulnerable to OOB write when opening XML file after exhausting the memory pool.
Ezxml Project Ezxml
8.1
CVSSv3
CVE-2021-26222
The ezxml_new function in ezXML 0.8.6 and previous versions is vulnerable to OOB write when opening XML file after exhausting the memory pool.
Ezxml Project Ezxml
6.5
CVSSv3
CVE-2019-20005
An issue exists in ezXML 0.8.3 up to and including 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to a heap-based buffer over-read while running strchr() starting with a pointer after a '\0' character (whe...
Ezxml Project Ezxml
7.5
CVSSv3
CVE-2019-20006
An issue exists in ezXML 0.8.3 up to and including 0.8.6. The function ezxml_char_content puts a pointer to the internal address of a larger block as xml->txt. This is later deallocated (using free), leading to a segmentation fault.
Ezxml Project Ezxml
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »