| 0 |
| url |
VCID-22ux-58mw-3yg1 |
| vulnerability_id |
VCID-22ux-58mw-3yg1 |
| summary |
The ezxml_new function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-26221 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63382 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63376 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63374 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63331 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63371 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63358 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-26221 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-26221
|
| risk_score |
1.2 |
| exploitability |
0.5 |
| weighted_severity |
2.4 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-22ux-58mw-3yg1 |
|
| 1 |
| url |
VCID-2gf8-8yne-hqbg |
| vulnerability_id |
VCID-2gf8-8yne-hqbg |
| summary |
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd() performs incorrect memory handling while parsing crafted XML files, which leads to an out-of-bounds write of a one byte constant. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-31229 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01762 |
| scoring_system |
epss |
| scoring_elements |
0.82959 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.01762 |
| scoring_system |
epss |
| scoring_elements |
0.82986 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.01762 |
| scoring_system |
epss |
| scoring_elements |
0.82983 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.01762 |
| scoring_system |
epss |
| scoring_elements |
0.82975 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.01762 |
| scoring_system |
epss |
| scoring_elements |
0.82987 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-31229 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-31229
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-2gf8-8yne-hqbg |
|
| 2 |
| url |
VCID-3r2b-3twf-j7d6 |
| vulnerability_id |
VCID-3r2b-3twf-j7d6 |
| summary |
An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxml_parse_* functions mishandle XML entities, leading to an infinite loop in which memory allocations occur. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20201 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00405 |
| scoring_system |
epss |
| scoring_elements |
0.61419 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00405 |
| scoring_system |
epss |
| scoring_elements |
0.61409 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00405 |
| scoring_system |
epss |
| scoring_elements |
0.61412 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00405 |
| scoring_system |
epss |
| scoring_elements |
0.61364 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00405 |
| scoring_system |
epss |
| scoring_elements |
0.61406 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.00405 |
| scoring_system |
epss |
| scoring_elements |
0.61388 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20201 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2019-20201
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-3r2b-3twf-j7d6 |
|
| 3 |
| url |
VCID-66ea-kuaw-hufj |
| vulnerability_id |
VCID-66ea-kuaw-hufj |
| summary |
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the "normalize line endings" feature. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20200 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00523 |
| scoring_system |
epss |
| scoring_elements |
0.67272 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00523 |
| scoring_system |
epss |
| scoring_elements |
0.67313 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00523 |
| scoring_system |
epss |
| scoring_elements |
0.6732 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00523 |
| scoring_system |
epss |
| scoring_elements |
0.67307 |
| published_at |
2026-06-09T12:55:00Z |
|
| 4 |
| value |
0.00523 |
| scoring_system |
epss |
| scoring_elements |
0.67291 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20200 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2019-20200
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-66ea-kuaw-hufj |
|
| 4 |
| url |
VCID-6xe3-ptjj-wqez |
| vulnerability_id |
VCID-6xe3-ptjj-wqez |
| summary |
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20202 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00405 |
| scoring_system |
epss |
| scoring_elements |
0.61419 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00405 |
| scoring_system |
epss |
| scoring_elements |
0.61409 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00405 |
| scoring_system |
epss |
| scoring_elements |
0.61412 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00405 |
| scoring_system |
epss |
| scoring_elements |
0.61364 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00405 |
| scoring_system |
epss |
| scoring_elements |
0.61406 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.00405 |
| scoring_system |
epss |
| scoring_elements |
0.61388 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20202 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2019-20202
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6xe3-ptjj-wqez |
|
| 5 |
| url |
VCID-6xqq-2dyk-bkdy |
| vulnerability_id |
VCID-6xqq-2dyk-bkdy |
| summary |
An issue was discovered in ezXML 0.8.2 through 0.8.6. The function ezxml_str2utf8, while parsing a crafted XML file, performs zero-length reallocation in ezxml.c, leading to returning a NULL pointer (in some compilers). After this, the function ezxml_parse_str does not check whether the s variable is not NULL in ezxml.c, leading to a NULL pointer dereference and crash (segmentation fault). |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20007 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0085 |
| scoring_system |
epss |
| scoring_elements |
0.75275 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.0085 |
| scoring_system |
epss |
| scoring_elements |
0.75278 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.0085 |
| scoring_system |
epss |
| scoring_elements |
0.75272 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.0085 |
| scoring_system |
epss |
| scoring_elements |
0.75242 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.0085 |
| scoring_system |
epss |
| scoring_elements |
0.75267 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.0085 |
| scoring_system |
epss |
| scoring_elements |
0.75253 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20007 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2019-20007
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6xqq-2dyk-bkdy |
|
| 6 |
| url |
VCID-7b1m-6b61-d7hd |
| vulnerability_id |
VCID-7b1m-6b61-d7hd |
| summary |
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to a heap-based buffer over-read while running strchr() starting with a pointer after a '\0' character (where the processing of a string was finished). |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20005 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0068 |
| scoring_system |
epss |
| scoring_elements |
0.72027 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.0068 |
| scoring_system |
epss |
| scoring_elements |
0.72016 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.0068 |
| scoring_system |
epss |
| scoring_elements |
0.72019 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.0068 |
| scoring_system |
epss |
| scoring_elements |
0.71979 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.0068 |
| scoring_system |
epss |
| scoring_elements |
0.72005 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.0068 |
| scoring_system |
epss |
| scoring_elements |
0.71991 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20005 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2019-20005
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7b1m-6b61-d7hd |
|
| 7 |
| url |
VCID-8dwp-uztb-dfej |
| vulnerability_id |
VCID-8dwp-uztb-dfej |
| summary |
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content puts a pointer to the internal address of a larger block as xml->txt. This is later deallocated (using free), leading to a segmentation fault. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20006 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63364 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63357 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63356 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63312 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63353 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63339 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20006 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2019-20006
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8dwp-uztb-dfej |
|
| 8 |
| url |
VCID-c7eh-7ucu-1be6 |
| vulnerability_id |
VCID-c7eh-7ucu-1be6 |
| summary |
The ezxml_toxml function in ezxml 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-26220 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63382 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63376 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63374 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63331 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63371 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63358 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-26220 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-26220
|
| risk_score |
1.2 |
| exploitability |
0.5 |
| weighted_severity |
2.4 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-c7eh-7ucu-1be6 |
|
| 9 |
| url |
VCID-e4zn-amfz-s3bw |
| vulnerability_id |
VCID-e4zn-amfz-s3bw |
| summary |
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-31598 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00864 |
| scoring_system |
epss |
| scoring_elements |
0.75485 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00864 |
| scoring_system |
epss |
| scoring_elements |
0.75488 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00864 |
| scoring_system |
epss |
| scoring_elements |
0.75481 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00864 |
| scoring_system |
epss |
| scoring_elements |
0.75453 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00864 |
| scoring_system |
epss |
| scoring_elements |
0.75476 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.00864 |
| scoring_system |
epss |
| scoring_elements |
0.75462 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-31598 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-31598
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-e4zn-amfz-s3bw |
|
| 10 |
| url |
VCID-e7qz-c7s5-tuay |
| vulnerability_id |
VCID-e7qz-c7s5-tuay |
| summary |
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd(), while parsing a crafted XML file, performs incorrect memory handling, leading to a NULL pointer dereference while running strcmp() on a NULL pointer. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-30485 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01459 |
| scoring_system |
epss |
| scoring_elements |
0.81209 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.01459 |
| scoring_system |
epss |
| scoring_elements |
0.8122 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.01459 |
| scoring_system |
epss |
| scoring_elements |
0.81207 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.01459 |
| scoring_system |
epss |
| scoring_elements |
0.81179 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.01459 |
| scoring_system |
epss |
| scoring_elements |
0.81206 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.01459 |
| scoring_system |
epss |
| scoring_elements |
0.81202 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-30485 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-30485
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-e7qz-c7s5-tuay |
|
| 11 |
| url |
VCID-ec2b-t9ft-x7dp |
| vulnerability_id |
VCID-ec2b-t9ft-x7dp |
| summary |
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs incorrect memory handling while parsing crafted XML files (writing outside a memory region created by mmap). |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-31347 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01168 |
| scoring_system |
epss |
| scoring_elements |
0.79022 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.01168 |
| scoring_system |
epss |
| scoring_elements |
0.79019 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.01168 |
| scoring_system |
epss |
| scoring_elements |
0.79016 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.01168 |
| scoring_system |
epss |
| scoring_elements |
0.78989 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.01168 |
| scoring_system |
epss |
| scoring_elements |
0.79013 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.01168 |
| scoring_system |
epss |
| scoring_elements |
0.79001 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-31347 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-31347
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ec2b-t9ft-x7dp |
|
| 12 |
| url |
VCID-emez-kxkc-fke5 |
| vulnerability_id |
VCID-emez-kxkc-fke5 |
| summary |
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_ent_ok() mishandles recursion, leading to stack consumption for a crafted XML file. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20198 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00732 |
| scoring_system |
epss |
| scoring_elements |
0.73092 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00732 |
| scoring_system |
epss |
| scoring_elements |
0.7313 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00732 |
| scoring_system |
epss |
| scoring_elements |
0.73136 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00732 |
| scoring_system |
epss |
| scoring_elements |
0.73118 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00732 |
| scoring_system |
epss |
| scoring_elements |
0.73105 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20198 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2019-20198
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-emez-kxkc-fke5 |
|
| 13 |
| url |
VCID-redc-ppjr-kbfp |
| vulnerability_id |
VCID-redc-ppjr-kbfp |
| summary |
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap out-of-bounds read. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-30045 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.72137 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.72179 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.72185 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.72164 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.72151 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.72176 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-30045 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-30045
|
| risk_score |
3.0 |
| exploitability |
0.5 |
| weighted_severity |
5.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-redc-ppjr-kbfp |
|
| 14 |
| url |
VCID-y4xz-ubcb-8bbq |
| vulnerability_id |
VCID-y4xz-ubcb-8bbq |
| summary |
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while running strlen() on a NULL pointer. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20199 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00791 |
| scoring_system |
epss |
| scoring_elements |
0.74256 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00791 |
| scoring_system |
epss |
| scoring_elements |
0.74289 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00791 |
| scoring_system |
epss |
| scoring_elements |
0.74294 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00791 |
| scoring_system |
epss |
| scoring_elements |
0.7428 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00791 |
| scoring_system |
epss |
| scoring_elements |
0.74262 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2019-20199 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2019-20199
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-y4xz-ubcb-8bbq |
|
| 15 |
| url |
VCID-yas6-hzjn-5yhv |
| vulnerability_id |
VCID-yas6-hzjn-5yhv |
| summary |
The ezxml_new function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-26222 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63382 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63376 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63374 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63331 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63371 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.00436 |
| scoring_system |
epss |
| scoring_elements |
0.63358 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-26222 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-26222
|
| risk_score |
1.5 |
| exploitability |
0.5 |
| weighted_severity |
3.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-yas6-hzjn-5yhv |
|
| 16 |
| url |
VCID-zmjq-faks-f7d2 |
| vulnerability_id |
VCID-zmjq-faks-f7d2 |
| summary |
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs incorrect memory handling while parsing crafted XML files (out-of-bounds read after a certain strcspn failure). |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2021-31348 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00858 |
| scoring_system |
epss |
| scoring_elements |
0.75384 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00858 |
| scoring_system |
epss |
| scoring_elements |
0.75387 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00858 |
| scoring_system |
epss |
| scoring_elements |
0.75381 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00858 |
| scoring_system |
epss |
| scoring_elements |
0.75352 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00858 |
| scoring_system |
epss |
| scoring_elements |
0.75375 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.00858 |
| scoring_system |
epss |
| scoring_elements |
0.75362 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2021-31348 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-31348
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zmjq-faks-f7d2 |
|