CVE-2018-20592
Security Bulletins
Latest Malware Updates
CVE-2018-20592
In Mini-XML (aka mxml) v2.12, there is a use-after-free in the mxmlAdd function of the mxml-node.c file. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted xml file, as demonstrated by mxmldoc.
References:
Security Advisories Database
A remote attacker can execute arbitrary code on the target system.
07/21/2015
SQL inection vulnerability has been discovered in Piwigo.
02/05/2015
A cross-site scripting (XSS) vulnerability has been discovered in DotNetNuke.
02/05/2015
A cross-site scripting vulnerability was found in Hitachi Command Suite.
02/02/2015
An attacker can perform a denial of service attack.
01/30/2015
An attacker can perform a denial of service attack.
01/30/2015
An attacker can perform a denial of service attack.
01/30/2015
An attacker can perform a denial of service attack.
01/29/2015
An attacker can perform a denial of service attack.
01/20/2015
