Xmlstarlet is a command-line XML processing toolkit with a narrow product scope, maintained as a specialized utility for XML parsing and transformation tasks. The vulnerability disclosures associated with this vendor reflect the parsing and data-handling demands inherent to XML processing; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Xmlstarlet over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2004-0989HIGH Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is no | Mar 1, 2005 | 10.0 | 49 | NO | YES |
CVE-2004-2159HIGH Multiple buffer overflows in XMLStarlet Command Line XML Toolkit 0.9.3 have unknown impact and attack vectors via (1) xml_elem.c and (2) xml_select.c. | Dec 31, 2004 | 10.0 | 27 | NO | NO |
CVE-2004-2160MEDIUM Format string vulnerability in xml_elem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code. | Dec 31, 2004 | 6.4 | 17 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Xmlstarlet.
Media articles that mention a CVE ID that affects a product developed by Xmlstarlet — matched by CVE ID, not by vendor name.