https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:25:36 +0000 https://vulnerability.circl.lu/vuln/cve-2015-5522 <p>Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href.</p> <p>Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href.</p> https://vulnerability.circl.lu/vuln/cve-2015-5522 https://vulnerability.circl.lu/vuln/usn-2695-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tidy</p> <p>Fernando Muñoz discovered that HTML Tidy incorrectly handled memory. If a user or automated system were tricked into processing specially crafted data, applications linked against HTML Tidy could be made to crash, leading to a denial of service, or possibly execute arbitrary code.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tidy</p> <p>Fernando Muñoz discovered that HTML Tidy incorrectly handled memory. If a user or automated system were tricked into processing specially crafted data, applications linked against HTML Tidy could be made to crash, leading to a denial of service, or possibly execute arbitrary code.</p> https://vulnerability.circl.lu/vuln/usn-2695-1