Поиск уязвимостей
Количество 13
Количество 13
SUSE-SU-2015:1525-1
Security update for tidy
SUSE-SU-2015:1513-1
Security update for tidy
ALT-PU-2017-2636
ALT-PU-2017-2636: package `tidy` update to version 5.4-alt1.20170301
CVE-2015-5523
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
CVE-2015-5523
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
CVE-2015-5523
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
CVE-2015-5523
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote ...
CVE-2015-5522
Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href.
CVE-2015-5522
Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href.
CVE-2015-5522
Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href.
CVE-2015-5522
Heap-based buffer overflow in the ParseValue function in lexer.c in ti ...
GHSA-wp28-phrj-p6rh
Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href.
GHSA-v5vg-qv4w-24wv
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | SUSE-SU-2015:1525-1 Security update for tidy | около 11 лет назад | ||
| SUSE-SU-2015:1513-1 Security update for tidy | около 11 лет назад | ||
| ALT-PU-2017-2636 ALT-PU-2017-2636: package `tidy` update to version 5.4-alt1.20170301 | CVSS2: 6.8 | почти 9 лет назад | |
 | CVE-2015-5523 The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation. | CVSS2: 4.3 | 4% Низкий | около 11 лет назад |
 | CVE-2015-5523 The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation. | CVSS2: 5.1 | 4% Низкий | больше 11 лет назад |
 | CVE-2015-5523 The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation. | CVSS2: 4.3 | 4% Низкий | около 11 лет назад |
| CVE-2015-5523 The ParseValue function in lexer.c in tidy before 4.9.31 allows remote ... | CVSS2: 4.3 | 4% Низкий | около 11 лет назад |
| CVE-2015-5522 Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href. | CVSS2: 6.8 | 5% Низкий | около 11 лет назад |
| CVE-2015-5522 Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href. | CVSS2: 5.1 | 5% Низкий | больше 11 лет назад |
| CVE-2015-5522 Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href. | CVSS2: 6.8 | 5% Низкий | около 11 лет назад |
| CVE-2015-5522 Heap-based buffer overflow in the ParseValue function in lexer.c in ti ... | CVSS2: 6.8 | 5% Низкий | около 11 лет назад |
| GHSA-wp28-phrj-p6rh Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href. | 5% Низкий | больше 4 лет назад | |
| GHSA-v5vg-qv4w-24wv The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation. | 4% Низкий | больше 4 лет назад |
Уязвимостей на страницу