HTACG records
6 published records for vendor htacg.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 66.7%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3
- CWE-20 Improper Input Validation1
- CWE-401 Missing Release of Memory after Effective Lifetime1
- CWE-416 Use After Free1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2021-33391No exploit | An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode() function in gdoc.c.htacg · tidy · CWE-416 | Critical9.8 | — | 1.1% | Feb 17, 2023 |
30Monitor | CVE-2017-17497No exploit | In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because thhtacg · tidy · CWE-119 | High7.5 | — | 1.3% | Dec 10, 2017 |
30Monitor | CVE-2017-13692No exploit | In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated bhtacg · tidy · CWE-20 | High7.5 | — | 1.1% | Aug 25, 2017 |
28Monitor | CVE-2015-5522No exploit | Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service htacg · tidy · CWE-119 | Medium6.8 | — | 4.6% | Aug 11, 2015 |
18Monitor | CVE-2015-5523No exploit | The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving canonical · ubuntu linux · CWE-119 | Medium4.3 | — | 3.8% | Aug 11, 2015 |
7Monitor | CVE-2025-6498No exploit | HTACG tidy-html5 alloc.c defaultAlloc memory leakhtacg · tidy · CWE-401 | Low1.9 | — | 0.2% | Jun 22, 2025 |
- CVE-2021-3339139Monitor
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode() function in gdoc.c.
CriticalCVSS 9.8No exploitEPSS 1%htacg · tidyFeb 17, 2023
- CVE-2017-1749730Monitor
In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because th
HighCVSS 7.5No exploitEPSS 1%htacg · tidyDec 10, 2017
- CVE-2017-1369230Monitor
In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated b
HighCVSS 7.5No exploitEPSS 1%htacg · tidyAug 25, 2017
- CVE-2015-552228Monitor
Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service
MediumCVSS 6.8No exploitEPSS 4%htacg · tidyAug 11, 2015
- CVE-2015-552318Monitor
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving
MediumCVSS 4.3No exploitEPSS 3%canonical · ubuntu linuxAug 11, 2015
- CVE-2025-64987Monitor
HTACG tidy-html5 alloc.c defaultAlloc memory leak
LowCVSS 1.9No exploitEPSS 0%htacg · tidyJun 22, 2025