Skip to content
Noroxi

htmldoc project records

23 published records for vendor htmldoc project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

23 records
  • CVE-2021-23165
    40Plan

    A flaw was found in htmldoc before v1.9.12.

    CriticalCVSS 9.8No exploitEPSS 3%

    htmldoc project · htmldocMar 16, 2022

  • CVE-2021-20308
    40Plan

    Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service that is simila

    CriticalCVSS 9.8No exploitEPSS 2%

    htmldoc project · htmldocApr 5, 2021

  • CVE-2021-23158
    40Plan

    A flaw was found in htmldoc in v1.9.12.

    CriticalCVSS 9.8No exploitEPSS 2%

    htmldoc project · htmldocMar 16, 2022

  • CVE-2024-45508
    39Monitor

    HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a w

    CriticalCVSS 9.8No exploitEPSS 0%

    htmldoc project · htmldocSep 1, 2024

  • CVE-2024-46478
    39Monitor

    HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681.

    CriticalCVSS 9.8No exploitEPSS 0%

    htmldoc project · htmldocOct 24, 2024

  • CVE-2021-43579
    33Monitor

    A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code execution if the victim converts an HTML docum

    HighCVSS 7.8Proof of conceptEPSS 7%

    htmldoc project · htmldocJan 10, 2022

  • CVE-2022-34033
    31Monitor

    HTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_header) /htmldoc/htmldoc/html.cxx:273.

    HighCVSS 7.5No exploitEPSS 1%

    htmldoc project · htmldocJul 18, 2022

  • CVE-2022-34035
    31Monitor

    HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc/html.cxx:588.

    HighCVSS 7.5No exploitEPSS 1%

    htmldoc project · htmldocJul 18, 2022

  • CVE-2021-23206
    31Monitor

    A flaw was found in htmldoc in v1.9.12 and prior.

    HighCVSS 7.8No exploitEPSS 1%

    htmldoc project · htmldocMar 2, 2022

  • CVE-2021-23180
    31Monitor

    A flaw was found in htmldoc in v1.9.12 and before.

    HighCVSS 7.8No exploitEPSS 1%

    htmldoc project · htmldocMar 2, 2022

  • CVE-2021-26259
    31Monitor

    A flaw was found in htmldoc in v1.9.12.

    HighCVSS 7.8No exploitEPSS 1%

    htmldoc project · htmldocMar 3, 2022

  • CVE-2022-28085
    31Monitor

    A flaw was found in htmldoc commit 31f7804.

    HighCVSS 7.8No exploitEPSS 1%

    htmldoc project · htmldocApr 26, 2022

  • CVE-2019-19630
    31Monitor

    HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx)

    HighCVSS 7.8No exploitEPSS 1%

    htmldoc project · htmldocDec 7, 2019

  • CVE-2021-23191
    31Monitor

    A security issue was found in htmldoc v1.9.12 and before.

    HighCVSS 7.8No exploitEPSS 1%

    htmldoc project · htmldocMar 2, 2022

  • CVE-2021-26252
    31Monitor

    A flaw was found in htmldoc in v1.9.12.

    HighCVSS 7.8No exploitEPSS 0%

    htmldoc project · htmldocFeb 24, 2022

  • CVE-2021-26948
    31Monitor

    Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a

    HighCVSS 7.8No exploitEPSS 0%

    htmldoc project · htmldocMar 3, 2022

  • CVE-2021-34121
    31Monitor

    An Out of Bounds flaw was discovered in htmodoc 1.9.12 in function parse_tree() in toc.cxx, this possibly leads to memory layout information

    HighCVSS 7.8No exploitEPSS 0%

    htmldoc project · htmldocJul 18, 2023

  • CVE-2021-34119
    31Monitor

    A flaw was discovered in htmodoc 1.9.12 in function parse_paragraph in ps-pdf.cxx ,this flaw possibly allows possible code execution and a d

    HighCVSS 7.8No exploitEPSS 0%

    htmldoc project · htmldocJul 18, 2023

  • CVE-2022-27114
    22Monitor

    There is a vulnerability in htmldoc 1.9.16.

    MediumCVSS 5.5No exploitEPSS 0%

    htmldoc project · htmldocMay 9, 2022

  • CVE-2022-0534
    22Monitor

    A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gif_get_code() and occurs when opening

    MediumCVSS 5.5No exploitEPSS 0%

    htmldoc project · htmldocFeb 9, 2022

  • CVE-2021-40985
    22Monitor

    A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to image_loa

    MediumCVSS 5.5No exploitEPSS 0%

    htmldoc project · htmldocNov 3, 2021

  • CVE-2022-24191
    22Monitor

    In HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer arbitrarily pointing to heap memory and resulting in

    MediumCVSS 5.5No exploitEPSS 0%

    htmldoc project · htmldocApr 4, 2022

  • CVE-2022-0137
    22Monitor

    A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffer boundaries.

    MediumCVSS 5.5No exploitEPSS 0%

    htmldoc project · htmldocNov 14, 2022